Modules
Four modules.
One program record.
Pytheus is organized into Capstone, Steps, Capital and Arena.
Each answers a different question about your security program,
and all four read from the same record, so the numbers never disagree.
Module 01 · Capstone
Where the program stands, on one page.
Capstone is the page your program opens to. Six tiles answer one question: where do we stand today? Each one opens the module behind the number.
- CAMP
- Gaps to close, and how many have closed since you started.
- Board Lens
- Priorities supported and needing attention. Modeled, not a score.
- Tools
- Active, under evaluation, and on the roadmap.
- Spend
- Annual spend, overlap, and potential savings.
- Contracts
- What renews in the next 90 days.
- Risk
- Domains below 50, and the lowest one.
Module 02 · Steps
From where you were to where you are headed.
Steps is the path. It holds the CAMP assessment that measures where the program is, the roadmap that sets where it needs to be and by when, the history that records how it got there, and the board priorities that explain why.
- CAMP
- Progress across 12 domains and 94 capabilities, the fastest path to close gaps, and what to do next.
- Roadmap
- Were, Are, Headed: capabilities at target then, now and by your goal date, with program goals and dated milestones.
- History
- Your program’s story, recorded. Explore score changes, evidence reviews, and team activity.
- Board Lens
- Board priorities, their timeline, decisions and changes, measured against the capabilities each one needs.
3 of 5 program goals on track. 1 at risk, 1 with no dated milestones.
If every dated milestone lands on time, capability maturity reaches 66.8 by Jun 30, 2027, 13.2 short of the goal of 80.
Module 03 · Capital
What the program runs on, and what it costs.
Capital ties every tool, vendor and contract to the capabilities it supports. You see where two tools do one job, what that overlap costs, and which renewals are coming while there is still time to act on them.
- Technology
- The tools and vendors on your stack, what each one supports, annual cost, renewal date and setup follow-ups.
- Coverage
- A map of tools by domain, with integrations, overlap and the capability gaps that remain.
- Spend
- Overview, overlap, spend, renewals and compare, with modeled potential savings.
- Contracts
- Contracts on file, vendors with a recorded profile, annual commitment and renewal dates, as a list or a calendar.
Overlaps carrying the most potential savings
Overlapping tools with a live renewal window. These feed your roadmap recommendations.
renews Jan 16, 2027$424.3KMonitor
renews Dec 2, 2026$280KMonitor
renews Mar 7, 2027$252KMonitor
Integrations: Mixed
$891,286 overlap
Integrations: Strong
$97,489 overlap
Integrations: None
No tools
Module 04 · Arena
Where decisions become assigned work.
Arena is where the team acts. Decisions are ranked by impact, effort and cost. Accepting one puts it on the roadmap and into somebody's queue, with the proof required to close it spelled out. Contribution is measured in verified maturity gain, not activity.
- Decisions
- Renewals, tradeoffs and confirmations, in a feed or on a board, each with modeled impact, effort and an accept-to-roadmap action.
- My Work
- Your queue of assigned tasks, the proof required to close each one, your impact score and the renewals coming up.
- Team
- Members, their open work and who is blocked. Contribution is weighted maturity gain from verified outcomes.
- Messages
- Channels and direct messages, kept in the workspace next to the work.
Level 1 against a level 5 target despite confirmed tooling. Closing it is modeled to add about 0.4 points to the org score, if completed.
Attach the current policy/config export and the review sign-off.
How they fit together
One record underneath. Four ways to work with it.
Capstone
Reads from the other three and shows the whole program on one page.
Steps
Sets the goal: the assessment, the roadmap and the board priorities.
Capital
Shows what the goal runs on and what it costs: tools, coverage, spend and contracts.
Arena
Turns decisions into assigned work, with proof required to close each task.
Every value in the record says who entered it, and any figure opens to the sources behind it. The method stays the same every quarter, so this quarter lines up against the last.
See the four modules on your own program.
Book a walkthrough and we will show Capstone, Steps, Capital and Arena against a program like yours.
Figures shown in module visuals are illustrative, not account data.