Founder-led sales for startups under 20 people for cybersecurity

This edition is written for CISOs, VPs of security, and heads of GRC. In cybersecurity, security buyers reward domain fluency and reject anything that reads as vendor spam, so the way you install founder-led sales has to reflect that reality from day one.

The under-20-person version of founder-led sales is not a diluted enterprise playbook. It is the founder personally running discovery, closing, and post-sale for the first 100 customers with different constraints: no headcount, no politics, and no time to be wrong for long.

Own it personally as a founder or lean-in operator for the first quarter. Hiring a specialist too early replaces context with process.

Pick one channel, one trigger, one message. Two of anything at this stage is too many and none of them will work.

The binding constraint we see in cybersecurity is almost always credibility and trust, not tooling. Founder-led sales is only useful in this vertical when it is pointed at that constraint — not at a generic growth number borrowed from another category.

Instrument founder hours per week in customer conversations in a spreadsheet if you have to. Legibility beats sophistication under 20 people.

The startup-specific trap is hiring VP of Sales at $500k ARR to escape sales, usually because a well-meaning advisor points at what worked at their $50m company. Ignore.

Budget rules: whatever you spend on tools, spend the same on the person operating them. Under-tooling is fine; under-humaning is not.

A working founder-led sales function at 15 people is a genuine moat — most competitors of that size do not have one, and the discipline carries forward as the company grows.

Concretely for cybersecurity: the difference between a real security opportunity and a wasted quarter is one credible sentence. That is the reason it is worth installing founder-led sales properly rather than half-heartedly across three vendors.