Launch Runbook - CyberSuite Dashboard

Launch Runbook

One place to see where CyberSuite stands and reach every doc, tool, and link for the first customer call. Repo links open on GitHub (private — sign in with your CyberSuite GitHub account).

Where we are — roadmap

Every workstream with status and co-dependencies (needs = prerequisite · blocks = what it gates).

Quote-to-cash engine

The revenue spine — proven end-to-end.

Live Canonical pricing — single source (scripts/lib/pricing.mjs)

Live HubSpot CRM — pipeline, properties, Company Client IDs (CS-####)

Live Pricing Compute & Save tool ↳ needs: dashboard env vars + Supabase auth (done)

Live Order-form engine — generate + send PandaDoc

Live PandaDoc template + tokens + eSign disclosure Operator: dedupe Tier tokens, paste eSign disclosure.

Live Signature webhook → deal stage (Closed Won) HMAC-secured. Native automation avoided (paid add-on).

Live Client ID (CS-####) minted at Closed Won

Sites & infrastructure

All live on .pages.dev / custom domains; the public apex still points at the old deployment.

Live Marketing website (Astro / Cloudflare) Hardened. Serving on pages.dev.

Live Assessment app Hardened; booking link → HubSpot.

Live Operator dashboard (this hub) dashboard.cybersuite.tech, login working.

Live Custom domain — dashboard.cybersuite.tech

Planned Apex cutover — cybersuite.tech → Astro project ↳ needs: production deploy gating

Security & access

Hardening shipped; the edge gate + deploy gating remain before public launch.

Live Website CSP (enforced) + server-side honeypot

Live Assessment rate-limiting + payload cap + email throttle

Live Dashboard — client-only data (no build-time leak) + signin guard

Live Dashboard auth — Microsoft Entra SSO + operator allowlist (RLS) Magic-link replaced by Entra SSO; email auth disabled; phishing-resistant MFA enforced.

Live Custom SMTP via Resend — branded, no rate limit

Live Cloudflare Access — edge gate for the dashboard Live — Entra SSO IdP; non-operators blocked at the edge. .pages.dev side-door redirected.

Planned Production deploy gating — off auto-deploy-on-main ↳ blocks: apex cutover

Growth engine

Prospects loaded; outreach + measurement are the next moves toward the first 3 customers.

Live Apollo prospecting — 824 pulled, 41 enriched → HubSpot

Planned Email campaign + measurement ↳ needs: assessment hardened (done) + SMTP (done)

Live Report → Closed-Won attribution view Shipped — submissions ↔ HubSpot deals; conversion + ACV won.

Live Plan Fit — fail→covered by tier + recommended coverage Matches a firm to the right tier on the carrier-underwritten baseline; 'covered' is scope-backed.

Tooling & automation (Claude Code plugins)

Run the stack from Claude — adopt vendor plugins for tools we already use; gate the paid ones behind funded decisions.

Live marketing-skills + webapp-testing Installed; in use (content/SEO + screenshots).

Planned Cloudflare plugin — Pages/Workers/DNS/Access from Claude Free (our CF account). Removes the console-step friction we keep hitting.

Planned Supabase plugin — DB / migrations / RLS from Claude Free; community-maintained (supabase-community org).

Planned Apollo plugin — operationalize prospecting Feeds the growth engine directly. ↳ needs: Apollo.io account (free→paid)

Planned claude-for-legal — contract/NDA review + legal workflows Anthropic legal suite; governance + legal-partner work.

Planned PostHog — assessment→deal funnel analytics The 'why' behind the attribution funnel.

Planned Vanta — own compliance posture (SOC 2) Build-to-sell + credibility multiplier; defer until enterprise/acquisition warrants the spend. ↳ needs: PAID Vanta (~$10k+/yr)

Planned code-review + pr-review-toolkit — automated PR review Catches the stale-branch / regression class we hit this session.

Delivery & operations

What we actually do once a customer signs — the fulfillment side.

Live Tier deliverable matrix (the spine) Every tier → deliverable → procedure → template → status.

Live Order → go-live lifecycle (process doc)

Live Deliverable cadence & triggers Recurring deliverable cadence is an open gap post-Syncro decommission — no PSA ticketing in Action1; tracking mechanism TBD (flagged).

Live Incident Report (procedure + customer template) Closed the #1 gap.

Live Action1 new-customer setup (SOP) Action1 org/group + CS Client ID stamped into group naming; recurring deliverable cadence is a flagged open gap (no PSA ticketing).

Live Onboarding Engineer deployment runbook Stage-3 deployment sequence: EDR, MFA, backup, email security; 14-day target.

Live Tabletop exercise (runbook + template + 7 scenarios)

Live Report templates — Monthly, QBR, Compliance (×2), Delta Review 5 templates authored (interim §3.1.3/§3.3/§3.4/§3.6/§3.7); QBR has a live-call facilitation guide. Canonical Section 3 ratification pending.

Live Insurance & client questionnaire support (SOP) Evidence every 'Yes'; flag gaps; respect the [VERIFY] carrier rule.

Live Control-verification SOPs (MFA / encryption / restore-test) Verify + capture evidence; feeds compliance reports + posture chips.

Live RMM policy set — Windows + Mac (Action1) Patch SLA 7/30/60, FileVault-OFF / BitLocker-OFF alert. Native patch = Windows; Mac = update enforcement + scripts.

Financials & KPIs

The numbers that run the business and prove enterprise value.

Live Financial model + targets

Live Enterprise Value & KPI framework

Planned Live KPI tracking — CAC / LTV / NRR / EBITDA ↳ needs: deal + cost instrumentation

Org / build-to-sell

Make CyberSuite founder-independent and sellable at a premium.

Live Build-to-sell lens (standing principle)

Planned Founder-independence milestones

Planned Open operator decisions (financials)

What's next — by horizon

Quick wins

Small, do-now items.

Website + assessment favicons → shield
eSign disclosure live in PandaDoc; dedupe Tier tokens
Cloudflare Access on the dashboard (edge gate)
Apex cutover prep

Enhancements

Medium builds that raise quality + visibility.

Report → Closed-Won attribution view
KB rework — rendered sales assets (PDFs, sell sheets), not repo links
Order → go-live process doc + customer deployment tracker
Production deploy gating (off auto-deploy-on-main)

Q3 features

Bigger bets.

Customer-facing deployment status portal (shareable)
Searchable in-app Knowledge Base
Live KPI / financials dashboard
Multi-user dashboard + roles

Configuration & setup

How each system is wired. Run these to stand up or repair the stack.

HubSpot pipeline + properties (build-pipeline.mjs) Docs ↗ PandaDoc template — build guide Docs ↗ PandaDoc template — spec Docs ↗ eSign disclosure (paste into PandaDoc) Docs ↗ PandaDoc webhook → deal stage (function) Docs ↗ Action1 — new customer onboarding Docs ↗ Cloudflare deploy config — website Docs ↗ Cloudflare deploy config — dashboard Docs ↗

Sales

Everything to run a deal — never type a price.

Pricing / Compute & Save tool Open ↗ Sales training manual Docs ↗ Sales rep quick reference Docs ↗ Canonical pricing source (pricing.mjs) Docs ↗ Deal calculator (legacy HTML — being superseded by the tool) Docs ↗

Scripts (the engine)

The automation behind quote-to-cash. Run with op + the relevant tokens.

price-deal.mjs — compute + write price back to a deal Docs ↗ generate-order-form.mjs — create + send the PandaDoc order form Docs ↗ mint-client-id.mjs — assign CS-#### at Closed Won Docs ↗ build-pipeline.mjs — (re)create HubSpot pipeline + properties Docs ↗

Customer-facing

What a prospect/customer actually sees or receives.

Assessment app (live) Live ↗ Marketing site (live) Live ↗ Order form template (DOCX) Docs ↗ Order form legal footer (verbatim) Docs ↗ eSign disclosure Docs ↗

Reference

Strategy + the build-to-sell lens.

Roadmap Docs ↗ Enterprise Value & KPI framework Docs ↗

Missing something? This page lives at dashboard/src/pages/runbook.astro — add the link and redeploy.