R3-07 PMF indicators

Supports slides 3 and 21.

Product-market fit: not yet. The North Star is paying organisations with a weekly-active verified user. Here’s each indicator, the number and the query behind it.

Paying organisations

Measure	Now
Organisations with Stripe accounts (excluding test and team)	21
Paying directly through Stripe	2 (Sullivan Environmental Services, Barricade Cyber Solutions)
Covered by DoD under agreement	19
Collected since May, outside the DoD-covered amounts	$1,625
Invoiced, payment record pending	1 (Hugh, Deura InfoSec, invoiced 1 Oct)
Partner-sourced accounts	0

The 12 Aug zero I reported was wrong. Sullivan had paid in May.

Weekly-active verified users (web)

Query: STIGViewer gate_events joined to verified, non-admin browser sessions, 21 Sep to 16 Oct 2026, by week starting Monday. Re-run 17 Oct 2026.

Week starting	Verified users	Organisations
21 Sep	16	17
28 Sep	15	17
5 Oct	13	14
12 Oct (partial)	7	7
Total	50 users	49 organisations

• 49 of the 50 were active in one week only. 1 came back a second week.
• About one user per organisation. (A user can map to more than one organisation through their sessions, which is why some weeks show more organisations than users.)
• The gate log starts on 17 Sep 2026 and records gated routes only, so these numbers are a floor.

What this says

It’s a reference tool being used like a reference tool. The paid tier needs a reason to come back, not a reason to look something up. And both paying organisations bought API products, which the gate log doesn’t see. Weekly-active isn’t instrumented for API customers, so “qualified” is unproven, not zero.

Sources:

• Stripe counts and amounts: Capstone Facts Reconciled (SAMS mirror of Stripe, corrected 17 Oct 2026); R2-05
• Weekly-active: Supabase project augnxtezgrzdcmpdmjnh, tables gate_events and browser_sessions (email_verified true, is_admin false), first gate event 17 Sep 2026 03:30 UTC; query re-run 17 Oct 2026