Find the gap
Surface where east-west traffic and segmentation created blind spots.
A Fortune 500 financial services customer needed stronger visibility across east-west traffic. I connected technical gaps in segmentation and detection coverage to a business case for expanding the NDR platform.
The customer had meaningful gaps in network visibility, segmentation, and detection coverage across east-west traffic.
The opportunity was not simply to add more technology. It was to show where the existing security program lacked coverage, align the right stakeholders around those gaps, and frame an expansion around concrete security outcomes.
Surface where east-west traffic and segmentation created blind spots.
Translate technical coverage gaps into priorities executives and the SOC could act on.
Shape the expansion around measurable improvements in visibility and detection.
I treated the expansion as a customer outcome project: diagnose the operational gap, clarify the value of closing it, and keep the plan anchored to the customer’s security priorities.
Focused the conversation on east-west traffic, where incomplete visibility and inconsistent segmentation limited detection coverage.
Connected the platform discussion to risk reduction and the customer’s broader detection program rather than positioning the expansion as additional product capacity.
Defined the expansion around closing the identified gaps so the investment had a clear operational purpose and an executive-level rationale.
The work produced a $2.4M expansion in a single Fortune 500 financial services account.
It also reflects the broader portfolio motion: identifying adoption and coverage gaps early, turning them into a mutual plan, and tying account growth to a customer outcome.
Single-account expansion
Expansion opportunities identified across the broader ExtraHop portfolio
Net revenue retention across the portfolio
Expansion is strongest when it begins with an unresolved customer problem. My role was to make the problem legible, align the stakeholders, and connect the investment to a security outcome the customer already valued.
Customer name and sensitive implementation details are withheld. Results are drawn from my portfolio performance.