ASAwake Security Financial Model
Hardware/Deep-tech Startup Financials (Free Excel Download)
Awake Security - AI-driven Network Detection & Response (NDR) platform for the hybrid cloud, positioning as the "intent detection" layer of the SOC visibility triad.
professionals from Deloitte
Used by professionals from
About this model
Awake Security provides AI-driven network detection and response for hybrid-cloud security teams. Its intent-detection platform gives enterprise security operations centres visibility into network behaviour, helping analysts identify suspicious activity that can be difficult to find through conventional rule-based monitoring.
The product is sold into enterprise SOC workflows, where buyer trust, deployment scale, and integration with existing security tooling matter. Its economics therefore resemble enterprise software with a usage component: customers contract for a platform, then generate data volumes and expand coverage as more network environments are monitored.
Model enterprise logos, initial contract value, monitored data volume, deployment, module adoption, expansion, renewals, and churn. Include sales engineering, security research, customer success, cloud processing, and support costs. Win rate, data usage, expansion, pricing, gross margin, and net retention should determine scenarios.
A turnkey financial model
Live formulas, no hardcoded values
Outputs are driven by live formulas, so the workbook updates from its assumptions instead of relying on hardcoded results.
All assumptions in one tab
Inputs are clearly marked in the Assumptions tab and separated from calculations, making it clear what to change and what to leave intact.
Statements always balancing
For integrated-statement models, the balance sheet, cash flow, and supporting schedules tie through properly.
Distinct schedules for clarity
Debt, working capital, taxes, and cash flow can get messy quickly. We group calculations in clear schedules, not across disconnected tabs.
No hidden macros or external links
There are no unexplained external workbook links or macros to undermine auditability or portability.
Changes flow through the model
Update a key driver and see the impact carry through the forecast, financing, and return outputs. We never use hardcoded numbers in formulas.
About Awake Security
awakesecurity.com
How to build a detailed financial model for Awake Security
A complete walkthrough of the business, drivers, and assumptions behind the downloadable Awake Security model - distilled from its pitch deck and publicly available information.
Product & value proposition
- Network Detection & Response (NDR) platform called "Awake Security Platform."
- Three components: Awake Sensors (on-premise / cloud), Awake Nucleus (cloud or on-premise analytics core), and Ava (autonomous expert system / AI triage engine).
- Core claim: reduces time, cost, and risk of security operations by converting raw network alerts into actionable "answers" without manual triage.
- Proprietary IP: patented Ava (autonomous triage), EntityIQ (device profiling), and Adversarial Modeling (intent detection).
- Covers unmanaged devices, IoT, OT, SaaS, IaaS, PaaS - segments that endpoint agents cannot reach.
- Positioned at the "predictive / intent detection" tier of the maturity curve, above legacy IDS/anomaly/behavioral tools.
Market
- TAM - Information Security overall: $121B (2019) → $182B (2024); 8.3% CAGR.
- SAM - Network Detection & Response segment: $1.9B (2019) → $3.8B (2024); 14.1% CAGR.
- SOM - Not in deck explicitly. Slide 19 frames a "$8.9B across 27,500 enterprises" addressable pool (enterprises with revenue >$500M globally: 27,500 companies). Per-tier ASP and per-tier revenue contribution are redacted ($XB / $X ASP).
- Comparable public company valuations: Palo Alto Networks $20B, CrowdStrike $13B, Proofpoint $6B; average pure-play security public company market cap $6B (27 companies).
Revenue model
- Subscription/PaaS model: customers buy Awake Sensors + Nucleus as a platform subscription.
- Deployment is sold by sensor count and throughput (e.g., "XXX Awake Sensors and Nucleus // 60 Gbps" for a Fortune 100 customer).
- Deal sizes observed: 6-figures (Cisco displacement), high 6-figures (retail Fortune 200 renewal/expand; Oil & Gas Fortune 500; Darktrace displacement), and 7-figures (RSA Netwitness displacement Fortune 100).
- All specific ASP values per customer tier are redacted in slide 19.
- Land-and-expand motion: initial sensor deployment → renewal → expansion of sensors/use cases/locations.
- Managed NDR offered as an add-on (noted as differentiator vs. Darktrace, slide 17).
- Go-to-market: direct enterprise sales (VP Sales in exec team); greenfield and displacement opportunities cited.
Traction & metrics
- 65 employees.
- Raised: Series A (Greylock), Series B (Bain Capital Ventures + Greylock). Raising $30M.
- Awards: RSA Conference Finalist Most Innovative Security Company 2018; Business Insider 30 Hottest Security Startups; ETR+ #1 security solution in the Global 1000.
- Customer traction described qualitatively as "strong"; specific customer names, count, and ARR are fully redacted (slides 6, 14–18, 20).
- Deal size evidence (redacted amounts): Fortune 100 media (7-figure), Fortune 200 retail (high 6-figure renewal/expand), Fortune 500 Oil & Gas (high 6-figure), high-tech company (high 6-figure), finance company (6-figure).
- Detailed financial metrics/forecasts explicitly withheld: slide 20 is a section divider reading "REDACTED DETAILED FINANCIAL METRICS, FORECASTS ETC.".
- No ARR, revenue growth rate, gross margin, churn, or NRR figures disclosed.
Competition / moat
- Direct competitors displaced in case studies: RSA Netwitness, Darktrace, Cisco Stealthwatch.
- Also competes with: SIEM/UEBA (Splunk, IBM, Exabeam) and EDR (Cylance, Carbon Black).
- Competitive moat claims:
- Patented Ava (autonomous triage), EntityIQ (device fingerprinting), Adversarial Modeling (intent detection).
- Immediate time-to-value vs. legacy SIEM (no lengthy tuning period).
- Platform covers unmanaged/IoT/OT devices that EDR cannot reach.
- PaaS approach: consolidates multiple network security tools into one platform.
- Greenfield displacement cited: Cisco, RSA, Darktrace all present as takeaway targets.
Team & funding ask / use of funds
- CEO: Rahul Kashyap; Chief Architect: Keith Amidon; Chief Scientist: Gary Golomb; Chief Data Scientist: Debabrata Dash; VP Product: Rajdeep Wadhwa; VP Engineering: Jeffrey Wang; VP Sales: Randy Cheek; VP Marketing: Rudolph Araujo.
- Board / advisors: Asheem Chandna (Greylock, Palo Alto Networks founding board); Sarah Guo (Greylock, fmr. board Demisto); Kevin Mandia (Founder Mandiant, CEO FireEye); Enrique Salem (fmr. CEO Symantec, Bain Capital Ventures).
- Team pedigree companies: ArcSight, Big Switch, Bromium, Cisco, Cylance, Darktrace, E8 Security, Foundstone, FireEye, HP, McAfee, NetWitness, Symantec, SS8, VMware.
- Funding ask: $30M.
Recommended financial model
- Archetype + why: Enterprise SaaS/PaaS ARR model with a seat/sensor-based expansion layer. The business is subscription-driven (recurring platform fee per sensor deployment), has land-and-expand dynamics, and targets Fortune 500/Global 2000 enterprises - classic enterprise SaaS ARR mechanics apply. A hardware sensor COGS layer is needed on top of a standard SaaS P&L because physical sensors are shipped to customers.
- Forecast horizon & granularity: 5-year annual model (2020–2025) with monthly detail for Year 1–2 given the $30M raise and likely near-term burn focus. Quarterly thereafter.
- Key drivers & assumptions:
- New logos per year
- Average sensors per deployment
- Average Contract Value (ACV) by customer tier:
- Tier 1 (revenue >$10B, ~1,200 enterprises):
- Tier 2 (revenue $1B–$10B, ~10,800 enterprises):
- Tier 3 (revenue $500M–$1B, ~15,500 enterprises):
- Total addressable pool cited as $8.9B across 27,500 enterprises; per-tier allocation redacted
- Net Revenue Retention / expand rate
- Gross churn
- Blended gross margin
- Sales headcount ramp
- CAC / Sales cycle
- R&D as % of revenue
- G&A
- Cash burn / runway
- Scenarios (Base / Bull / Bear - which variables flex):
- Bull: logo growth 40/yr, NRR 130%, faster tier-1 penetration
- Base: logo growth 25/yr, NRR 120%, balanced tier mix
- Bear: logo growth 15/yr, NRR 110%, longer sales cycles / macro slowdown
- Primary flex variables: new logos, ACV by tier, NRR, and gross margin (sensor hardware cost volatility)
- Required sheets / outputs:
- Assumptions (all drivers in one place)
- ARR Bridge (new logo ARR, expansion ARR, churn, ending ARR)
- P&L (Revenue, COGS, Gross Profit, S&M, R&D, G&A, EBITDA, Net Loss)
- Headcount Plan (by department; feeds S&M, R&D, G&A)
- Cash Flow & Runway (given $30M raise; monthly burn, months to next raise)
- Unit Economics summary (blended ACV, CAC, LTV, LTV/CAC, payback period)
- Market Penetration (logos as % of 27,500-enterprise TAM)
- Dashboard / KPI summary
Frequently asked
Is the Awake Security financial model free?+
Yes. The Awake Security model is a free Excel (.xlsx) download with live formulas. Sign up with your email and the workbook is yours to keep, review, and edit.
What's included in the model?+
A 5-year monthly forecast with P&L, cash flow and runway, valuation (exit multiple plus a DCF cross-check), MOIC/IRR returns, and unit economics, with live formulas throughout.
How was this model built?+
It was built from Awake Security's pitch deck and publicly available information, then structured to investment-banking standards as a fully editable Excel model.
Can I change the assumptions?+
Yes. You can change assumptions and the live formulas will recalculate in the downloadable Excel model.
Have more financial modelling questions? Contact us
Created by ex-finance professionals
Hey, I’m Alex and I created Finamodel.
Over my years in the finance industry I kept building the same models over and over again. Same structure, same assumptions, different logo. So I started building frameworks to turn them into clean, reusable templates.
Every model here is one I’d actually use for a client, and I personally vet each one before it goes up.
I’m not an expert in every industry, but I’ve built enough models to know what belongs in one. And when something is completely foreign to me, I reach out to my network for experts to work on our models with us.
Having a template library on hand cuts a first build from hours to minutes.
Need help finding your model? You’ll find me in the Finamodel app!
Other Hardware/Deep-tech Startup Financial Models
Browse another startup in the same category.
ANYbotics
ANYbotics builds and sells autonomous legged inspection robots (ANYmal) for industrial facilities, targeting oil & gas, chemicals, power, offshore, mining, and manufacturing sectors.
Beem
AR communications platform that overlays full-body "hologram" video of a person into the recipient's physical space via smartphone or web.
Blue White Robotics
Autonomous robotics platform converting existing farm equipment to self-driving tractors for permanent-crop growers, sold as Robots-as-a-Service.
Cambridge GaN Devices
Fabless semiconductor startup commercialising self-protected GaN power transistors (HiGaN) that replace silicon and standard GaN with higher efficiency and no external protection circuitry.
Canix
Cannabis-focused ERP (inventory tracking, compliance automation, sales management, yield forecasting) sold as SaaS to cannabis cultivators, manufacturers, and distributors.
Chobani
Chobani is the US market leader in Greek yogurt; TPG invested $671M in April 2014 for a 35% stake via a structured second lien + equity deal
Cipher Skin
Wearable sensor mesh platform that collects dense multi-modal data from human bodies and industrial objects to predict structural and functional failure before it occurs.
Citylitics
B2B SaaS intelligence platform that aggregates and curates public-sector infrastructure procurement data for private-sector vendors, suppliers, and consultants.
