◆ THE GTM LABS Signal Map · May 2026
Prepared for Vishnu Kalidindi — Founder

ParadigmIT Cybersecurity

Security firms that ship a product keep a services-shaped homepage long after the company underneath it has changed — and the new buyer arrives anyway, telling you who they are by what they click.

Your homepage routes two very different CISOs — one here for AI-VAPT, one here for the AI SOC — through one undifferentiated funnel, so on the way in they look identical to you. The self-select they already make under 'Extended Capabilities' is instrumentable today.

The signals you're sitting on
◆ SIGNAL 01

Visitor lands on the homepage and clicks the OFFENSIVE CTA into /ai-vapt

Reads as
A red-team / validation buyer here for agentic attack simulation — early eval, scoping a different problem than the SOC crowd.
Leaks today
Counted as a page view, not a buyer type. Both /ai-vapt and /ai-soc visitors land in the same inbox with the same reply.
Wire this
Tag the OFFENSIVE-vs-DEFENSIVE branch at the click and start two separate nurtures — guardrail stress-test material for /ai-vapt, telemetry and detection content for /ai-soc.
◆ SIGNAL 02

Same visitor returns to read the IRONKLAD control-plane page (pre-execution policy gating, <100ms decisions)

Reads as
Mid-evaluation on the actual product, not the consulting story. They're checking whether the inline architecture fits — the buying moment.
Leaks today
Indistinguishable from a services-page browse; nothing flags that they crossed from 'who is ParadigmIT' into 'can IRONKLAD sit in my path'.
Wire this
Wire a real-time alert the moment a tagged AI-VAPT or AI-SOC visitor opens the IRONKLAD page, and route it to you while the intent is warm — founder reply, not a form autoresponse.
◆ SIGNAL 03

Inbound from a name on the enterprise/govt client tier (Delhi Police, Govt of Telangana, hospital or Greenko-class account)

Reads as
An account with budget and a procurement path testing whether the productized story scales past the engagement they already trust you for. Expansion intent.
Leaks today
Handled as a generic services lead; the existing-relationship and account-size signal never routes to a different motion.
Wire this
Flag known-account and enterprise/govt-domain inbounds as expansion triggers and route them to a tailored, account-aware first touch instead of the default demo path.
◆ If you wire one thing

Split the AI-VAPT and AI-SOC self-select at the click and make the IRONKLAD page-open reach you in minutes — so the offensive buyer and the defensive buyer each get the conversation they actually came for.