Everything a customer could plausibly be sold or protected by that they don't currently have: Tech Stack items meaningfully adopted across the customer base (≥25%), plus — for Microsoft 365 (CIPP) customers specifically — NEW no SLA/Managed Services contract on record, no enforced DMARC policy (EasyDMARC), or no Cove backup protection. A starting point for account review conversations, not a hard sales target.