| 1 | Company, viability and references | Founding team, funding, pilots and design partners, security program, references willing to speak (or why there are none yet) |
| 2 | Coverage and discovery | Vendors and OS versions supported; discovery in days; topology accuracy stated and measured |
| 3 | Organizational context | Runbooks, design documents, tickets and change records ingested and cited in investigations |
| 4 | Incident reasoning and root cause | Evidence-linked root cause on replayed incidents; blast radius; P50/P95 time to answer |
| 5 | Alerting and noise | Prioritization by topology and business context; redundancy-compromised alerts |
| 6 | Change assurance | Pre-execution impact analysis; pre/post verification for changes made anywhere; one outcome per verified change (Verified, Degraded, Rolled back, Inconclusive or Blocked) recorded in the change record |
| 7 | Resilience, posture and compliance | Standby health; backup-path capacity; drift; contextual CVE (opens in a new tab) exposure; evidence packages |
| 8 | Automation, runbooks and autonomy | Natural-language runbooks; approval gates; rollback; autonomy modes per action and role |
| 9 | Transparency and evidence | Every conclusion traceable; uncertainty stated; hypotheses recorded; engineer scoring |
| 10 | Integrations | ITSM read/write, PAM brokering, monitoring, on-call, collaboration, knowledge, identity, controllers |
| 11 | Architecture and deployment | SaaS, customer cloud, on-prem and air-gapped; connector model; scalability; multi-tenancy |
| 12 | Security, privacy and AI governance | Least privilege; data classes; retention; model endpoints and training policy; audit export; disclosure |
| 13 | Measurement and proof of value | Baseline, eight measures, business criterion, decision date, artifacts delivered |
| 14 | Commercials | Pricing model that does not penalize adoption; pilot credit; term; expansion; SLAs |
| 15 | Implementation, support and services | Time to value; enablement; support model; roadmap transparency; exit and data deletion |