24 August 2026 · Las Vegas

Port53 Quarterly Business Review
H1 2026

All we do is Wynn.

Port53 · H1 2026 QBRConfidential — Port53 employees only
Agenda
Port53 · H1 2026 QBR
Icebreaker
01

This
or that.

One question each. No wrong answers. Defend your position.

Kyle
Port53 · H1 2026 QBR
Timeline
02

Ten years,
one consistent thread.

Omar
Port53 · H1 2026 QBR
2016
Founding year, and the first two customers.
Port53 · H1 2026 QBR
2017
One year in, a hundred customers.
Port53 · H1 2026 QBR
2018
Sixteen months to the first million.
Port53 · H1 2026 QBR
2019 — 2020
The year everything stopped, but we didn’t.
Port53 · H1 2026 QBR
2020 — 2021
The second thread opens.
Port53 · H1 2026 QBR
2021 — 2022
A second office, and a $10M quarter.
Port53 · H1 2026 QBR
2023
The quiet year was a building year.
Port53 · H1 2026 QBR
2024
Gold, Master Security, and an audit we passed.
Port53 · H1 2026 QBR
2025 — 2026
In January, the third one opened.
Port53 · H1 2026 QBR
All of it

Three phases but one consistent thread

We understand the customer challenges, evolve accordingly, and skate to where the puck is headed.
Port53 · H1 2026 QBR
The pattern

Listening to customers.
Building solutions. Evolving.

2016
Coverage
“Sell us the right tools.”
Umbrella, MFA, endpoint. A reseller is exactly the right shape of company for that.
2020
Sense
“Make the alerts mean something.”
At ransomware speed. That needs analysts and a SOC, not another licence — so we built one.
2026
AI
“Both sides of the fight changed.”
Attackers got faster. And our customers’ own AI became the new thing that needs watching.
Port53 · H1 2026 QBR
All three, forward

Not a pivot.
A third line.

Reselling, managed services, AI-native — three lines, one company, and we are not putting any of them down. The customer’s problem changed first. It always has.

Port53 · H1 2026 QBR
State of the business
03

State of the business

Derek
Port53 · H1 2026 QBR
01 / Port53 overall
Sales by quarter, all time
Q2 2026 sales

Q2 2026 is the biggest quarter in company history Company record

Clears the previous record — Q1 2022, $10,399,133 — by 16%, and it is the first quarter we have ever crossed $10M on recurring-heavy business rather than a one-off spike.

Port53 · H1 2026 QBR
01 / Port53 overall
H1 2026 v. H1 2025

H1 2026 is the largest half in company history, and it beats a half that was itself a record.

Port53 · H1 2026 QBR
01 / Port53 overall
Total sales, new sales, renewals — three halves
Revenue grew 25%. The number of deals grew 7%.
New sales — the part we win from scratch — grew fastest of the three, at 38%.

The growth came from bigger, better deals — not more of them.

Port53 · H1 2026 QBR
01 / Port53 overall
The scorecard — H1 2025 v. H1 2026
MetricH1 2025H1 2026Change

Same motion, larger deals, slightly longer to close. That trade is the half.

Port53 · H1 2026 QBR
01 / Port53 overall
New sales + renewals, by quarter
Renewals of $4.96M in Q2 are the most we have ever booked in a quarter. Company record
New sales of $7.06M are our best since Q2 2022. But not a record: Q1 2022 booked $9.05M.

Renewals are 39% of H1 revenue, and that base now compounds.

Port53 · H1 2026 QBR
02 / How we sold it
Sales by type — H1 2025 v. H1 2026
CSM cross-sell more than doubled, to $7.35M.
Channel went from $14K to $1.27M. Frank has the whole story at 2pm.

Partnership gave back $1.66M — the routes to market shifted rather than shrank.

Port53 · H1 2026 QBR
02 / How we sold it
Opportunity supply v. revenue — three halves
We accepted 25% fewer opportunities than last year.
And sold 25% more.

Every opportunity we took was worth 24% more when it entered, and 65% more by the time it closed.

Port53 · H1 2026 QBR
02 / How we sold it
Meetings set, held, accepted — H1 2025 v. H1 2026

Fewer meetings, and a larger share of them turned into something real — 70.9% accepted, up from 62.0%, and scheduled in 5.8 days instead of 7.1.

Port53 · H1 2026 QBR
02 / How we sold it
Won revenue per accepted opportunity, by source
An outbound meeting is now worth $3.8K — double last year.

Every source except referral got more valuable. The H1 2026 cohort is still closing, so these are floors, not ceilings.

Port53 · H1 2026 QBR
02 / How we sold it
Win rate, all deals v. deals ≥ $10K — three halves
On every accepted opportunity we closed, we won 41.5% — up from 35.8%.
Strip out sub-$10K transactional business and the honest number is 26.4%. Better than H1 2025, still short of H1 2024. The gap between the cuts is partner-loop business under $10K, which we win almost automatically and which grew this half.

We are recovering, not setting a record.

Port53 · H1 2026 QBR
02 / How we sold it
Win rate by motion — H1 2025 v. H1 2026
TypeCount H1 25Count H1 26Dollar H1 25Dollar H1 26
CSM cross-sell now wins 45 cents of every dollar it competes for, up from 33.
Outbound doubled its count win rate while its dollar rate halved — it is winning more deals, and smaller ones.

Channel wins 84% of what it touches — the highest of any motion, on sixteen deals.

Port53 · H1 2026 QBR
03 / Who we sold to
Deals by size band — H1 2025 v. H1 2026
Deals over $100K doubled, from 20 to 40. Most $100K+ deals in any half
But the $200K+ tier barely moved. All the growth is in the $100–200K band — nine deals to twenty-eight. Revenue from that band tripled: $1.30M → $3.76M.

Last year one deal carried the tier. This year it is a habit.

Port53 · H1 2026 QBR
03 / Who we sold to
Concentration + enterprise agreements
MetricH1 2025H1 2026
Our largest single deal is 3.9% of the half, down from 7.3% — less dependent on any one deal than a year ago, even as the average deal got bigger.

Enterprise agreements went from 11 deals to 18, and from 13.4% of sales to 21%.

Port53 · H1 2026 QBR
03 / Who we sold to
New sales by customer headcount
500–999 employees more than doubled.
And 100–499 is still the engine, at 46% of new sales.

The 2,500+ band fell — on three deals, too small a base to read either way.

Port53 · H1 2026 QBR
03 / Who we sold to
Average deal, deal count and growth, by band
BandAverage dealDealsRevenue vs H1 2025
“Trending upmarket” is true in the 500–2,499 range, where a deal is worth three times a 100–499 deal.

It is not yet true above 2,500 employees. Three deals is not a trend.

Port53 · H1 2026 QBR
03 / Who we sold to
Sales by vertical — H1 2025 v. H1 2026
A year ago manufacturing was 27.5% of revenue.
Today no industry is above 12.5%, and nine of our top twelve verticals grew.

We got bigger and less concentrated at the same time.

Port53 · H1 2026 QBR
03 / Who we sold to
Concentration — H1 2025 v. H1 2026

More diversity. Bigger deals across all verticals.

MeasureH1 2025H1 2026

Verticals above $1M went from two to nine.

Port53 · H1 2026 QBR
03 / Who we sold to
Every deal over $190K
OwnerAccountWhat we soldTypeQtrAmount
Thirteen deals, $4.71M combined.

Nine of the thirteen were sourced inside accounts we already had — cross-sell, channel and renewal, not net-new logos.

Port53 · H1 2026 QBR
04 / What we sold
Revenue by product family
Port53 Managed Offerings finished the half at $3.58M — ahead of every Cisco SKU we resell. First time ever

The biggest thing we sell is now something we own. Omar builds on that.

Port53 · H1 2026 QBR
04 / What we sold
Biggest movers against H1 2025
Umbrella, Webex and standalone XDR did not churn — those licences now arrive inside the two suites above. The biggest gains and the biggest loss are one story told twice.
Share of gross product revenue

Cisco point products fell from 55% of revenue to 31% while suites and bundles went from 3% to 23%.

Port53 · H1 2026 QBR
04 / What we sold
Services new sales + ARR, by quarter
New services ARR has grown 4.6× in two years — $263K, then $887K, now $1.21M. Company record

This is the recurring revenue we own outright — not resold, not renewed on somebody else's behalf.

Port53 · H1 2026 QBR
04 / What we sold
MXDR sales + ARR — three halves
MXDR deals per half: 9 → 21 → 36. We now sell managed detection six times a month, against twice a month two years ago.

Managed XDR alone added $2.31M of new sales across 36 deals. New this half: managed Splunk, managed NOC firewall, and the student-powered SOC.

Port53 · H1 2026 QBR
05 / Renewals
Renewals won + revenue retention, by quarter
Q2 2026 at $4.96M is the largest renewal quarter in company history — and we held retention at 86% while doing nearly 60% more volume than the quarter before. Best first half on record

Revenue retention is 85.9%, up from 79.5% a year ago and 76.6% two years ago. Only H2 2023 has ever been higher.

Port53 · H1 2026 QBR
05 / Renewals
How the 85.9% is built
Uplift added $1.09M on a $6.89M base — +15.8%, and 85.9% of everything renewable came back.
Retention by half
HalfRet.HalfRet.

Two years ago we added 9.4% across a whole year. We did more than that in six months.

Port53 · H1 2026 QBR
06 / Channel
Channel sales by quarter
Twelve months ago this was a build plan with $14K against it.

In H1 2026 Channel delivered $1.27M across 16 deals and ten partners, at an 84% win rate — the highest of any motion. Frank takes it from here at 2pm.

Port53 · H1 2026 QBR
06 / Channel
Won revenue by partner
PartnerWonDeals
Marquee wins: Cape Fear Valley Health — ePlus, MXDR + Splunk — and the Dallas Cowboys, through Presidio, 1,375 seats of MXDR.

Ten partners produced revenue this half. A year ago the number was one.

Port53 · H1 2026 QBR
07 / What to fix
Lost opportunities by reason — 724 in the half
361 were lost to inertia — gone quiet, or left to age past their close date. Worth $13.4M.

Only 87 were lost to a competitor. The biggest available win in H2 is not a better pitch — it is not letting deals go cold.

Port53 · H1 2026 QBR
07 / What to fix
The same 724 losses, grouped
CategoryOppsShareValue
Price appears on ten losses out of 724.

We are not losing on price, and we are rarely losing head to head. We are losing to silence.

Port53 · H1 2026 QBR
08 / The people

Individual
Shoutouts

As always, we’ve celebrated the company’s accomplishments. Now let’s highlight the people.

Port53 · H1 2026 QBR
08 / The people
Total sales by owner
Four people booked over $3M each.
Personal-best halves: Daniella, Lucy, Nate, Brendan, Charles. Kelly's best in two years.

Kira's renewal book moved to the renewals team this half, so her total is not comparable to last year's.

Port53 · H1 2026 QBR
08 / The people
Win rate by rep — all deals, ≥ $10K, by dollars
RepAll deals≥ $10KBy dollars
Sub-$10K partner-loop transactions close almost automatically. The middle column is the one that means something.
Brendan leads at 50% on deals over $10K — his lead survives the filter. Nate leads on dollars at 58%.

Kim competes for the biggest deals in the company, so a single large loss moves her dollar rate more than anyone else's.

Port53 · H1 2026 QBR
08 / The people
Won revenue sourced for another closer
Won revenue only — the SDR field is not filled in on every opportunity, so this undercounts and never overcounts. Mikayla's total sourced pipeline, including deals still open, is $4.47M.

This is revenue that closed because somebody else set the meeting.

Port53 · H1 2026 QBR
08 / The people
Sourced by one person, closed by another
→
The biggest assist of the half
$610,784

Charles Thompson set the meeting at El Dorado Irrigation District. Nate Redman closed it in March — the second-largest deal of H1 2026. Charles was still an SDR when he sourced it and an AE by the time it closed.

Other people’s wins
$996,135

Mikayla Umanzor sourced 15 deals that closed across 14 accounts — including the $370,148 Tra Medical Imaging enterprise agreement that Nate closed in June.

Renewals feeding cross-sell
$429K

Lucy Thornton and Daniella Rafaeli sourced business that other people closed. The renewals desk is now a source of new revenue, not just a defence of the old.

Charles Thompson sourced more won revenue for other people ($660K) than he closed himself ($385K) — including the second-biggest deal of the half.

Port53 · H1 2026 QBR
08 / The people

Six things that never show up
in a revenue ranking.

Port53 · H1 2026 QBR
08 / The people
No blank months

Nobody carried a zero.

All six quota carriers — Nate · Kelly · Kim · Kira · Brendan · Charles — closed business in every one of the six months.

Seven things that never show up in a revenue ranking.

Port53 · H1 2026 QBR
08 / The people
Gulf Coast State College — six weeks
14 May · Renewals Lucy Thornton Renews the 500-seat MDR for three years — at three times the expiring contract $135,010
29 June · CSM Kelly Ozenne Closes a five-year Duo EDU enterprise agreement — the largest deal of the half $792,897
One account · two teams · six weeks

One account produced $927,907 in six weeks because the renewals desk set up the cross-sell.

Port53 · H1 2026 QBR
08 / The people

Three things this half
driving our momentum.

01 · Renewals of revenue, and compounding. A base that renews at 86 cents on the dollar is a base you can build a service on.
02 · Channel from nothing, at the highest win rate in the company. Twelve months ago this was a build plan with $14K against it. Frank has it this afternoon.
03 · Our own IP the largest product family we sell. Ahead of every Cisco SKU we resell. First time that has ever been true.

Every one of those is a foundation for our AI-native phase.

Port53 · H1 2026 QBR
Break
Back in
--:--
Alex has the financial picture when we come back.
Port53 · H1 2026 QBR
Financial update
Alex
Financial update
The screen is yours
Port53 · H1 2026 QBR
What changed
06

What changed

Kyle Derek the world, then the industry
Port53 · H1 2026 QBR
Kyle · the macro

A year ago, in New York,
we told you what was coming.

Here is the part of it that was about the world, not about us.

Port53 · H1 2026 QBR
Kyle · what we said

A once-in-a-lifetime productivity shift,
comparable to the Industrial Revolution.

“In my lifetime, I’ve seen two demonstrations of tech that struck me as revolutionary: the computer and ChatGPT.”
Bill Gates — quoted in our August 2025 deck
Port53 · H1 2026 QBR
Kyle · what we said
The numbers we put on the screen in August 2025
Employers expecting to cut roles where AI automates
Future of Jobs Report 2025
Jobs AI was expected to create
World Economic Forum
Jobs it was expected to displace
World Economic Forum
Port53 · H1 2026 QBR
Kyle · what happened

We were right about the direction.

We were wrong about the speed.

Port53 · H1 2026 QBR
Kyle · the pace
How long a job an AI can finish on its own, unattended

It is doubling
about every four months.

Jobs it finishes half the time
hours of expert human work
Jobs it finishes four times out of five
hours — the number to quote if challenged

A year ago that first number was measured in hours. The work an AI can be left alone with is now measured in days.

Port53 · H1 2026 QBR · METR
Kyle · the pace, without a chart

The best benchmark in AI
was invented as a joke.

March 2023The original. Melting face, dissolving hands, noodles that ignore physics.
2026The same prompt today. Stable face, real physics, a scene rather than a smear.
Port53 · H1 2026 QBR
Kyle · what it can do now
Not better answers — new knowledge
Mathematics
1946
An Erdős problem open for 80 years, disproved by a model that was not trained for maths.
No hints, no step-by-step guidance. It read the problem and returned a complete 125-page proof. A second Erdős problem fell in January with no prior human work to build on.
Materials
2.2M
New crystal structures proposed, including 52,000 candidate battery conductors.
Laboratories are synthesising them. This is a category of discovery that used to run at a few hundred a year.
Medicine
Phase III
AI-designed drugs reached pivotal human trials this year.
And deep-learning screens are surfacing antibiotics that work by mechanisms nobody had seen before — in a field that had gone quiet for decades.

It has stopped being a better way to find what we already knew.

Port53 · H1 2026 QBR · Quanta · OpenAI · DeepMind
Kyle · the macro close

AI isn’t in the economy.
AI is the economy.

Of US GDP growth in Q1 2026 came from AI capital spending
Not from using AI — from building the capacity to run it
2026 capital spending, the nine largest cloud providers
TrendForce

When a technology becomes the thing holding up the economy, it also becomes the thing worth attacking. Derek.

Port53 · H1 2026 QBR
Derek · the industry

A year ago, AI in security was mostly
copilots and marketing.

Today it is writing exploits, running intrusions, and repricing the entire vendor landscape.

Lens 01
The threat
Lens 02
The market
Lens 03
The SOC
Port53 · H1 2026 QBR
Derek · lens 01, the threat
Twelve months, in the order it happened

Every one of those is offence. That is where this became real first, and it always is.

Port53 · H1 2026 QBR · Anthropic · Google GTIG · CSA
Derek · lens 01, the threat
How fast an attack moves now
Breakout time — foothold to lateral movement
minutes · 65% faster YoY
Fastest observed: 27 seconds
Initial access to data exfiltration
minutes · 4× faster YoY
Unit 42
Of CVEs exploited within 24 hours of disclosure
Mandiant
Of breaches were AI-enabled, Mar 2025 – Feb 2026
up 56% on the prior year
IBM

The window a defender has to work in has closed by two thirds in twelve months.

Port53 · H1 2026 QBR · Unit 42 · Mandiant · IBM
Derek · lens 02, the market
Consolidation, in about six months

~$100 billion changed hands.

$32BAlphabet → WizMarch 2026. The largest pure-play cybersecurity acquisition on record.
~$29BPalo Alto → CyberArk · Chronosphere · Protect AIA stack assembled to discover, govern and secure AI agents.
$11.6BServiceNow → Armis · Moveworks · VezaWhat their CEO called building the AI control tower.
21deals announced in July 2026 aloneAgainst 420-plus across 2025. UBS models the market growing ~13% to roughly $240B in 2026.

Vendors are buying their way into AI security because they cannot build it fast enough. Every one of those is a category that had no budget line eighteen months ago.

Port53 · H1 2026 QBR · UBS · SecurityWeek
Derek · lens 03, the SOC
What the industry says, against what it has actually done
Running gen AI in the security stack 77% Have a written AI policy 37%
Believe AI can handle triage 97% Actually use it for triage 35%
Of enterprises that deployed agents had a security incident tied to them
Of practitioners name agentic AI the top attack vector of the year
Ahead of deepfakes

Almost everyone believes it. Almost nobody has operationalised it. That gap is a market.

Port53 · H1 2026 QBR
Derek · what it means
Project Glasswing — Anthropic with a dozen of the largest companies in the industry

Finding the holes got automated.
Closing them did not.

High- or critical-severity vulnerabilities reported in the first month
Across every major operating system, every major browser, and foundational libraries
Of what the model found has been fully patched
Anthropic Red Team, on Mythos Preview

The tooling to find a vulnerability now runs at machine speed. The work to fix one still runs at human speed. Everything in that gap is exposure.

Port53 · H1 2026 QBR · Anthropic
Derek · the close
“The math no longer works for human-only SOCs. If an attacker can exfiltrate in 72 minutes and your average triage time on a Tier-1 alert is 30 to 45 minutes, you’ve already lost before an analyst opens the ticket.”
An MSSP vendor, 2026

The world moved. The industry moved. Omar is about to tell you what we did about it.

Port53 · H1 2026 QBR
What’s our plan
08

What’s our plan

Omar
Port53 · H1 2026 QBR
Table setting — the threat

Attackers got a
force multiplier too.

Mythos, Talos, the threat landscape — AI is being used to run more sophisticated attacks, at more targets, faster.

Port53 · H1 2026 QBR
The other half

And then our customers
built their own attack surface.

AI usage. AI applications. AI agents. Every one of them is a new way in, and almost nobody has visibility into any of it.

Port53 · H1 2026 QBR
What that creates

Exposure. Risk. Compliance.

Data walking into models. Agents with credentials. Applications nobody registered. Auditors who have started asking.

Port53 · H1 2026 QBR
The tension

Traditional MDR
is no longer sufficient.

It watches endpoints, network and identity. It does not watch the thing your company adopted last quarter.

Port53 · H1 2026 QBR
The plan — what being an AI company means for Port53

Traditional MDR is no longer sufficient.Here is our answer.

Port53 · H1 2026 QBR
Pillar 01

Agentic SOC
AI runs the triage.
Analysts own the call.

Cisco XDR, Splunk and Phoenix operated as one service. The machine does the reading; a human still makes the call.

Port53 · H1 2026 QBR
Pillar 02

SOC for AI
Somebody has to watch
what your AI is doing.

AI usage, AI applications, AI agents. The reason our competitors cannot follow us here is that they do not have the Cisco relationship this runs on.

Port53 · H1 2026 QBR
Pillar 03

Cisco
The relationship
nobody else can copy.

Networking, hardware, firewalls — and the estate refresh that comes with them. The moat under both of the other two pillars.

Port53 · H1 2026 QBR
What this means

We are not becoming
a different company.

Three lines, one company: the VAR, the managed service, and now the AI-native business — the same thread, the third time.

Port53 · H1 2026 QBR
Sales enablement
Derek
Sales enablement
The screen is yours
Port53 · H1 2026 QBR
Lunch
Back in
--:--
After lunch: the software, running.
Port53 · H1 2026 QBR
Behind service delivery
11

Behind
service delivery.

Kyle Pilar Sanjith
Port53 · H1 2026 QBR
Behind service delivery
One customer, five demos — free trial to paying SOC for AI account

It isn’t a slide.
It’s running.

Port53 · H1 2026 QBR
Behind service delivery · stage 1 of 5
01
Free · any customer

AI Risk Assessment

They pull raw data from Secure Access and send it to us. We generate the assessment in the platform. No integration, no cost, no commitment.

Pilardemoing
The screen is yours — press → when you are done
Port53 · H1 2026 QBR
Behind service delivery · stage 2 of 5
02
Four Phoenix-native playbooks

The agentic SOC

An authentication alert, start to finish — through our own playbook, with almost nothing for an analyst to handle.

Kyledemoing
Built by Eric · Pratibha · Ranjith · Suchithra · Sanjith · Karthik
The screen is yours — press → when you are done
Port53 · H1 2026 QBR
Behind service delivery · stage 3 of 5
03
Once they sign · automatic

SOC for AI reporting

We hold their Secure Access endpoints, so monthly and quarterly reports generate and send themselves. They never pull the data again. All of it piped into Phoenix.

Kyledemoing
Built by Derek
The screen is yours — press → when you are done
Port53 · H1 2026 QBR
Behind service delivery · stage 4 of 5
04
The whole pipeline, one alert

DLP alerts, end to end

An employee sends a sensitive API key through ChatGPT. Follow it all the way: our SOC pipeline, a Phoenix alert, a Jira ticket, an analyst who handles it.

AI-related alert→SOC pipeline→Phoenix→Jira→Analyst
Sanjith & Kyledemoing
The screen is yours — press → when you are done
Port53 · H1 2026 QBR
Behind service delivery · stage 5 of 5
05
platform.port53.com

Real-time dashboards

SOC for AI reporting rendered live in the platform. No emails. No PDFs. They open a page and it is already true.

Pilardemoing
The screen is yours — press → when you are done
Port53 · H1 2026 QBR
Behind service delivery

A free assessment at one end.
A live dashboard at the other.

Every stage of that is built, running, and was demoed to you just now. Bill takes it from here.

Port53 · H1 2026 QBR
Future of service delivery
12

Future of
service delivery.

Bill the Services segment
Port53 · H1 2026 QBR
12 · Future of service delivery
Services strategy workshop

One room,
one Saturday.

Everything in the next forty minutes was decided in that room, two days ago.

Port53 · H1 2026 QBR
12 · Future of service delivery
The posture

Going on
offense.

Port53 · H1 2026 QBR
12 / Services — the last eighteen months
Services timeline — 2025 to today

Eighteen months, eight milestones, and a services business that now runs in two countries.

Port53 · H1 2026 QBR
12 / Services — portfolio thesis
Portfolio thesis
MDR is our core operating and recurring-revenue platform.
SOC for AI is the strategic expansion of that platform into AI usage, applications, and agents.
Adjacent solutions will be supported as we continually re-assess their efficacy.

Closed our Saturday workshop with a laser focus on this strategy for the Services Portfolio.

Port53 · H1 2026 QBR
12 / MDR plan — the platform
MDR plan highlights

Expand MXDR
to MXSDR.

Plane 01
XDR
Where we are today.
Plane 02
XDR + Splunk
Both, operated as one service.
Plane 03
Splunk, no XDR
For the customers who already made that choice.

Expand the SIEM plane options so the customer's existing choice is never the reason we cannot serve them.

Port53 · H1 2026 QBR
12 / MDR plan — the machine
MDR plan highlights

Onboarding 2.0

Hire 01
A Program Manager
Someone who tracks it.
Will also manage professional-services work.
Hire 02
MiniEric
Another Eric, for onboarding.
Capacity to onboard at the rate we are now selling.

We are selling faster than we can onboard. These two hires are the fix.

Port53 · H1 2026 QBR
12 / MDR plan — where the analysts sit
MDR plan highlights

Build a pod of
US analysts.

To address data sovereignty requirements.

Where the analyst sits is a contractual requirement for some customers, not a preference.

Port53 · H1 2026 QBR
12 / SOC for AI — the surfaces
SOC for AI

Three attack surfaces.

Port53 secures AI across human usage, enterprise AI systems, and autonomous AI action — a non-human entity taking its own decisions.

People
SOC for AI Usage
Systems
SOC for AI Applications
Autonomy
SOC for AI Agents
Port53 · H1 2026 QBR
12 / SOC for AI — three different security problems
The same three surfaces, as three separate problems
SOC for AI Usage
SOC for AI Applications
SOC for AI Agents
We protect against risk from…
People using AI
AI systems being built and operated
AI systems taking action
Protected entity
Employees / users
AI infrastructure, applications & models
Autonomous / semi-autonomous agents
Primary risk
Unsafe or unauthorized use
Application/model compromise or abuse
Unauthorized or harmful autonomous action
Core question
“How are our people using AI?”
“Are our AI systems secure?”
“What are our agents doing?”

Three surfaces, three questions, three services. Nobody else is answering all three.

Port53 · H1 2026 QBR
12 / SOC for AI — rollout schedule
What ships, and when

This is the second pillar of the plan Omar set out this morning, with dates against it.

Port53 · H1 2026 QBR
12 / Adjacent solutions — actions
What we will do, and what we will stop doing
Area
Posture
What we WILL do
What we will NOT do
GRC inc IAM
Scale Now
Build IAM consulting and add GRC cover
Stop selling TrustMAPP, ride existing contracts to expiry
Vulnerability Management
P&V, Mnt
vPT only for external. Continue Tenable
Stop using vPT for internal
Dark Web Monitoring
P&V
Keep it, product only
Spend much time on this
Managed Infrastructure
SN, P&V
This can pay off. Include a deployment checklist
Stop writing custom SOWs — just get an inventory list. No switches or routers
Managed SASE
Deploy (PS) then 4
Deploy professional services first, then treat it like managed infrastructure
—
Port53 · H1 2026 QBR
12 / Services — what this hands forward

The plan has
dates against it now.

MDR is the platform. SOC for AI is the expansion. Everything else gets re-assessed on its merits, and some of it stops.

Port53 · H1 2026 QBR
Channel update
Frank
Channel update
The screen is yours
Port53 · H1 2026 QBR
Break
Back in
--:--
Then it’s your turn — roundtables and the pitch contest.
Port53 · H1 2026 QBR
Roundtables and the pitch contest
Derek & Omar
Roundtables and the pitch contest
Two slides, then the room is yours
Port53 · H1 2026 QBR
Roundtables and the pitch contest
The exercise

Sell it back
to us.

You’ve had all day of us talking. Now you talk.

Group 1
AI for SOC
Group 2
AI for SOC
Group 3
SOC for AI
Group 4
SOC for AI
Deliverable 1

A 2–3 minute pitch

Open on the problem we solve for. Then pitch how the offering solves that problem.

Deliverable 2

Three questions that reveal the problem

The questions that get a customer to see the problem before you’ve sold them anything.

Clearly explaining both the problem and the solution is the exercise.
Port53 · H1 2026 QBR
Roundtables and the pitch contest
Getting started
Groups 1 & 2

AI for SOC

  1. What is the core problem clients have, and the outcome they will receive?
  2. How is AI being leveraged to defend our SOC customers — and why should they care in a sea of AI noise?
Groups 3 & 4

SOC for AI

  1. What is the current state, and the desired future state, of our customers who are leveraging AI?
  2. How can we help them bridge the gap?
Port53 · H1 2026 QBR
Brand & website
16

Brand &
website.

Kyle
Port53 · H1 2026 QBR
The process
Four steps, in this order

None of this started
with a logo.

01
Scratchpad
Everything, written down badly. No filtering.
02
Brief
One sentence. Only one. Everything else has to answer to it.
03
Moodboard
Built and running in a browser, not a folder of scavenged JPEGs.
04
References
Named out loud, with what we steal and what we leave.
Port53 · H1 2026 QBR
01 · Scratchpad
What survived the pile
“Nobody remembers the computers on Apollo 11. They remember the room.”
“Instruments, not illustrations.”
“We watch the web at pixel resolution.”
“Nominal.”

There were dozens more, and most of them were bad. That is what a scratchpad is for.

Port53 · H1 2026 QBR
01 · Scratchpad — the through-line
Four thoughts that turned out to be one
01A SOC is a command centrePeople, process and technology in one room, holding a proactive posture. That is the definition, not a metaphor we invented.
02Command centres mean Mission ControlCalm, instrument-dense competence. Humans owning the call while machines run at machine speed.
03The web is the space it guides you throughNot a metaphor for scale — a thing you navigate, with hazards in it.
04And the pixels are the starsThe dither is a starfield, not a retro texture. It has a job.
Port53 · H1 2026 QBR
02 · The brief

“Invoke the trust and competence of
mission control guiding you through
dithers of the web.”

The web is deep space. Port53 is the room that navigates it. The dither is a starfield, not a texture.

Port53 · H1 2026 QBR
02 · The anti-brief

Houston 2030.
Never Houston 1969.

No Apollo cosplayNo phosphor greenNo space kitsch No nebulas or rocketsNo SaaS gradient blobsNo stock photography Nothing decorative

We steal Mission Control’s information design, not its 1969 materials. Stars are data points, not scenery.

Port53 · H1 2026 QBR
03 · Moodboard — the material
What the picture is actually made of

It isn’t made
of dots.

Ones, zeros, slashes, hashes. The image is rendered out of characters at pixel scale, and the density of the glyph stands in for tone.

It is the web’s own alphabet. We watch the web at pixel resolution — so the picture is built out of what the web is made of.

Detail — the campaign frame at 1:1
Rule 01No greys. Ever.Every tone is character density. That constraint is what makes it read as designed rather than filtered.
Rule 02The mode is a signalOrdered reads instrument. Halftone reads celestial. Stipple is the treatment for every photograph.
Rule 03It never touches typeInstruments, plots and imagery only. We learned that one the hard way — dithered type is illegible.
Port53 · H1 2026 QBR
The explorations

The ones that
didn’t survive.

Emblem candidates, dither modes, type pairings, colour roles. A brand that only shows its winner looks lucky.

Switching to Figma — press → when you are back
Port53 · H1 2026 QBR
The motion
One system, every page

Scroll is flight.

You travel through the web. Mission Control supplies the frame — you are at the console, watching the board, and every section is a waypoint on a plotted course.

The decision that unlocked it
Don’t render the room. Seat them in it.
The viewport becomes the console; the canvas becomes the big board at the front. It delivers “a seat in the room, not a monthly PDF” literally — with zero cosplay risk.
Why it will actually ship
One system, relentlessly.
Not six bespoke scenes. That is the only way six pages happen in the time we have — and it is how the sites we admire actually do it.
Port53 · H1 2026 QBR
Website

And it’s
already running.

Not a concept. Handing to the site itself.

staging.port53.com — press → when you are done
Port53 · H1 2026 QBR
Cisco
Blake Babila
Director, U.S. Commercial Security Sales · Cisco
The screen is yours
Port53 · H1 2026 QBR
Most Valuable Player
MVP

One person carried more
than a leaderboard can show.

Port53 · H1 2026 QBR
Most Valuable Player

Karthik
Kannaiah

Country Director, India

Port53 · H1 2026 QBR
Port53 — H1 2026 Quarterly Business Review

Three threads.
One company.

Forward.

Port53 · H1 2026 QBR

The day

Monday 24 August 2026 · click to jump · G or Esc to close