How can Expel enhance its Threat Hunting service to provide more actionable insights for clients?

Introduction

To enhance Expel's Threat Hunting service and provide more actionable insights for clients, we need to dive deep into the current offering, user needs, and market dynamics. I'll approach this challenge by first clarifying key aspects of the product, then analyzing user segments and pain points, before proposing and evaluating potential solutions. Let's begin with some critical questions to ensure we're aligned on the context and objectives.

Step 1

Clarifying Questions (5 mins)

• Looking at Expel's position in the cybersecurity market, I'm thinking they might be facing increased competition from both established players and innovative startups. Could you help me understand where Expel stands in the competitive landscape and what unique value proposition they currently offer in their Threat Hunting service?

Why it matters: Determines if we need to focus on differentiation or doubling down on existing strengths. Expected answer: Expel is a mid-tier player with a strong reputation for automation but facing pressure from AI-driven newcomers. Impact on approach: Would emphasize leveraging Expel's automation capabilities while incorporating cutting-edge AI to stay ahead.

• Considering the evolving nature of cyber threats, I'm curious about the current effectiveness of Expel's Threat Hunting service. Can you share any metrics on threat detection rates, false positives, or client satisfaction scores that might indicate areas for improvement?

Why it matters: Helps identify specific performance gaps to address in our solution. Expected answer: Good detection rates but high false positives and moderate client satisfaction due to alert fatigue. Impact on approach: Would focus on reducing false positives and improving the quality of insights to boost client satisfaction.

• Given the critical nature of threat hunting in cybersecurity, I'm wondering about the primary user personas interacting with Expel's service. Could you describe the key stakeholders on the client side who engage with the Threat Hunting service, their roles, and their primary objectives?

Why it matters: Ensures our solution addresses the needs of the most important users. Expected answer: Primary users are SOC analysts and CISOs, with different needs for operational vs. strategic insights. Impact on approach: Would tailor solutions to provide both detailed operational data and high-level strategic insights.

• Thinking about the product lifecycle, I'm curious where Expel's Threat Hunting service stands. Can you share information on how long it's been in the market, its current growth rate, and any recent major feature additions or changes?

Why it matters: Helps determine if we should focus on refining existing features or introducing new capabilities. Expected answer: Service has been in market for 3 years, experiencing slowing growth, with no major updates in the past year. Impact on approach: Would lean towards introducing innovative new features to reignite growth and differentiate from competitors.