The company
A managed security and compliance provider with about 110 staff and $25M in revenue, selling monitoring and compliance services on fixed monthly contracts. The owner wants to keep growing and is losing bids to a competitor owned by an AI-enabled roll-up.
Measured in weeks 1–2
- Analyst minutes per alert, by alert type
- Hours per customer each month spent collecting compliance evidence
- Hours to onboard a new customer
The first build
- First review of alerts run by an AI agent, which gathers the context and drafts the case, with an analyst deciding every one.
- Evidence for each customer’s SOC 2 and ISO 27001 controls pulled from their systems on a schedule, with a compliance specialist reviewing each report.
- New-customer onboarding run from the signed contract, with an engineer approving each step.
Midway
The owner sees alert review running on live alerts and decides whether to continue, change the scope, or stop.
What the owner gets
Cost to serve each customer per month before and after, by service, with the method and the records behind it. The owner prices the next bids from it.