# Tromzo Financial Model Developer-first Application Security Management Platform that consolidates security tooling, automates prioritization and remediation workflows, and embeds security into CI/CD pipelines. [DECK slide 1, 9] - Canonical: https://finamodel.com/startups/tromzo - Excel download: https://finamodel.com/startup-models/tromzo.xlsx - Category: Media/Gaming - Model type: SaaS ARR / Valuation - Funding round: Seed - Funding: $3M - Founded: 2021 - Geography: US (customer logos are US-headquartered: NextRoll, Druva, Acoustic) [DECK slide 15] - Customer: B2B ## About the company Tromzo is an application-security platform that connects scanning tools such as Snyk, Aqua, Tenable, and Bugcrowd with developer workflows including GitHub, GitLab, CI/CD tools, and cloud infrastructure. Its analytics, prioritisation, automation, notification, business-context, and intelligence modules centralise risk and route remediation work. The proposition addresses slow, noisy legacy AppSec processes by giving CISOs, security leaders, and developers total asset visibility, continuous policies, and no-code remediation playbooks. Revenue is enterprise SaaS, likely annual and priced by developer seats, applications, or assets, with possible onboarding services for integration-heavy deployments. NextRoll, Druva, and Acoustic are named reference customers, but the research gives no ARR, customer count, growth, churn, or retention figures. The model should forecast logos, contract value, expansion, scanner and workflow integrations, cloud delivery, professional services, sales capacity, and gross margin rather than use generic compliance-project revenue. ## What's included - 5-year monthly revenue build with stage-appropriate growth assumptions - Full P&L, headcount plan, and operating-expense schedule - Cash-flow statement, runway, and burn-rate tracking - Valuation via exit multiple with a DCF cross-check - Returns analysis with MOIC and IRR - Unit economics including CAC, LTV, payback, and cohort retention ## Product & value proposition Platform that sits between security scanning tools (Snyk, Aqua, Tenable, Netsparker, Bugcrowd) and developer workflows (GitHub, GitLab, CircleCI, Jenkins, AWS/GCP/Azure). Core modules: Analytics Engine, No-Code Automation, Prioritization Engine, Notification Engine, Business Context, Security Intelligence, AppSec Data Platform. Three capability pillars: - Total Visibility - unified risk view of all software assets - Continuous Security - adaptive security policies & CI/CD guardrails - Workflow Automation - playbooks for automated testing, prioritization & remediation Target buyers: CISOs, AppSec leads, VP Security. End users: developers (shift-left). Pain addressed: legacy AppSec is too slow (weeks/months), produces too much noise, and requires manual processes that stall developer velocity. ## Revenue model - SaaS subscription, likely seat-based or asset-based (per application / per developer seat) - standard for AppSec management platforms (e.g., Snyk, Veracode) - Annual contracts, direct enterprise sales motion given CISO buyer persona and named enterprise reference customers (NextRoll, Druva, Acoustic) - Possible professional services / onboarding fees given integrations-heavy platform ## Traction & metrics Named reference customers: NextRoll (2 contacts), Druva, Acoustic - at least 3 enterprise logos as of 2021. No revenue, ARR, customer count, growth rate, or retention figures disclosed in deck. ## Competition / moat Competitive context implied but not stated explicitly: - Legacy AppSec tools (SAST/DAST scanners: SonarQube, Aqua, Checkmarx, OWASP) cited as the status quo producing "too much noise" - Moat framed around: developer-first UX, no-code automation, cross-tool aggregation, prioritization engine with business + environmental context - No direct competitor comparison slide in deck ## Team & funding ask / use of funds Founders: - Harshil Parikh - led security at Medallia; AppSec practitioner background - Harshit Chitalia - led engineering at Juniper Networks; developer background Founded early 2021. Investors / advisors: deck mentions "top notch CISOs and Investors" as partners - no names or amounts disclosed. --- ## Recommended financial model - **Archetype + why:** SaaS ARR model. Tromzo is a B2B enterprise SaaS platform with annual contracts, a direct sales motion targeting CISOs/security leads, and a land-and-expand opportunity (more tools integrated → more seats/assets). Standard SaaS ARR waterfall (new ARR, expansion ARR, churn, net revenue retention) is the appropriate archetype. - **Forecast horizon & granularity:** 3 years (2022–2024), monthly for Year 1, quarterly for Years 2–3. Rationale: seed/early-stage company with high uncertainty; monthly granularity needed to track cash runway in Year 1. - **Key drivers & assumptions:** | Driver | Value | | -- | -- | | Starting ARR | $0 (pre-revenue or very early) | | Average contract value (ACV) | $80K–$150K / yr | | New logos / quarter (Y1) | 2–4 | | Sales cycle | 60–90 days | | Net Revenue Retention (NRR) | 110–120% | | Gross churn | 8–12% annually | | Gross margin | 70–75% | | Sales headcount ramp | 1–2 AEs in Y1, 3–5 by Y2 | | Quota per AE (attained) | $400K–$600K ARR | | CAC (blended) | $30K–$60K per logo | | Opex: R&D, S&M, G&A split | 40% / 35% / 25% of revenue | | Burn multiple | 2–4x in Y1 | - **Scenarios (Base / Bull / Bear):** - Flex variables: new logo adds per quarter, ACV, NRR, sales headcount ramp - Bull: faster enterprise adoption (5–6 logos/Q by Y2), ACV expansion, NRR 130%+ - Base: 3–4 logos/Q by Y2, ACV stable, NRR 115% - Bear: slow sales cycle elongation, 1–2 logos/Q, higher churn (15%), ACV compression - **Required sheets / outputs:** 1. Assumptions - all drivers with scenario toggle (Base/Bull/Bear) 2. ARR Waterfall - new ARR, expansion, churn, net new ARR, ending ARR by period 3. Income Statement (P&L) - revenue, COGS, gross profit, operating expenses (R&D, S&M, G&A), EBITDA, net loss 4. Headcount plan - by function (Eng, Sales, CS, G&A) with fully-loaded cost 5. Cash & Runway - opening cash, burn, ending cash, months of runway (requires funding assumption) 6. Unit Economics - CAC, LTV, LTV/CAC, payback period 7. Dashboard - ARR growth, NRR, gross margin, burn rate, runway KPI cards ## Frequently asked questions ### Is the Tromzo financial model free? Yes. The Tromzo model is a free Excel download with live formulas. ### Can I change the assumptions? Yes. The workbook is editable and its live formulas recalculate when assumptions change.