Coalition Launches New Cybersecurity Feature for SMBs

A startling realization is dawning across the small business landscape: the most dangerous threat isn’t always a sophisticated, nation-state hack. Often, it’s a simple, fraudulent login to a company email. Business email compromise, a scam where attackers impersonate trusted contacts to redirect payments or steal data, has quietly climbed to become the leading cause of cyber insurance claims. For small and midsize businesses operating with lean IT teams and tighter budgets, this isn’t just a headline—it’s an existential risk. The typical defense? Reactive, manual, and often too slow. By the time a suspicious login is spotted, the financial damage is already done.

This is the gap Coalition, an active insurer, is aiming to close with a significant update to its platform. They’ve introduced Login Security, a new feature integrated directly into their Coalition Control cyber risk management platform. What makes it notable isn’t just the capability—24/7 automated monitoring and threat containment for email accounts—but its delivery model. It’s being offered at no additional cost to their global policyholders, effectively bundling enterprise-grade Identity Threat Detection and Response (ITDR) into the insurance policy itself. This move blurs the line between financial risk transfer and active risk prevention in a way that could signal a broader shift for the industry.

The mechanics are designed for simplicity, a critical factor for resource-constrained teams. After a one-time setup, Login Security connects directly with Microsoft 365 or Google Workspace environments. There’s no software to install or complex configurations to manage. The system then works continuously in the background, watching for telltale signs of compromise: logins from impossible geographical locations (like a login from a different continent minutes after a local one), the creation of malicious inbox rules designed to hide fraudulent email activity, or the use of suspicious devices.

The conventional, and still common, approach to such threats relies on manual log reviews or delayed alerts. As Tim Malcom Vetter, General Manager of Coalition Security, points out, this lag is the attacker’s greatest advantage. “By the time a business notices a suspicious login, the attacker has already had the opportunity to redirect funds,” he explains. “It turns what should be a minor security event into an avoidable loss.” Login Security’s automated remediation aims to shrink that window to milliseconds. When it confirms a threat, it doesn’t just alert someone; it acts. It can instantly terminate the compromised login session, kick the attacker out of the account, and automatically prompt a password reset to resecure it—all without requiring a human to click a button.

This philosophy of “active insurance” is central to Coalition’s model. The concept posits that an insurer’s role shouldn’t begin after a loss is filed. Instead, by providing policyholders with tools to prevent incidents in the first place, the insurer reduces claims frequency and severity, creating a more sustainable model for everyone. Vetter asserts that, to their knowledge, this makes them the first cyber insurance provider to embed this level of automated, preventative ITDR directly into their offering for SMBs. It’s a proactive stance that contrasts with the traditionally reactive nature of insurance.

The implications for small business owners and IT managers are practical and immediate. The most scarce resources in an SMB are often time and specialized cybersecurity expertise. A tool that requires “almost no additional user action” or “zero ongoing management,” as the company describes it, directly addresses that pain point. It allows the existing team to focus on strategic initiatives rather than constant security firefighting. Furthermore, by baking the cost of this security layer into the insurance premium, it removes a common procurement hurdle. For many SMBs, justifying the budget for a dedicated ITDR solution was previously a difficult sell; now, it becomes a value-add of their existing insurance relationship.

However, this integration also invites important questions about reliance and data. Businesses are effectively granting their insurance provider deep, continuous access to their email authentication logs. This requires a high degree of trust in the insurer’s security and privacy practices. It also represents a deeper entanglement between a company’s operational security and its financial risk partner. The success of this model hinges on transparency about how the data is used, protected, and whether it influences underwriting or claims decisions—questions that responsible businesses will need to ask.

The broader trend this launch exemplifies is the maturation of cyber insurance from a simple financial backstop into a risk management partnership. As noted by experts at MIT Technology Review, the industry is under pressure to reduce systemic risk, and providing policyholders with better security tools is a logical path forward. Wired has similarly highlighted the rise of “security-as-a-service” models bundled with other products. Coalition’s Login Security fits squarely into this evolution, offering a tangible tool rather than just a promise of payout.

For SMBs navigating a threat landscape where they are prime targets, such innovations are more than just features; they are essential lifelines. The 15% rise in BEC-driven claims in 2025, as cited by Coalition, is a stark indicator that current defenses are insufficient. Automated, always-on monitoring that can act at machine speed is becoming less of a luxury and more of a necessity. While no single tool is a silver bullet, the bundling of robust, set-and-forget security with an insurance policy marks a meaningful step toward democratizing enterprise-level defense for the businesses that need it most. The real test will be in its widespread adoption and its measurable impact on reducing the human and financial cost of these all-too-common attacks.

• The leading cause of cyber insurance claims is Business Email Compromise (BEC).
• Coalition introduces Login Security for email account monitoring.
• Login Security offers 24/7 automated monitoring at no extra cost.
• The feature connects seamlessly to Microsoft 365 and Google Workspace.
• Automated remediation acts instantly to terminate compromised accounts.
• This model promotes active risk prevention rather than reactive responses.