Training Catalogue
Sales • Technical • Partner Ops • Product & Compliance — all enablement in one place. Links below go to in-page modules (no 404s). Swap to BetterDocs URLs when ready.
Quick Start for New Users
Do these first to get productive quickly.
- ✔ Take ST-01 PastWipe Basics and TT-02 SDK/CLI Setup.
- ✔ Run the demo KPIs in ST-03 Simulator (validations / declines / latency).
- ✔ Skim TT-03 Token Lifecycle to understand allow/deny decisions.
- ✔ If you’re a partner: review ST-05 Deal Reg & Commercials.
Sales Track
Technical Track
Partner Ops
Product & Compliance
ST-01 • PastWipe Basics & Positioning
Problem framing & core talk-track for first calls.
Outcome
- Deliver a 30-second and a 2-minute pitch (Sec, IT, Legal).
- Map to three pains: downstream reuse, liability, supply-chain duties.
Pitch
Short: “PastWipe makes copied or exfiltrated data non-reusable. Like cancelling a stolen credit card — validations fail post-breach or policy change.”
Long: “RepSec™ adds an attestable control to data interactions. Apps validate tokens before use; breach toggles neutralize reuse. SLO ≤ 75 ms; integrate via SDK/CLI/API.”
ST-02 • Discovery & Qualification
MEDDPICC-lite + breach pain mapping.
Flow (10–12 min)
- Current post-exfiltration playbook & lessons.
- Top 3 systems & access patterns for sensitive data.
- Owner/budget for downstream risk; timeline & trigger.
Qual fields
- Metric: datasets & reuse surface.
- Economic buyer & decision path.
- Criteria: speed (≤75ms), attestation, auditability.
ST-03 • Demo KPIs & Simulator
What to track and how to narrate non-reusability.
Capture
- Validations vs Declines (invalid/expired/no token).
- Median validation latency (rolling 120).
- Spike/baseline to explain jitter.
Narrative
Show pre-breach validates, then simulate breach: subsequent validations decline → copied data becomes unusable.
ST-04 • ROI & Business Case
Method
- Identify datasets & reuse scenarios.
- Quantify exposure window & attempts.
- Apply neutralization coverage & validation rate.
- Translate to avoided legal/ops costs & fines risk.
When the file is staged in /wp-content/pw-private/, add a signed “Download ROI Calculator” button here.
ST-05 • Partner Commercials & Deal Registration
Essentials
- Tiers & discounts: Bronze / Silver / Gold.
- Registration rules & lock periods.
- Commissions accrue after customer payment.
TT-01 • Architecture & Threat Model
Control plane
- Attestation authority • token service • validation path.
- Policy: breach-trigger, time-bound, context-bound.
Threats & mitigations
- Token theft/replay ➜ short TTL, signed claims, nonce.
- Offline access ➜ deny on validation failure; audit trail.
TT-02 • SDK & CLI Setup
Install
- SDK: add package, set API base & key.
- CLI: download, make executable, configure profile.
Quick use
- Issue token → validate (allow/deny) → rotate key.
- Toggle breach policy and observe declines.
When repsec-sdk-0.9.1.zip and repsec-cli-0.9.1.zip are staged, add signed download buttons.
TT-03 • API & Token Lifecycle
Endpoints (concept)
- Auth — obtain/rotate keys.
- Issue — signed token with policy claims.
- Validate — fast decision; audit trail.
- Neutralize — breach/policy update.
Errors & retries
- Fail-closed on timeout; idempotent neutralization.
- Return: allowed / declined / error (retry/backoff).
TT-04 • Integrations
Targets
- Edge validation (Cloudflare Workers).
- AWS Lambda (API gateway front).
- Okta + SIEM enrichment/telemetry.
- EDR/IR playbooks for containment.
TT-05 • Performance & SLOs
Guardrails
- Median validation ≤ 75 ms (window 120).
- Jitter budget & spike handling.
- Throughput targets (dev / pilot / prod).
PO-01 • Portal & Roles
Roles
- Pilot Customer • Technical Partner • Partner Bronze/Silver/Gold.
- Access: downloads • docs • support • deal reg.
PO-02 • Licenses & Billing
How-to
- Assign seats; manage renewals/refunds.
- Find invoices & update payment method.
PO-03 • Commissions (visibility)
Partners will see
- Registered deals, status, payout timing (after payment).
- PMoR override visibility (if enabled).
PC-01 • Security & Data Handling
Security
- Keys/signing • token revocation • audit trails.
- Neutralization as mitigation; regulator evidence.
PC-02 • Roadmap & Change Notes
Maintain
- Public roadmap (quarterly themes).
- Release notes (date • change • impact • action).