Copper Sentinel
Business plan · v2 after red team

The full plan, including the parts that argue against it.

Rendered from plan.md. Three reviewers attacked v1; their critiques and our answers are in Section 17. Every number is a projection from the monthly model. Nothing here is a result.

Copper Sentinel: Business Plan (v2, after red team)

Theft-loss reduction for utility-scale solar and battery sites in the desert Southwest, sold the way a red-team engagement is sold rather than as a guard contract.

Prepared 2026-11-13. Revised the same day after three red-team reviews (financial model, go-to-market and pricing, lean operations). Written for a founder-owner. The superseded v1 is kept as plan_v1.md and model_v1.json.

Integrity note. Copper Sentinel has no customers, partners, pilots or revenue today. Every number labeled "projection", "model", "assumption" or "case" is an illustrative estimate whose assumptions are stated, not a result. Companies named here are competitors or candidate suppliers or channels; none has agreed to anything. Market data for this niche is thin, and we say so wherever we had to estimate. The model is model.json, generated by model_build.py (monthly, 60 months, re-runnable).


1. Executive summary

The problem. Thieves can cut copper cable at remote solar and battery sites in minutes, and the repair bill is the small part of the loss. In one widely reported California case, about $100k of copper was stolen and the sheriff estimated total damages at up to $2.8M once equipment damage, repairs and months of downtime were included. The $2.8M is a ceiling ("up to"), and the trade press repeats the same single source (Fresno County Sheriff; Raptor Maps). Phoenix-area officials reported copper theft up 100% year over year in late 2025 (AZFamily). Risk peaks during construction, when spools sit staged in laydown yards.

The offer (revised). 1. Assessment, the wedge. For owners, IPPs and lenders: a full Physical Red-Team Assessment ($7.5k–$25k). We attempt a night-time breach under signed rules of engagement, film it and time the response. For EPCs: a non-adversarial Theft-Exposure Walk-down ($3.5k) that can be sold in the same week. Both fees are fully credited against a program signed within 60 days. This answers the competitor that gives its assessments away (Section 6). 2. Layered protection program, priced per protected zone (laydown yard, inverter/MV block, substation or BESS yard, perimeter mile). Partner towers and monitoring are passed through at cost plus 12%, and the price is shown to the customer. Our own margin comes from a separate management fee for triage, verified dispatch, marking, attestation and quarterly re-tests. 3. Loss Control Attestation. A monthly evidence pack for lenders, tax-equity investors and asset managers, used as covenant and reporting evidence. We do not promise insurance premium relief, and will not until a named carrier puts it in writing.

The model. We own no hardware and roll no trucks. One tower OEM and one UL-listed central station serve the whole network in Years 1–2. Triage is bought (an Immix-integrated AI filter at the central station), not built. We build only the evidence log, the attestation generator and the Site Assessor. Monitoring is sold under our own license, held through a qualified manager (Section 14). W-2 headcount grows from 2 to 7 through hires triggered by volume.

What the red team changed in the numbers (all PROJECTIONS):

v1 (retired) v2 planning case v2 upside path
Y5 revenue $6.15M $4.94M $9.52M
Y5 gross margin 50% 39% 44%
Y5 adjusted EBITDA (after GM salary, commissions, bad debt, SLA credits) $1.54M (owner EBITDA) –$0.01M $1.72M (18%)
Break-even (adjusted EBITDA) month 19 month 59 month 34
Peak unlevered cash need $0.59M $2.72M $1.84M
Exit EV $13.9M (9×) no EBITDA exit in Y5. Operating book at 30× RMR ≈ $3.4M $12.0M (7×); 30× RMR cross-check $8.7M
Founder proceeds / MOIC / IRR $13.3M / 60× / 130% not run to Y5 (month-18 gate stops it) $9.3M / 15.5× / 78% on $600k

The honest headline. Once the red team's fixes are combined, the business that was meant to be the base case does not reach a sellable EBITDA within five years. The model's own month-18 test would stop it. Copper Sentinel is therefore an option, not a projection. About $1.1–1.2M is spent over 18 months (founder $600k in three gated tranches, a $400k SAFE and a $200k receivables line) to learn whether conversion looks like the upside path. If it does, a $1.25M seed round funds the path to a roughly $12M exit. If it does not, the plan stops. The probability-weighted founder outcome is about a 4.3× expected MOIC and about a 37% expected IRR on about $555k of expected founder capital (Section 12). That beats a normal investment hurdle, but the result is lumpy: about a 75% chance of losing $425–525k and about a 25% chance of a 15× outcome. That is the decision to make.

What the founder-operator needs to bring: the wedge is a physical penetration test. A founder or first hire with offensive-security engagement experience can scope, sell and run that wedge credibly from day one. Section 9 limits how much founder time this takes.


2. Problem and customer

Who exactly (revised buyer map)

Segment Buyer title What they buy from us How they buy
IPP / asset owners, the primary buyer for the red team VP Asset Management, Director of Operations, Risk Manager Red-team assessments (portfolio due diligence before COD or acquisition); operating subscriptions; owner-specified construction programs written into EPC contracts Annual budget and procurement; 6–12 months. The owner's money sits behind the program, which makes the EPC a compliance buyer.
EPC contractors (construction phase) Preconstruction and estimating, the owner's construction manager, then Project Director and Site Security Walk-downs; per-zone construction programs Security is set at bid or mobilization, inside general conditions, often under an incumbent's MSA. First logo: 4–6 months including prequalification (ISNetworld/Avetta-style, safety stats, COIs, MSA redlines). Repeat sites inside a landed EPC: 30–45 days.
Lenders, tax-equity investors and their independent engineers Asset management, IE firms Red-team assessments as third-party diligence; attestation as covenant evidence Already pay for third-party reviews
O&M providers VP Operations, BD White-label channel Not counted in the planning case until a channel agreement is signed
Insurers / MGAs / brokers Renewable underwriters, loss-control engineers Co-design of the attestation format (first 90 days, unpaid) No revenue in the planning case

Why the buyer changed. If an EPC buys an adversarial test of its own site, the report says the EPC's security failed. If an owner buys it, the EPC treats it as an audit. Selling the full red team to owners and lenders, and a non-adversarial walk-down to EPCs, avoids that problem. Theft during construction usually falls under the EPC's care, custody and control and the builder's-risk policy, so the EPC feels the deductible and the schedule hit, not the full loss. The owner feels the delay to commercial operation. That is another reason to lead with the owner.

The economics of a theft event (illustrative ASSUMPTION)

A 150 MW desert PV site at a 28% capacity factor produces about 1,000 MWh a day, which is about $45k a day at an assumed $45/MWh. A theft that takes one 5 MW block offline for 30 days costs about $45k in energy, before cable, labor, expedited parts, the deductible and any availability penalties. A cut on a medium-voltage collection circuit can take a much larger share of the site offline.

Evidence (and its limits)

  • California: the Fresno County case above. "Up to $2.8M" is the sheriff's ceiling estimate from a single source.
  • Arizona: Phoenix-area copper theft doubled in 2025 (AZFamily). Thefts continued despite new safeguards in 2026 (KOLD).
  • Insurance: GCube reports that solar claim severity rose 87% over five years and lists copper theft among the drivers (PV Tech).
  • Construction-phase exposure: pv magazine USA.
  • UK pattern (not U.S. data): DeterTech reports that cable theft makes up about two-thirds of solar offences (PV Tech).
  • Adjacent: organized copper theft from data-center construction (TechRadar).

Honest gap: there is no public U.S. dataset of solar theft frequency per site-year. The first 90 days must produce primary data (Section 15). What would make the case: at least 3 of 25 discovery interviews volunteer a loss over $250k in the past 24 months, and at least 2 buyers agree to a paid, creditable assessment before the product exists. Without that, this is an assessment-consulting practice, not a program business.


3. Solution and offer

Step 1a: Physical Red-Team Assessment (owners, IPPs, lenders), $7.5k / $14k / $25k

  • Walk-down plus a night-time adversarial attempt under a pre-negotiated, standard rules-of-engagement and authorization template. Counsel drafts it with 2–3 friendly owners, and it is handed over as a finished document, not a draft. Signatories are everyone with site control (owner, EPC, landholder or BLM). Law enforcement is notified.
  • No-touch rule for energized equipment. "Access" means demonstrated reach, photographed and timed.
  • Deliverables: a pentest-format report, a 0–100 risk score, dollarized expected annual loss, a layered control plan, and mapped patrol and sheriff response times, stated as a limit (Section 9).
  • Fully creditable against a program signed within 60 days. For a 50–200 MW site: "$14k, $0 net if you deploy."
  • Travel is billed separately. Night work is done by W-2 staff or a licensed PI-firm subcontractor, never 1099 individuals.

Step 1b: Theft-Exposure Walk-down (EPCs), $3.5k

Non-adversarial. No intrusion and no special authorization, so it can be sold in the same week. It covers laydown-yard layout, spool staging, fence and gate conditions and response mapping, and produces an auto-generated zone plan from the Site Assessor. It is fully creditable.

Step 2: Layered program, priced per protected zone

Layer What it is Who delivers it
Detect Solar AI/thermal tower trailers (construction) or fixed thermal poles (operating) One tower OEM in Years 1–2, under SLA
Sense Cable-tamper and vibration sensing; gate and pull-box contacts OEM sensor partner, installed by the tower partner or the site's electrical sub
Triage Bought AI filter at the central station (Immix-integrated class) Central-station partner
Verify and dispatch UL-listed central-station operators verify on video; police plus licensed patrol paid per verified response One central station in Years 1–2; patrol mapped per site
Deter and recover Forensic marking of reels and inventory, signage, registration of marked-cable signatures with existing law-enforcement and scrap-reporting channels Marking supplier; registration by us
Prove Monthly Loss Control Attestation, a hash-chained evidence log and a per-site layer-uptime status page Ours

Construction zone unit (model, Year 1 prices; PROJECTION): | Line | Per zone per month | |---|---| | 1.5 towers × $1,500 wholesale (explicit driver) | $2,250 cost | | Wholesale monitoring ($250/tower), connectivity ($120/tower), bought triage ($10/tower) | $570 cost | | Hardware + monitoring billed at cost + 12%, shown to the customer | $3,158 price | | Management fee (triage oversight, verified dispatch, marking, attestation, quarterly re-test) | $1,200 price | | Zone price | $4,358 | | Zone COGS including patrol allowance, incident support, channel share on 30% of sites, 2% SLA credits | $3,213 | | Gross margin | 26.3% |

The default construction program is 4 zones (spool and laydown yards plus the active MV or substation work area), or about $17.4k a month per site with 6 towers. Full-perimeter coverage of a 1,000-acre site (6–10+ zones) is a separately priced upsell, not the default. Each mobilization carries a $2,500 fee, each relocation carries a fee, and incident support beyond 10 hours is billed hourly.

Price check against retail. Our all-in price works out to about $2,900 per tower-equivalent per month including management. LVT's published range is "$1,500 to $4,000 per month depending on configuration," and LVT Essentials starts at $1,000 a month (Sharpvue; LVT pricing). TrueLook cites $800–$2,900 a month for rentals, with monitoring adding $100–$500 per feed (TrueLook). We are inside the retail band, and the customer can see exactly what we charge for.

Pricing summary

  • Red team $7.5k / $14k / $25k; walk-down $3.5k; both creditable.
  • Construction: about $4.4k per zone per month, 4-zone default, ~10 months, plus $2.5k mobilization.
  • Operating subscription: $3.5k per site per month on a 36-month term. Owner-signed construction programs include a pre-priced operating option at COD.
  • Marking: $5k per new site plus $1.5k a year in refresh. Drone detection add-on: $1.2k a month (10% attach from month 24).
  • Insurer program: $0 in the planning case.

4. Why now

  1. Record build. EIA expects 43.4 GW of utility-scale solar and about 24 GW of storage in 2026. Arizona and California are leading battery markets (EIA; ESS News). Nevada is a top-5 storage state (News From The States).
  2. Copper price. Copper stayed above $4/lb through 2025 and reached record U.S. futures prices (Raptor Maps).
  3. Triage and towers are commodities. That is why we buy them rather than build them, and pass them through at a visible price.
  4. Lenders and asset managers want verifiable controls, and attestation data meets that need.
  5. Drone threats are emerging. The Part 108 BVLOS rule is still unsettled (UAV Coach). We offer detection only.

5. Market size (bottom-up ESTIMATES; assumptions stated)

  • National core TAM ≈ $145M a year at v1 prices: construction about $51M (≈530 project-years × $8k × 12), operating about $88M (an assumed 2,100 sites × $3.5k × 12), assessments about $4M. At v2 zone pricing (about $17k per site-month for a 4-zone program), the construction component is roughly 2× larger. We do not count that as a larger market, because many buyers will choose fewer zones.
  • Beachhead SAM (NV, AZ, CA desert): ≈ $25M a year; expansion SAM (with TX, NM, UT) ≈ $60M a year. Plant counts are assumptions to verify against EIA-860M.
  • Share the cases require. The planning case has 15.8 active construction sites and 26.7 operating sites in Year 5, roughly 8% of the expansion construction pipeline. The upside path (28 construction, 66 operating) needs roughly 13–15%, the level the red team called aggressive. Site volume now comes from engagements × conversion plus repeat sites inside landed EPCs, so every upside site traces back to a funnel step (Section 8).
  • Second beachhead, not counted in the planning case: data-center construction in Phoenix, Reno and Las Vegas. These are denser fenced campuses with richer owners and documented copper theft. Five of the 25 discovery interviews go to data-center GCs and owners. The upside path's extra volume can come from this segment or from better solar conversion; the plan does not depend on both.

6. Competition and positioning

Competitor What they do Strength Where we differ
AMAROK Solar-powered electric fence on a monthly fee; dedicated solar and wind page; free, no-obligation vulnerability assessment (assessment; solar and wind) Bundled monthly price; free survey; established brand We test adversarially and dollarize the result. Our fee is creditable, so the net cost matches theirs for a buyer who deploys. Electric fence is a possible layer partner on perimeters and yards.
LiveView Technologies (LVT) Solar mobile units plus cloud; partner API and integrations About $135M raised (LVT); scale; published entry pricing Hardware-led. Also a candidate supply partner.
Pro-Vigil AI remote video monitoring, mobile units Writes publicly about solar security No adversarial testing; no lender-grade attestation
Trailer vendors (2M, Sharpvue, TrueLook) Hardware and rentals; free site surveys Price Candidate suppliers
DeterTech (UK) / SmartWater / Southwire Proof Positive Marking and traceable cable Forensic credibility Components we use or index
Guard companies Manned guarding, patrol, incumbent EPC MSAs Relationships, licenses We use patrol only per verified response
O&M platforms Asset software, field service Owner relationships Channel, not rival

Positioning (revised): "Everyone else sells you cameras. We show you how your site gets robbed, fix it with a layered program at a transparent price, and give your lenders and asset managers the evidence."

Honest weaknesses: - AMAROK and the trailer vendors give their surveys away. - LVT or Pro-Vigil could add a risk-assessment service. - Guard incumbents hold EPC MSAs, and a startup has no EMR or TRIR history for prequalification. - Our moat in Years 1–2 is assessment credibility plus the attestation format. The data moat exists only after about 50 site-years.


7. Business model and pricing (PROJECTION)

Stream Price (model) Gross margin (model) Notes
Red-team assessment $14k average, creditable 60% on fees billed 40% of red teams convert. Revenue is booked net of credits, and the cost of every engagement is booked.
EPC walk-down $3.5k, creditable 70% 30% convert to a first EPC site (a new logo)
Construction program $4.36k/zone/month × 4 zones, ~10 months, + $2.5k mobilization 26% (zone level) Tower price is an explicit driver; hardware passed through at cost + 12%
Operating subscription $3.5k/site/month, 36 months, 0.8% monthly churn ~43% 2 leased thermal poles, monitoring, patrol and incident allowance, 2% SLA credits
Marking $5k per new site plus $1.5k/yr refresh 60%
Drone detection $1.2k/month, 10% attach from month 24 40%
Insurer program $0 (planning case) n/a Upside path only: $30k / $75k / $130k in Y3–Y5

Conversion assumptions (planning case): - Walk-down to first EPC site: 30%, 5-month lag. - Repeat sites per landed EPC: 1.2 a year from 6 months after landing; 15% logo attrition a year. - Red team to owner-specified construction program: 15%. Red team to operating program: 25%, 7-month lag, 2 sites per conversion (portfolio assessments sample several sites; ASSUMPTION). - Construction to operating: 12% for EPC-sold sites, 40% for owner-specified programs with the pre-priced COD option. - O&M channel: zero until signed. - Prices rise 3% a year.

Mix. In Year 5 of the planning case, construction is 69% of revenue, operating recurring 23%, and assessments 4.3% (net of credits). Recurring revenue stays below 40%, so the exit multiple is capped at 6–7× under our own rule (Section 12).


8. Go-to-market (revised)

Motion: land the EPC, expand across its projects; and get owners to write the program into EPC contracts

  1. Owner-led. Sell red teams to IPPs and lenders as portfolio and pre-COD diligence. Push owners to require a "verified loss-control program during construction" in EPC contracts, so the owner's money pays and the EPC buys to comply.
  2. EPC preconstruction. Sell walk-downs to estimating and preconstruction teams so the program is priced into the bid. Start prequalification at the top 10 Southwest EPCs in month 1.
  3. Expansion inside landed EPCs. Repeat sites close in 30–45 days.

The first 10 targets (profiles only; none contacted)

  1. VP Asset Management at an IPP with operating desert solar that has a reported theft (red team)
  2. Director of Operations at an IPP with a 5+ site Arizona portfolio (portfolio red team)
  3. Independent engineer or asset manager at a tax-equity investor (diligence red team, attestation)
  4. Head of preconstruction at a top-10 utility-scale EPC (walk-down, bid inclusion)
  5. Owner's construction manager on a 150–300 MW PV-plus-storage project (owner-specified program)
  6. Site Security / HSE manager at an EPC on an Arizona project (walk-down)
  7. Construction manager at a Mojave BESS project
  8. GC or owner's representative on a data-center campus build in the region (second-beachhead test)
  9. VP Operations at a Southwest O&M provider (channel, only if signed)
  10. A renewable MGA or broker loss-control lead (attestation co-design, no revenue)

CAC (PROJECTION, recomputed)

Sales cost here means the seller(s) at $220k loaded, events, travel and prequalification, plus commissions. Commissions are 9% of first-year contract value, excluding hardware and monitoring pass-through. Paying 9% on a pass-through that carries a 12% markup would make the hardware unprofitable.

Y1 Y2 Y3 Y4 Y5
Planning case: blended CAC per new program site ~$162k (1.4 sites) $42k $26k $21k $22k
Upside path ~$104k $27k $16k $16k $16k

This matches the red team's estimate of $30–40k in Years 1–2, falling toward $15k once expansion inside each EPC is working. Year 1 is essentially all investment.


9. Operations with minimal headcount (revised)

What we outsource: hardware, installation, field service and truck rolls (one OEM, under SLA); 24/7 verification, tier-1 intake and a defined escalation tree written into the central-station contract; bought AI triage; patrol paid per verified response; bookkeeping.

What stays human, and how it is budgeted: | Work | Load | How we handle it | |---|---|---| | The 2 a.m. call (tower offline, false dispatch, a missed theft) | ~1 FTE per 25–30 active sites | Account & SOC Ops Manager hired at the 4th active site (month 19 in the planning case, month 15 on the upside path); a support analyst above 30 active sites; a per-site layer-uptime status page so customers check it instead of calling | | Mobilizations, demobilizations, tower moves | 8–12 PM hours per mobilization; 2–4 hours a month per active site | Site Assessor produces the placement plan, the OEM executes under SLA, and every relocation carries a fee. Mobilization coordinator hired at 12 active construction sites. | | Incidents (police support, footage export, chain of custody, insurer packs, subpoenas) | 15–25 hours per serious incident | Central station named as primary custodian of video; templated incident pack; billed hourly beyond 10 hours; "detection and verification only" scope; liability cap | | Remote desert response | Many sites are 45–90+ minutes from patrol or a deputy | Map response time before quoting and disclose it as a limit. Where response is over 30 minutes, rely on deterrence (talk-down, lights, marking, tamper alarms) and say so. | | Assessments | ~2 field nights each plus reporting | Capacity cap of 2 engagements a week per lead. About 70% of each report is generated from Site Assessor and drone-capture templates. A second assessor is hired at 40 engagements a year. | | Licensing (3 states, many counties and cities) | Recurring | Qualified manager or licensee contract ($50–60k a year) plus a 0.25 FTE compliance coordinator from Year 2 |

Scrap-yard app: cut. Nevada dealers already keep statutory records under NRS 647. We register marked-cable signatures with the existing law-enforcement and scrap-reporting channels in each county instead, and build an app only if a sheriff's office asks for one.

Org chart (W-2; hires triggered by volume, planning-case timing)

Role Loaded cost Trigger Planning case Upside path
Program Director & Sales Lead (becomes the GM) $220k + commission Month 4 M4 M4
Monitoring Software & Partner Manager $140k First active site M11 M10
Assessment Lead (W-2) $150k 12 engagements in the trailing 12 months M15 M13
Account & SOC Ops Manager $120k 4th active site M19 M15
Compliance coordinator (0.25 FTE) $30k Year 2 M13 M13
Mobilization / project coordinator $100k 12 active construction sites M47 M33
Support & SOC analyst $95k More than 30 active sites M48 M33
Second Sales Lead $200k Trailing revenue ≥ $4.5M M57 M41
Second Assessor $140k 40 engagements a year not reached M44

W-2 headcount at year end: planning case 2 / 4 / 4 / 6 / 7; upside path 2 / 4 / 6 / 8 / 8.

Founder time and pay

  • Hours: 25–30 hours a week in months 0–6, then 15+ hours a week until the Assessment Lead can sell and run engagements alone (expected around month 18–24), then about 8–10 hours a week.
  • Pay: the model carries founder market compensation of $150k in Year 1, $120k in Year 2 and $75k a year after that, inside adjusted EBITDA, so no buyer add-back is needed. The Program Director's $220k is the GM line from month 9 on.

10. Technology and the prototype

Build only what is differentiated (contract build, $35k instead of v1's $90k): 1. Event-metadata ingest from the OEM and central station (LVT exposes a partner API and integrates with Immix-class platforms; API Evangelist; LVT monitoring services). 2. Hash-chained evidence log and per-site layer-uptime status page. 3. Attestation generator (monthly PDF for lenders and asset managers). 4. Site Assessor: the risk engine, the zone planner and the sales calculator.

Bought, not built: AI event triage at the central station. A Scylla-class filter integrated with Immix was previously listed as a low per-camera monthly add-on. That pricing page is now gone, and Scylla's FAQ says pricing is by quote only, so the price is unverified; the model carries $10 per tower per month. The ">90% auto-dismiss" figure is a target to measure in pilots, not a fact.

Prototype (two linked tools): Site Assessor (map-based perimeter, risk score, attack-path narrative, expected loss, auto-placed per-zone coverage with honest coverage gaps shown) and a SOC console demo (synthetic events, verification card, dispatch timeline, incident report, attestation PDF). All demo data is labeled synthetic.


11. Financial plan (PROJECTION)

Planning case (base), $000

Y1 Y2 Y3 Y4 Y5
Construction incl. mobilization 66 614 1,521 2,496 3,425
Operating subscriptions 2 76 305 651 1,069
Assessments (net of credits) 39 117 164 190 214
(fees credited to programs) (23) (71) (100) (116) (132)
Marking 7 45 94 143 191
Drone add-on 0 0 10 22 37
Insurer program 0 0 0 0 0
Revenue 114 853 2,095 3,502 4,936
Gross profit 40 286 734 1,293 1,916
Gross margin 34.7% 33.5% 35.0% 36.9% 38.8%
W-2 payroll + compliance 188 592 700 748 1,037
Founder market comp 150 120 75 75 75
Commissions 8 43 88 130 167
Bad debt (1%) 1 9 21 35 49
Insurance (E&O, GL, $5M umbrella, cyber) 80 95 115 130 145
Qualified manager, license fees 50 52 55 57 60
Other (engineering, cloud, legal, S&M, G&A) 150 223 293 348 393
Opex 627 1,134 1,347 1,523 1,927
Adjusted EBITDA –588 –849 –613 –229 –10
Unlevered FCF –705 –906 –691 –317 –102
Active construction sites (EOY) 1.1 4.6 8.6 12.5 15.8
Operating sites (EOY) 0.3 3.7 10.0 17.9 26.7
Active EPC logos (EOY) 0.9 3.4 6.8 10.1 13.0
Red teams / walk-downs 3 / 6 10 / 12 14 / 15 16 / 16 18 / 16
W-2 headcount 2 4 4 6 7

Fractional site counts are expected values from the monthly model. SLA credits (2% of program revenue) sit in COGS.

Charts: five-year projections by scenarioprojection · $000
Revenue
Adjusted EBITDA
From model.json. Interactive version with cash curves and sensitivities: About the model.

Upside path (bull), $000

Y1 Y2 Y3 Y4 Y5
Revenue 160 1,301 3,572 6,427 9,520
Gross margin 36.1% 37.0% 39.7% 41.9% 43.9%
Opex 644 1,238 1,516 2,081 2,460
Adjusted EBITDA –586 –756 –98 612 1,717
Active construction / operating sites (EOY) 1.6 / 0.6 7.2 / 7.2 14.5 / 22.4 21.8 / 42.4 28.4 / 65.5
Operating recurring share of revenue 2% 13% 21% 26% 30%

What has to be true for the upside path (relative to the planning case): - Walk-down conversion of 35% (vs 30%) and red-team-to-operating conversion of 30% (vs 25%). - 1.6 repeat sites per EPC a year (vs 1.2) and 2.5 operating sites per portfolio conversion (vs 2.0). - A signed O&M channel adding 0.2–0.4 sites a month from Year 3. - About 30% more engagement volume (from data centers or stronger solar demand) and prices 5% higher. - An OEM tower price of $1,300 and a small insurer program.

Bear case

At 65% of volume, 10% lower prices and $1,900 towers, adjusted EBITDA stays negative throughout and peak need runs past $4.4M. It is never run. The day-90 or month-9 gates stop it.

Sensitivities (planning case)

  • Tower wholesale price ($1,200 → $1,900) moves construction gross margin from 29.0% to 23.5%, but moves Year 5 EBITDA by less than $10k, because hardware is passed through at cost plus 12% and our gross profit sits in the management fee. Pushing back on the red team here: tower price is no longer a margin risk. It is a competitiveness risk. At $1,900 our all-in price per tower-equivalent rises to about $3,400, near the top of LVT's published $1.5–4k band. The Day-30 gate stays in place for that reason.
  • Volume is the driver that matters. At 0.8× / 1.0× / 1.15× / 1.3× the planning-case engagement volume, Year 5 adjusted EBITDA is –$138k / –$10k / +$151k / +$192k. Volume alone does not reach the upside path, because hires are triggered as volume rises. Conversion rates and operating sites per conversion are what move the business.

Capital plan (replaces v1's $250k + $350k)

Source Amount Timing Gate
Founder tranche 1 $250k Month 1 Day-30 gate (below) passed before more than about $40k is spent
Founder tranche 2 $200k Month 5 Day-90 gate
Founder tranche 3 $150k Month 9 Month-9 gate
SAFE $400k ~Month 11 $3M post-money cap with MFN. Any investor. No ROFR, channel exclusive or information rights that narrow the exit buyer pool.
Receivables line up to $200k (80% of eligible AR) From the first signed EPC contract Not modeled as equity
Seed round $1.25M at ~$8M post Month 18 Month-18 gate = the upside-path test

Launch budget: $100k (v1: $175k): software $35k; assessment kits $15k; counsel for licensing opinions, the RoE template and C-corp formation $25k; prequalification and insurance binding $10k; credits for the first 3 engagements $15k. Deferred until the first paid site: the demo tower ($25k). Cut: the scrap app ($20k).

Cash by month (summary; full monthly series in model.json). - Cumulative unlevered burn is about $0.53M by month 9 and about $1.15M by month 18 on every path. The paths differ in what they show by month 18, not in what they cost. - On the upside path, cash troughs at about –$25k around month 10, before the SAFE closes. A small founder bridge or the AR line covers it. - In the planning case, cash would run below zero in Year 2 and reach about –$1.6M by Year 5 if the business were funded through. That is why it is stopped at month 18 instead.


12. Returns (PROJECTION)

Exit multiples (revised and cited)

  • For sub-$2M EBITDA project integrators with under 15% RMR, CT Acquisitions cites 3.5–5.5×. Its RMR-mix bands are 4–5× for project-only shops, 6–8× for 25–40% RMR and 8–11× for 40%+ RMR (CT Acquisitions; a broker's marketing page, directional only).
  • Pure commercial monitoring books trade at 40–60× RMR, roughly 8–12× EBITDA (same source). We use 30× operating RMR as a conservative cross-check. Operating RMR is defined as operating subscriptions + drone add-on + marking refresh at the month-60 run rate. It excludes construction, mobilization, assessments and insurer revenue.
  • Strategic consolidators are active (Security Sales), but deal multiples are rarely disclosed.
  • Our rule: bear 4×, planning case 6×, upside 7×. 9× only if operating recurring revenue exceeds 40% of revenue. The upside path reaches 30%, so it is valued at 7×. The Stout public and middle-market medians (11.0× / 9.4×) used in v1 describe much larger companies and are retired.

Scenario returns (Year 5 exit; founder in $600k; C-corp, no distributions, net cash paid out through the exit)

Bear Planning case Upside path
Y5 revenue $2.1M $4.9M $9.5M
Y5 adjusted EBITDA –$0.84M –$0.01M $1.72M
Multiple 4× 6× 7×
EV (EBITDA basis) n/a n/a $12.0M
30× operating RMR cross-check $1.2M $3.4M $8.7M
Net cash at exit n/a (killed) n/a (killed) $2.3M
Founder fully diluted 76.7% 76.7% 64.7% (13.3% SAFE, 10% pool, 15.6% seed)
Founder proceeds / MOIC / IRR stopped at day 90 or month 9 stopped at month 18 $9.3M / 15.5× / 78%
All-equity view (founder funds the whole peak plus a 15% buffer, about $2.1M, keeps 90%) n/a n/a 6.1× / 44% IRR

The 10% option pool funds 5–10% for the Program Director (the GM) plus a retention pool for the Assessment Lead and SOC Ops Manager.

Probability-weighted (the decision metric)

Path Weight (judgment) Founder cash
Stopped at day 90 or month 9 (third tranche withheld) 30% –$450k in, ~$25k recovered
Wound down at month 18 (planning-case-like evidence) 45% –$600k in, ~$75k recovered from selling the practice or software
Upside path to a Year-5 exit 25% –$600k in, $9.3M out
Expected ~$555k in, ~$2.36M out: 4.3× expected MOIC, ~37% expected IRR

The weights are judgment, not data. With a 15% chance of the upside path, the expected MOIC falls to about 2.6× (about 23% IRR). With 35%, it is about 5.9× (about 46% IRR). The day-90 interview test (3 of 25 interviews reporting losses over $250k, and 2 paid creditable assessments) is the cheapest way to update these weights.

Tax structure: C-corp and QSBS

  • Form a Delaware C-corp from Day 1. SAFEs fit a C-corp cleanly, and stock issued after July 4, 2025 can qualify for the expanded §1202 exclusion: 50% after 3 years, 75% after 4, 100% after 5, a $15M per-issuer cap and a $75M gross-asset limit (EY; Crowell).
  • On the upside path's roughly $8.7M founder gain, that is about $2.1M of federal tax avoided at a 23.8% rate, worth more than any distribution policy. State conformity varies.
  • Qualified-trade risk: §1202 excludes businesses whose principal asset is the skill of their employees (for example, consulting). Assessments are 34% of revenue in Year 1 but 4.3% by Year 5 in the planning case and 2.8% on the upside path, and monitoring and software dominate. Get counsel's view early, and keep assessments under about 15% of the mix.
  • Exit timing: to capture the 100% tier, close after the fifth anniversary of the original issuance.

13. Risks and mitigations

Risk Likelihood / impact Mitigation
EPCs keep buying the cheapest trailer, guard or free-survey vendor High / High Owner-specified programs; creditable assessments; transparent cost-plus hardware; per-zone pricing
Conversion lands at planning-case rates, not the upside path High / High This is the central risk. Gated tranches; month-18 seed gate; wind-down limits founder loss to about $525k
Prequalification delays the first EPC logo beyond 6 months Medium / High Start prequal at the top 10 EPCs in month 1; owner-led route as a parallel path
Licensing (NRS 648; CA BSIS; AZ) blocks or delays assessments or monitoring Medium / High Counsel and PILB written answers by Day 30; qualified manager; customer-direct monitoring as the fallback in unlicensed states
Insurance costs more than $100k, or EPCs demand $5M+ limits, additional-insured status and subrogation waivers Medium / High Broker quote by Day 30 as a gate; budget $80–145k a year; model the umbrella
Red-team incident (arrest, injury, energized gear) Low / Severe Standard RoE signed by all parties with site control; W-2 or licensed-PI testers only; no-touch rule; law-enforcement notice
Being the 2 a.m. contact overloads a small team Medium / Medium Central-station tier-1 contract; status page; SOC hire at the 4th site
Liability after a theft that "should have been stopped" Medium / High Detection-and-verification scope; liability cap (expect EPC paper to push back); central station as custodian; incident hours billed
A strategic investor narrows the exit buyer pool Medium / Medium No ROFR or exclusivity in any financing
Copper price collapses Low–Medium / Medium Equipment, module and battery theft remain; data-center second beachhead
Key-person risk Medium / Medium Playbook; second assessor; retention pool

  • Nevada, NRS 648 (verified against the statute text). NRS 648.0155 defines a "security consultant" as a person licensed as a private patrol officer or private investigator who furnishes advice on security methods and equipment. NRS 648.013's private-patrol definition covers businesses protecting property "to prevent the theft, loss or concealment of property". NRS 648.063 treats a single unlicensed act as engaging in the business (NRS 648). Implication: the assessment itself, not only monitoring, probably needs a PILB license and a qualified manager in Nevada, and night testers may need work cards. "Launching under a partner's license" is withdrawn as a plan.
  • Licensing structure (decided before spending):
  • (Default) Our own license through a qualified manager (NV first), budgeted at $50–60k a year plus 0.25 FTE of compliance work.
  • (Fallback) In any state where we are not yet licensed, the customer contracts monitoring directly with the licensed central station or OEM, and we sell the assessment, software and attestation. That is the asset-light economics tested in Section 17.
  • California: BSIS licenses Alarm Company Operators. Whether a company reselling monitoring must hold its own ACO license is not verified here; counsel must confirm. Patrol requires a PPO (partner).
  • Arizona: guard agencies are licensed by DPS (partner); verify alarm-business rules at state and city level.
  • Local: Las Vegas/Clark County electronic-security addenda (PL058); NSCB contractor license for low-voltage installation (partners install).
  • Scrap metal: NRS 647 record-keeping (NRS 647). We register marking signatures with existing channels; no app.
  • Red-team engagements: authorization from every party with site control; RoE; law-enforcement notice; trespass statutes; NFPA 70E / OSHA no-touch; site induction.
  • Drones: Part 107 for assessment flights. Detection only. Private mitigation is generally unlawful.
  • NERC CIP-014: the client's obligation; our methodology must not make compliance claims.
  • Insurer program: structure it as data and attestation fees, not commissions (producer-license risk).
  • Worker classification: no 1099 individuals for night intrusion work.
  • Entity: Delaware C-corp; QSBS qualified-trade opinion (Section 12).

15. 90-day launch plan and gates (recalibrated)

Days 0–30 (spend limited to about $40k of legal and interview costs until this gate passes) - Form the C-corp. Engage counsel on NRS 648, BSIS and Arizona licensing, the RoE template, the liability cap and QSBS. - Gate inputs: - a written OEM tower quote ≤ $1,500 a month (target ≤ $1,300) with SLA - a central-station wholesale quote including tier-1 intake - a broker insurance indication (E&O, GL, $5M umbrella, cyber) ≤ $100k for Year 1 - counsel's written licensing path - a patrol response map for 3 sample counties - 25 discovery interviews: owners, IPPs, EPC preconstruction teams, lenders' independent engineers, 2–3 underwriters or brokers, and 5 data-center GCs or owners. Ask for loss history under NDA. - Submit prequalification at the top 10 Southwest EPCs.

Days 31–60 - Offer 3 creditable red teams to owners and 5 walk-downs to EPCs. Target: sign 2 paid engagements. - Ship Site Assessor v1 (zone planner). Start the attestation format with one MGA or broker (unpaid co-design).

Days 61–90 - Deliver the first engagements. Hire the Program Director.

Gates (stop or pivot if any is true) - Day 30: any gate input missing or over its limit → stop, or pivot to customer-direct (asset-light) structure. - Day 90: - fewer than 2 paid engagements, or - fewer than 3 of 25 interviews report a loss over $250k in the last 24 months, or - fewer than 2 buyers agree to a paid, creditable assessment - → stop, or run as a low-capital assessment practice. - Month 9 (before tranche 3 and the SAFE): - fewer than 5 paid engagements, or - no signed program, or - fewer than 2 EPC prequalification approvals, or - realized construction gross margin below 24% - → stop. - Month 18 (the seed gate; this is the upside-path test). All of the following must hold: - at least 6 active program sites - at least 3 EPC logos (or 2 logos with at least 2 repeat sites between them) - at least 1 owner-specified construction program - monthly revenue ≥ $90k - walk-down conversion ≥ 30% - Otherwise, wind down or sell the practice; no new capital. (Planning-case values at month 18: about 4 sites, about 2 logos, about $64k a month. Upside path: about 6–7 sites, about 3 logos, about $96k a month.) - At any time: a serious safety incident or a licensing refusal → halt and review.


16. Domain names (candidates; availability not checked here)

coppersentinel.com · cusentinel.com · wiresentinel.com · keepthecopper.com · redfenceops.com · sitebreach.com


17. Red team and response

Three reviewers examined v1: a former hedge-fund PM (financial model), an enterprise-sales lead (go-to-market and pricing) and a lean-operations reviewer. Their critiques overlapped heavily. Each is answered below with Accepted, Accepted with changes or Pushed back. Every resulting number is a PROJECTION from model_build.py.

Overall verdict

  • The reviewers were right that v1's headline was wrong. The $13.9M EV, 60× MOIC and 130% IRR all came from a construction cost line that contradicted its own note (about 14% gross margin, not 42%), an owner EBITDA that left out a GM salary, commissions, bad debt and SLA credits, and a platform multiple applied to a small services shop. Retired.
  • We push back on the reviewers' own restated base (about $0.84M EBITDA, $4–6M EV and about 76% founder IRR). It kept v1's site volumes. Once volume is driven by engagements × conversion, as the financial reviewer's own critique #6 requires, and the operations reviewer's staffing is included, the planning case reaches only about breakeven adjusted EBITDA in Year 5 and trips the month-18 gate. The honest framing is an option: about $1.15M spent over 18 months (founder $600k) to test for an upside path worth about $12M EV and 15.5× / 78% IRR to the founder. Expected value is about 4.3× / 37%.

Financial model red team

# Critique Response
1 Construction COGS contradicts itself (2.5 towers × $1.9k exceeds the 58% COGS line); true GM about 14% Accepted. The rebuild is shown in model.json → v1_construction_bundle_rebuild (14.1%). Restructured to per-zone pricing with hardware at cost + 12% and a visible management fee. Zone GM is 26.3% at a $1,500 tower and 29.0% at $1,200. Tower price is an explicit driver. Pushback: under pass-through pricing, tower price barely moves EBITDA (under $10k in Year 5 across $1,200–$1,900). It moves our price competitiveness instead, so the Day-30 OEM quote gate stays at ≤ $1,500 (target $1,300).
2 Founder works free; no commissions, bad debt or SLA credits; owner EBITDA overstated Accepted. Founder market comp $150k → $120k → $75k (the Program Director at $220k is the GM from month 9). Commissions of 9% of first-year value; 1% bad debt; 2% SLA credits in COGS. All figures are now adjusted EBITDA. Partial pushback: commissions are paid on value excluding pass-through, because 9% on a 12% hardware markup loses money.
3 9–12× is a platform multiple; sub-$2M EBITDA shops trade at 3.5–5.5× (project) to 6–9× (recurring mix) Accepted. Bear 4×, planning case 6×, upside 7×, and 9× only above 40% operating RMR (the upside path reaches 30%). Verified against CT Acquisitions. The $13.9M headline is retired.
4 Peak cash understated; raise timing doesn't work; plan for about $1.0M; show cash monthly Accepted, and it is worse than estimated. Burn is about $0.53M by month 9 and about $1.15M by month 18 on every path. Committed capital before the seed is about $1.2M: founder $600k in three gated tranches, a $400k SAFE and a $200k AR line. A seed of $1.25M at month 18 is raised only on the upside path. The demo tower is deferred and the scrap app cut (launch budget $175k → $100k). Monthly cash is in model.json → monthly_cash.
5 $3.5M post is generous; strategics want a ROFR; no team equity Accepted. $3M post-money cap with MFN; no ROFR or exclusivity; 10% option pool (5–10% for the Program Director plus retention). Founder fully diluted is 76.7% before the seed and 64.7% after.
6 Wins don't reconcile with the assessment funnel; 35% conversion crosses a buyer change; the bear case should be the planning case Accepted. Volume now comes from engagements × conversion plus repeat sites inside landed EPCs. Construction-to-operating conversion is 12% for EPC-sold sites (40% only for owner-specified programs with a pre-priced COD option). The O&M channel is zero until signed. The resulting planning case sits near v1's bear volumes, as the reviewer predicted.
7 $35k insurance is too thin Accepted. $80k → $145k, including a $5M umbrella. A broker indication ≤ $100k by Day 30 is a gate.
8 60× and 142× headlines obscure the signal; use fully diluted proceeds and probability weighting Accepted. Headlines are now adjusted EBITDA → multiple → fully diluted founder proceeds. Probability-weighted: 30% killed early, 45% wound down at month 18, 25% upside → 4.3× expected MOIC, ~37% expected IRR. Distributions are dropped (C-corp).
9 Entity and tax unresolved; C-corp and QSBS worth more than distributions Accepted. Delaware C-corp from Day 1. About $2.1M of federal tax avoided on the upside path's gain. Assessments are 4.3% / 2.8% of Year-5 revenue (well under the 15% guardrail); a qualified-trade opinion from counsel is a Day-30 item. Sources: EY, Crowell.
s RMR undefined; "25×" is pre-dilution; insurer program speculative Accepted. Operating RMR is defined in Section 12. The "25×" claim is removed. The insurer program is $0 in the planning case.

Go-to-market and pricing red team

# Critique Response
1 The paid assessment competes with free ones; AMAROK is missing from the competitor table Accepted. Verified: AMAROK offers a "free" "no-obligation" assessment (AMAROK). Fees are now fully creditable within 60 days and tiered; AMAROK is added to the table as a rival and possible layer partner; paid-and-uncredited engagements are tracked as a KPI (assessments_net_of_credits).
2 Bundle priced against retail that already includes monitoring; pass hardware through and charge a visible management fee Accepted. Cost + 12% pass-through plus a $1,200/zone management fee; all-in about $2.9k per tower-equivalent, inside the published LVT band (Sharpvue, LVT, TrueLook). Month-9 GM kill threshold set at 24%. Data caveat: the Spot AI page we checked says LVT pricing is "not published", so we rely on the Sharpvue FAQ and LVT's own Essentials price.
3 2.5 towers can't protect 150 MW; price by protected zone Accepted with changes. Per-zone pricing with a 4-zone default (about 6 towers, about $17.4k a month) aimed at laydown yards, spools and active MV and substation areas, where the reviewer agrees losses concentrate. Pushback on 6–10 zones as the default: full-perimeter coverage is an upsell, and the Site Assessor shows the coverage gaps honestly rather than implying full-site protection.
4 Wrong buyer and timing; prequal; incumbents; first logo takes 4–6 months Accepted. Sales go to preconstruction, estimating and owner's CMs; owner-specified programs; prequal starts in month 1; first logo modeled at a 5-month lag; repeat sites at 1.2–1.6 per logo per year.
5 Red-teaming the buyer's own site is political; legal review takes 30–90 days Accepted. Red teams go to owners, IPPs and lenders; EPCs get a non-adversarial walk-down; a standard RoE template is pre-negotiated.
6 35% construction-to-operating conversion crosses a buyer gap Accepted. 12% for EPC-sold sites; 40% only with an owner-signed COD option (the reviewer suggested 35–50%).
7 CAC and sales payroll too low Accepted. Seller at $220k loaded plus commission. Implied CAC is about $42k in Year 2 of the planning case, falling to about $21k (upside path: $27k → $16k). Peak cash is re-run (Section 11).
8 The insurer attestation won't move premiums; don't sell it as savings Accepted. Repositioned to lenders, tax equity and asset managers; insurer co-design is unpaid; no insurance-benefit claims until a carrier commits in writing.
9 Exit multiple unsupported for this mix; lead with the RMR value Accepted. The RMR cross-check is shown for every case; multiples are tied to the RMR share. Master agreements with annual minimums and owner programs spanning construction plus operations are the route to a higher multiple.
10 Consider the data-center construction beachhead first Accepted as a test. Five of the 25 interviews go to data centers. The segment is not in the planning case; it is one of the two routes to upside-path volume.
— "What would change my mind" test Adopted verbatim as the day-90 gate.

Lean-operations red team

# Critique Response
1 42% construction GM doesn't survive arithmetic; make the GM test a pre-launch gate; charge mobilization separately Accepted. See financial #1. The Day-30 OEM quote is now a pre-spend gate; a $2.5k mobilization fee and relocation fees are added.
2 "Launch under a partner's license" probably unavailable; assessments may need a NV license; licensing is a recurring cost Accepted and verified against the statute text (NRS 648: 648.0155, 648.013, 648.063). Own license via a qualified manager ($50–60k a year) plus 0.25 FTE compliance; customer-direct monitoring as the fallback. The California ACO point is flagged as unverified.
3 Nobody answers the phone at 2 a.m. until Year 3 Accepted. SOC Ops Manager at the 4th active site; tier-1 intake in the central-station contract; status page; support analyst above 30 sites.
4 Construction churn means constant project management Accepted. Mobilization coordinator at 12 active construction sites; relocation fees; the Site Assessor produces placement plans.
5 Don't build a $70k fusion classifier; buy triage Accepted. Triage is bought; the build drops to $35k (ingest, evidence log, attestation, Site Assessor); no ML engineer.
6 Incidents create human work Accepted. Central station as custodian, templated incident pack, hours billed beyond 10, allowance in COGS.
7 Remote desert patrol coverage is assumed, not mapped Accepted. Response mapped before quoting and disclosed; deterrence used where response exceeds 30 minutes; one OEM and one central station in Years 1–2.
8 The scrap-yard app is an unpaid field-sales campaign Accepted. Cut ($20k saved); signatures registered through existing channels instead.
9 Assessments are labor-heavy and founder-dependent; 1099 night work is risky Accepted. 2 a week per lead; 70% templated reports; W-2 or licensed-PI subcontract only; travel billed; second assessor at 40 a year.
10 Headcount and comp too light; founder taper is wishful Accepted. Triggered hires reach 7 (planning) or 8 (upside) W-2 plus 0.25 FTE compliance plus founder comp; founder at 15+ hours a week until the Assessment Lead sells alone.
— Recommended structural change: run asset-light (customer buys towers and monitoring directly; we earn fees; GM 65–75%; 4–5 W-2) Tested; pushed back as the default, kept as the fallback. The asset_light scenario in model.json gives a 77.5% Year-5 GM but only $2.0M of revenue, and adjusted EBITDA of –$121k against –$10k for the managed model, with a similar peak need ($2.86M vs $2.72M). The reason: our opex is driven by selling, assessing, licensing and the SOC, not by hardware, and the qualified-manager requirement applies to assessments either way. Asset-light lowers COGS exposure and the 2 a.m. burden but does not fix the economics. It remains the fallback in unlicensed states and the pivot if the Day-30 OEM or licensing gate fails.

What would change the plan again

  • Upward: walk-down conversion ≥ 35%, more than 2 operating sites per portfolio conversion, a signed O&M channel, or a data-center beachhead with clearly higher willingness to pay.
  • Downward or stop: any Day-30 gate input failing (tower quote, insurance, licensing), or the day-90 interview test failing.

Sources