Clinics and mid-size providers
A security owner who will not sell you a 40-person SOC.
HIPAA, insurers, and ransomware pressure hit clinics that already have IT. Start with posture and Baseline; grow into Advisor when you need the named owner.
Typical path: Cyber insurance packet or Baseline for evidence, MFA and email-auth sprints if the application is red, Advisor when leadership wants a roadmap. We do not staff nights as a SOC.