Cybersecurity GTM demands AI-powered, always-on customer success

Mar 24, 2026 · The GTMnow Podcast
🎧 PodShort 35 min squeezed to 3 Ai sprinklerAI Revenue Operations
Episode artwork
Teresa Anania
Chief Customer Officer at Sophos
The GTMnow Podcast
35 min squeezed to 3
Full episode from The GTMnow Podcast
Quotable Moments

Why wait for a ticket? That to me is already a failure. We have to have always-on systems.

The expectations of the customer must not only be met, they must be exceeded.

It is all about crawl, walk, run. You got to start somewhere.

Key Insights
  • Cybersecurity is experiencing tremendous growth, contrasting with a general slowdown observed across many other SaaS categories.
  • AI significantly escalates potential cyber threats, which necessitates the deployment of even more advanced AI solutions for effective defense and prevention.
  • Effective customer success in cybersecurity demands 'always-on' systems and a highly personalized, curated digital journey that proactively addresses customer needs, ideally before they even realize they are stuck.
  • Customer expectations should not only be met but consistently exceeded, creating a direct link between customer success activities and positive outcomes like retention and expansion.
  • Cyber attackers can often penetrate critical systems within 3-4 hours, highlighting the urgent need for cybersecurity companies to have instantaneous and proactive response times, often intervening before the customer is aware of an incident.
  • Customer operations should transition from reactive, relationship-focused models to proactive, outcome-driven engagements that span the entire customer lifecycle, including onboarding, adoption, renewal, and win-back, all designed for personalized optimization.
  • To effectively drive revenue, customer success attribution models must correlate specific engagement touchpoints and leading indicators (such as identifying expansion opportunities during security posture assessments) directly to retention and Net Revenue Retention (NRR).
  • The future of modern go-to-market, heavily influenced by AI, will focus on enabling self-serve motions and personalized digital journeys that pre-empt customer issues, thereby optimizing human capacity for more complex and advanced customer needs while enhancing overall experience.
Metrics Mentioned
  • Over 600,000 customers (Sophos's customer base.)
  • Over $1 billion in revenue (Sophos's annual revenue.)
  • 3-4 hours (The typical timeframe within which attackers can penetrate critical systems.)
  • 24-48 hour cycle (The typical operational cycle for support/customer success teams in many software companies, which is often too slow for modern cyber threats.)
  • 80% of their time (The ideal proportion of time human customer success roles should spend on high-value customer engagements, as low-effort tasks are increasingly automated.)
  • 5:1 scorecard (A ratio of five great customer experiences to one bad one, which, if maintained, shows a 90% likelihood of continued customer relationship.)
  • 90% (The percentage of customer relationships that will likely continue if a 5:1 positive-to-negative experience ratio is maintained.)
  • 50/50 (Sophos's customer base split between top-of-the-book enterprise and long-tail segments, indicating an even distribution rather than an 80/20 rule.)

RevBots.ai View:

  • AI Sprinkler stage: Bolting AI onto legacy systems for threat detection mirrors reactive CS motions.
  • ARM potential: Orchestrated AI could automate 80% of low-effort tasks, freeing CSMs for expansion.
  • Tab Hopper trap: Manual security posture assessments miss real-time expansion signals in cyber.
  • SaaS Hoarder risk: Disconnected threat detection and CS tools create response lag in critical 3-4hr window.
🎧Full Episode:The GTMnow Podcast →