Coalition

1.1 Identity, Product Model, and Public Scale

Coalition combines commercial cyber insurance with cybersecurity monitoring, alerts, incident response, and risk-management tools, a model the company calls Active Insurance. Coalition's 2022 Series F announcement and EquityZen both identify Joshua Motta and John Hering as the founders, place founding in 2017, and locate the headquarters in San Francisco. Scale evidence needs strict dating: the July 2022 company announcement reported more than 160,000 customers and more than $775 million of run-rate gross written premium, while the undated homepage viewed on the run date displays only "100k+ clients." The latter does not establish a decline because the labels, measurement dates, and populations are not reconciled. Gross written premium is an insurance volume measure, not revenue or ARR, and no current audited revenue or headcount figure appears in the retained evidence.[CO001, CO002, CO003, CO004, CO008, CO014]

1.2 Leadership, Capital, and Control Surfaces

Joshua Motta remains the only executive consistently identified across the reviewed company, partner, and private-market pages: he is co-founder, chief executive officer, and a board member. Nasdaq Private Market also lists Shardul Shah and Julie Richardson as board members, while EquityZen identifies Doug Ireland as Head of Finance; the assigned evidence does not provide a complete current executive or board roster. Capital disclosures are similarly historical. Coalition said its June 2022 Series F raised $250 million at a $5 billion valuation and brought cumulative equity funding above $755 million. Nasdaq Private Market instead lists $221 million for a June 24, 2022 Series F entry, so the round amount is preserved as a conflict rather than harmonized. The current cap table, preference stack, debt, cash balance, and fully diluted ownership remain private.[CO002, CO005, CO006, CO007, CO009, CO010, CO014, CO015]

1.3 Operating Milestones and Diligence Implications

Coalition has broadened its role in the insurance value chain. A company-issued release syndicated by Business Wire announced Coalition Insurance Company in January 2023 and said the carrier had received an A- rating from A.M. Best. Coalition then announced Coalition Re in September 2024, offering non-proportional cyber reinsurance and a white-labelled product backed by an Aspen-led capacity panel. In May 2026 Allianz announced a minimum ten-year strategic agreement under which Coalition would assume primary responsibility for pricing, product development, risk mitigation, and claims management for Allianz's standalone commercial cyber portfolio. That agreement was still subject to regulatory and customary approvals, and its financial consideration was not disclosed. The milestones expand distribution and governance dependence on Allianz, but they do not by themselves establish profitability, cash availability, or the economics of transferred business.[CO011, CO012, CO013, CO014, CO016]

1.4 Exhibits

2.1 Market boundary and substitutes

Coalition competes for commercial cyber-risk spend, not for every dollar spent on cybersecurity. Its own proposition combines cyber insurance coverage with monitoring, threat response, and security services, while its carrier materials describe admitted insurance capacity for small and midsize businesses. The relevant boundary therefore includes standalone commercial cyber insurance and the risk-mitigation services attached to underwriting and claims. It excludes unrelated content-provenance software, AI compute infrastructure, and financial-services benchmarking, despite those markets appearing in searches for the ambiguous word "Coalition." Status-quo substitutes include buying traditional insurance without active monitoring, assembling security tools separately, retaining risk, or relying on internal security and incident-response teams.[CM001, CM007, CM008, CM010, CM015]

2.2 Evidence-constrained sizing

The assigned pool does not establish a defensible market-wide premium base, TAM, SAM, SOM, or cyber-insurance CAGR. Coalition's homepage supplies a current company scale indicator of more than 100,000 clients, and Allianz names six initial rollout markets, but neither measure is a market denominator or obtainable-spend estimate. The only numerical market forecast in the allocated pool is for C2PA content-provenance solutions, a different category, while another net-new result concerns an AI compute coalition. Those values are explicitly excluded rather than repurposed. Valuation work should therefore treat market size as an open diligence item and use policy count, premium, retention, loss ratio, and geography-specific eligibility data for a bottom-up model.[CM002, CM006, CM011, CM012, CM013]

2.3 Buyer, user, payer, and capacity chain

The insured business is the economic payer and beneficiary, but adoption passes through several institutions. Brokers quote and place coverage; Coalition prices risk, develops products, supplies mitigation and incident response, and manages claims; insurers and reinsurers provide delegated authority and balance-sheet capacity. Coalition's capacity role spans partners, an admitted carrier, captives, sidecars, and reinsurance structures. For larger multinational accounts, Allianz contributes brand, distribution, local market access, underwriting support, and long-term capacity. This makes broker enablement, carrier compliance, auditability, data sharing, and reinsurance relationships adoption dependencies rather than back-office details.[CM004, CM005, CM007, CM009, CM016]

2.4 Adoption drivers, constraints, and valuation relevance

Coalition's clearest demand evidence is channel expansion: Allianz describes cyber coverage as high-demand and agreed to an exclusive global commercial partnership with phased geographic rollout and at least ten years of economic alignment. Coalition also claims that its policyholders experience 73% fewer claims, which, if independently validated on comparable cohorts, could improve buyer ROI and underwriting economics. However, the assigned source gives no denominator, observation period, control group, or independent methodology for that outcome. Regulatory approvals, delegated-authority compliance, capacity availability, audit requirements, and dependence on broker and carrier channels can slow adoption. Without premium, retention, loss-ratio, and renewal evidence, these drivers support strategic relevance but not a precise valuation uplift.[CM003, CM004, CM005, CM009, CM014]

2.5 Exhibits

3.1 Competitive Landscape: Active Insurance vs. Legacy Carriers and Pure-Play Cybersecurity

The commercial cyber risk landscape divides into three distinct strategic models: incumbent property-and-casualty carriers, standalone cybersecurity software vendors, and technology-enabled active insurers. Incumbents such as Travelers, Chubb, and AXA XL control massive balance-sheet capacity and established broker networks, but their underwriting remains anchored in static annual questionnaires that fail to track vulnerabilities between policy renewal cycles. Conversely, pure-play cybersecurity vendors like CrowdStrike and SentinelOne provide deep endpoint telemetry and automated threat detection, yet they operate strictly as software licensors with zero financial risk transfer or balance-sheet indemnification. Coalition bridges this structural divide through its Active Insurance model, combining continuous external attack surface scanning with full-stack carrier licensing and delegated capacity to mitigate vulnerabilities before claims occur.[CP001, CP002, CP003, CP004]

3.2 Capability and Feature Analysis: Automated Underwriting, Telemetry, and Incident Response

Commercial buyers evaluate cyber insurance alternatives across four primary buying criteria: monitoring frequency, quoting speed, incident response integration, and balance-sheet capacity. Coalition provides real-time vulnerability detection through its proprietary Active Risk Platform, delivering automated security alerts directly to policyholders and brokers. This active approach drives a company-reported 73% reduction in claims frequency compared to industry averages. When security incidents occur, Coalition deploys in-house incident response personnel to contain breaches and recover funds, contrasting with legacy insurers who refer policyholders to third-party vendor panels subject to delayed deductible approvals. However, market evidence indicates that automation alone does not guarantee retention; responsive human expertise and client-facing service remain decisive factors when complex claims arise.[CP005, CP006, CP007, CP008]

3.3 Pricing, Packaging, and Distribution: The Allianz Alliance and Carrier Capacity

Distribution power and capacity access govern commercial cyber underwriting viability. In May 2026, Allianz Commercial and Coalition expanded their global partnership into a 10-year exclusive strategic agreement under which Allianz transitions its standalone commercial cyber portfolio across all commercial segments to Coalition. Under the transaction, Coalition assumes primary responsibility for pricing, product development, risk mitigation, and claims management, while Allianz provides long-term insurance capacity, extensive multinational distribution, and board-level governance. To diversify beyond delegated managing general agency (MGA) structures, Coalition established Coalition Insurance Company (CIC) as an admitted carrier with an A.M. Best rating of A-, enabling direct quote issuance alongside delegated capacity arrangements, captives, and sidecar reinsurance facilities.[CP009, CP010, CP011, CP012]

3.4 Moat Durability, Switching Costs, and Displacement Risks

Coalition's competitive moat rests on proprietary threat telemetry gathered across more than 100,000 policyholders and multi-year capacity commitments. Unlike shared multi-brand coalition loyalty schemes where participants pool customer data with direct rivals at a 2% to 5% sales margin cost, Coalition operates a closed proprietary risk ecosystem that protects customer insights and pricing algorithms. Displacement threats stem primarily from two vectors: legacy carriers acquiring or partnering with specialized attack surface scanning vendors to mimic automated underwriting, and sophisticated enterprises opting for internal IT hardening paired with captive self-insurance. Furthermore, macroeconomic and systemic tail risks—such as correlated cloud outages or catastrophic cyber perils—test whether tech-enabled loss mitigation can withstand industry-wide loss events without exhausting reinsurance limits.[CP013, CP014, CP015, CP016]

3.5 Exhibits

4.1 Revenue Model, Premium Ingestion, and Commission Economics

Coalition functions primarily as a managing general agent (MGA) and tech-enabled cyber risk platform, complementing delegated authority with its own admitted carrier, Coalition Insurance Company (CIC). Its monetization engine relies on three principal cash generation mechanisms: delegated underwriting commissions on gross written premium (GWP) sourced on behalf of capacity partners, direct underwriting risk margin retained via CIC, and cybersecurity software and incident response services delivered through Coalition Incident Response and the Wirespeed threat detection platform. Historical disclosures indicated a $325M gross written premium run-rate in September 2021, representing an 800% year-over-year surge from approximately $100M in late 2020 and $50M in 2019 [CI001, CI002]. Because Coalition historically delegated balance sheet capacity to reinsurance partners such as Swiss Re, Arch Insurance North America, and Lloyd's syndicates, top-line gross premiums do not translate dollar-for-dollar into corporate GAAP revenue [CI003, CI007]. Instead, MGA operational revenue consists of base ceding commissions (typically 12% to 20% of written premium in cyber casualty lines), contingent profit-sharing commissions contingent on favorable loss ratio development, and risk assessment platform fees [CI004, CI009]. In May 2026, Allianz Commercial entered into an exclusive 10-year global cyber agreement to transition its standalone commercial cyber portfolio to Coalition, designating Coalition as primary manager of pricing, risk mitigation, and claims while granting Allianz performance-based returns and director nomination rights [CI005, CI006]. This institutional alliance secures massive multi-year distribution capacity but locks economic alignment to long-term book profitability [CI005].

4.2 Go-to-Market Economics, Sales Efficiency, and Operational Cost Drivers

Coalition's distribution framework operates predominantly through independent wholesale and retail insurance brokerage networks across the United States, Canada, the United Kingdom, and Australia [CI003, CI005]. Wholesale and retail brokers distribute Coalition Active Insurance policies into small and midsize enterprise (SMB) cohorts as well as mid-market accounts, supported by the Broker IQ quoting portal [CI008, CI011]. The primary customer acquisition cost (CAC) component is broker commission expense, which consumes 10% to 15% of gross premium, substantially reducing initial sales cycle friction compared to enterprise SaaS direct sales motions [CI004, CI009]. On the operational cost side, Coalition's cost structure diverges significantly from traditional pure-software businesses. Beyond standard cloud infrastructure hosting expenses for continuous internet scanning, Coalition carries technical headcount for threat intelligence, security engineering, and 24/7 dedicated in-house incident response [CI008, CI010]. Corporate records indicate an expanding workforce growing from 270 employees in late 2021 to 540 employees in late 2024 and 704 reported personnel by late 2026 across distributed hubs [CI002, CI010]. Service delivery costs are heavily impacted by claims handling personnel, legal forensic retainers, and the capital requirements of holding underwriting authority across multiple state and international jurisdictions through entities like Coalition Insurance Solutions and CIC [CI007, CI010].[CI002, CI003, CI004, CI005, CI007, CI008, CI009, CI010, CI011]

4.3 Capital Adequacy, Loss Ratios, and Private Metric Diligence Blockers

Evaluating Coalition's true financial standing requires untangling balance sheet capitalization from cumulative venture equity. Across eight funding rounds and secondary placements, Coalition has raised between $785M and $800M in equity financing, culminating in a $5.0B post-money valuation at its July 2022 Series F round, followed by strategic capital injections from Mitsui Sumitomo Insurance ($30M in March 2025) and Allianz in May 2026 [CI001, CI005, CI010, CI012]. While this extensive liquidity provides substantial operational runway for tech development and global market expansion, it is structurally distinct from insurance underwriting reserves [CI001, CI007]. Full-stack carrier CIC requires regulatory risk-based capital (RBC) and unearned premium reserves held in trust, creating working capital lockups that pure software firms avoid [CI007]. Crucially, private company opacity obscures Coalition's true loss ratios, reinsurance treaty attachment points, and net retention rates [CI013, CI014]. Although Coalition claims policyholders experience 70% to 73% fewer claims than industry averages due to automated vulnerability alerting and automated patch scanning, independent audited proof of loss ratios across mature underwriting cohorts remains unavailable in public records [CI002, CI008, CI014]. For underwriting diligence, private metric opacity on treaty ceding commissions, catastrophic reinsurance reinstatement costs, and gross retention constitutes a material diligence barrier [CI013, CI014].

4.4 Exhibits

5.1 Active Insurance Model & Customer Workflow Definition

Coalition defines its product offering as Active Insurance, an operating model that combines comprehensive cyber insurance underwriting with automated perimeter monitoring, risk assessment, and incident response services. Traditional commercial cyber insurance operates on a passive claims-reimbursement model where underwriters evaluate static annual questionnaires and assess damages only after an intrusion occurs. In contrast, Coalition's Active Insurance platform continuously scans external corporate attack surfaces, flagging emerging software vulnerabilities, misconfigured cloud ports, and unpatched perimeter services before malicious actors exploit them. According to company disclosures, policyholders participating in active monitoring experience seventy-three percent fewer claims relative to industry averages. Insurance protection is delivered through admitted and surplus lines paper, including Coalition Insurance Company, an admitted carrier holding an A- rating from A.M. Best. By bundling risk engineering telemetry directly into the insurance contract, Coalition seeks to turn cyber loss prevention from an annual audit into an ongoing, real-time operational feedback loop across small and mid-sized enterprises.[CE001, CE002, CE003]

5.2 Product Line Portfolio & Broker Workflow Integration

Coalition's product and service portfolio spans policyholder risk management, insurance carrier paper, and broker distribution tooling. For policyholders, the primary interaction surface is the Active Risk Platform and Coalition Security, which deliver continuous perimeter vulnerability scanning, actionable remediation advisories, and 24/7 access to in-house incident response and digital forensics teams. For distribution partners, Coalition provides Broker IQ, a digital underwriting portal enabling independent brokers to generate automated bindable quotes in minutes rather than days. Operational responsibility is further broadened through major carrier partnerships, notably an expanded long-term global agreement with Allianz Commercial announced in May 2026. Under this multi-year collaboration, Coalition takes primary responsibility for pricing, product development, risk mitigation, and claims management for Allianz's standalone commercial cyber insurance portfolio across markets including the United States, United Kingdom, Australia, Germany, Denmark, and Sweden. This distribution motion integrates third-party broker sales into Coalition's proprietary digital binding workflow.[CE001, CE002, CE007]

5.3 Enterprise Data Architecture & Technical Infrastructure

Coalition's technical operating infrastructure relies on a hybrid architecture bridging cloud-native data engineering with complex insurance balance sheet vehicles. The data platform is built upon a modern data stack centered on Snowflake and dbt, deploying governed Medallion pipeline architectures (bronze, silver, gold) to ingest, normalize, and transform high-velocity security scan telemetry alongside historical insurance loss runs. Batch and streaming ingestion workflows utilize technologies such as Kafka, Kinesis, and orchestration frameworks to process telemetry at scale, powering actuarial modeling, underwriting automation, and machine learning feature stores for risk scoring and RAG-driven analytical workflows. On the balance sheet side, Coalition operates as an MGA and full-stack carrier, deploying capacity across Coalition Insurance Company (CIC), captive risk vehicles, reinsurance sidecars, and delegated underwriting authority agreements from global reinsurance leaders such as Allianz, Arch Insurance, Ascot Group, and Swiss Re Corporate Solutions. Enterprise data governance controls enforce role-based access control hierarchies, column-level masking, and PII tokenization across all regulated financial and policyholder environments.[CE004, CE005, CE008, CE009, CE010]

5.4 Technical Differentiation, Governance & Key Diligence Blockers

Coalition's technological differentiation centers on its proprietary scanning telemetry and tightly integrated claims feedback loop, which enable faster quoting and proactive incident mitigation compared to legacy commercial carriers. Strategic carrier alliances, such as the expanded 2026 Allianz partnership, validate the scalability of Coalition's underwriting engine across multinational commercial lines. Broader organizational and defense research on technology alliances demonstrates that coordinating commercial technology platforms across institutional boundaries requires structured integration protocols and decision governance frameworks to prevent operational friction and sustain platform agility as product lines expand. Despite these operational strengths, significant technical and diligence gaps persist. Coalition's proprietary scanning algorithms, automated vulnerability detection rates, and scanning false-positive frequencies remain private and lack independent third-party audit verification. Furthermore, because external scans only evaluate public-facing perimeter assets, internal network threats such as lateral movement and credential theft cannot be directly assessed, leaving the true predictive power of Coalition's underwriting technology dependent on private claims data.[CE006, CE010, CE011, CE012, CE013, CE014]

5.5 Exhibits

6.1 Customer Segments and Buying Surfaces

Public evidence supports four distinct constituencies rather than one homogeneous customer base. Coalition Insurance Company was launched with policies intended for small and midsize businesses that often lack their own cyber-risk tools, establishing an SMB insurance segment. Coalition's homepage separately promotes Broker IQ as a quoting, training, and sales-material surface for brokers, so brokers are distribution users rather than the insured end customer. The Allianz agreement adds commercial customers across all segments through an announced portfolio transition, but the release does not quantify transferred policyholders or premiums. Wirespeed's support role describes technical and non-technical customer interactions around incidents and product issues, indicating a security-product user surface alongside insurance. Neither buyer titles, segment revenue mix, nor payer-versus-user splits are disclosed in the assigned evidence, so those fields should be obtained from account and policy data rather than inferred from product positioning.[CU003, CU004, CU011, CU012]

6.2 Adoption Scale and Outcome Claims

Coalition's homepage states that it has more than 100,000 clients and that policyholders experience 73% fewer claims. These are company claims, not independently verified cohort measures: the fetched page does not define whether the client count is active policies, organizations, security-product users, or cumulative relationships, and the claims comparison omits the baseline population, observation period, and loss definition. The Allianz transaction is a stronger external signal of prospective distribution scale, but it remains a phased rollout subject to regulatory and customary approvals. Allianz says Coalition will assume primary responsibility for pricing, product development, risk mitigation, and claims management while Allianz supplies resources and distribution. That arrangement may accelerate adoption, yet the source provides no transferred-policy count, gross written premium, activation schedule, or realized retention result. Adoption should therefore be treated as commercially credible but quantitatively under-specified.[CU001, CU002, CU004, CU005, CU007]

6.3 Named Customer Proof and Evidence Quality

Named proof is materially thinner than the aggregate scale claim. Coalition's knowledge center names centrexIT in a Wirespeed ADR customer story and describes closing security gaps and expanding analyst capacity, but the index text does not disclose contract scope, production dates, deployment size, or quantified outcomes. CaseStudies.com points the other direction: it presents Coalition itself as the customer of vendors such as Census, so it is evidence about Coalition's internal tooling and must not be counted as evidence that another organization buys Coalition's product. One assigned net-new result concerns Coalition Technologies, an unrelated digital-marketing agency; its case studies cannot be attributed to Coalition, Inc. This entity collision materially reduces the usable named-customer set and demonstrates why search-result logos and similarly named firms require issuer-level verification before inclusion.[CU008, CU009, CU010]

6.4 Durability, Expansion, and Concentration

The public record supports a channel-led expansion mechanism but not customer durability. Broker IQ can support broker acquisition and repeat quoting, while the Wirespeed support model can sustain post-sale product usage through investigation, escalation, and follow-up. On the capacity side, a company-issued role description says Coalition operates through insurers and reinsurers that delegate underwriting authority and require data sharing, audits, contractual compliance, and internal product support. Allianz's minimum ten-year agreement may stabilize one major relationship, but exclusivity, equity participation, board representation, and reliance on Allianz distribution also create a material partner concentration to test. No assigned source reports gross retention, net revenue retention, policy renewal, broker concentration, top-customer share, contract length by customer, or expansion revenue. A diversified client count cannot substitute for those denominators, and the absence of public figures is recorded as a diligence gap rather than evidence of strong retention.[CU006, CU011, CU012, CU013, CU014, CU015]

6.5 Exhibits

7.1 Regulatory Licensing, Admitted Carrier Transition, and Legal Contingencies

Coalition's strategic transformation from a pure managing general agent into a full-stack risk bearer introduces significant regulatory friction and ongoing compliance complexity. The licensing of Coalition Insurance Company as an admitted carrier in New York under license #23-25930 provides regulatory autonomy and dedicated capacity, but nationwide rollout requires navigating disparate state-level rate and form filing frameworks where admitted availability is not guaranteed across all jurisdictions. Furthermore, Coalition's landmark global agreement to take over Allianz Commercial's standalone commercial cyber insurance portfolio remains strictly contingent upon regulatory and statutory approvals across key jurisdictions including the United States, United Kingdom, Germany, Denmark, Sweden, and Australia. In parallel, global financial and insurance supervisory bodies are rapidly escalating stress testing standards and supervisory oversight of systemic catastrophe risks, while federal debates surrounding financial institution supervisory standards emphasize that counterparty reputation and regulatory discretion can abruptly disrupt financial operational networks.[CR001, CR002, CR004, CR009, CR010]

7.2 Operational Vulnerabilities, Incident Response, and Systemic Aggregation

At the operational core of Coalition's value proposition is its Active Insurance paradigm, which integrates attack surface monitoring, threat intelligence, and 24/7 incident response directly into policyholder risk management. Coalition claims that this continuous mitigation architecture achieves a 73% reduction in cyber insurance claims frequency compared to industry benchmarks, actively suppressing routine loss vectors such as ransomware, funds transfer fraud, and AI-driven phishing attacks. However, catastrophic cyber perils present severe aggregation vulnerabilities where conventional perimeter defenses and algorithmic telemetry may fail simultaneously across broad policyholder cohorts. Theoretical and empirical research into distributed decision architectures highlights that fragmented data sources and uncoordinated multi-agent systems suffer from informational uncertainty and cross-domain utility reversal, creating acute underwriting blind spots when novel, correlated zero-day exploits circumvent established automated detection playbooks and overwhelm incident response capacity.[CR007, CR008, CR011, CR012]

7.3 Counterparty Concentration, Carrier Delegated Authority, and Reinsurance

Coalition's operational scalability and underwriting solvency remain heavily anchored to external insurance and reinsurance partnerships. Under its delegated underwriting authority structures, Coalition writes standalone cyber coverage, open market cyber reinsurance, and commercial management liability lines on behalf of traditional carrier syndicates, while deploying balance sheet vehicles such as captives, sidecars, and admitted paper. The multi-year alliance with Allianz Commercial represents a transformative yet highly concentrated partnership: Allianz transitions its standalone commercial portfolio, commits long-term insurance capacity over a minimum 10-year term, and obtains equity consideration and board representation. While this alignment cements Coalition's global distribution, it exposes the business to acute counterparty risk if regulatory approvals stall or treaty renewals face revised terms. Coalition's parallel relationships with prominent global syndicates including Arch Insurance, Ascot Group, Lloyd's of London, and Swiss Re Corporate Solutions mitigate single-carrier dependence but leave the company vulnerable to broader reinsurance market cycle hardening.[CR003, CR005, CR006, CR013, CR014, CR015]

7.4 Integrated Risk Matrix, Mitigation Architecture, and Thesis-Break Triggers

Synthesizing Coalition's multidimensional risk environment reveals that while idiosyncratic policyholder losses are effectively mitigated by proactive threat scanning, residual exposures remain elevated in systemic aggregation and counterparty execution. The primary investment kill criteria center on three measurable triggers: first, failure or protracted regulatory obstruction in securing cross-border supervisory transfer approvals for Allianz's corporate cyber portfolio; second, a catastrophic systemic zero-day exploit generating correlated losses that breach reinsurance attachment points and exhaust captive or sidecar capital reserves; and third, regulatory enforcement actions or state insurance commissioner rejections constraining Coalition Insurance Company's admitted policy expansion. Diligence must rigorously audit Coalition's reinsurance treaty reinstatement terms, aggregate loss limit definitions, and cross-border regulatory filing milestones to confirm that technical risk mitigation translates into balance sheet durability.[CR002, CR004, CR006, CR007, CR011, CR012]

7.5 Exhibits

8.1 Investment Thesis and Anti-Thesis

Coalition presents a differentiated thesis as an Active Insurance pioneer that integrates real-time risk assessment, dynamic threat monitoring, and full-stack cyber underwriting [CV001, CV003]. The company's expansion into a licensed, full-stack carrier via Coalition Insurance Company demonstrates operational maturity and balance-sheet sophistication [CV006]. The strategic partnership with Allianz Commercial, which establishes Coalition as Allianz's exclusive global commercial cyber partner and transitions underwriting and pricing responsibilities over a minimum 10-year term, creates an unprecedented distribution moat [CV004, CV007]. Conversely, the core anti-thesis centers on extreme financial opacity and catastrophe risk. Coalition does not publicly disclose GAAP revenue, net margins, customer retention, or cohort-specific loss ratios [CV011, CV013]. While marketing claims assert lower claims frequency, independent actuarial verification of underwriting profitability remains unavailable [CV003, CV010].

8.2 Recommendation Framework and Financing History

We assign Coalition a research-more recommendation with medium confidence, a high risk rating, and a fair valuation stance [CV009, CV012]. The company's capital trajectory reflects rapid expansion from a $10M Series A in 2018 to a $205M Series E at a $3.5B valuation in September 2021, followed by a $221M Series F in June 2022 that brought valuation to $5.0B [CV001, CV002, CV005]. Secondary pricing intelligence from Forge Global benchmarks Coalition at a $5.29B Series G post-money mark with $1.05B in total funding as of July 2026, alongside active secondary trading on the Nasdaq Private Market [CV002, CV005]. Without audited gross written premium (GWP) and loss development cohorts, underwriting an investment at a >$5B valuation is premature for risk-sensitive capital, warranting a disciplined hold until data room verification confirms sustainable unit economics [CV009, CV011, CV013].[CV001, CV002, CV005, CV009, CV011, CV012, CV013]

8.3 Scenario Analysis and Exit Readiness

Our scenario analysis spans three paths anchored against cyber market multiples and underwriting durability. Under the bull case, Coalition executes seamlessly on the Allianz portfolio transition, expanding beyond 100,000 policyholders and compounding admitted paper premiums, justifying an enterprise valuation of $7.5B to $9.0B upon an eventual public listing [CV002, CV004, CV007]. In the base case, sustained growth in North American SMB cyber offset by reinsurance capacity costs and competitive pressure from incumbent carriers supports a valuation range of $4.8B to $5.5B, keeping the current mark fair [CV002, CV008, CV012]. The bear case reflects systemic cyber contagion, multiple reinsurance treaty repricings, or adverse loss ratio development that compresses private valuations toward $2.5B to $3.5B [CV001, CV010, CV013]. Closing these valuation variances requires rigorous diligence into reinsurance attachment points, cohort loss ratios, and broker retention [CV008, CV011].[CV001, CV002, CV004, CV007, CV008, CV010, CV011, CV012, CV013]

8.4 Exhibits