📁 Templates & Data Import/Export
▼
0 saved
📷 Upload Images
▼Click to upload images or click placeholders in the preview.
ROI Proposal Builder
Editing: Example Company
Saved
0%
Form Completion
0 of 20 fields completed
Dynamic ROI Proposal Tool
Create professional proposals with live ROI calculations
Proposal for Example Company
Version 1.0
Proposal Number: 00000-0000
Date: September 22, 2025
prepared for
Executive Summary
Prophet AI delivered measurable, repeatable business value.
Prophet Security's mission is to be a force multiplier for security teams by automating the triage, and investigation process, thereby enabling them to focus on security tasks that matter and allowing Example Company to focus on their core mission.
Example Company and Prophet AI conducted a Proof of Value over a four-week period, demonstrating the transformative impact of agentic AI on security operations. The results speak for themselves:
Operational Scale
50,000
Investigations per year capacity
Operational ROI
$224K → $874K
Investment to annual return
Faster Response
8 mins
Mean time to respond
By reducing mean time to respond to 8 minutes, Prophet AI enables Example Company to handle significantly higher alert volumes with greater precision. This efficiency is equivalent to approximately 3.9 FTEs annually, freeing existing staff for strategic work like threat hunting and architecture improvements.
Additional Security Outcomes:
- Reduced Breach Risk: Complete investigations in minutes — faster than the average attacker's 48-minute breakout time.
- End-to-End Visibility: Every alert is investigated within minutes of being triggered, providing immediate context.
- Consolidated Intelligence: Integrated enrichment sources (IPinfo, Spur, DNSlytics, Reversing Labs) without additional licensing costs.
- Higher Tool ROI: Activate more detections from existing security tools without worrying about team capacity.
Agentic AI turns alert fatigue into verified insight — and measurable savings.
A Proposal to Scale SecOps With Agentic AI
An investment in Prophet AI to enhance your defensive posture.
Projected Net Annual Savings
$0
This highlights the financial benefits of scaling operations without proportional increases in headcount.
The Imperative: A New Model for Scaling Security
Agentic AI introduces a new paradigm, enabling significant productivity gains and enhanced capabilities.
Prophet AI Accuracy
Prophet AI aligned with Example Company's determinations in 0% of malicious and in 0% of benign alerts, escalating inconclusive cases for further review.
Included Threat Intelligence
Our platform comes with built-in enrichment from industry-leading tools like IPinfo, Spur, DNSlytics & Reversing Labs, providing an estimated value of $134,600.
Reduced Breach Risk
Prophet AI's investigation time is faster than the average attacker's breakout time.
Data Analysis: Pinpointing the Financial Impact
Exhibit A: Net Savings Breakdown
Equivalent FTE efficiency gained
$0
Tool Licensing Savings
+ $0
(-) Platform Investment
($0)
Net Annual Savings
$0
Exhibit B: Alerts Investigated by Severity
Prophet AI Observed Indicators During the POV
Dates Observed: October 1, 2025 - October 27, 2025
Prophet AI demonstrated significant operational and efficiency gains, highlighting measurable reductions in alert noise and analyst workload.
Analyst Days Saved
18.8
Equivalent work days of SOC time reclaimed during the POV period.
Noise Reduction
92%
Percentage of all alerts autonomously resolved by Prophet AI.
True Positives Found
277
Verified malicious alerts identified and surfaced for immediate action.
Data Analysis: Alert Distribution & Outcomes
Alert Source Distribution
Total alerts ingested by source: 0
Alert Outcomes
How Prophet AI's automation classified all investigations.
POV Objectives & Success Criteria
Prophet AI's four-week Proof of Value demonstrated measurable accuracy, efficiency, and cost reduction. Prophet AI proposes a $224,000 one-year subscription to conduct up to 50,000 annual investigations across all alert types.
Proof of Value Results
Time Period: 4 Weeks
| Metric | Result |
|---|---|
| Total Unique Alerts Investigated | 13,324 |
| High-Severity Alerts | 124 |
| Medium-Severity Alerts | 1,856 |
| Low-Severity Alerts | 11,344 |
| Time Savings1 | 3,552 hours |
| High-Severity Time Saved | 620 hours |
| Medium-Severity Time Saved | 1,856 hours |
| Low-Severity Time Saved | 1,076 hours |
| Cost Savings (4 Weeks period)2 | $67,404 |
| Total Security Issues Identified | 8 |
| Mean Time to Respond (MTTR) | 8 mins |
1 Time savings calculated based on industry-standard benchmarks by severity.
2 Assumes Security Analyst average compensation of $150,000/year.
Industry Benchmarks
Prophet's AI-assisted triage resolves low-severity alerts 10x faster than standard SOC operations.
This table provides realistic, severity-based benchmarks for Mean Time to Respond (MTTR) in Security Operations Centers. Lower-severity alerts should be resolved faster than higher-severity ones, which require deeper investigation and cross-functional coordination.
| Severity | Industry MTTR | Diageo MTTR | Description |
|---|---|---|---|
| High | 2-8 hours | 5 hrs | Deeper analysis needed, cross-team coordination. Example: lateral movement, confirmed phishing. |
| Medium | 30 min - 2 hours | 1 hr | Requires validation. Endpoint, network, or SaaS activity correlation. Example: suspicious PowerShell script. |
| Low | 5-30 minutes | 10 min | Typically auto-triaged or dismissed. Example: login from known device at odd hour. Low impact, high volume. |
References:
Accuracy in Real Investigations
Prophet completed complex investigations in minutes instead of hours.
The Proof of Value was initiated based on key objectives identified by the Diageo team. The core premise was that if Prophet AI could successfully demonstrate value in these specific areas, the justification for purchase would be clear.
Throughout the planning and execution of the POV, we worked closely with key members of your security team, including Jane Doe (Director, Security Operations) and John Smith (Senior Security Analyst). Their input was crucial in defining the following use cases and success criteria:
Objective 1: Reducing Alert Fatigue
Your team highlighted that anomalous API invocation alerts were creating significant noise. Prophet AI was configured to automatically investigate these alerts, correlate activity with user history and device posture, and close benign cases. This immediately removed hundreds of alerts from the daily queue.
Success Demonstrated:
During weekly check-ins, John Smith confirmed that Prophet AI was autonomously resolving over 95% of these targeted alert types without manual intervention, calling the reduction in noise "a night-and-day difference" for his team.
Analyst Efficiency and Workload Reduction
Prophet AI enables SOC teams to shift focus from reactive triage to proactive threat hunting and strategic security initiatives.
Objective 2: Accelerating Incident Response
For the 8 security incidents identified, the timeline from initial alert to a full investigation report with actionable intelligence was consistently under 10 minutes. This speed allows your team to move from detection to containment and remediation at a pace impossible to achieve with manual analysis alone.
Success Demonstrated:
Prophet AI delivered comprehensive investigation reports with actionable next steps for every confirmed threat.
Integration Across Security Stack
Prophet AI seamlessly integrates with existing security tools to provide comprehensive, end-to-end visibility across the entire environment.
Objective 3: Improving Analyst Efficiency
During a review session with John Smith, we walked through an investigation for a "Potential Credential Dumping" alert. He noted that the AI's "Intuitions" pane provided a clear, plain-language summary that a junior analyst could immediately understand, while the detailed timeline and MITRE ATT&CK mapping gave senior analysts the depth they needed for validation and follow-on action.
Success Demonstrated:
The team formally validated that Prophet AI successfully met and exceeded the success criteria for all use cases. The detailed results and narrative presented in this document provide the quantitative and qualitative proof of that success.
Platform Insights
Dashboard
Prophet AI's unified dashboard provides real-time visibility into investigations, outcomes, and analyst productivity.
Trusted by Security Leaders Across Industries
Organizations using Prophet AI see immediate operational impact.
"Prophet AI cut our alert queue from thousands to hundreds, improving efficiency across the entire SecOps workflow."
- Erik Willie, CISO at CabinetWorks
"Prophet AI is automating the repetitive, mundane parts of security alert analysis for us."
- Tushar Jain, EVP of Engineering at Docker
"Prophet AI is autonomously handling the high-volume, repeating alerts that have bogged down our SecOps team."
- Steve Lukose, CISO at Clari
Notes
This space is intentionally left blank for notes.
Input Values Reference
The following input values were used to generate all calculations in this proposal:
Pricing & Company Information
Prophet AI Cost:$0
Proposed Annual Investigations:0
Analyst Average Salary:$0
Total Company Employees:0
Threat Intel Cost (Per Employee):$0
Attacker Breakout Time:0 mins
POV Details
POV Time Period:0 Weeks
POV Start Date:N/A
POV End Date:N/A
Total Alerts During POV:0
Total Projected Alerts Per Year:0
Analyst Days Saved:0
Security Issues Identified:0
MTTR (Mins):0
Alert Severity Metrics
High Severity Alerts:0
Med Severity Alerts:0
Low Severity Alerts:0
Benchmark High Time:0 mins
Benchmark Med Time:0 mins
Benchmark Low Time:0 mins
Customer High MTTR:0 mins
Customer Med MTTR:0 mins
Customer Low MTTR:0 mins
Alert Outcomes
Benign:0
Benign Conclusion:0
Malicious:0
Malicious Conclusion:0
Inconclusive:0
Unsupported:0
Failed:0
Suppressed:0
Appendix: Assumptions & Methodology
Transparent inputs and calculations that power Prophet's ROI and time-savings results.
Calculations Reference (Part 1)
Noise Reduction Percentage
Formula: (Benign Alerts / Total Alerts) × 100
Source: Alert Outcomes | Purpose: % resolved by Prophet AI
Referenced on: Page 4 (Prophet AI Observed Indicators - Noise Reduction metric)
Prophet AI Accuracy Percentages
Benign: (Benign / Benign Conclusion) × 100 | Malicious: (Malicious / Malicious Conclusion) × 100
Source: Alert Outcomes | Purpose: Alignment with customer validation
Referenced on: Page 3 (CFO Summary - Prophet AI Accuracy card)
Time Savings
Formula: (High × Benchmark High) + (Med × Benchmark Med) + (Low × Benchmark Low)
Source: POV Metrics | Note: Customer MTTR used if enabled
Referenced on: Page 5 (Executive Summary - Hours Saved metric), Page 7 (POV Detailed Results table - Time Savings row)
Analyst Days Saved
Formula: Time Savings Hours / 24
Source: Time Savings | Purpose: Equivalent work days saved
Referenced on: Page 4 (Prophet AI Observed Indicators - Analyst Days Saved metric)
Total Alerts During POV
Formula: Sum of all Alert Sources
Source: Alert Source Distribution | Purpose: Total alerts ingested during POV
Referenced on: Page 4 (Alert Source Distribution chart subtitle), Page 13 (Input Values Reference)
Total Projected Alerts Per Year
Formula: (Total Alerts During POV / POV Weeks) × 52
Source: Total Alerts During POV & POV Duration | Purpose: Extrapolated annual alert volume
Referenced on: Page 13 (Input Values Reference - POV Details section)
Cost Savings (POV Period)
Formula: (Time Savings Hours / 2080) × Analyst Avg Salary
Source: Time Savings & Analyst Salary | Purpose: Dollar value during POV period
Referenced on: Page 5 (Executive Summary - Cost Savings metric), Page 7 (POV Detailed Results table - Cost Savings row)
Annual Cost Savings
Formula: (POV Cost Savings / POV Weeks) × 52 weeks
Source: POV time period & Cost Savings | Purpose: Full-year FTE avoidance value
Referenced on: Page 3 (CFO Summary - Exhibit A Net Savings Breakdown, "Avoid additional FTE's" line), Page 5 (Executive Summary - FTE equivalency)
Calculations Reference (Part 2)
Continued from previous page.
Annual FTE Savings
Formula: Annual Hours Saved / 2080 hours per FTE
Source: Annual projections | Purpose: FTE equivalency measurement
Referenced on: Page 5 (Executive Summary - FTE equivalency paragraph)
Net Annual Savings
Formula: Annual Cost Savings + Tool Savings - Prophet AI Cost
Source: Annual savings & Prophet cost | Purpose: Total financial benefit
Referenced on: Page 3 (CFO Summary - Projected Net Annual Savings header & Exhibit A breakdown), Page 5 (Executive Summary - net operational value)
Tool Licensing Savings
Formula: Number of Employees × Threat Intel Cost Per Employee
Source: Company data & intel benefit flag | Purpose: Consolidated tool value (conditional)
Referenced on: Page 3 (CFO Summary - middle card & Exhibit A breakdown), Page 5 (Executive Summary - tooling consolidation savings)
Hourly Rate
Formula: Analyst Average Salary / (52 weeks × 40 hours/week)
Source: Analyst salary input | Purpose: Time-to-cost conversion factor
Referenced on: Internal calculation only (used in Cost Savings formulas)
Alert Source Distribution (Chart)
Formula: Sum of all alert sources for denominator; individual sources for percentages
Source: Alert Source inputs | Purpose: Chart calculations
Referenced on: Page 4 (Prophet AI Observed Indicators - Alert Source Distribution chart)
Alert Outcomes Distribution (Chart)
Formula: Each outcome type / Total outcomes × 100
Source: Alert Outcomes data | Purpose: Outcome percentages for chart
Referenced on: Page 4 (Prophet AI Observed Indicators - Alert Outcomes chart)
True Positives Found
Formula: Count of Malicious alerts
Source: Alert Outcomes (Malicious) | Purpose: Security impact metric
Referenced on: Page 4 (Prophet AI Observed Indicators - True Positives Found metric)
Unique Alerts Investigated
Formula: High Severity + Med Severity + Low Severity alerts
Source: POV Metrics | Purpose: Total investigation count
Referenced on: Page 5 (Executive Summary - Unique Alerts Investigated metric), Page 7 (POV Detailed Results table - Total Unique Alerts row)
Note: All calculations update automatically. Contact your Prophet AI account executive with questions.