Counterinsurgency (COIN) is the fight against an insurgency — a weaker party that refuses conventional battle and instead uses hit-and-run, terror, and political mobilisation to erode the stronger side's will and legitimacy. The stronger side has the firepower; the insurgent has time, local knowledge, and the ability to blend into the population. COIN is the strategy and operations to defeat that kind of enemy: not by outgunning them in set-piece battles (they won't show up), but by securing the population, cutting the insurgent off from support, and winning the political contest so the insurgency loses its reason to exist.
The classic formulation — "winning hearts and minds" — is only half the story. You also have to deny the insurgent sanctuary, intelligence, and recruits. That means security (so people can side with you without being killed), legitimacy (so your side is the one people prefer), and pressure on the insurgent's network (so they can't sustain the fight). David Galula, Robert Thompson, and the US Army–Marine Corps FM 3-24 (2006) all stress the same hierarchy: protect the population, separate them from the insurgent, build governance and services, then pursue the enemy. The population is the center of gravity. If the insurgent controls it, you lose. If you control it, the insurgent withers.
In business, counterinsurgency appears when a dominant player faces a distributed, adaptable threat — e.g. many small competitors, piracy, or a grassroots movement that undermines the incumbent's narrative or distribution. The incumbent can't just "bomb" the competition away; the threat is diffuse and regenerates. The COIN move is to secure the "population" (customers, developers, partners), build legitimacy (value, trust, ecosystem), and pressure the insurgent's nodes (partnerships, funding, talent) so the threat can't scale. The mistake is treating it like a conventional war — big campaigns, big bets — when the real fight is for allegiance at the local level.
Section 2
How to See It
Counterinsurgency dynamics show up when a stronger party faces a weaker, distributed adversary that refuses direct fight and relies on population, narrative, and persistence. Look for: asymmetry of force, a contested "population" (users, voters, territory), and a struggle for legitimacy rather than territory alone.
Business
You're seeing Counterinsurgency when a platform faces many small competitors or copycats that collectively erode share. You can't acquire or crush them all. The fight is to make your ecosystem more valuable than the sum of alternatives — to "secure" developers and users so they don't defect — while selectively pressuring key insurgent nodes (e.g. key hires, distribution deals).
Technology
You're seeing Counterinsurgency when open-source or piracy undermines a commercial product. The "insurgent" is distributed (many contributors, many downloaders). Direct legal or technical assault has limited effect. The COIN move is to make the legitimate product so much better integrated, supported, and trusted that the insurgent option loses appeal — while using legal and technical measures to raise the cost of the insurgent path.
Investing
You're seeing Counterinsurgency when an incumbent faces disruptive entrants that don't fight head-on but nibble at edges (e.g. fintech vs banks). The incumbent has resources but the insurgents have speed and focus. The COIN question: can the incumbent secure its core customers and distribution while adapting fast enough to neutralise the insurgent narrative ("we're the alternative")?
Markets
You're seeing Counterinsurgency when a brand or government faces a grassroots movement or many small actors that erode trust or compliance. The response isn't one big campaign but sustained presence, better service, and actions that win allegiance at the local level — plus targeted pressure on the movement's leaders and channels.
Section 3
How to Use It
Decision filter
"When the threat is distributed, adaptive, and won't fight you directly, don't fight the way you would in a conventional war. Secure the population (customers, users, partners). Build legitimacy. Deny the insurgent support and sanctuary. Win the political or narrative contest. The goal isn't to kill every insurgent; it's to make the insurgency irrelevant."
As a founder
If you're the insurgent, you're doing the right thing: avoid set-piece battles, use speed and focus, win local allegiance. If you're the incumbent under insurgent pressure, don't just throw resources at the problem. Secure your core users and partners — make defection costly and loyalty valuable. Improve the product and experience so the "population" prefers you. Then selectively pressure the insurgent's key nodes (talent, distribution, narrative) so they can't scale. Patience and consistency beat one-off campaigns.
As an investor
Evaluate incumbents under insurgent pressure by their COIN readiness: Do they understand that the fight is for allegiance, not just market share? Do they have "boots on the ground" — direct relationship with customers and ecosystem? Can they iterate fast enough to undercut the insurgent narrative? The incumbent that tries to win with scale alone often loses to the insurgent that wins the population.
As a decision-maker
In any contest where the other side is diffuse and won't fight you head-on, shift from "destroy the enemy" to "secure the population and deny the enemy support." That means better service, clearer value, and targeted pressure — not just broad aggression.
Common misapplication: Treating an insurgency like a conventional enemy. Big offensives and big budgets often fail because the insurgent doesn't hold territory to defend. They hold narrative and local ties. You have to compete there.
Second misapplication: Neglecting legitimacy. If you "secure" the population by force or lock-in without delivering value, you create resentment and fuel the insurgency. COIN requires that the population prefer your order to the insurgent's. That's a product and governance problem, not just a security one.
Netflix faced insurgent-style pressure from piracy, then from many streaming competitors. Hastings didn't try to "destroy" piracy with one campaign; he made the legal product so much better (convenience, content, UX) that the population chose Netflix. He also secured key content and talent so the insurgent options had less to offer. The COIN move: win the population with value, then outlast and out-execute the insurgents.
Amazon faced thousands of small sellers and later many e-commerce and cloud competitors. Bezos focused on securing the "population" — customers and third-party sellers — with selection, price, and logistics so good that defection was costly. He didn't try to eliminate every insurgent; he made the Amazon ecosystem the default. Counterinsurgency at scale: win allegiance through service, then let the insurgents compete at the margins.
Section 6
Connected Models
Counterinsurgency sits at the intersection of asymmetric conflict, strategy, and operations. The models below either describe the threat (guerilla warfare, asymmetric warfare), the strategy (hearts and minds, center of gravity), or the operational requirements (boots on the ground, OODA).
Reinforces
Asymmetric Warfare
Insurgency is a form of asymmetric warfare: the weak avoid the strong's strengths and attack where the strong are vulnerable (legitimacy, patience, local knowledge). Counterinsurgency is the strong side's response — also asymmetric in the sense that it doesn't rely on firepower alone but on population and legitimacy.
Reinforces
Winning Hearts & Minds
Hearts and minds is the political and psychological dimension of COIN. You don't just clear territory; you convince the population that your side offers a better future. That requires security, governance, and credible commitment. The phrase is sometimes mocked, but the logic is central: the population is the prize.
Reinforces
Center of Gravity
In COIN, the center of gravity is often the population's allegiance — or the insurgent's ability to sustain support. Strategy focuses on shifting that center: secure the population, cut the insurgent's support, and the rest follows.
Leads-to
Guerilla Warfare
Guerilla warfare is the insurgent's method: hit and run, avoid set-piece battle, use terrain and population. Counterinsurgency is the response: deny the guerilla sanctuary and support, and win the population so the guerilla has nowhere to hide.
Section 7
One Key Quote
"The counterinsurgent must reach the population. He cannot do it by staying in his compounds. He must go to the people. … The population is the key to the problem. The counterinsurgent needs its support; the insurgent needs it even more."
— David Galula, Counterinsurgency Warfare (1964)
Galula reduces COIN to one imperative: get to the population. The side that has the population's support can isolate the enemy and outlast them. The side that doesn't will lose no matter how much firepower it has. In business, "going to the people" means direct engagement with customers, partners, and ecosystem — not just strategy from the center.
Section 8
Analyst's Take
Faster Than Normal — Editorial View
The population is the prize. In COIN and in market competition, the fight is for allegiance. You don't win by destroying every insurgent; you win by making the population choose you. That means product, trust, and presence — not just marketing or M&A.
Security first. Before hearts and minds, people need to feel safe choosing you. If siding with you means getting hurt (by the insurgent, by your own neglect), they won't side with you. In business, "security" might mean reliability, privacy, or not being punished for depending on you. Provide that first.
Legitimacy is earned. You can't claim legitimacy; the population grants it. Delivering value, keeping promises, and treating the population as the prize rather than as a resource to exploit builds legitimacy. Insurgents win when incumbents take the population for granted.
Patience and consistency. COIN is a long game. One-off campaigns don't work. You need sustained presence, repeated proof of value, and consistent pressure on the insurgent's nodes. The incumbent that gets bored or shifts strategy every year loses to the insurgent that keeps showing up.
Don't fight the wrong war. If you're the incumbent and you pour resources into "destroying" a diffuse threat, you're wasting effort. The insurgent doesn't have a headquarters to bomb. They have a network and a narrative. Fight for the population; the rest follows.
Section 9
Summary
Counterinsurgency is the strategy and operations to defeat an insurgency — a weaker, distributed adversary that refuses conventional battle and relies on population support, hit-and-run, and narrative. The stronger side can't win by firepower alone; it must secure the population, build legitimacy, and deny the insurgent support and sanctuary. The population is the center of gravity. In business, COIN appears when an incumbent faces many small competitors or a diffuse threat (piracy, open source, grassroots alternatives). The response is to win allegiance through value and presence, and to pressure the insurgent's key nodes — not to fight a conventional war. Win the population; make the insurgency irrelevant.
The foundational COIN text. Galula stresses the population as the prize, the need to "go to the people," and the clear-hold-build sequence. Short and operational.
The US military's COIN manual. Population-centric, with emphasis on legitimacy, security, and the limits of force. Influential in Iraq and Afghanistan; applicable as a framework for asymmetric competition.
Kilcullen on how insurgencies form and how to counter them. "Accidental guerrillas" are co-opted by insurgents when the population is caught in the middle — a reminder that COIN must protect the population to avoid creating more insurgents.
Leads-to
Boots on the Ground
COIN requires local presence — "boots on the ground" — to gather intelligence, build trust, and respond quickly. You can't run counterinsurgency from headquarters. The same applies in business: you need direct contact with customers and ecosystem to win allegiance and sense the insurgent threat.
Tension
[OODA Loop](/mental-models/ooda-loop)
The OODA loop (observe, orient, decide, act) favours the side that cycles faster. Insurgents often have local knowledge; counterinsurgents must close the gap with presence and intelligence. The tension: COIN is slow and population-centric; OODA rewards speed. The resolution is fast local action within a patient overall strategy.
