Aura

1.1 Corporate Identity, Founding History, and Public Listing

Aura Consolidated Group, Inc. is a global digital safety and wellbeing technology company that provides proactive online protection for individuals, families, educational institutions, and commercial enterprises. The business was originally established in 2017 by Founder and Chief Executive Officer Hari Ravichandran under the corporate name iSubscribed, initially focusing on personal identity theft protection and credit monitoring. The company underwent a major operational expansion in 2019 through the acquisition of Intersections Inc., the operator of the Identity Guard product family, subsequently consolidating its operations and rebranding as Aura. Today, Aura operates from the Greater Boston metropolitan area in Massachusetts, delivering an integrated subscription software platform that combines three-bureau credit monitoring with Experian Credit Lock, suspicious transaction alerts, dark web identity scanning, anti-virus defenses, virtual private networks, and parental control tools. In a transformative corporate transaction completed on July 17, 2026, Aura acquired Australian student safety and digital wellbeing provider Qoria Limited. Following the implementation of this scheme of arrangement, Aura commenced unrestricted public trading on the Australian Securities Exchange under the ticker symbol AXQ on July 20, 2026, transitioning from a privately held venture-backed unicorn into a dual-hemisphere public enterprise.[CO001, CO002, CO010]

1.2 Executive Leadership, Governance Structure, and Regulatory History

Aura is led by Founder and Chief Executive Officer Hari Ravichandran, a technology entrepreneur who previously founded and served as Chief Executive Officer of web hosting conglomerate Endurance International Group. Ravichandran maintains central authority over Aura's corporate vision, product roadmap, capital structure, and international acquisition strategy. Day-to-day financial operations and transaction execution are overseen by Chief Financial Officer Brian DeCenzo, who manages capital allocation, post-merger integration, and public reporting compliance under Australian Securities Exchange regulations. In mid-2026, Aura bolstered its senior executive leadership team by recruiting Steven Young as Global Chief Marketing Officer and Adam Medros as Chief Product Officer, positioning the organization to expand consumer subscriber acquisition, improve digital marketing unit economics, and accelerate the deployment of context-aware artificial intelligence across child wellbeing and parental safety applications. Governance diligence warrants close ongoing scrutiny due to historical regulatory enforcement actions and a recent cyber security incident. In 2018, Ravichandran settled an enforcement complaint with the U.S. Securities and Exchange Commission concerning alleged overstatement of subscriber metrics at Endurance, agreeing to personally pay $1.38 million without admitting wrongdoing. Additionally, Aura's 2019 acquisition target, Intersections Inc., had entered into a 2015 Consumer Financial Protection Bureau consent order requiring $1.2 million in penalties and consumer restitution regarding unfair billing for add-on credit products. Most recently, in March 2026, threat group ShinyHunters executed a successful vishing cyberattack against an employee, infiltrating an external marketing database inherited from the 2021 Circle Media Labs acquisition and compromising approximately 900,000 consumer records. While Aura confirmed that no passwords, banking credentials, or Social Security numbers were exfiltrated, the breach underscores key-person and inherited-asset security vulnerabilities.[CO003, CO004, CO005, CO006, CO007]

1.3 Capitalization, Multi-Channel Distribution, and Financial Scale

Prior to its 2026 public market transition, Aura raised more than $670 million in equity capital across institutional venture capital rounds. The company's capitalization history is anchored by a $200 million Series F financing completed in October 2021 at a $2.5 billion post-money valuation, led by Madrone Capital Partners with participation from Ten Eleven Ventures, General Catalyst, Warburg Pincus, and Accel. In March 2025, Aura secured a $140 million Series G equity round at a reduced post-money valuation of $1.6 billion, co-led by Ten Eleven Ventures and Madrone Capital Partners, alongside conventional debt financing. In July 2026, closing the Qoria acquisition was paired with a fresh $100 million equity raise and an upsized $100 million debt facility, equipping the merged business with $124.0 million in total transaction liquidity as of July 17, 2026. The merged group operates across three distinct distribution vectors: direct-to-consumer digital safety subscriptions starting at $10 per month, employer-sponsored voluntary employee benefits distributed exclusively through MetLife, and the enterprise Aura Business solution launched in April 2026 to capture identity-based BYOD security demand across managed service providers. On a pro forma basis combining Aura and Qoria under U.S. GAAP, the consolidated enterprise exited the second quarter of 2026 with $339.7 million in annual recurring revenue and generated $85.1 million in quarterly GAAP revenue, each expanding 27% year over year. Pro forma Adjusted EBITDA loss improved 51% year over year to $12.6 million, supported by $27 million in actioned annualized operating cost reductions as management targets positive free cash flow generation.[CO008, CO009, CO011, CO012, CO013, CO014, CO015]

1.4 Exhibits

2.1 Market Boundaries, Taxonomy, and Status-Quo Substitutes

Aura positions its product footprint across the emerging consumer digital safety and wellness category, sitting at the intersection of consumer identity theft protection, credit monitoring, digital privacy tools, and device security. Historically, this market was fragmented across standalone point solutions including bureau credit trackers, dedicated antivirus software vendors, virtual private network utilities, and basic parental control apps. Aura's core boundary consolidates these capabilities into an integrated multi-device subscription spanning individual, couple, and family tiers. In 2026, Aura expanded its functional boundary beyond retail households into business environments through Aura Business and Managed Service Provider channels, focusing on identity-centric bring-your-own-device security rather than traditional hardware mobile device management. The primary non-consumption substitutes remain status-quo consumer inertia, free credit tracking tools provided by retail banking portals, and employer-sponsored cybersecurity awareness training programs. Additionally, market perimeter discipline requires excluding public entities sharing the Aura name, such as Aura Biosciences (NASDAQ: AURA), which operate in entirely unrelated biotechnology sectors.[CM001, CM002, CM003, CM004, CM014]

2.2 Market Sizing Lenses, Growth Drivers, and Sizing Discrepancies

Evaluating Aura's addressable market requires distinguishing top-line cybercrime loss statistics from realizable subscription spend. While broader industry marketing cites $21 billion in annual online crime losses reported by the FBI in 2025 and broad global cybersecurity spend forecasts exceeding $300 billion, Aura's serviceable addressable market is defined by household and enterprise seat budgets. Within the United States, roughly 130 million households represent potential consumer buyers, yielding a serviceable consumer market of $15.6 billion assuming a baseline entry pricing of $10 per month. Aura's serviceable obtainable market represents modern digital-first households and corporate benefit enrollees willing to pay for bundled protection, where Aura currently addresses over 1.6 million members. Key growth drivers include accelerating cybercrime frequency, regulatory focus on child online privacy, and employer adoption of voluntary identity benefits. Growth constraints center on severe private-company financial opacity, consumer price sensitivity, commoditization of standalone VPN and antivirus features, and trust overhang following security incidents.[CM005, CM006, CM007, CM008, CM009]

2.3 Buyer Segmentation, Procurement Economics, and Diligence Gaps

Aura's go-to-market structure spans three distinct buyer segments characterized by divergent purchasing motivations and economics. Direct retail consumers purchase self-serve monthly or annual subscriptions driven by acute fraud events, proactive credit management, or family parental control needs. Corporate enterprise buyers procure Aura through voluntary employee benefits programs, distributed via major insurance partners including MetLife, which alongside other partnerships accounted for over 30% of Aura's ARR in 2025. In the SMB and mid-market tier, Managed Service Providers license Aura Business to secure unmanaged employee mobile devices accessing cloud applications via Microsoft Entra ID. Critical diligence gaps remain regarding the precise gross margin structure of insurance partnerships, cohort retention rates following promotional onboarding periods, and the degree to which enterprise BYOD offerings cannibalize direct consumer subscriptions.[CM010, CM011, CM012, CM013]

2.4 Exhibits

3.1 Competitive Landscape and Core Alternatives

Aura's competitive universe divides into three distinct tiers: legacy cybersecurity and identity theft conglomerates, specialized point solutions focusing on data broker removal or credit monitoring, and zero-cost status quo mechanisms. In consumer identity safety, Norton LifeLock represents the primary direct legacy incumbent, competing across identity alerts, credit bureau tracking, and antivirus bundles. However, specialized point competitors have emerged to unbundle Aura's value proposition. Services such as PrivacyOn, DeleteMe, and Incogni target consumer demand specifically for data broker and people-search site removal, challenging Aura's high-ticket all-in-one packaging. Furthermore, status-quo alternatives such as free statutory credit freezes across Equifax, Experian, and TransUnion provide preventative protection that monitoring suites cannot replicate. In response to consumer pricing resistance and growth limits, Aura has expanded into enterprise security with an identity-centric BYOD offering distributed through MSPs and its exclusive employee benefits channel with MetLife.[CP001, CP002, CP003, CP004, CP005, CP006, CP007]

3.2 Pricing Structures and Packaging Dynamics

Pricing transparency and multi-tier packaging represent a key competitive battlefield between Aura and legacy providers. Unlike Norton LifeLock, which employs aggressive first-year teaser discounts followed by substantial renewal rate hikes of 22% to 39%, Aura maintains a flat renewal structure where annual plans renew at posted base rates of $144 for Individual, $264 for Couple, and $384 for Family tiers. Nevertheless, Aura imposes a substantial billing cadence penalty: choosing monthly billing rather than annual prepay increases annualized costs to $180 for Individual, $348 for Couple, and $600 for Family—a 56% premium on family plans. Against specialized data removal alternatives, Aura faces substantial cost disadvantages for single-job buyers. PrivacyOn offers continuous broker removal and dark web monitoring covering up to five family members starting at $99.96 annually ($8.33 per month), undercutting Aura's $384 Family tier by approximately $284 per year. Consequently, Aura's pricing power rests entirely on customer utilization of bundled insurance, VPN, antivirus, and credit monitoring.[CP008, CP009, CP010, CP011, CP012, CP013]

3.3 Trust Posture, Channel Distribution, and Moat Durability

Moat durability in digital safety depends heavily on consumer trust, channel partnerships, and switching barriers. Because consumer identity monitoring fundamentally operates via post-incident detection rather than fraud prevention, brand credibility is paramount. Aura suffered a material trust setback in March 2026 when threat actor ShinyHunters conducted a vishing attack against an acquired marketing list, compromising approximately 900,000 consumer records, including 35,000 records containing physical addresses and phone numbers. To insulate its growth model against direct consumer acquisition volatility and high churn, Aura has aggressively expanded enterprise distribution. Enterprise employee benefits through MetLife and direct partnerships accounted for over 30% of Aura's ARR at year-end 2025. In April 2026, Aura extended this strategy by launching an identity-centric BYOD solution for MSPs integrated with Microsoft Entra ID, establishing B2B switching costs and institutional distribution power that direct consumer identity rivals struggle to match.[CP014, CP015, CP016]

3.4 Exhibits

4.1 Recurring Revenue With Multiple Distribution Economics

Aura earns primarily recurring subscription revenue through direct-to-consumer and partner channels, with the latter spanning employee benefits and other distribution relationships [CI001]. The public consumer entry price is $10 per month, but that is list pricing rather than evidence of realized price, discounts, or revenue per contract [CI002]. Revenue is recognized ratably over non-cancellable terms that typically range from one month to three years; a significant portion of subscribers pay before service delivery, which supports cash collection but creates contract liabilities [CI003]. In the first half of 2026, direct-to-consumer revenue was $79.3 million and partner revenue was $40.7 million, or approximately 66% and 34% of the $119.9 million total, respectively [CI005]. This mix provides more than one acquisition route, yet the public record does not isolate partner commissions, school economics, MSP pricing, or realized discounting.

4.2 Growth Is Visible; Full Unit Economics Are Not

Standalone Aura revenue reached $119.9 million for the six months ended June 30, 2026, 31% above the comparable 2025 period [CI004]. The combined Aura-Qoria presentation used a different lens: pro forma ARR of $339.7 million at quarter-end, also up 27% year over year, so it should not be substituted for GAAP revenue [CI006]. Direct-to-consumer monthly ARPU was $16.61, direct-to-consumer net revenue retention was 92%, and employee-benefits net revenue retention was 110% [CI007]. Based on reported revenue and cost of revenue, first-half gross margin was approximately 73.9%, versus approximately 71.3% a year earlier [CI008]. These are useful quality signals, but CAC, payback, cohort contribution margin, logo concentration, cancellation rates, and partner-level renewal economics remain unavailable.

4.3 Service Costs Are Scalable, but Marketing Still Dominates

Direct service costs include credit monitoring, identity-fraud insurance, payment processing, software and servers, VPN hosting, call-center operations, and customer support [CI009]. Sales and marketing expense was $86.4 million in the first half of 2026, approximately 72% of revenue, making acquisition efficiency the central margin variable [CI010]. On a combined pro forma basis, management reported a $12.6 million second-quarter adjusted EBITDA loss, a 51% year-over-year improvement, alongside $27 million of annualized cost actions against a $55 million program [CI011]. Adjusted EBITDA excludes acquisition costs, stock compensation, mark-to-market changes, and other items, so the improvement does not establish cash breakeven. The underwriting case requires the cost program to convert into durable cash savings without impairing retention or growth.

4.4 Liquidity Improved at Close, but Financing Dependency Persists

Aura used $44.4 million of cash in operating activities in the first half of 2026, compared with $50.8 million a year earlier [CI012]. At June 30, it held $17.0 million of unrestricted cash and $70.8 million of restricted cash, principally including transaction funds not then available for general use [CI013]. At the July transaction close, management reported $124.0 million of total liquidity after costs; that measure included cash and available revolver capacity and followed a $100 million equity raise and an upsized $100 million debt facility [CI014]. The balance sheet also carried $48.9 million under a customer-investment financing arrangement and a $25.0 million convertible note at December 31, 2025 [CI015]. Separately, a reported March 2026 breach affected approximately 900,000 records, but public evidence does not quantify resulting churn, remediation cost, or partner impact [CI016]. The financial verdict is therefore growth-positive but not yet fully underwritable: revenue quality is increasingly visible, while capital needs and downside sensitivity require private data.

4.5 Exhibits

5.1 Consumer Product Architecture and Workflow Integration

Aura organizes its customer-facing offering into an all-in-one digital safety ecosystem designed to replace fragmented standalone utilities such as antivirus engines, standalone password vaults, and credit-score dashboards. In daily consumer workflows, the platform operates as a background guardian across Windows, macOS, iOS, Android, and web browser extensions, continuously monitoring threat surfaces without requiring active user intervention. The primary user journey begins with enrollment where members link personal identifying attributes including Social Security numbers, email addresses, credit and debit accounts, and retirement accounts. Aura monitors these identity vectors against third-party breach dumps and billions of data points, alerting subscribers when exposed records are detected. For financial and credit workflows, Aura provides three-bureau credit monitoring across Experian, Equifax, and TransUnion, featuring instant lockdown capabilities through Experian Credit Lock. Complementing credit vigilance, transaction tracking identifies anomalous withdrawals and spending spikes based on modeled user behavior and geolocation. Digital wellbeing and family safety features round out the consumer workflow: parents manage child screen time and app access across platforms like YouTube and Roblox, while the integrated Safe Gaming module monitors in-game text and voice communications across more than 200 PC titles for cyberbullying and online predator risks.[CE001, CE002, CE003, CE004, CE005]

5.2 Operating Architecture, Enterprise BYOD, and Developer Ecosystem

The core technical architecture of Aura balances native client software with cloud-hosted intelligence pipelines and specialized ecosystem partnerships. On client endpoints, Aura deploys local antivirus agents capable of quarantining malware, trojans, and ransomware, alongside a virtual private network (VPN) that routes device traffic through military-grade encrypted tunnels across over 100 virtual locations. Sensitive user artifacts, credentials, and digital documents reside in Vault, an encrypted repository designed to isolate high-value secrets. To expand beyond saturated direct-to-consumer channels, Aura introduced Aura Business for Managed Service Providers (MSPs), targeting the identity-based security vulnerabilities inherent in Bring Your Own Device (BYOD) enterprise setups. The solution enforces security compliance at the identity layer rather than requiring intrusive Mobile Device Management (MDM) software profiles on personal hardware. Built to interface directly with Microsoft Entra ID, Aura Business enables conditional access rules that restrict corporate application connectivity unless an employee's personal device meets explicit operating system version and screen-lock benchmarks. However, Aura's public developer and engineering footprint remains largely closed: the company operates as a proprietary commercial vendor with minimal public open-source repository traction or developer API surfaces. Software delivery relies on internal cloud services and vendor integrations rather than an open developer community.[CE006, CE007, CE008, CE009, CE010, CE011]

5.3 Data Protection, Legacy Integration Exposure, and Diligence Risks

Aura pairs its defensive software with comprehensive customer guarantees, backing each adult subscription with up to $1 million in identity theft insurance to cover eligible remediation losses, legal fees, and stolen funds, supported by 24/7 US-based fraud resolution specialists. Despite marketing bank-grade encryption standards and strict commitments never to sell consumer data to third parties, the platform's multi-acquisition history presents material security risks. Over its operating lifespan, Aura absorbed legacy businesses including Intersections Inc. (now Identity Guard) and Circle Media Labs. This acquisitive architecture resulted in fragmented secondary systems. In March 2026, the ShinyHunters cybercriminal group executed a vishing attack targeting employee credentials, successfully breaching an external marketing database inherited from the 2021 Circle acquisition. The breach compromised approximately 900,000 consumer records, including roughly 35,000 records containing physical addresses and phone numbers. Although Aura confirmed that core identity vectors like Social Security numbers, passwords, and banking credentials were not breached, the incident exposes severe post-acquisition data sanitization and access-governance deficits. Technical diligence must scrutinize how thoroughly acquired assets have been audited and integrated into Aura's primary security perimeter.[CE012, CE013, CE014, CE015, CE016]

5.4 Exhibits

6.1 Customer Segmentation and Multi-Channel GTM Structure

Aura operates across distinct buyer and payer segments spanning consumer households, corporate employee benefit programs, and small-to-medium business IT environments. In the direct-to-consumer (D2C) lane, household heads subscribe to identity theft monitoring, device antivirus, VPN capabilities, and family safety controls starting at $10 monthly. In the enterprise employer benefits lane, distributed exclusively through MetLife, corporate HR buyers sponsor digital security plans as voluntary employee benefits. Concurrently, Aura has expanded into enterprise security by targeting managed service providers (MSPs) with identity-centric BYOD controls that integrate with Microsoft Entra ID without intrusive mobile device management. Enterprise employer benefits and direct commercial partnerships contributed more than 30% of Aura's reported annualized recurring revenue (ARR) as of December 2025. This dual-track go-to-market model diversifies customer acquisition away from direct digital ad spend, though it introduces significant intermediary dependence on MetLife's institutional sales cycle and broker networks. [CU001, CU002, CU003, CU004, CU005]

6.2 Adoption Trajectory, Family Telemetry, and Production Deployments

Aura's reported customer base has expanded from over one million customers following its Series F funding round to 1.6 million reported accounts in subsequent disclosures, supported by bundles across identity protection and family wellness. The company leverages proprietary behavioral data from its State of the Youth research to demonstrate real-world engagement, analyzing telemetry across children ages 8 to 17 to measure digital stress and app switching frequency. Furthermore, Aura's enterprise expansion addresses MSP demand where 65% of surveyed MSPs report client requests for BYOD identity management, mitigating vulnerability patterns where 55% of MSPs experienced security incidents over 24 months. In adjacent technology ecosystems, enterprise software platforms demonstrate rapid adoption loops for specialized agent workflows, as seen in Seismic's deployment of Aura Agents across 248 organizations and Expedia Group's completion of over 1,000 roleplay sessions across 260 users. While these enterprise deployments highlight the market appetite for automated workflows, Aura's core identity platform relies heavily on silent background monitoring, meaning active weekly user engagement remains concentrated in transactional fraud alerts and parental dashboard controls rather than continuous manual software interaction. [CU006, CU007, CU008, CU009, CU010, CU011]

6.3 Retention Durability, Breach Overhang, and Procurement Diligence

Customer retention and durability represent critical diligence areas for Aura given the elevated sensitivity of personal identity data. In March 2026, threat actors targeted Aura's marketing systems via a vishing campaign that compromised approximately 900,000 records from a legacy Circle Media Labs marketing tool, exposing names and email addresses alongside 35,000 detailed customer records. Although no Social Security numbers, banking credentials, or passwords were leaked, the incident created brand overhang and increased scrutiny across enterprise benefit brokers and MSP procurement teams evaluating platform trust. Furthermore, private-company opacity conceals net revenue retention (NRR), gross retention rates (GRR), and cohort churn metrics. While Aura's pricing baseline anchors around $150M ARR and post-separation growth targets exceeding 40% year-over-year, third-party analytics indicate steep operating losses and negative EBITDA margins. Without audited cohort disclosure, investors face severe concentration risks tied to MetLife distribution, potential churn from introductory consumer discounts, and heightened enterprise vendor diligence cycles following security disclosures. [CU012, CU013, CU014, CU015, CU016]

6.4 Exhibits

7.1 Executive Risk Profile and Residual Exposures

The strongest evidenced risk is a mismatch between Aura's trust proposition and its own security execution. Aura says it never sells customer data and advertises up to $1 million of identity-theft coverage for each adult member, yet a third-party account says a March 2026 vishing attack reached about 900,000 marketing records (CR001, CR002, CR003). Aura said financial information, Social Security numbers, and passwords were not taken, but roughly 35,000 records reportedly included home addresses and phone numbers (CR012, CR013). The assigned evidence does not include Aura's incident notice, forensic report, remediation testing, insurance terms, or post-incident retention. Residual impact is therefore high but not quantifiable: another material incident, or failure to evidence completed remediation, should be treated as a thesis-break trigger rather than assumed away.[CR001, CR002, CR003, CR004, CR005, CR006]

7.2 Regulatory Oversight, Historical Consent Decrees, and Governance

The pool identifies two historical matters that warrant governance diligence but does not establish a current enforcement action against Aura. A third-party summary reports that CEO Hari Ravichandran personally paid $1.38 million to resolve SEC allegations concerning subscriber metrics at a prior company, with no admission of wrongdoing (CR007). The same source says Intersections, acquired by Aura in 2019 and later associated with the Identity Guard line, had previously entered a CFPB consent order involving an approximately $1.2 million penalty plus restitution (CR008, CR009). These are history and control-design questions, not proof of present non-compliance. The 2026 breach creates a separate privacy-notification and remediation diligence path, but the assigned sources do not show the jurisdictions notified, claims filed, or regulator disposition. Four assigned results concern unrelated Aura-named entities and must not be used as target-company allegations (CR011).[CR007, CR008, CR009, CR010, CR011]

7.3 Operational Security Incidents, Partner Reliance, and Execution Risks

The reported breach pathway ran through a marketing list and tooling retained after the 2021 Circle acquisition, making acquired-data inventory and access control a concrete integration risk rather than a hypothetical one (CR003, CR010). Distribution is also concentrated: Aura describes MetLife as the exclusive channel for its employee-benefits offering and says that offering plus direct partnerships represented more than 30% of 2025 revenue, although the release's footnote describes the basis as December 2025 end-of-period ARR (CR004, CR014). That revenue-versus-ARR inconsistency prevents a precise concentration calculation. Aura Business adds Microsoft Entra ID and MSP dependencies; Aura cites Omdia research that 55% of MSPs had experienced a BYOD incident in the preceding 24 months and says its product does not inspect personal content or activity (CR005, CR015, CR016). Current burn, runway, margins, partner renewal terms, and channel-level retention are unavailable; the only financing mark retained here is the company's 2021 Series F announcement (CR006).[CR003, CR004, CR005, CR012, CR013, CR014, CR015, CR016]

7.4 Exhibits

8.1 Recommendation and Entry Discipline

The recommendation is research-more with low confidence, high risk, and a valuation stance of insufficient public evidence. Aura has a real subscription product, a reported historical revenue base, and a newer partner-led distribution motion, but those facts do not establish a current enterprise value or an investable return profile [CV007, CV008, CV012, CV016]. Forge reports a $1.6 billion March 2025 Series G post-money mark, yet it also warns that its private-company data can depend on limited inputs and may not represent an executable market price [CV001, CV003]. Entry discipline should therefore begin with primary financing documents, audited operating data, and a security-class waterfall rather than treating the reported round valuation as a current common-equity price.[CV001, CV003, CV007, CV008, CV012, CV016]

8.2 Financing and Valuation Context

Forge reports that Aura's March 24, 2025 Series G raised $89.65 million at $10.28 per share and a $1.6 billion post-money valuation [CV001, CV002]. Aura's October 2021 release had announced a $200 million Series F at a $2.5 billion post-money valuation [CV005]. Comparing those two stated post-money marks yields a 36% decline, but this is a comparison of financing-round valuations across different dates and security terms, not proof of an equivalent decline in common-share value [CV006]. EquityZen's public page confirms a pre-IPO marketplace context while withholding current valuation, cap-table, funding-history, and preference detail behind accreditation and access controls [CV004]. The public evidence therefore supports financing context, not a precise present-day price.

8.3 Thesis, Anti-Thesis, and Downside

The thesis is that Aura can combine a broad consumer protection bundle with partner and enterprise distribution. The official site advertises plans starting at $10 per month, while Aura's April 2026 release says employee-benefit and direct partnerships represented more than 30% of 2025 revenue; that release separately identifies its basis as reported end-of-period ARR for December 2025, so the denominator needs diligence rather than reinterpretation [CV007, CV008]. The same release describes an MSP-focused BYOD product, adding a potential enterprise route [CV009]. The anti-thesis is trust and execution risk: the retained independent review reports that approximately 900,000 records were stolen in a March 2026 vishing incident [CV010]. Historical scale and a corporate venture initiative add context, but neither resolves current unit economics [CV012, CV013].

8.4 Scenarios, Exit Readiness, and Diligence

Public evidence supports conditional scenarios, not numeric probability weights or defensible valuation ranges. A bull case requires audited growth, retention, margins, diversified partner contribution, and evidence that the 2026 security incident did not impair renewals. A base case requires stable subscription economics and a financing structure that leaves adequate common-equity value at or below the latest reported round mark. A bear case follows if churn, partner concentration, remediation costs, or new capital needs weaken the equity position [CV008, CV010, CV015]. EquityZen describes IPO, merger or acquisition, and eligible secondary transactions as possible private-market exits, but the retained page does not show an Aura-specific timetable or executable liquidity [CV011]. Final diligence must obtain audited financials, cohort retention, channel concentration, debt, cash, and the complete preference waterfall before a target return or hold period can be underwritten [CV015, CV016].

8.5 Exhibits