Joshua Motta and the business of fewer bad days

Joshua Motta’s first serious career decision involved avoiding a paper route. Growing up outside Kansas City, he preferred building websites to getting up at six in the morning. Local real estate offices needed pages. An online shop called Dogtoys.com needed e-commerce software. The internet offered a useful arrangement: customers could judge the work without discovering quite how young the person doing it was.

By the summer of 1999, he was working at Microsoft, aged 15. His grandmother moved with him to Redmond because he could not drive and his parents had jobs of their own. His office door acquired the label “Wonderboy.” The precocious programmer still needed a lift. It is a useful detail to keep beside the subsequent résumé, with its intelligence work, investment banking and venture-backed companies.

Today Motta is CEO and co-founder of Coalition, the company he built with John Hering to put cybersecurity and insurance in the same business. The distance between selling dog toys online and underwriting cyber risk looks considerable. Follow the intervening jobs, though, and a practical question keeps returning: what happens when a useful piece of technology becomes something people depend on?

The teenager behind the checkout

Motta describes teaching himself HTML and other programming languages and starting a business with a school friend. Their parents helped with the credit card processing arrangements. The customers, he recalled, generally did not meet them in person. The work had to pass inspection; the entrepreneurs’ ages could remain outside the transaction.

That early business attracted Microsoft’s attention. Other technical roles followed, including work at Sprint and writing avionics software at Honeywell. These were different kinds of systems, with different customers and consequences. A website checkout and aircraft software do not invite the same tolerance for mistakes. Both require someone to make a machine behave as promised.

At the University of Chicago, where he earned an A.B., Motta also worked for the CIA. He has described a career spanning the agency, technology businesses and financial services. The sequence resists the tidy founder biography in which every job is merely preparation for an inevitable startup. He tried several kinds of work before returning to entrepreneurship.

A detour through other people’s risks

His move into finance took him to Goldman Sachs’s technology investment banking team in London. He subsequently worked in private equity, including Francisco Partners. Technology remained the subject, but the job now involved looking at businesses through their financing and ownership. Building software and deciding what a software business is worth require different habits of attention.

Then came Cloudflare. Motta joined in 2011, when it was still a small company, and became its CXO and head of special projects. The title was accommodating enough to cover a broad set of responsibilities. An internet infrastructure business needed technical judgment, commercial arrangements and people willing to pick up work that had not yet acquired a department.

His writing from that period provides a less theatrical record of the job than the intelligence credentials. In September 2015, he announced Cloudflare’s $110 million financing and described a network reaching 62 cities across 33 countries. The same author archive contains dispatches about new data centers in Copenhagen, Mombasa, Osaka and elsewhere. The pattern is geographical and methodical: extend the network, bring the service closer, repeat.

He was also involved in Cloudflare’s partnership with Baidu. Announced in 2015, the arrangement connected Cloudflare’s international network with Baidu’s network inside mainland China. Each company operated on its own side of the border. The cooperation required a workable business structure as well as functioning technology. For a head of special projects, the special part could mean contracts and coordination rather than a particularly elegant piece of code.

The insurance buyer changes sides

At Cloudflare, Motta also bought the company’s insurance. He later explained that he had done so because someone had to. Through that work he met Shawn Ram, then an insurance executive serving technology clients. When Motta started Coalition, Ram was someone he wanted on the team. A practical acquaintance made while buying coverage became part of the company that would sell it.

Coalition was founded in March 2017 and made its public debut that December. Hering brought his own cybersecurity background, including founding Lookout. The early team included experienced insurance people as well as technologists. Customers would buy through brokers, using an online platform, and receive cybersecurity tools alongside coverage. Combining those disciplines required more than attaching an insurance policy to a software subscription.

The initial customer was often a small or midsize business. In his account of Coalition’s purpose, Motta returned to ordinary organizations: retailers, restaurants, nonprofits and places of worship. Their dependence on digital systems could outrun their ability to defend those systems. They had become participants in a security problem with specialists on the attacking side and everyday business owners on the receiving end.

“Insurance chose us.”

Joshua Motta, on Coalition’s beginnings

Insurance supplied a reason to care about the outcome after the software was sold. Preventing an incident helps the business keep operating and can spare the insurer a claim. Responding quickly can reduce the size of a loss already under way. Motta’s proposition put those activities inside one commercial relationship, giving the people measuring risk a reason to help change it.

A search engine for trouble

In January 2020, Coalition acquired BinaryEdge, whose technology scans internet-connected devices and maps potential attack surfaces. Motta explained the acquisition in a post titled “The Secret Coalition Master Plan.” The title had a wink in it. The operational point was direct: attackers could look for vulnerable systems across the internet, and defenders needed access to comparable visibility.

He said BinaryEdge would monitor policyholders continuously, rather than only when they sought a quote. This distinction matters in his conception of the business. A company’s systems can change during the policy period. New exposures need attention while there is still an opportunity to fix them. The underwriting moment is one stop in that relationship.

By March 2022, Motta had given the combined approach a name: Active Insurance. His description linked premiums, security tools, incident response and claims information in a continuing cycle. Protection produces observations; incidents reveal where protection failed; both can inform future decisions. It is a fairly involved answer to the deceptively simple question of what an insurance customer should receive for a premium.

Culture before the business plan

The company says its founders wrote their cultural values before their business plan. In a 2023 podcast conversation, Motta described both high individual standards and the need for talented people to work together. An organization full of capable employees still has to become an organization. Hiring supplies the people; it does not automatically supply cooperation.

His phrase for the distinction is economical: “culture is not what you write down, it is what you practice.” It is an exacting test for a founder whose company publishes its values. A statement about humility has to survive a disagreement. A statement about responsibility has to survive an inconvenient task. The words make a promise about the next ordinary working day.

Motta’s management account also emphasizes access to information. He describes giving employees the data they need to make decisions, using recurring business reviews, and writing annual letters that let newer colleagues follow the company’s development. The analytical temperament is visible here: define the desired customer outcome, share the evidence, then make room for people to act. The machinery includes writing as well as dashboards.

The next counterparty is Allianz

The scale changed. In July 2022, Coalition announced $250 million in Series F funding at a $5 billion company valuation. The investors included Allianz X, beginning a relationship that would become more consequential than a name on a funding announcement.

In May 2026, Coalition and Allianz Commercial announced an agreement to transition Allianz’s standalone commercial cyber business to Coalition. The plan assigned Coalition primary responsibility for pricing, product development, risk mitigation and claims management, with Allianz contributing capacity, distribution and multinational resources. The relationship was structured for a minimum of ten years. The former insurance buyer was now negotiating a much larger division of responsibilities.

By October, Coalition’s chief revenue officer was describing an expansion toward large corporate accounts, alongside a customer base still composed mostly of small businesses. That creates a new test for Motta’s original proposition. A multinational client brings more complex operations and a different buying process. The promise to understand and reduce risk must travel with the company as its customers become larger.

Motta has said a public listing is Coalition’s eventual path, while declining to attach a timetable. For now, the distinctive feature of his career is how often he has changed his seat at the table: programmer, intelligence worker, banker, operator, insurance buyer, insurer. Coalition brings those perspectives into the same transaction. The next chapter depends on whether that combination keeps doing useful work when the table gets bigger.