Rook ReportsOpen-Source
Intelligence
Sign in
Report Type · Vendor / Product Breakdown

The Breakdown.

X-ray of a single vendor or product. Breakdowns drill deep into investor and financial signals, intellectual property filings, technical documentation, and customer feedback. Useful for separating real capabilities from hype, flagging vulnerabilities, and understanding risk.

$199
Price
~15–20 pages
Length
~48 hr
Fresh SLA
HTML · PDF · JSON
Formats
01The company

See the facts without the spin.

A breakdown is built for a buy, partner or compete decision on a single vendor. Start with the call, the factual spine, and who actually builds the thing.

The verdict

Bottom line up front

The call on the vendor first, fit, standing, and the one thing that should change your decision, before the supporting detail.

↳ The decision-relevant answer in fifteen seconds.

The verdict

Northwind Defense AI is a credible agentic-SOC contender with real autonomy in narrow domains, but revenue concentration and a single-cloud dependency make it likely fragile under a hyperscaler price move.

The teardown

Company & product

The factual spine, corporate identifiers, funding, headcount, product surface and deployment model, resolved and sourced, not lifted from the website.

↳ The vendor's real shape, on one card.

EntityNorthwind Defense AI, Inc.
Founded2019 · Series C (2024)
Headcount≈ 240 · 38% eng.
ProductAgentic SOC copilot
DeploySaaS · VPC · on-prem
The org chart

Who actually builds it.

Leadership and the teams beneath them, resolved from filings and hiring data, so you can see where the weight sits and who owns the claims. Hover a role.

Org chart · headcount ≈ 240
A. ReyesCEO · Co-founderJ. OkaforCTO · Co-founderM. LindqvistCOOD. HahnCFOResearch≈ 18 engPlatform Eng≈ 26 engDetection≈ 14 engCustomer Success≈ 22Revenue Ops≈ 19Finance & IR≈ 6

Founder-led, engineering-heavy, three of four functions report into a co-founder. Hover a role to see the team behind it.

02Intellectual property

Patents & IP filings.

Filings are a signal you can read before a product ships. We resolve the complexity and map each claim to reality.

123456FIG. 1, EXPLODED ASSEMBLY
Claim map

Hover the assembly to read the claim each component carries, and the one place the estate is conspicuously bare.

1EMI shield lidGRANTED
2Vapor-chamber spreaderGRANTED
3Inference SoC diePENDING
4Silicon interposerLICENSED
5Package substrateGRANTED
6System PCBUNFILED
3 granted1 pending1 unfiled gap
03The signal

Financial & investor read.

Filings, hiring, and investor signals to help you read against the narrative. Learn where momentum is real and where the curve is bending.

ARR · trailing 8 quarters
$0M$15M$30M$45MSeries CHiring freeze'24 Q1Q2Q3Q4'25 Q1Q2Q3Q4
Investor read

Est. ARR. ARR has roughly 5×'d in eight quarters, a durable top line.

Est. ARR$48M
Net revenue retention117%
YoY growth+38%
Cash runway≈ 22 mo
Top-3 concentration41%
04The claims

Hype vs. reality.

Every headline claim, held against the evidence. The bar shows how much of each promise the record actually supports and where the gap is pure marketing.

Marketing claimSupportedVerdict
Fully autonomous triage55%Partial

Autonomy holds in two narrow playbooks; everything else still gates on a human reviewer. · 45% claim gap

Sub-second graph traversal95%Verified

Benchmarked at 0.7s median across a 2M-edge graph, the claim substantiates. · 5% claim gap

On-prem feature parity60%Partial

Cloud-only for the newest detections; the on-prem build trails by about two releases. · 40% claim gap

Zero false-positive SLA15%Unsubstantiated

No contract we reviewed actually commits to this figure, it lives in the marketing only. · 85% claim gap

05The map

The ecosystem.

The competitors, partners, and dependencies the vendor operates inside. Hover any node to trace the relationship and see which dependencies have no failover.

NW123456789
Relationship trace

Hover any node to trace the relationship. Dashed red edges are dependencies with no failover.

Competitors
1Vendor A
2Open-source stack
3Incumbent suite
Partners
4Cloud MSP
5SIEM vendor
6Channel reseller
Dependencies
7Single hyperscalerSPOF
8Threat-intel feed
9GPU supplySPOF
2 single points of failure
06The standard of proof

Risk, receipts,
and the grade.

The parts that don't make the pitch deck, what could break, where every claim traces to, and the adversarial pass behind the verdict.

The risks

Risk flags & disclosures

Every material risk we surfaced, concentration, dependency, governance, litigation, graded by severity, with the disclosure (or its absence) noted.

↳ The risks that don't make the pitch deck.

High41% of revenue rests in three accounts.
MedSingle-cloud dependency with no failover disclosed.
LowTwo key-person clauses lapse within 12 months.
The receipts

Evidence register

Every source behind every figure and claim, graded on the NATO Admiralty code and hyperlinked to origin. Audit any line back to where it came from.

↳ Nothing asserted that you can't verify yourself.

The standard

Graded & adversarially checked

Every source carries an Admiralty grade and every estimate uses calibrated ICD 203 language. Before delivery, an independent red-team pass tries to break the verdict.

↳ The grade is the product. Always included.

A1Reliable source · confirmed
B1Usually reliable · confirmed
B3Usually reliable · possibly true
Adversarial pass · challenges the buy/compete call

Got burning questions?
Get the Breakdown.

$199 per breakdown, ~48-hour turnaround, free 90-second preview first. No contract.