Chapter 6 of 14

The Demo

Friday May 8 · 2:00 PM ET

On Tideline's side: Marcus, Priya, Hank (executive optics), Sarah, Janelle. On TC's side: Solei leads, Adam joins for technical depth, Sean for the Admiral View walkthrough.

Beat

#13Solei runs the demo with the whale's team

Phase 1 · Frame & Upfront Contract (3 min)

Solei Dyment · Chief Growth Officer

Marcus, Priya, Hank, Sarah, Janelle — thanks for the time. Before we open the platform, I want to be clear about what ThreatCaptain is and what it isn't. ThreatCaptain is not a cybersecurity product. We don't sell security to your portfolio brands' clients — Crown Tech does that, Bayside does that, Magnolia does that. ThreatCaptain is the platform that helps your 28 brands sell more cybersecurity to their own clients, with a unified methodology, with portfolio-level visibility, and at margins your CFO can defend at a board meeting. So this isn't a pitch about cyber. It's a conversation about your platform thesis.

Phase 2 · Discovery: Sharpen the Pain (5 min)

Solei Dyment · Chief Growth Officer

Marcus, before I show you anything — give me your worst-attach brand. Which one of the 28 hurts the most?

Marcus Bellamy · CEO

Crown Tech in Denver. Twenty-two employees, dental and orthodontic vertical, 60 SMB clients. Their attach rate is 6%. They should be at 50%. The CEO — Allison Park — is great at IT but she's allergic to the security conversation.

Solei Dyment · Chief Growth Officer

And your best?

Marcus Bellamy · CEO

Bayside IT — my old company. Bay Area, 16 employees. Hector Sandoval runs it now. Attach rate 47%. He sells security like he was born to it.

Solei Dyment · Chief Growth Officer

So your delta is 41 points between Bayside and Crown. What if you could move Crown halfway there in 90 days? What's that worth in your model?

Priya Ramaswamy · CFO

Crown's gross security MRR today is about $2,800. At 30% attach it'd be $14,000 a month. Times 60 brands of similar profile — call it 22 of the 28 are in Crown's range — and we're talking $140,000 MRR uplift across that segment alone. Annualized it's $1.7M. EBITDA implication, before the AI credit cost, is north of $1.1M.

Priya does this math without a calculator. Solei watches Hank lean forward in his Zoom tile. The pain is now sharp on screen.

Phase 3 · Show the Platform Solving That Pain (15 min)

Solei Dyment · Chief Growth Officer

Crown Tech is the one we're going to demo on, live. I'm going to load Crown's profile and one of their actual clients — Brightline Pediatric Dentistry, in Aurora — and run the Risk Likelihood Simulator. Hank, this is for you specifically.

Brightline expected loss

$1.94M

Insurance Health Score

380 / 850

Shield %

11%

Attack success likelihood

89%

Solei Dyment · Chief Growth Officer

Now I'm layering in the security stack Crown Tech would deploy as their full security tier. Endpoint and EDR — Shield 11% to 39%. Email security — to 56%. Backup with tested restore — recovery time crashes from twelve days to thirty hours. vCISO services and BOATS-aligned IR plan — Shield to 94%, recovery time under twenty-four hours. Final state: expected loss drops from $1.94M to $32,000. Attack success likelihood drops from 89% to 6%. Insurance Health Score moves from 380 to 770. We can bring that $1.94M with an 89% attack success likelihood down to $32,000 with a 6% attack success likelihood for $1,950 a month. That's the conversation Allison Park's team would walk Brightline's owner through.

Solei Dyment · Chief Growth Officer

Now here's what changes for Marcus and Priya specifically. I'm rolling Crown's view up to Admiral View. This is the portfolio dashboard your CFO has wanted for two years.

Sean takes the screen. Admiral View renders the 28 Tideline brands in a single grid — Bayside at 47% attach, Crown at 6%, the other 26 in between. Each brand expandable to show pipeline by stage, average deal value, IHS across their book.

Priya Ramaswamy · CFO

This is the view I've been trying to build in Excel for fourteen months and never got right.

Adam Anderson · CEO / CTO

And the platform produces this in real time. Every brand on the same methodology. Every deal framed in the same financial language. Your portfolio has been operating as 28 separate playbooks. Admiral View collapses it to one.

Demo dependency · Admiral View v0.4

Live cross-tenant data is scripted for the demo. Admiral View v1.0 with full live multi-tenant rollup ships September 2026 per the special-promise schedule. This must be in the contract.

Phase 4 · Decision (10 min)

Solei Dyment · Chief Growth Officer

Marcus, what would have to be true for you to sign?

Marcus Bellamy · CEO

Three things. SOC 2 attestation we can show Hank's risk committee. The phased rollout — I won't bring all 28 brands on day one, that's too much change at once. And a board memo with the unit economics that Hank can take to the Eastpoint partnership.

Solei Dyment · Chief Growth Officer

All three are doable. SOC 2 Type I by July 2026 — Scott is leading the effort. Phased rollout in three cohorts of 10/10/8 across July, August, September — Kerry will own the calendar. Board memo — Brad and Adam already drafted it, you'll have it Monday.

Marcus Bellamy · CEO

Set up the next meeting. I want pricing on the table by next Friday.

Beat

#14Demo emphasis matches audience

Solei's emphasis throughout was the EBITDA roll-up and the single-methodology platform thesis — exactly the audience match the 1.8 SOP describes for a PE-rollup whale. Had Tideline been a franchise group (Type 3), the emphasis would have been per-location franchisee profitability. Had it been a buying consortium, member value. Had it been a large standalone, deal velocity. The audience-match rule isn't optional.

Loading…

Add your name to post

PreviousSharpening the Vision into a Deal NextCompliance Review