The Business of Cyber Security

Cyber Insurance Market Structure, Carriers and MGAs

On May 6, 2026, Allianz Commercial agreed to transition its entire standalone commercial cyber-insurance business to Coalition, handing pricing, product, risk mitigation, and claims for a global carrier's cyber book to a venture-backed MGA, under a minimum-ten-year alignment in which Allianz takes equity and a Coalition board seat. A 130-year-old carrier outsourcing the underwriting function of a line to an eight-year-old insurtech is a marker of where value is migrating in cyber insurance. The sections below set out the structure of that market: who the players are, how each makes money, and how the layers differ, providing the foundation for the convergence story on 24b.

How big, and who pays

Cyber insurance is still small relative to the risk it covers, but it is the fastest-growing major P&C line. Global gross written premium (GWP) is on the order of ~$15–16B in 2026 (Swiss Re estimates ~$16.4B) and is widely modeled to roughly double toward the early 2030s; broader "market" figures of ~$33–40B for 2026 appear in analyst reports but generally blend in services and use different scopes — treat the ~$16B GWP figure as the underwriting-premium anchor and the larger numbers as estimates on a wider definition. The US is ~70% of global GWP, and US direct written premium (DWP) actually fell for the first time ever — from ~$9.8B (2023) to ~$9.1B (2024) — as a soft market and rate declines outran new-policy growth. S&P projects ~15–20% cyber rate increases in 2026, i.e., the soft cycle turning.

The cyber-insurance value chain — and where the margin sits Premium flows left→right; risk flows right→left. The MGA owns the high-value underwriting brain. InsuredSME → largecorporate BrokerMarsh, Aon,Gallagher, WTW MGA / underwriterCoalition, At-Bay,Cowbell · the brain Carriercapacity /balance sheet Reinsurertail &aggregation → premium → pays premium,wants the claim paid ~10–20% commission;advice + placement ~25–30%+ ceding/MGA feeprices risk, controls loss earns the spread,holds the risk caps systemictail The fee-based MGA layer is what PE & insurtechs are buying Schematic; fee/commission bands illustrative. Source: industry structure. Exhibit: The Business of Cyber Security.
Read it as two opposed flows: premium moves left→right toward the balance sheet; risk moves right→left away from it. The scarce skill — *pricing a fast-moving, correlated peril and actively reducing the loss* — sits in the MGA/underwriter node, which is why that layer earns fee-based economics, attracts PE, and is where the Allianz→Coalition handoff put the value. See the convergence thesis on [24b](24b-active-insurance.md).

The layers, by what they actually do

Cyber-native MGAs / "active insurance" (the value layer). A managing general agent underwrites and services policies on a carrier's paper without holding the ultimate risk — earning a fee/commission on premium it originates and manages. Cyber MGAs (Coalition, At-Bay, Cowbell, Resilience, Measured) added a twist: they pair the policy with continuous scanning, alerting, and incident response, so they don't just price risk, they reduce it. Coalition has raised ~$800M and was valued at ~$5B at its 2022 Series F; At-Bay (Munich Re–backed) raised ~$457M, was valued at ~$1.35B in 2021, and reported ~$155M revenue in 2024. Their economics are software-like (fee-based, scalable, data-compounding) bolted to an insurance distribution engine — the reason they command tech-style multiples and PE interest. Detail on 24b.

Traditional carriers with large cyber books. Beazley, AIG, Chubb, AXA XL, Zurich, Tokio Marine, CNA, Travelers (which acquired Corvus in 2024) hold the capital and the regulatory licenses. They earn the underwriting spread but historically lacked the telemetry and tech to underwrite cyber tightly — which is why Allianz chose to use Coalition's underwriting capability rather than rebuild it. The top five cyber insurers held only ~30% share in 2024 (down from ~32%), so the carrier layer is fragmented and contestable.

Reinsurers. Munich Re, Swiss Re, Hannover Re absorb the tail and the aggregation risk — the chance that one widely used vendor failing (a CrowdStrike-style outage, a shared-library zero-day) triggers correlated claims across the whole book. Reinsurance appetite is the real governor on how much cyber capacity exists; cyber is a growing but contested reinsurance line, and constrained reinsurance is what periodically hardens the primary market.

Brokers. Marsh, Aon, Gallagher, WTW, Woodruff Sawyer advise the insured and place the risk, earning commission. Their cyber specialty practices increasingly bundle risk-quantification and benchmarking data — a quiet move up the value chain toward the underwriting function.

Why the structure is consolidating

Two engines drive cyber-insurance M&A. (1) MGA roll-ups. PE and carriers are buying fee-based MGA platforms for their scalable, capital-light economics — e.g., Blackstone Credit & Insurance + AmTrust folded seven MGAs into the standalone ANV Group (completed Dec 2025), and MGA deal volume/size has risen through 2025–2026. (2) Carrier–insurtech convergence. Travelers–Corvus (2024) and now Allianz→Coalition (announced May 6 2026) show carriers acquiring or renting the active-insurance capability rather than building it. The boundary between insuring risk and reducing it is dissolving — the through-line of 24b.

→ Cross-references: the active-insurance convergence thesis and the Allianz–Coalition deep dive (24b); demand engines (15, 16); the buyer (03); aggregation risk mirrors platform concentration (01).

Sources: Coalition–Allianz partnership (May 6 2026) — GlobeNewswire · Allianz Commercial — partnership with Coalition · Gallagher — 2026 Cyber Insurance Market Outlook · S&P Global Ratings — Cyber Insurance Outlook 2026 · Coalition Series E ($205M, >$3.5B) · Coalition Series F ($250M, $5B) — Insurtech Insights · At-Bay Series D ($185M, $1.35B, 2021) — SecurityWeek · Risk & Insurance — MGA deals surge. GWP ~$16.4B 2026 per Swiss Re estimate; US ~70% of GWP and US DWP ~$9.8B→~$9.1B per market trackers.

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.