The Platform

The analytical spine of every vCSO.ai engagement.

Theodolite™ translates board-level cyber risk into dollars — value at risk, annual loss expectancy, and a prioritized remediation plan — in hours, not the weeks consultant teams used to bill. FAIR-based. Operator-built. Every engagement runs on it.

Book a demo

  • 15 years as CSO at Silicon Valley Bank, the bank of the innovation economy

  • $200B+ in assets defended at enterprise scale

  • Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium

  • Author of Cyber War and Peace; board member, Bay Area CSO Council

  • Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards

  • 15 years as CSO at Silicon Valley Bank, the bank of the innovation economy

  • $200B+ in assets defended at enterprise scale

  • Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium

  • Author of Cyber War and Peace; board member, Bay Area CSO Council

  • Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards

  • 15 years as CSO at Silicon Valley Bank, the bank of the innovation economy

  • $200B+ in assets defended at enterprise scale

  • Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium

  • Author of Cyber War and Peace; board member, Bay Area CSO Council

  • Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards

The Dashboard

One view. Risk in dollars.

Annual loss expectancy, 95th-percentile VaR, remediation cost, indicative insurance premium, and a prioritized top-10 remediation plan — all on a single working view a board or deal committee can act on.

Theodolite dashboard showing annual loss expectancy, 95th-percentile VaR, remediation cost, and a prioritized top-10 remediation plan

Weeks → Hours

Consultant analysis compressed by Theodolite

$200B+

Assets defended at enterprise scale by the operator behind the platform

100%

Of vCSO.ai advisory engagements run on Theodolite

Capabilities

What Theodolite does

Four primitives that show up across every engagement — tuned to the audience that has to act on the output.

  1. Exposure

    Quantify value at risk

    Financial loss modeling across your technical surface, compliance posture, and threat landscape. Output in dollars, not severity stars.

  2. Posture

    Map the risk surface

    Theodolite scans technical, policy, and compliance gaps simultaneously — turning weeks of consultant assessment into a working report in hours.

  3. Remediation

    Prioritize the work

    Every finding is scored on business impact and remediation cost so the roadmap leads with the moves that cut the most risk per dollar.

  4. Acceleration

    Turn into deliverables

    Board-ready executive summaries, technical audit reports, and deal-room packets — Theodolite formats output for the audience that needs it.

Use Cases

Powers every vCSO.ai engagement

Theodolite isn’t a standalone tool — it’s the acceleration layer under every practice area we run. Different audiences, same platform.

Why It’s Different

Operators built it for operators.

Most security tools surface findings. Theodolite surfaces decisions. Built by a team that’s spent 15 years on the CSO side of the table, it formats risk the way boards, deal committees, and buyer committees actually consume it — in dollars, in scope, and in timelines that match the meeting you’re walking into.

The result: advisory engagements that move faster, findings that hold up under scrutiny, and a single source of truth across every touchpoint in the vCSO.ai program.

Companion tool: the vTC Calculator — a focused model for pricing the all-in cost of your security posture against fractional-advisory alternatives. Currently in private beta with our Strategic Advisory clients.

Machine speed, operator quality

Same depth a Big Four team would deliver, on a turnaround the deal cycle can absorb. The platform does the heavy lifting; advisors make the judgment calls.

Outcome-formatted output

Board summaries, technical audits, deal memos, buyer briefs — one source of analysis, many audience-ready views.

Private by design

Your data stays inside your perimeter or a segregated workspace. Theodolite is an accelerator, not an aggregator.

See Theodolite applied to your context.

A working demo, paired with a 30-minute conversation about where Theodolite fits your next assessment, product decision, or transaction.

Book a demo
Talk to Nick 30-min intro call →