Risk-value pricing, stalled POCs and the SOC 2, ISO 27001 or FedRAMP gaps blocking pipeline: located, priced and ranked in a written report, reviewed and signed by the founder.
7 questions · 3 minutes · no email needed to see your grade
Priced on endpoints, not risk. SOC 2 missing.
Security buyers are among the least price-sensitive in software when value is framed as risk reduced — yet most startups price on seats or endpoints, not on the breach cost avoided. The gap is usually $300K–$900K a year.
The technical champion loves the product. The deal stalls across the seven other decision-makers — procurement, legal, finance, the CISO — because the value story was never translated out of engineering terms.
73% of enterprise buyers require SOC 2 Type II. FedRAMP gates every public-sector ACV. A missing certification is a pipeline tax — not a product problem — and it's quantifiable per deal.
Every tier follows the same path. Only the depth of the diagnosis changes with the price.
Choose the tier that fits your ARR, or take the free grade first and let it point you to one.
2 minutes18 questions on pricing, retention and pipeline. Anything you don't have is flagged in the report, never guessed.
About 15 minutesEvery leak located, priced and ranked, with the fixes in order, reviewed and signed by the founder.
18–24 hours · Starter 48–72Four inputs, one directional estimate from published benchmarks. It is a preview, not the diagnostic.
Directional only. The diagnostic replaces every estimate with a figure from your own numbers.
How much are you underpricing vs the risk you remove — and what's the dollar impact of moving to outcome-based pricing?
Where is NRR leaking — invisible-value churn or flat expansion — and what's the dollar repair at renewal?
Which missing control (SOC 2 / ISO 27001 / FedRAMP) is blocking which slice of your pipeline — and what's the dollar per control?
How much is the 18-month enterprise cycle costing in CAC burn — and which bottleneck drives the most of it?
Are you selling to the champion and losing the deal to the 7 others — CISO, procurement, legal, finance, IT, end-user, exec sponsor?
These five are read first. Each tier below states exactly how far the diagnosis goes beyond them.
Pick the tier that matches your ARR. Every diagnostic is reviewed and signed by the founder and delivered in writing.
The 3 most painful cybersecurity frameworks on your real numbers — including the Enterprise Compliance Readiness Map identifying which gap is blocking which deal. Sharp first read before the full diagnostic. vs $15K–$50K specialist consultants charge for the SOC 2 / FedRAMP scoping alone.
Seed to Series A. The full board-grade diagnosis — all 18 frameworks, compliance readiness map, dollar-precise, priced to your stage. About 0.5% of the ~$675K–$1.35M a sub-$5M-ARR cybersecurity company is typically bleeding.
1% gain ≈ up to $10K/yr at your scale
Seed to Series A. The full board-grade diagnosis — all 18 frameworks, compliance readiness map, dollar-precise, priced to your stage. About 0.5% of the ~$675K–$1.35M a sub-$5M-ARR cybersecurity company is typically bleeding.
1% gain ≈ $10K–$30K/yr at your scale
Series A to B. Full diagnosis plus deeper competitor benchmarking and a recovery model sized to a scaling security team. About 0.5% of the ~$1.35M–$2.25M a $5M–$25M-ARR cybersecurity company is typically bleeding.
1% gain ≈ $30K–$150K/yr at your scale
Series B+. Everything in Growth, at the depth a mature cybersecurity organisation needs before a raise or M&A process. About 0.5% of the ~$3M+ a $25M–$50M-ARR cybersecurity company is typically bleeding.
1% gain ≈ $150K–$500K/yr at your scale
A board-grade PDF: 22 pages for the Founder tier (5 for the Starter). Cover, exec summary, 18-framework scorecard, dollar-quantified findings, compliance readiness map, GTM efficiency analysis, 90-day priority queue.
PMP®- and RMP®-certified senior planning engineer (BEng Hons). Every diagnostic is personally run, reviewed and signed by me — no outsourced analysts, no call-booking funnel. The methodology is public: judge the teardowns before you spend a dollar.
Judge the method before you buy. Public teardowns:
If a finding doesn't hold up, a number needs sharpening or an input is missing, we rework the diagnostic at no charge until you can act on it. All sales are final; the rework is the guarantee.
Start with the free grade. When you're ready, the diagnostic puts a dollar figure and a fix on every leak.