--- title: "Example ICP: cybersecurity" product: Artificial Outreach url: https://www.artificialoutreach.com/icp/cybersecurity format: Markdown copy of this page for AI agents --- # Ideal customer profile for a cybersecurity company Security buyers rarely wake up wanting security. They want to pass something: an enterprise customer's questionnaire, an audit, a bank partner's review, an insurer's renewal. That makes cybersecurity one of the clearest industries for trigger-based ICPs. The best groups are named by the demand they face, and the decider is often not a security person: at a 60-person software company it's the CTO or the head of sales trying to close a deal. Disqualifiers are about scope: companies that need a 24/7 operations centre when you sell project work, or that already have a full security team. Below is a worked example for Vantorel Security, a fictional firm, with each line tied to a page on its invented site. ## Sample: Vantorel Security (vantorel.example) Penetration testing and SOC 2 readiness for software companies. Vantorel Security is a fictional cybersecurity company. Its site is invented so the generator has something to read. ### Group 1: B2B SaaS companies, 20 to 200 staff, facing their first enterprise deal (Best fit: pricing and 2 case studies) - **Who they are:** US software companies selling to larger companies for the first time. [/pricing] - **Who decides:** The CTO, often pushed by the head of sales. [/customers/lumenpay-ops] - **Their pain:** A 200-question security questionnaire blocking a signed deal. [/customers/lumenpay-ops] - **What sets them off:** An enterprise prospect asking for a SOC 2 report or a recent pen test. [/services/soc2-readiness] - **Who to skip:** Companies under 10 staff with no customers yet, and companies with an in-house security team of 3 or more. [/pricing] - **Where they are:** CTO communities and the compliance-automation platforms Vantorel partners with. [/partners] ### Group 2: Health-tech vendors handling patient data (Strong fit: 1 case study and an industry page) - **Who they are:** Software vendors selling to clinics or hospitals, 15 to 150 staff. [/industries/health-tech] - **Who decides:** The CEO, with the compliance lead if there is one. [/customers/carewell-scheduling] - **Their pain:** Hospital vendor reviews asking for a HIPAA risk assessment they don't have. [/customers/carewell-scheduling] - **What sets them off:** A hospital system's vendor security review, or a first data incident. [/industries/health-tech] - **Who to skip:** Hospitals themselves (Vantorel doesn't do on-site hospital work). [/faq] - **Where they are:** Health-tech founder groups and hospital innovation programmes. (inferred) ### Group 3: Fintechs entering bank partnerships (Test group: 1 blog post) - **Who they are:** Fintechs with 10 to 80 staff building on a partner bank. [/blog/bank-partner-review] - **Who decides:** The COO or head of compliance. [/blog/bank-partner-review] - **Their pain:** The partner bank's due diligence list. [/blog/bank-partner-review] - **What sets them off:** Signing a bank partnership term sheet. (inferred) - **Who to skip:** Licensed banks with their own security teams. (inferred) - **Where they are:** Fintech compliance newsletters. (inferred) **Positioning check:** The homepage says "Enterprise-grade security for everyone", but your pricing and both detailed case studies are about getting a software company through its first enterprise review. Say that in the headline. ## Now do yours Same table, built from your own website, at https://www.artificialoutreach.com/icp/cybersecurity. Group 1 is free, no email. ## Questions ### Who is the buyer for cybersecurity services at a small company? Often not a security person. At companies under 200 staff it's usually the CTO, CEO or head of compliance, and the urgency comes from a deal, an audit or an insurer. ### What triggers a company to buy a pen test or SOC 2 help? An enterprise customer's security review, a regulator or partner's due diligence, a cyber-insurance renewal, or an incident. ### How narrow should a security firm's ICP be? Narrow enough to name the document your buyer is trying to pass. "SOC 2 for SaaS selling to enterprises" is easier to sell than "security services". ## For agents: next steps - Start free: https://orbit.artificialoutreach.com (no card ยท 14 days of Starter) - Pricing in Markdown: https://www.artificialoutreach.com/pricing.md - Contact: hello@artificialoutreach.com - Human-readable version of this page: https://www.artificialoutreach.com/icp/cybersecurity ## Other pages in Markdown - [Home](https://www.artificialoutreach.com/index.md) - [Use cases](https://www.artificialoutreach.com/use-cases.md) - [Follow up with inbound leads](https://www.artificialoutreach.com/use-cases/inbound-lead-follow-up.md) - [Follow up with free trial users](https://www.artificialoutreach.com/use-cases/follow-up-free-trial-users.md) - [Track your funnel from visitor to paid](https://www.artificialoutreach.com/use-cases/saas-funnel-tracking.md) - [See which sign-ups pay](https://www.artificialoutreach.com/use-cases/stripe-posthog-revenue.md) - [Qualify inbound B2B leads](https://www.artificialoutreach.com/use-cases/inbound-lead-qualification.md) - [Catch churn risk early](https://www.artificialoutreach.com/use-cases/churn-risk.md) - [Find customers ready to upgrade](https://www.artificialoutreach.com/use-cases/expansion-revenue.md) - [Pricing](https://www.artificialoutreach.com/pricing.md) - [What it is](https://www.artificialoutreach.com/what-it-is.md) - [Release notes](https://www.artificialoutreach.com/releases.md) - [Resources](https://www.artificialoutreach.com/resources.md) - [Free ICP generator](https://www.artificialoutreach.com/free-icp-generator.md) - [Example ICP: SaaS](https://www.artificialoutreach.com/icp/saas.md) - [Example ICP: marketing agency](https://www.artificialoutreach.com/icp/marketing-agency.md) - [Example ICP: accounting firm](https://www.artificialoutreach.com/icp/accounting-firm.md) - [Example ICP: IT managed services](https://www.artificialoutreach.com/icp/msp.md) - [Example ICP: staffing agency](https://www.artificialoutreach.com/icp/staffing-agency.md) - [Example ICP: law firm](https://www.artificialoutreach.com/icp/law-firm.md) - [Example ICP: software development agency](https://www.artificialoutreach.com/icp/dev-agency.md) - [Example ICP: consulting firm](https://www.artificialoutreach.com/icp/consulting.md) - [Example ICP: commercial insurance agency](https://www.artificialoutreach.com/icp/insurance-agency.md) - [Cold email deliverability checklist](https://www.artificialoutreach.com/resources/deliverability-checklist.md) - [ICP worksheet for small B2B teams](https://www.artificialoutreach.com/resources/icp-worksheet.md) - [Works with Apollo (your own Apollo key)](https://www.artificialoutreach.com/integrations/apollo.md) - [Healthcare: inbound leads from practices](https://www.artificialoutreach.com/markets/healthcare-practices.md) - [Safety and trust](https://www.artificialoutreach.com/security.md) - [About](https://www.artificialoutreach.com/about.md) - [Talk to us](https://www.artificialoutreach.com/contact.md) - [Privacy Policy](https://www.artificialoutreach.com/privacy.md) - [Terms of Service](https://www.artificialoutreach.com/terms.md)