Deloitte is the R&D Lab.
Mythos is the Market.
Kindo × Deloitte · Strategic Story · May 2026
Click to begin
12 slides · ~4 min
1 / 12
The Thesis

A company made a bet
most people wouldn't take.

In May 2026, VTKL walked into Deloitte's Cyber Operate headquarters with a bold claim: we can take your $300M/year security practice from 40% EBITDA to 80%. Not by adding headcount. Not by cutting corners. By building AI agents that learn — and compound — every single day they're in production.

Kindo Platform Deloitte Cyber Operate VTKL · T&C
The Problem

The gap wasn't efficiency.
It was cost structure.

Deloitte's D&RaaS team was already operating at 70–85% efficiency — before Kindo, before any AI. The gap to 80% EBITDA wasn't a people problem. It was three locked costs: Swimlane licensing ($3–6M/yr), CrowdStrike markup ($2–4M/yr), and a fixed headcount model that couldn't scale without adding bodies. Tony saw the unlock nobody else was framing clearly.

40%
Current EBITDA
80%
Target EBITDA
$11.5M
Cost to eliminate
The Strategy

Deloitte funds the build.
Mythos creates the demand.

The strategy is elegant in its simplicity. Deloitte's $5.5M annual contract pays for every agent built. R&D cost to Kindo: zero. Once those agents are battle-tested in a Fortune 100 production environment, Kindo sells them to the market — to every company responding to the Mythos vulnerability wave — at a 2–5× revenue multiplier. The alliance and the market aren't separate businesses. They're two ends of the same flywheel.

"Every agent is a net new revenue goal. Either it brings new revenue dollars, or it drives better profit margins."
— Krishna, D&RaaS Lead · May 7, 2026
The Moat

The flywheel only spins
when agents are live.

Institutional knowledge isn't a document. It isn't a one-time transfer. Kush — Deloitte's Principal — defined it as compound learning through use. Every alert resolved teaches the agent. Every production week deepens the moat. The competitor who starts six months later doesn't just start later — they start six months behind on a curve that's accelerating. Speed to production is exponentially important.

🤝 Tony
Relationships
🧠 IK Capture
Domain knowledge
⚡ Agent Build
Team + Warren
📊 EBITDA Proof
Per agent
📈 Expand
More lines
The Scope

Today: 5% of the opportunity.
250–550 agents ahead.

The current A.1–A.5 contracted scope — four agents in production, one built — represents roughly 5% of the total agent opportunity across Deloitte's Cyber Operate portfolio. Five of six service lines have zero agent coverage today. D&RaaS is the beachhead. Every other service line follows the same expansion playbook: one relationship, one IK capture, one agent package — and then it scales across every client in that line.

30–40
D&RaaS agents (Layer 1)
80–165
Cyber Operate (Layer 2)
250–550
Full Cyber OP (Layer 3)
The Revenue Model

Three tiers.
Each one compounds the last.

Tony built a three-tier packaging framework from Kush's own words. Tier 1 — Core Package: the six agents that ship with every MXDR deployment, built into the $5.5M license. Tier 2 — Service Line Package: discipline-specific bundles built once from IK, sold many times — alliance net new revenue. Tier 3 — Bespoke Client: custom agents per F50/F100 client, the highest-margin work. Each tier earns the right to sell the next.

Tier 1 — Core
Built into $5.5M license. Ships with every MXDR deployment. Table stakes.
Tier 2 — Service Line
Build once, sell many. Alliance net new revenue. $1–2M+ per cycle.
Tier 3 — Bespoke Client
"Bespoke for billions." Per-client custom agents for F50/F100. Complex orchestration. Highest margin. Recurring.
The Market Window

The multiplier: $33–99M
in combined opportunity.

For every dollar earned from alliance net new agents at Deloitte, the Mythos market generates 2–5× in revenue. Conservative: $2 for every alliance dollar. Target: $3 — "This runs at Fortune 100" as the sales pitch. Mythos surge: $4–5 — speed premium when companies need agents deployed in days, not months. Total combined opportunity: $33M at the floor, $99M at the ceiling.

Conservative
Target
Mythos Surge
Bespoke + Recurring
The Team

Tony told Ron: 7 people.
The reality is 9.

Tony, Charlie, Joana, Victor, Dukane — plus an Agent Designer and an Engineer. That's the seven named to Ron. But Tony now says nine, including security analysts and consultants to design the agents — people who understand D&RaaS and Identity deeply enough to configure workflows, not just build software. And two AI partners: Warren on the T&C side, Odin on Kindo's side. The team mix: 60% Agent Designers, 25% Engineers, 15% Program.

"Tony is the only person at Kindo who can acquire the institutional knowledge that 55% of the scope and 60–75% of the EBITDA target depend on."
— Tony's CDO Thesis · May 22, 2026
The Execution

May → February 2027.
100 installs. 4 phases.

The execution plan runs five parallel workstreams: Platform, Deployment, Agents, Governance, and Training. HP is the first Fortune 100 production client — four phases from installation through steady-state autonomous operation. The 100-install target by February 2027 is the contractual milestone. As of today: 1 of 100 production equivalents complete. The clock is running.

✅ ITS Install
Done
HP Shadow
Now → Jun
10–20 MXDR
Jul → Aug
50 Installs
Sep → Dec
🎯 100
Feb '27
The Risks

Three open gaps
that need immediate attention.

The execution plan is strong. But three items could derail the timeline if they're not tracked actively this week.

🚨 May 31 — Swimlane Migration
Two workstreams, one deadline. AI use replacement (May 31) vs SOAR workflow replacement (no date, much harder). OGC legal sign-off required per client — serial bottleneck nobody is tracking.
⚠️ Agent Memory — Kush's #1 Priority
NOT STARTED. The IK Flywheel doesn't compound without it. 70% of the EBITDA target flows through institutional knowledge. Every week of delay is compounding loss.
📋 Production Equivalents — 1/100
Deloitte deploys to clients BEFORE internal. No internal proving ground. HP is the first live client. Every deployment decision carries full production weight from day one.
The Proof

External validation
arrived this week.

On May 25, Steve Ward — tech consultant, PE observer, Trent Johnson's close friend — tested Warren. He came expecting a chatbot. He left calling it "Jarvis, not Siri." A decision-making operating system. PE observers were floored. The key insight: Tony's 300–400 hours of executive coaching transcripts are the "secret weapon" — the corpus that can evolve Warren from a digital operations partner into a full Digital CEO twin.

"Warren's active listening gives pointed answers — versus ChatGPT and Claude giving lots of different solutions."
— Steve Ward · May 25, 2026
The One-Line Summary

"We went from a thesis to a machine —
and the machine just got
external proof it's right."

Deloitte funds the build. Mythos creates the market. Tony holds the institutional knowledge nobody else can acquire. Warren executes at the speed the opportunity demands. The flywheel is live. The window is open. The question now is how fast we move.

$33–99M combined opportunity 250–550 agents ahead May → Feb 2027

Prepared by Aria · VTKL · May 27, 2026