Aegis / Trailhead Marketplace - Renewal Confirmation

It really is. And honestly I'll say upfront — we're in a good place. Like, I don't think this is going to be a contentious conversation at all.

+1Isaac says the relationship is in a good place and the conversation won't be contentious. · other

Before we get into the numbers and the terms, Isaac, do you mind if we just do a quick — like, a quick check-in on how things have been running on your end? Just so we're all on the same page.

Yeah, totally. That's actually a good place to start. So, um, we've been running Protect and Detect for about fourteen months now, and overall — I mean overall the experience has been solid. Recovery drills have been going smoothly, the backup cadence is working well for our inventory systems.

+1Reports solid experience with Protect and Detect over 14 months. · service reliability

That's great to hear on Protect. And how about Detect day to day?

Detect has been — yeah, mostly really good. I do want to bring up the March situation though, just because, you know, I'd be leaving something out if I didn't.

+1Says Detect has been mostly really good, though then raises the March issue. · service reliability

Please, yeah, go ahead. We want to hear your perspective on it.

So the outage — mid-March, we lost visibility for, what, six hours? That was... not a great day for my team. We were heading into a promotional weekend, you know retail, and we were essentially flying blind on threat monitoring for a chunk of that Friday.

-1Describes the six-hour outage as not a great day and flying blind during a promotional weekend. · service reliability

Yeah, and I completely understand that, Isaac. That was a bad one on our end and I'm not going to sugarcoat it. The root cause was a single point of failure in the event ingestion pipeline — it cascaded in a way we didn't anticipate.

Right, yeah, you sent over the post-mortem and I appreciated the transparency there, actually. That doc was thorough.

+1Appreciates the transparency and thoroughness of the post-mortem. · support experience

We wanted to be really clear about what happened and what we did to fix it. So we've since rolled out redundant processing nodes and we put in a circuit breaker pattern so that if one part of the ingestion layer starts degrading, it fails over gracefully rather than taking everything down.

Yeah, and we've actually — my team noticed the improvement. Like since those changes went in, um, we've been keeping a closer eye on the dashboards and it's been rock solid. So the follow-through mattered.

+1Notes his team noticed the improvement and that follow-through mattered. · support experience

So you're currently on Protect and Detect. We're proposing a renewal of both of those, same tier, with a three percent uplift which is honestly below our standard rate increase — and I'll explain why in a second. But the bigger thing is, we want to talk to you about adding Aegis Comply.

Oh interesting. We've looked at Comply before and kind of put it on the back burner. What's changed?

So Comply v2 is launching in literally two days — April seventh — and it's a pretty significant upgrade. On-demand reporting for SOC 2, PCI DSS, HIPAA, ISO 27001. All from a single dashboard. And for retail, PCI DSS in particular, that's—

That's actually huge. Yeah. We go through PCI audits every year and honestly it's — it's a lift. Our compliance team basically lives in spreadsheets for like six weeks.

+1Calls the on-demand PCI DSS reporting 'huge' for their annual audit lift. · compliance reporting

That's exactly the problem it's designed to solve. You can pull a PCI DSS report on demand, it maps your controls automatically from what we're already seeing across your environment, and it generates the audit-ready documentation. So you're not starting from scratch every time.

Okay, yeah, that — I mean that sounds genuinely useful. Is this, uh, is this GA on the seventh or is it still like a limited release thing?

+1Says Comply v2 sounds genuinely useful. · product capability

Full GA. All customers. And because you're renewing right around the launch, we can actually get you in on a promotional add-on rate. Chris, do you want to touch on the technical onboarding side?

Yeah, so from an infrastructure standpoint, Isaac, since we already have Detect running in your environment, the Comply module actually hooks in through the same agent. There's no new software to deploy — it's basically a config change on our end and you flip on the Comply features from the dashboard. Onboarding should be pretty lightweight.

Oh, that's — that's a relief actually. Because every time I hear 'new module' I'm thinking new agents, new firewall rules, new tickets to my security team. So that's good to know.

+1Expresses relief that Comply requires no new agents or firewall rules. · onboarding and implementation

Yeah, we designed it that way intentionally. The integration lift for existing Detect customers is minimal.

Okay so — and I'm just thinking out loud here — our next PCI audit cycle starts in, I want to say, late July. So if we're up and running on Comply by May, we'd have a couple months to actually get familiar with it before the audit crunch.

That's a great timeline actually. And we could do a guided walkthrough with your compliance team in the first couple of weeks — just to make sure they know how to pull the reports, configure the frameworks, that kind of thing.

Yeah, they would love that. Honestly my compliance team lead, she's been asking about automated reporting tools for a while. This is going to make her very happy.

+1Says the compliance team lead will be very happy about automated reporting tools. · compliance reporting

No kidding. Okay so let me ask about pricing. You said promotional rate for Comply — what are we looking at?

So the standard Comply add-on at your environment size is, um, I want to say it's around twenty-two thousand annually. For renewing customers at launch we're doing eighteen five. And that's locked in for the full two-year term we're proposing.

Two year term. Okay. And the Protect and Detect renewal — that's also a two year?

Yes, and that's actually where the three percent uplift becomes a better deal than it sounds — because we're locking your rate for two years, so even if we adjust pricing next year you're not affected.

That's worth something. Yeah. I mean I'd have to run it through our procurement process formally but — and I'll be honest with you Rachel — I don't see any blockers. The numbers feel reasonable and I'm going to advocate for this internally.

+2Isaac sees no blockers, calls the numbers reasonable, and commits to advocating internally. · pricing and billing

That's great to hear. And if it helps, I can put together a one-pager that you can use with procurement — business case, ROI framing around the compliance time savings, all of that.

Consider it done. I'll have something over to you by end of week. And Isaac, we're really glad you're staying with us. Like genuinely — Trailhead has been a great partner and we want to keep building on this.

Yep, I'll get contracts looped in this week. Target to have everything signed before the end of April so we can get Comply activated right at launch or shortly after.

Works for me. And Chris — let's plan a technical call maybe the week after we sign? Just to walk through the Comply onboarding with my infrastructure team.

Absolutely, I'll make myself available. Just shoot me a calendar invite and we'll make it happen.