Should Claroty prioritize expanding the compatibility of its Continuous Threat Detection system with more industrial protocols or focus on deepening analysis capabilities for existing supported protocols?

Introduction

The trade-off we're examining today is whether Claroty should prioritize expanding the compatibility of its Continuous Threat Detection system with more industrial protocols or focus on deepening analysis capabilities for existing supported protocols. This decision is crucial for Claroty's product strategy and market positioning in the industrial cybersecurity space.

To address this trade-off, I'll analyze the context, evaluate potential impacts, design an experiment, and provide a data-driven recommendation. My approach will consider both short-term gains and long-term strategic implications for Claroty's product ecosystem.

Step 1

Clarifying Questions (3 minutes)

• Context: I'm thinking Claroty's market position might influence this decision. Could you share our current market share and how it compares to our main competitors?

Why it matters: Helps determine if we need to focus on market expansion or consolidation Expected answer: Claroty has a strong position but faces increasing competition Impact on approach: Would influence whether we prioritize new protocol support or deeper analysis

• Business Context: Based on our revenue model, I assume expanding protocol support could open new market segments. How does our current revenue break down between existing and new customers?

Why it matters: Indicates whether growth is coming from new adoptions or upsells Expected answer: 60% from existing customers, 40% from new acquisitions Impact on approach: Higher new customer percentage might favor protocol expansion

• User Impact: Considering our user segments, I'm curious about the distribution of requests for new protocols versus improved analysis. What feedback are we getting from our top enterprise clients?

Why it matters: Aligns decision with user needs and potential churn risks Expected answer: Mixed feedback, with larger enterprises favoring deeper analysis Impact on approach: Would help balance the trade-off based on user segment priorities

• Technical: Regarding our current architecture, how modular is our system for adding new protocol support versus enhancing existing analysis capabilities?

Why it matters: Assesses the technical feasibility and resource requirements for each option Expected answer: More modular for new protocols, but analysis improvements require core changes Impact on approach: Could influence timeline and resource allocation for each option

• Resource: Thinking about our team structure, how are our engineering resources currently allocated between protocol expansion and analysis depth?

Why it matters: Determines if we have the right skill sets and capacity for either option Expected answer: 70% on analysis, 30% on protocol expansion Impact on approach: Might require team restructuring or hiring for the chosen priority