CTOs posting about audits
CTOs and compliance leads who post about SOC 2, ISO 27001 or a pentest arrive with their post quoted.
Watching
- “SOC 2 audit”
- “ISO 27001”
- “pentest”
- +3 more
Pancake reads GRC openings, job posts naming Vanta, and rival MSSPs’ pages. You scope the work before another firm does.
Example prompts
See all example PlaysReady when you are
Tell Pancake who you want to find, and it builds your first Play with you.
We run SOC 2 readiness. Find CTOs at US SaaS companies posting about their first SOC 2 audit.
I’ll watch posts about SOC 2 audits and keep CTOs at US SaaS companies.
New playDraftCreated
CTOs facing their first SOC 2 audit
Create play and run searchYour play is ready. Its first search is running.
We run a 24/7 SOC. Find US companies with 200 to 2,000 staff hiring their own SOC analysts.
I’ll watch US job posts for SOC analyst roles and find who leads security there.
New playDraftCreated
Companies hiring SOC analysts
Create play and run searchYour play is ready. Its first search is running.
We run pentests for SOC 2 audits. Find US SaaS companies whose job posts name Vanta or Drata.
I’ll watch US job posts that name Vanta or Drata and find who owns security.
New playDraftCreated
SaaS teams using Vanta or Drata
Create play and run searchYour play is ready. Its first search is running.
Leads
The people this Play found and qualified.
Gantrywise is a 60-person US SaaS company. Delaney is the CTO and posted this week about preparing for a first SOC 2 audit.
Coppervane Health is a 420-person US healthcare company with a SOC analyst role open. Octavia is the CISO and owns the hire.
Quellstone is a 220-person US SaaS company whose security job posts name Vanta. Rosario leads GRC there.
SequenceActive
Pancake runs this Play’s outreach, tuned for you.
Up next · First message
Hi Delaney, I saw you’re preparing Gantrywise for its first SOC 2 audit. Which part of the prep is taking the most time?
Hi Octavia, I run a 24/7 security operations center. How does your team handle alerts that land overnight?
Hi Rosario, we run pentests timed to SOC 2 audits. How far ahead do you usually book yours?
Writing from their activity…Drafted — sends when the sequence reaches this step.
Written from 1 signal + your Brain voice.
Written in your Brain voice.
Varnholt Security
Channels
# general# new-leads# salesHey 👋! Here are the fresh leads of the day. Enjoy!
Delaney Hsu — CTO, GantrywiseKeyword
Octavia Thackeray — CISO, Coppervane HealthHiring
Rosario Villaseñor — Head of GRC, QuellstoneTech stack
ApproveRejectApproved
Nikolai Pavlicek — VP Engineering, HeronfieldKeyword
Rohit Ravindran — Head of IT, Stonecrop FreightHiring
Kenji Amundsen — CISO, GlintworkTech stack
ApproveReject
Shanice Colquitt — Head of Security, LanyardlyHiring
Svetlana Sokolova — VP IT, Kettlewell BankTech stack
Ayodele Brisco — VP Engineering, HarborvaultKeyword
ApproveReject
Message #new-leads
Tell Pancake who to reach. It builds the Play and runs its first search.
Signals
A Play finds leads eight ways. These four signals matter most to security firms.
CTOs and compliance leads who post about SOC 2, ISO 27001 or a pentest arrive with their post quoted.
Watching
Pancake reads job posts for SOC, GRC and security engineering roles, then finds who leads security.
Watching
Pancake finds companies whose job posts name the compliance and security platforms you work in.
Watching
IT and security leaders who comment on or like a rival MSSP or pentest firm’s posts become your leads.
Watching
Pancake can also watch the Influencer and Own brand signals. Hiring and Stack start switched off. One click turns each on.
Control
Pancake contacts only the leads you approve and add to a sequence. Nothing goes out for 10 minutes, so you can undo.
Every message goes out as you, in your voice.
The first touch never sells.
Pancake sends Monday to Friday, 9 AM to 6 PM, in your time zone.
Start contacting Delaney Hsu?
Delaney Hsu is in the sequence
Nothing goes out before 9:42 AM. Undo any time until then.
FAQ
No. Breaches and news aren’t signals. Pancake finds people posting about audits and companies hiring security roles.
No. Pancake never scans or probes a prospect’s systems. Messages start from the lead’s own post when there is one, and from your Brain.
The first touch carries no pitch, so there’s nothing to ignore. When a lead posted or commented, the message starts from that post. Leads you don’t approve never hear from you.
Only from public clues: posts about a pentest or security review, and job posts that name Vanta or Drata. It can’t see audit results or failed controls.
Up to three short messages under your name, after a light warm-up. No emails, no calls.
Every lead. Pancake contacts only leads you approve and add to a sequence, and you get 10 minutes to undo.
Yes. Each lead gets personal messages in your voice. Read and edit any of them before it goes out, or let them send as written. A reply stops the sequence.
About 120 to 600 qualified leads a month on 60,000 credits, more on a higher level. Each one is matched to your ICP by your Brain. It is an estimate: a narrow audience costs more, and Pancake shows the real one before a search runs.
From $99 a month per workspace, with 60,000 credits and unlimited seats. The 7-day free trial comes with 15,000 credits and needs a card.
Tell Pancake who to reach. It builds the Play.
From $99 a month per workspace. Your whole team included.
From $99/month
15,000 free credits, valid for 7 days