The security firms about to buy, and who decides there.
Oxpium builds the list of cybersecurity firms that fit your offer, finds who to reach, tells you when one of them is hiring or launching a service, and runs the campaign.
- 778,000people working in cybersecurity in the US
- 514,000cybersecurity job postings in the US in a year
- 64%of security founders in professional databases run 50 people or fewer
- < 10 minfrom the first sentence to a live campaign
Firms where security is the business, not a page on the website.
A 15-person pen testing shop doesn't buy like an MSSP running a 200-analyst SOC. Tell the agent the specialty, the size, the region: it searches professional databases and public sources, reads every website and leaves out the IT shops that only list security as a side service.
- Reading the request
- Professional databases · IT and security services, VA and MD
- Reading websites · 2,940 firms
- Headcount 10 to 200
214 firms where security is the main business.
Security as the core
Plenty of IT shops have a security page. The agent reads each website and only keeps the firms where security is the main business.
A precise specialty
Pen testing, managed SOC, compliance, cloud security, incident response: only the firms that show that specialty stay on the list.
A certification shown
The agent notes whether the website shows a certification, like CMMC, SOC 2 or ISO 27001, and which service it applies to.
A size, a region
10 to 200 people, around Washington or San Antonio: headcount comes from professional databases, location from public sources.
The right person at each firm, and how to reach them.
At a 20-person firm, the founder decides everything. Past 100, you need the CTO, the head of partnerships or the talent lead. The agent fills in the columns your campaign needs, row by row, reads each firm's website and verifies every email before adding it.
- Reading the request
- Professional databases · 214 firms
- Verifying emails
- Looking for cell phones
203 founders and CEOs found, 181 verified emails, 84 cell phones.
The right person
The founder, the CTO, the head of partnerships or the talent lead, looked up by title and company, depending on what you sell them.
Verified email and cell
Every email is verified before it enters the list. A cell phone is added when one exists, handy for founders who spend their days at clients.
The tools they deploy
The kinds of products each firm resells or runs for its clients, EDR, firewalls, SIEM, are read on its website and put in a column.
The clients they cite
The industries of the clients cited on the website, healthcare, defense, local government, and the case studies, each in its column.
Automations that catch security firms the moment they move.
Once the list is built, Oxpium keeps going without you. Each automation reruns its search on schedule and adds what just changed to the top of the list: an analyst role posted, a headcount going up, a new compliance service on a website. Those are your signals, and they show up on their own.
- Job postings · 64 new security roles in VA and MD
- Matching postings to firms
- Updating the list
Latest runs
- Today+2
- Fri, Oct 9+1
- Thu, Oct 8+3
- Wed, Oct 7+2
2 firms posted a security role since Friday.
Technical roles
Every morning at 7 am, the firms that post a SOC analyst, pen tester or security engineer role move to the top of the list.
A new city
Every Monday, another flags the firms hiring in a city where they had no postings before: often the sign of a new office opening.
Headcount going up
On the 1st of the month, the firms whose headcount grew 10% or more in professional databases move to the top, with a badge.
Your own watch
Every Friday, the websites are reread for a new CMMC readiness service, or for any other watch you can write in one sentence.
A campaign that speaks security.
Security founders get partnership pitches every week and spot a generic one in a second. What gets through starts from what they do: the products they deploy, the roles they can't fill, the assessments they deliver. Email from your mailbox, calls from your browser, stops on the first reply.
Subject firm and your clients' backups
Each variable is a column of your list, filled in by the agent.
Before client meetings
Emails leave from your own mailbox and calls follow early, Tuesday to Thursday from 8 to 9:30 am, before their day at clients starts.
Their work in the message
Every email comes from the list's columns: services, products deployed, open roles. The agent rereads the site before the follow-up.
Calls from the browser
Calls go out from the browser on a mobile number, then get recorded, transcribed and summarized on the firm's row in the list.
Stops on reply
One reply and the campaign stops for that firm: no follow-up goes out while you are already talking with its founder.
Frequently asked questions
Write “cybersecurity firms with 10 to 200 people in Virginia and Maryland”. The agent searches professional databases and public sources, reads the website of every IT and security firm in the area, keeps the ones where security is the main business, and adds each firm's city, headcount and website. It takes a few minutes.
Ask “find the head of partnerships at each firm, or else the VP of sales or the founder”. The agent looks them up by title and company, verifies each email before adding it, and notes the exact title so you know who you're writing to.
Tell the agent once: “every Monday, flag the firms on my list that post a role in a city where they weren't hiring before”. The automation compares the week's job postings with the cities it already knows, and the firms that are expanding land at the top of your list with the city and the role.
A first email that names the products the firm already deploys and the industries of its clients, an agent step that reads its case studies to write the follow-up in the same thread, then a call. Emails go out from your own mailbox early on weekday mornings, and the campaign stops as soon as a firm replies.
For 300 firms kept after reading the websites across a whole region, with 260 verified emails and 90 cell phones, count around €70 of data on top of the subscription. An agency typically charges €1,500 to €2,500 for a comparable list, delivered once and never updated.See pricing
By reading the website. The agent looks at what the firm leads with: if security is one line between web development and managed IT, it leaves the firm out, or keeps it in a separate column if you sell to MSPs too. You can tighten the rule: at least two security services shown, or open security roles.
Related industries
Your next list
is one sentence away.
Create an account, describe your target, watch the agent work. No credit card.