Private Product Preview
Security evidence, control posture, and priorities in one decision view.
Theodolite™ connects supported Azure, AWS, and SharePoint evidence with access context, control implementation, and top priorities. Scan-derived findings stay customer-side. Financial reference data is kept separate from finding-level evidence.
-
15 years as CSO at Silicon Valley Bank (2007–2021), the bank of the innovation economy
-
$200B+ in assets defended at enterprise scale
-
Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium
-
Author of Cyber War and Peace; board member, Bay Area CSO Council
-
Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards
-
15 years as CSO at Silicon Valley Bank (2007–2021), the bank of the innovation economy
-
$200B+ in assets defended at enterprise scale
-
Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium
-
Author of Cyber War and Peace; board member, Bay Area CSO Council
-
Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards
-
15 years as CSO at Silicon Valley Bank (2007–2021), the bank of the innovation economy
-
$200B+ in assets defended at enterprise scale
-
Design partner to Palo Alto Networks, Zscaler, CrowdStrike, FireEye, and Eclypsium
-
Author of Cyber War and Peace; board member, Bay Area CSO Council
-
Trusted advisor to PE/VC firms, cyber product companies, and enterprise boards
The Dashboard
One view. Evidence, posture, and financial context.
Control implementation, environment evidence, and top priorities sit alongside an IRIS 2025 reference-class financial risk baseline for the organization’s revenue band.
209
CIS Controls v8 and cyber due-diligence questions
3
Verified source families: Azure, AWS, and SharePoint
Zero
Scan-derived findings persisted in the central control plane
Capabilities
What Theodolite does
Four layers in the current private preview, each tied to traceable evidence and an explicit boundary.
-
Evidence
Keep scan findings customer-side
The Azure- or AWS-deployed scanner stores scan-derived findings in customer-side PostgreSQL. The vCSO.ai control plane relays results in memory and does not persist them centrally.
-
Reach
Connect configuration, access, and data
Bring supported Azure and AWS evidence together with SharePoint observations to surface public resources, sensitive indicators, over-permissioned identities, external access, and blast radius.
-
Controls
Ground assessments in evidence
Use scan evidence to answer 209 assessment questions: 153 CIS Controls v8 questions and 56 cyber due-diligence questions, with the supporting observations kept alongside the result.
-
Priorities
Separate findings from financial context
Top priorities are ranked from severity, evidence, affected scope, and effort. The IRIS 2025 revenue-band baseline is shown separately and is never presented as a dollar value for an individual finding.
Use Cases
Built for evidence-heavy security decisions
Theodolite is being shaped around the points where security evidence has to survive operator review, executive scrutiny, or transaction pressure.
- Strategic Oversight
Maintain an evidence-backed posture view
Bring supported environment observations, access context, control implementation, and unresolved priorities into one working view for operator review.
- Cyber Risk Assessment
Structure an operator-led assessment
Use the evidence-backed question set and observed environment context to organize what is implemented, what remains uncertain, and what deserves attention first.
- M&A Due Diligence
Support diligence with traceable evidence
Organize supported technical observations and cyber due-diligence answers so operators can challenge gaps and translate the result for the transaction team.
Product Principle
Evidence first. Dollar claims last.
Theodolite separates what the environment says from what reference data says. Findings trace to supported source observations. Control implementation traces to the evidence behind each answer. Financial context is labeled with its IRIS 2025 source class and revenue-band basis.
That separation matters. A firmographic baseline is not a measurement of the scanned environment and does not improve when a finding is closed. Theodolite does not assign per-finding dollar values or promise projected savings that the evidence cannot support.
Companion tool: the Value to Customer (VTC) Calculator — a custom, Monte Carlo–modeled ROI calculator that quantifies your security product’s value to enterprise buyers in defensible dollars. Built with Hubbard Decision Research.
Customer-side finding storage
Scan-derived findings remain in customer-side PostgreSQL. The central control plane relays them in memory without persisting them.
Evidence-backed control assessment
Scan evidence supports answers across 153 CIS Controls v8 questions and 56 cyber due-diligence questions.
Explicit financial provenance
The reference class, revenue band, and model limitations stay visible so financial context is not mistaken for measured exposure.
FAQ
Questions buyers ask about Theodolite.
What is Theodolite?
Theodolite is a security evidence and decision platform in private development. It brings supported cloud and SaaS observations, access and data reach, control implementation, and priority findings into one view for operator review.
Which data sources does Theodolite currently support?
The current verified source lineup is Azure, AWS through S3 and Prowler evidence, and SharePoint. The platform does not currently market GCP, Oracle Cloud, or vulnerability-tool imports such as Nessus, Qualys, or OpenVAS as supported capabilities.
Where are customer scan findings stored?
Scan-derived findings are stored in customer-side PostgreSQL. Results transit the vCSO.ai control plane in memory over HTTPS so the application can display them, but the control plane does not persist those findings centrally.
How does the financial risk baseline work?
The dashboard shows firmographic reference context from IRIS 2025 for the organization’s revenue band. It is not calculated from the scanned environment, does not measure control effectiveness, and does not change when a finding is closed. It should be read as a reference range with disclosed model assumptions, not as a customer-specific loss forecast.
Does Theodolite assign dollar values to individual findings?
No. Theodolite does not claim a dollar value or projected savings amount for an individual finding, identity, or remediation. Findings are prioritized using evidence, severity, affected scope, and effort. Financial reference context is presented separately.
How can I evaluate Theodolite?
Theodolite is currently in private development rather than general self-service availability. Security leaders and prospective design partners can request a product briefing to review the current workflow, evidence boundaries, and fit for a real assessment or diligence use case.
Help shape Theodolite around a real security decision.
Theodolite is in private development. Request a product briefing to review the current workflow, its evidence boundaries, and whether your environment or assessment is a useful design-partner fit.
