The market validated itself, then left the mid market on the table.

We are in conversations with angels, syndicates, and seed funds who invest in security infrastructure. Round structure, size, and terms are discussed directly and are not published here. Submit the form and we will tell you exactly where we are.

Two answers, because we compete with them on two fronts. On scanning, we collect the same credentialed inventory they do, over the same protocols, without an agent, and match it against a 330,000 CVE corpus. We are not claiming a decade of vendor advisory content depth, and we do not need to, because a scanner that finds 100 percent of your problems and ranks them by CVSS still leaves the team guessing. On everything after the scan, they are not really in the fight: they do not simulate the attack to prove exploitability, they do not write the fix, and they do not verify the fix held. And a customer running Tenable and Qualys and Rapid7 at the same time, which is most enterprises, gets three answers from them and one from us.

It is the right question, and it is the one that kills most security startups. Two things make it survivable here. First, bundling works when the feature is a checkbox on a renewal, and validation is not: proving exploitability requires an attack corpus, a simulation engine, and a safety model that took us years and 158,271 payloads to build, so a bundled version is a worse version and the buyer can tell in a single scan. Second, and more important, they can only bundle it to customers they already have. The mid market and MSSP segment we sell into is not on their renewal list, because their pricing never got them in the door. You cannot give something away for free to someone who was never your customer.

The channel is the answer. Direct mid market sales cap out at whatever the founding team can personally close, which is a nice services company and not a venture return. Each managed provider we sign carries its whole client book, expands on its own as that book grows, and renews on the provider's contract cycle rather than ours. The comparable exits are already on the board: Silk sold for a reported 150 million dollars having raised roughly 12.5 million, and Dazz sold for a reported figure near 450 million dollars. We are building the same capability for the segment those companies never addressed, with the IP position to price an acquisition and the option to stay standalone the way Zafran has.

Not yet, and we are not going to pretend otherwise. Everything on this page was built alongside other work, with no outside capital, which we think says something useful about the team. The raise is what takes the founding team full time and funds the first commercial hires. We will give you the specific timing and the plan for the services business directly, in writing, before you commit anything.

Go to market. The product is built. Capital buys sales motion into the MSSP channel, design partner conversion, and the compliance work, SOC 2 and FedRAMP path, that unlocks the regulated buyers our architecture is already suited for.

We run live engagements across manufacturing, construction, architecture, healthcare and pharmacy, and managed service providers. We do not publish their names, because we have not asked them for that and we are not going to spend a client relationship on a marketing page. Under NDA and with the client's consent we will make direct introductions, and reference calls are part of how we expect you to diligence us. Logo and reference rights are something we are negotiating into the paid pilot conversions now.

If you are reading this page you already have access to all of it: the investor deck, the one page overview, and the data room covering patent filings, integration matrix, architecture, security posture, and the TRIS methodology paper. A live 3 minute product demo is available on request.