Fragment 22-A & 22-B — Confidential Case Study

How one engagement closed 3 F500 contracts in six months

A Series A security startup had a proven product and three reference customers. Then a Fortune 100 reorg killed their biggest pipeline deal. They came to us with a shortened runway and a question: fix the story, or fix the product?

Company Series A, Cloud Security
Stage at engagement Series A — $12M raised
Duration 6 months
Outcome 3 F500 wins

The product worked. The positioning didn't.

The company had built something technically differentiated — a runtime cloud security posture tool that genuinely reduced alert noise by 73% in their three reference accounts. Their NPS from those customers was 71.

But their outbound was a list of features. "We do CSPM but with AI." "We auto-remediate." "We integrate with your SIEM." Every email read like a feature dump from a product manager, not a letter from a trusted advisor. CISOs deleted them.

"We had 11 proof points in the deck. The CISO had read the first three and decided we were another compliance checkbox. I didn't know how to argue with a first impression."
— Founder, CEO

The competitor they kept losing to wasn't technically better. They had a narrative: "Eliminate alert fatigue, protect your crown jewels." That narrative gave a CISO a reason to listen. Our client had a feature matrix.

Three phases. No fluff.

We structured the engagement the way we structure every one: diagnostic first, then framework, then go-to-market alignment. We don't do slides. We do decisions.

Phase 01 — Diagnostic
Loss audit and reframe
We pulled the last six losing deals — call transcripts, emails, the whole thing. Not to blame the team, but to find the pattern. The pattern was always the same: the technical evaluation went fine, the business case never landed. We weren't selling to the security operator. We were selling to the business risk owner. The messaging treated them as the same person.
Phase 02 — Framework
The CISO scorecard
We built a positioning framework around the CISO's actual job: reducing business risk from cloud infrastructure, without adding operational overhead. We reframed the product from "a tool" to "a capability layer" — one that translated technical signal into board-level risk language. We rewrote the homepage, the outbound sequence, and the pitch deck. Not the product. The story.
Phase 03 — Alignment
Account strategy and proof orchestration
We built account plans for the three F500 targets in the pipeline. We rewrote the security committee presentation from scratch — same data, different story. We coached the AE on how to open a CISO conversation that wasn't a product demo. The three deals that closed in six months all started with a 30-minute conversation where we helped the CISO articulate a board-level risk question they'd been trying to answer for a year.

Six months later

The same pipeline. The same product. The same team. Three F500 contracts signed within the same fiscal year. Combined ARR uplift: not disclosed, but the founder called it "transformative for the Series B narrative."

3
F500 contracts closed
6mo
from reframe to first close
1
founder sleep better

Two years of sales motion, restructured in one positioning engagement

A Series B AI-native security platform burned through 18 months and $22M in venture capital with a go-to-market motion that generated demos but not closes. Their buyer was a CISO evaluating AI security posture tools — a buyer archetype with no established category language, evaluating a wave of 2022–2024 LLM rollouts. Their messaging read like a feature checklist; every outbound reached a technical contact but never broke into the security leadership conversation where budget decisions live. The positioning engagement restructured the sales narrative around the CISO's actual evaluation criteria, rebuilt account-tier segmentation, and reframed the product around one board-level outcome: whether the tool shortened the time between a critical finding and a resolved incident. Six months after the reframe, the same pipeline produced two Fortune 100 Enterprise agreements — one previously lost to a legacy player, one net-new.

2
Fortune 100 Enterprise deals
18mo
to first Enterprise close after reframe
$22M
AR for $3.2M ACV expansion

The product works.
The story should too.

This isn't an anomaly. It's the consistent output of a deliberate positioning process. If you're selling to security operators and losing to vendors with worse products but better narratives — that's the fix we make.

Apply for a Teardown →
Not sure if you're ready? Take the Positioning Gap Diagnostic →
← Back to PositionOS