Enterprise cyber security software provider

Predicting renewals and reducing churn at scale

A large cyber security software provider had seen churn creep up to nearly 8%, well above the SaaS benchmark. QuantSpark's predictive renewals approach is projected to add up to $30m a year by lifting gross retention.

7 July 20261 min read
Headline result
$30m
projected annual retention benefit
At a glance
$30m
projected annual retention benefit
Editorial illustration for Predicting renewals and reducing churn at scale

projected annual retention benefit

$30m

  • Delivered: a production LSTM-based churn model generating daily-refreshed risk scores for a 300-strong customer success team.
  • Delivered: identification of three-plus months of low engagement as a top churn predictor, giving customer success teams a concrete, evidenced trigger for outreach.
  • Delivered: adoption secured through a working group of customer success managers who validated the scores and shaped the dashboards.
  • Delivered: at least one concrete intervention instituted off the back of the analysis, monthly check-ins for accounts where missed customer-success meetings were linked to higher risk.
  • Projected (modelled, not yet a reported financial outcome): a 2-3 point lift in gross retention, worth up to $30m a year, plus room to grow expansion revenue as relationships deepen.

The problem

A large cybersecurity software provider, with annual revenue above $500m, had enjoyed five years of strong growth, but churn had crept up to nearly 8%, some four points above the 4-5% benchmark typical of SaaS businesses. At that revenue scale, each point of gross retention gained or lost is worth millions of dollars a year, so the drift in churn was a material threat to the business's trajectory rather than a rounding error.

The problem was as much organisational as statistical. The provider's 300-strong customer success team had no standard way to track which renewal actions were being taken, or to judge whether those actions were working, so effort was not reliably directed at the accounts most likely to churn.

The business needed three things at once: a scalable way to identify genuinely at-risk customers before they churned, a method for turning that risk signal into interventions the customer success team could actually act on, and an interface that let leadership monitor churn as a managed metric across the business rather than a lagging surprise discovered only at renewal time.

How we delivered it

  1. Feature engineering

    QuantSpark engineered features tailored to the client's specific product and customer base, drawing on engagement and account data to characterise each customer's underlying health rather than relying on generic churn indicators.

  2. Driver analysis

    The team analysed which features carried the strongest predictive signal and found that a lack of customer engagement over three or more months was a top predictor of churn risk, giving the business a concrete, actionable early-warning signal.

  3. Model selection

    Several algorithms were tested before QuantSpark selected a Long Short-Term Memory (LSTM) neural network, an architecture suited to modelling how a customer's risk evolves over time rather than treating churn as a single static snapshot.

  4. Production infrastructure

    QuantSpark built the infrastructure to run the model daily and serve fresh risk scores directly to frontline customer success teams, turning churn prediction from a periodic report into a live operational signal.

  5. Working group validation

    A working group of customer success managers reviewed the risk scores against their own account knowledge and helped shape how the dashboards presented that information, building the trust and adoption needed for the model to actually change day-to-day behaviour.

  6. Performance framework

    The model was judged on precision and recall rather than raw accuracy, reflecting that missing a genuinely at-risk account and wasting customer success effort on a false alarm carry different costs in a renewals context.

  1. Feature engineering

    Engagement and account data engineered into features tailored to the client's product and customer base.

  2. Driver identification

    Analysis surfaces top churn predictors, including three-plus months of low engagement.

  3. LSTM model build

    Neural network trained to track how each customer's churn risk evolves over time, not just a single snapshot.

  4. Daily scoring pipeline

    Model runs daily, refreshing risk scores rather than producing a one-off analysis.

  5. Dashboard & validation loop

    Customer success managers review and help shape the scores and dashboards, building trust in the numbers.

  6. Frontline intervention

    Teams act on scores, for example instituting monthly check-ins for accounts flagged by missed meetings.

From engagement data to a daily risk score to a frontline intervention

Built with

  • LSTM neural network

    Core churn-risk model, chosen to capture how each customer's risk trajectory evolves over time

  • Daily batch scoring pipeline

    Production infrastructure that refreshes every customer's risk score daily and pushes it to frontline teams

  • Customer-success dashboard / reporting layer

    Interface through which success managers and leadership view and act on risk scores

Return on investment

Delivered return

$30m

projected annual retention benefit

What was delivered

  • Delivered: a production LSTM-based churn model generating daily-refreshed risk scores for a 300-strong customer success team.
  • Delivered: identification of three-plus months of low engagement as a top churn predictor, giving customer success teams a concrete, evidenced trigger for outreach.
  • Delivered: adoption secured through a working group of customer success managers who validated the scores and shaped the dashboards.
  • Delivered: at least one concrete intervention instituted off the back of the analysis, monthly check-ins for accounts where missed customer-success meetings were linked to higher risk.
  • Projected (modelled, not yet a reported financial outcome): a 2-3 point lift in gross retention, worth up to $30m a year, plus room to grow expansion revenue as relationships deepen.

How the return was measured

The $30m figure is QuantSpark's own projection, not an audited or realised saving. It is derived by applying a modelled 2-3 point improvement in gross retention, the expected effect of moving customer success from reactive firefighting to proactive, risk-led nurturing, to the provider's revenue base of over $500m. Because each point of gross retention is worth millions at that scale, a small percentage-point shift compounds into a large annual figure; no additional percentages or pound/dollar figures beyond these have been added.

QuantSpark built a daily-refreshed machine learning model that predicts which customers of a large cybersecurity software provider are at risk of churning, and shaped its outputs into an operating rhythm the customer success team could actually act on. The provider's churn had crept up to nearly 8%, some four points above the 4-5% benchmark typical of SaaS businesses. On a revenue base above $500m, a single point of gross retention is worth millions of dollars a year, so this drift was a material threat to the business's trajectory, not a rounding error. QuantSpark's approach is projected to lift gross retention by 2-3 points, worth up to $30m a year. That figure is the business's own modelled projection based on the improvement the new approach enables, not yet a reported financial outcome, and it is presented here strictly on that basis.

The problem the provider faced was as much organisational as statistical. Its 300-strong customer success team had no standard way to track which renewal actions were being taken, or to judge whether those actions were working, so effort was not reliably directed to the accounts most likely to churn. The business needed three things at once: a scalable way to identify genuinely at-risk customers before they left, a method for turning that risk signal into interventions the team could act on day to day, and an interface that let leadership monitor churn as a managed metric rather than a lagging surprise discovered only at renewal time.

QuantSpark's method combined careful feature engineering with a model built for how risk actually behaves. The team engineered features tailored to the client's own product usage and customer base, then analysed which of those features carried the strongest predictive signal. The standout finding was that a lack of customer engagement over three or more months was a top predictor of churn, a concrete, actionable early-warning sign rather than an abstract risk score. Several algorithms were tested before the team selected a Long Short-Term Memory (LSTM) neural network, an architecture suited to modelling how a customer's risk evolves over time rather than treating churn as a single static snapshot. QuantSpark then built the infrastructure to run that model daily, serving fresh risk scores directly to frontline customer success teams and turning churn prediction into a live operational signal rather than a periodic report. Throughout, the model was judged on precision and recall rather than raw accuracy, reflecting that missing a genuinely at-risk account and wasting customer success effort chasing a false alarm carry different costs in a renewals context.

Technology alone does not change frontline behaviour, so a working group of customer success managers reviewed the risk scores against their own account knowledge and helped shape how the dashboards presented that information. That validation loop was what built the trust and adoption needed for the model to actually change what people did each day, rather than sitting unused alongside the old, instinct-driven process. One concrete result of that shift: the analysis linked missed customer-success meetings to higher churn risk, and the team instituted monthly check-ins in response, a direct, delivered behavioural change traceable to the model's output.

The value case rests on moving customer success from reactive firefighting, responding to churn after a customer has already disengaged, to proactive, risk-led nurturing that flags disengagement three or more months out. QuantSpark's projection is that this shift lifts gross retention by 2-3 points, worth up to $30m a year on the provider's revenue base, while also deepening customer relationships and creating room to grow expansion revenue. That projection is built by applying the modelled retention improvement to a revenue base of over $500m; because each point of gross retention is worth millions at that scale, a modest percentage-point shift compounds into a large annual figure. It should be read as QuantSpark's own estimate of the model's potential impact, not as an audited saving already booked. What is delivered today is the model itself, the daily scoring pipeline, the validated dashboards, and at least one instituted intervention; what is projected is the retention and revenue upside that follows if the business sustains that new way of working.

Figures are drawn from completed QuantSpark engagements. Clients are anonymised by agreement; on a call we will walk you through how each number was measured and, where the client has agreed, put you in touch with a reference.

Ask about our work

Answers only from our documented case studies

Powered by the same applied-AI approach we deliver for clients

Solving something similar in SaaS & Tech?

Get in touch. We will discuss your challenge and show you what is possible.