# Crystalcompass

*/Startups/Crystalcompass*

## Startup Overview

Enterprises generate uncatalogued shadow data that evades standard governance tools as it moves across systems. This platform identifies and maps these undocumented data dependencies directly from the network layer. By running packet-level inspection on live traffic, it discovers exactly where sensitive information travels across distributed digital environments without relying on self-reported architecture diagrams or stale documentation.

Traditional governance platforms like Collibra and BigID demand extensive manual tagging, complex agent deployments, and continuous architecture audits to maintain basic data visibility. Instead, this engine operates entirely via zero-instrumentation discovery. It passively monitors network traffic to build an accurate, real-time topology of data flows, and changes the procurement model by charging customers exclusively for the specific data paths it successfully maps.

## Startup Founding Hypothesis

**Approach**: that maps shadow data dependencies using network-layer packet inspection
**Competitors**:
- [Collibra](/Competitors/Collibra)
- [BigID](/Competitors/BigID)
- [Manual Architecture Audits](/Competitors/Manual_Architecture_Audits)
**Differentiator2x2**: zero-instrumentation and priced exclusively on successfully mapped data flows

## Startup Solution Coordinate

**Solution**: [Shadow Flow Mapper](/Software/Shadow_Flow_Mapper)

## Startup Position2x2

```mermaid
quadrantChart
    title Market Positioning: Shadow Data Dependency Mapping
    x-axis Heavy Setup / Instrumentation --> Zero-Instrumentation
    y-axis Fixed / Capacity Pricing --> Priced per Mapped Flow
    quadrant-1 Automated & Outcome-Priced
    quadrant-2 Heavy Setup, Outcome-Priced
    quadrant-3 Heavy Setup, Fixed Cost
    quadrant-4 Zero-Setup, Fixed Cost
    Collibra: [0.15, 0.20]
    BigID: [0.30, 0.25]
    Manual Architecture Audits: [0.10, 0.10]
    Crystalcompass: [0.90, 0.85]
```

## Startup Offer

**Proof**:
- Target: Identify undocumented PII data flows in mid-market fintechs within 48 hours.
- Aim: Replace 4-week manual architecture audits with continuous, zero-instrumentation discovery.
- Target: Reduce compliance mapping costs by charging only for successfully discovered dependencies.
**Tiers**:
- Name: Single VPC Discovery · Price: ~$8–$15 per mapped flow/mo · Inclusions: Out-of-band packet inspection for one cloud environment, mapping internal service-to-service calls and database queries without developer instrumentation.
- Name: Hybrid Architecture · Price: ~$18–$30 per mapped flow/mo · Inclusions: Multi-VPC and on-premise traffic mirroring, including 3rd-party SaaS egress identification and automated PII tagging.
**Guarantee**: You are billed exclusively for data dependencies you verify as accurate; if a mapped flow is a false positive or transient noise, you pay nothing for it.
**Business Function**: ProvideService
**Objection Handlers**:
- Packet inspection will impact network performance: Crystalcompass analyzes mirrored traffic out-of-band at the VPC level, introducing zero latency to your production requests.
- Encrypted traffic will hide the necessary routing data: Designed to ingest node-level eBPF connection headers or integrate with existing TLS decryption proxies to map topology without reading raw payloads.
- The system will overwhelm us with irrelevant network noise: Our exclusively outcome-based pricing forces the platform to aggressively filter junk traffic, as we only charge for verified architectural dependencies.
**Pricing Architecture**: UsageMeter
**Agent Checkout Support**:
- agentic-commerce-protocol

## Startup Brand

**Voice**: Clinical and forensic, delivering hard facts with analytical precision.
**Tagline**: Maps hidden data dependencies without modifying your source code.
**Icon Concept**: cable
**Palette Intent**: electric-signal
**Visual Identity**: Deep optic blacks and stark laser greens suggest raw packet inspection, anchored by clean monospace typography for structural clarity.
**Archetype Reference**: the-sage

## Startup Buyer Chain

**Chain**: Startup → Cloud Infrastructure Engineer → Enterprise Data Governance Team
**Gtm Motion**: Acquisition occurs through self-serve, zero-instrumentation trials where engineering teams deploy the network sniffer to map a single cloud environment. Expansion is driven by outcome-based pricing, scaling automatically as the system discovers and bills for new cross-environment data flows.
**Agent Channel**: Targeted for listing in the LangChain tool registry and autonomous security agent directories as a data-flow discovery capability, enabling AI compliance agents to programmatically query live network dependency graphs.
**Primary Channel**: AWS Marketplace and Azure Commercial Marketplace listings targeted via cloud-native architecture search terms, capturing security and data engineers looking to replace manual audit spreadsheets.

## Startup Customer Journey

```mermaid
flowchart LR; A[Marketplace Listing] --> B[Network Sniffer]; B --> C[VPC Dependency Graph]; C --> D[Usage Meter]; D --> E[Multi-VPC Traffic Mirror]; E --> F[AI Compliance Agent];
```

## Startup Proof Points

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Pilot Goals**:
- 14-day Single VPC deployment: Aim to successfully identify and map at least five undocumented service-to-database connections using eBPF connection headers.
- 30-day Hybrid Architecture pilot: Aim to trace multi-VPC and on-premise traffic mirroring to identify third-party SaaS egress while validating zero impact on application performance.
**Target Metrics**:
- Target: 0ms latency impact on production network traffic via VPC-level mirroring.
- Aim: 48-hour discovery time for previously undocumented service dependencies.
- Target: 100 percent elimination of developer instrumentation requirements for topology mapping.
- Aim: 90 percent reduction in manual architecture compliance mapping costs.
**Target Case Studies**:
- Mid-market fintech Chief Technology Officer: Map all undocumented PII data flows exiting to third-party APIs within 48 hours without requiring engineering teams to alter production code.
- Enterprise Cloud Architect managing a hybrid environment: Replace manual, four-week architecture auditing processes with an automated topology map tracking service-to-service calls across on-premise and multi-VPC infrastructure.
- Healthcare SaaS Compliance Director: Validate database query routing and internal egress paths for compliance reporting using purely out-of-band packet inspection.
**Testimonial Targets**:
- VP of Engineering: Relief at obtaining a highly accurate system architecture map without needing to mandate time-consuming code instrumentation sprints.
- Chief Information Security Officer: Confidence in data governance resulting from automated, out-of-band PII tagging on egress traffic.
- Lead Cloud Architect: Appreciation for an outcome-based pricing model that exclusively bills for verified dependencies, filtering out irrelevant network noise.

## Startup Top Risks

**Risks**:
- Severity: existential · Description: Widespread adoption of TLS 1.3 and end-to-end encryption obscures packet payloads, rendering network-layer inspection incapable of identifying data flows without invasive decryption proxies. · Mitigation Status: in-progress
- Severity: high · Description: Enterprise CISOs reject the deployment of network-layer packet capture tools due to compliance concerns over inadvertently logging sensitive PII or PHI. · Mitigation Status: unmitigated
- Severity: high · Description: Cloud provider networking architectures like AWS VPCs and intra-node Kubernetes traffic lack centralized network tap points, forcing the use of eBPF which breaks the zero-instrumentation guarantee. · Mitigation Status: in-progress
- Severity: moderate · Description: Pricing exclusively on successfully mapped data flows creates highly unpredictable cash flow and incentivizes enterprise buyers to artificially cap discovery limits. · Mitigation Status: unmitigated

## Startup Competitors

- [Collibra](/Competitors/Collibra) — Incumbent
- [BigID](/Competitors/BigID) — Data Discovery Platform
- [Manual Architecture Audits](/Competitors/Manual_Architecture_Audits) — Status Quo
- [Cyera Data Security](/Competitors/Cyera_Data_Security) — DSPM Platform
- [Varonis Systems](/Competitors/Varonis_Systems) — Legacy Platform

## Startup Solution Stack

- [Dependency Mapping Service](/Services/Dependency_Mapping_Service) — Service-as-Software
- [Packet Inspection Agent](/Agents/Packet_Inspection_Agent) — Agent
- [Flow Discovery Worker](/Agents/Flow_Discovery_Worker) — Agent
- [Passive Capture Engine](/Software/Passive_Capture_Engine) — Software
- [Network Telemetry API](/Software/Network_Telemetry_API) — Software

## Startup Story Brand

**Hero**:
- **Need**: to be the strategic navigator who knows every PII endpoint across the VPC
- **Want**: to map shadow data dependencies without manual architecture audits
- **Identity**: the compliance lead at a mid-market fintech
**Plan**:
- Step: Mirror Traffic · Detail: Enable VPC-level traffic mirroring to feed our out-of-band inspection engine without impacting production latency.
- Step: Audit Map · Detail: Review the automatically generated flow diagram to identify hidden PII movement and SaaS egress points.
- Step: Verify Flows · Detail: Confirm the architectural dependencies you want to track and only pay for the connections you validate.
**Guide**:
- **Empathy**: You shouldn't still be chasing developers for outdated diagrams. BigID wasn't built to map dependencies at the packet level.
**Problem**:
- **Villain**: manual architecture audits
- **External**: mapping data flows takes four weeks of developer interviews and spreadsheet hunting across Collibra and BigID logs
- **Internal**: you feel like you are guessing at your own infrastructure's secrets
- **Philosophical**: Why should compliance leads accept incomplete data maps when real-time network truth is possible?
**Success**: Your entire data architecture is mapped in 48 hours with continuous, zero-instrumentation discovery that updates as your code changes.
**One Liner**: Every quarter, compliance leads struggle with undocumented data flows. Crystalcompass maps hidden dependencies using out-of-band packet inspection so you maintain a continuous, verified data map without developer effort.
**Positioning**:
- **So That**: identify undocumented PII data flows within 48 hours
- **Unlike**: Manual Architecture Audits
- **For Whom**: compliance leads at mid-market fintechs
- **Category**: Automated Data Dependency Mapping
**Call To Action**:
- **Direct**: Map a VPC
- **Transitional**: View Sample Data Topology
**Failure Stakes**:
- Undocumented PII leaks
- Failed compliance audits
- High manual auditing costs
**Transformation**:
- **To**: one of the few compliance leads who possesses absolute architectural truth
- **From**: the auditor begging for Jira tickets
**Controlling Idea**: Data mapping should be a real-time network fact, not a manual interview.

## Startup Token Hero

**Genre**: founding-hypothesis
**Rendered**: Every quarter, compliance leads struggle with undocumented data flows. Crystalcompass maps hidden dependencies using out-of-band packet inspection so you maintain a continuous, verified data map without developer effort.
**Mechanism**: spine-derived-v1
**Template Id**: spine-founding-hypothesis
**Vocab Fingerprint**: 6498667cf7ba8222

## Startup Token Positioning

**Genre**: moore-positioning
**Rendered**: Automated Data Dependency Mapping for compliance leads at mid-market fintechs. Unlike Manual Architecture Audits — identify undocumented PII data flows within 48 hours.
**Mechanism**: spine-derived-v1
**Template Id**: spine-moore-positioning
**Vocab Fingerprint**: ac22671dfb78500e

## Startup Token Pitch Deck

**Genre**: pitch-deck
**Rendered**: Problem: mapping data flows takes four weeks of developer interviews and spreadsheet hunting across Collibra and BigID logs
Solution: Every quarter, compliance leads struggle with undocumented data flows. Crystalcompass maps hidden dependencies using out-of-band packet inspection so you maintain a continuous, verified data map without developer effort.
Customer: compliance leads at mid-market fintechs
Unlike: Manual Architecture Audits
**Mechanism**: spine-derived-v1
**Template Id**: spine-pitch-deck
**Vocab Fingerprint**: db11001a72ade161

## Startup Token M E D D P I C C

**Pain**: mapping data flows takes four weeks of developer interviews and spreadsheet hunting across Collibra and BigID logs
**Metrics**: Target: Your entire data architecture is mapped in 48 hours with continuous, zero-instrumentation discovery that updates as your code changes.
**Rendered**: Pain: mapping data flows takes four weeks of developer interviews and spreadsheet hunting across Collibra and BigID logs
Economic buyer: Cloud Infrastructure Engineer
Metrics: Target: Your entire data architecture is mapped in 48 hours with continuous, zero-instrumentation discovery that updates as your code changes.
Competition: Manual Architecture Audits
**Mechanism**: spine-derived-v1
**Competition**: Manual Architecture Audits
**Economic Buyer**: Cloud Infrastructure Engineer
**Vocab Fingerprint**: ad0356bafda17f10

## Startup Token Cold Email

**Genre**: cold-email
**Rendered**: Subject: Automated Data Dependency Mapping for compliance leads at mid-market fintechs

compliance leads at mid-market fintechs — mapping data flows takes four weeks of developer interviews and spreadsheet hunting across Collibra and BigID logs Every quarter, compliance leads struggle with undocumented data flows. Crystalcompass maps hidden dependencies using out-of-band packet inspection so you maintain a continuous, verified data map without developer effort.
**Mechanism**: spine-derived-v1
**Template Id**: spine-cold-email
**Vocab Fingerprint**: 42121f44710253a5

## Startup Token Agent Spec

**Genre**: ai-agent-spec
**Rendered**: Automated Data Dependency Mapping. Every quarter, compliance leads struggle with undocumented data flows. Crystalcompass maps hidden dependencies using out-of-band packet inspection so you maintain a continuous, verified data map without developer effort. Serves compliance leads at mid-market fintechs.
**Mechanism**: spine-derived-v1
**Template Id**: spine-ai-agent-spec
**Vocab Fingerprint**: 00fe22e2e3dd578c

## Neighborhood

### Candidate solutions

- [Specialized Floor Staff Recruitment](/Problems/Specialized_Floor_Staff_Recruitment) — candidate solution for · Problems

### Composed of

- [Dependency Graph Mapping Service](/Services/Dependency_Graph_Mapping_Service) — composes · Services
- [Passive Capture Engine](/Software/Passive_Capture_Engine) — composes · Software
- [Network Telemetry API](/Software/Network_Telemetry_API) — composes · Software
- [Packet Inspection Agent](/Agents/Packet_Inspection_Agent) — composes · Agents
- [Flow Discovery Worker](/Agents/Flow_Discovery_Worker) — composes · Agents

### What it offers

- [Shadow Flow Mapper](/Software/Shadow_Flow_Mapper) — offers · Software

### Embodies

- [Software](/Theses/Software) — embodies · Theses

### Competitors

- [Manual Architecture Audits](/Competitors/Manual_Architecture_Audits) — competes with · Competitors
- [Cyera Data Security](/Competitors/Cyera_Data_Security) — competes with · Competitors
- [Varonis Systems](/Competitors/Varonis_Systems) — competes with · Competitors
- [BigID](/Competitors/BigID) — competes with · Competitors
- [Collibra](/Competitors/Collibra) — competes with · Competitors

### Similar Startups

- [Compass](/Startups/Compass) — similar · Startups
- [Beadvisionloom](/Startups/Beadvisionloom) — similar · Startups
- [Blossombasis](/Startups/Blossombasis) — similar · Startups
- [Keystonepulse](/Startups/Keystonepulse) — similar · Startups
- [Aurorasource](/Startups/Aurorasource) — similar · Startups
- [Intractabletag](/Startups/Intractabletag) — similar · Startups
- [Denoot](/Startups/Denoot) — similar · Startups
- [Cascaderidge](/Startups/Cascaderidge) — similar · Startups
- [Apyard](/Startups/Apyard) — similar · Startups
- [Fafig](/Startups/Fafig) — similar · Startups
- [Registryglow](/Startups/Registryglow) — similar · Startups
- [Datamaze](/Startups/Datamaze) — similar · Startups
- [Latticeforge](/Startups/Latticeforge) — similar · Startups
- [Datashadow](/Startups/Datashadow) — similar · Startups
- [Cumbegistry](/Startups/Cumbegistry) — similar · Startups
- [Nexusnavigator](/Startups/Nexusnavigator) — similar · Startups
- [Veracityvessel](/Startups/Veracityvessel) — similar · Startups
- [Summitgate](/Startups/Summitgate) — similar · Startups
- [Nexus Navigator](/Startups/Nexus_Navigator) — similar · Startups
- [Awarestack](/Startups/Awarestack) — similar · Startups