Pancake for cybersecurity firms: Find CTOs preparing for their first SOC 2 audit.

Pancake reads GRC openings, job posts naming Vanta, and rival MSSPs’ pages. You scope the work before another firm does.

Start free Book a demo

Example prompts

KeywordWe run SOC 2 readiness. Find CTOs at US SaaS companies posting about their first SOC 2 audit. Play it in the demo.
HiringWe run a 24/7 SOC. Find US companies with 200 to 2,000 staff hiring their own SOC analysts. Play it in the demo.
StackWe run pentests for SOC 2 audits. Find US SaaS companies whose job posts name Vanta or Drata. Play it in the demo.

Reach the person who owns security.

Use in Claude / Codex

Varnholt SecurityOverviewLeadsCampaignSignals

Signals

Choose the signals Pancake uses to find qualified leads.

LinkedIn signals

KeywordSet upNo keywords are in your brain yet.“first SOC 2 audit”“SOC 2 Type II”+1 moreSet upNo keywords are in your brain yet.“alert fatigue”“24/7 monitoring”Set upNo keywords are in your brain yet.“penetration test”“pentest report”

CompetitorSet upNo competitors are in your brain yet.Ironwake SecuritySet upNo competitors are in your brain yet.Tallwater CyberSet upNo competitors are in your brain yet.Scarpline Security

InfluencerSet upNo influencers or experts are in your brain yet.

Own brandVarnholt Security pageKeira Varnholt

Company signals

HiringSet upNo hiring roles were collected for this signal.Compliance managerGRC analystSet upNo hiring roles were collected for this signal.SOC analystSecurity analyst+1 moreSet upNo hiring roles were collected for this signal.

StackSet upNo technologies were collected for this signal.VantaDrataSet upNo technologies were collected for this signal.CrowdStrikeSentinelOne+1 moreSet upNo technologies were collected for this signal.VantaDrata+1 more

Ask Pancake anythingNew chat

Which signals should I turn on?How does post engagement find leads?What do the hiring and stack signals track?

We run SOC 2 readiness. Find CTOs at US SaaS companies posting about their first SOC 2 audit.

Checking signal settingsDone

I’ll watch posts about SOC 2 audits and keep CTOs at US SaaS companies.

Recommended next moveApproved

Signal settings

“first SOC 2 audit” · “SOC 2 Type II” · “security questionnaire”
Compliance manager · GRC analyst
Vanta · Drata, named in job posts
Ironwake Security

Approve changeSaved. First leads arrive tomorrow morning.

We run a 24/7 SOC. Find US companies with 200 to 2,000 staff hiring their own SOC analysts.

Checking signal settingsDone

I’ll watch US job posts for SOC analyst roles and find who leads security there.

Recommended next moveApproved

Signal settings

SOC analyst · Security analyst · Detection engineer
CrowdStrike · SentinelOne · Splunk, named in job posts
“alert fatigue” · “24/7 monitoring”
Tallwater Cyber

Approve changeSaved. First leads arrive tomorrow morning.

We run pentests for SOC 2 audits. Find US SaaS companies whose job posts name Vanta or Drata.

Checking signal settingsDone

I’ll watch US job posts that name Vanta or Drata and find who owns security.

Recommended next moveApproved

Signal settings

Vanta · Drata · Secureframe, named in job posts
“penetration test” · “pentest report”
Scarpline Security

Approve changeSaved. First leads arrive tomorrow morning.

Leads

People matched to your ideal customer profile, with the signal behind each match.

5 qualified leads in this workspace

DHDelaney HsuCTO @ GantrywiseKeywordPosted on SOC 2 auditApproveAdd to campaign

NPNikolai PavlicekVP Engineering @ HeronfieldKeywordPosted on SOC 2 Type IIApprove

SCShanice ColquittHead of Security @ LanyardlyHiringGRC analyst role openApprove

HVHugo VillanuevaCTO & Co-founder @ PikestaffStackVanta in job postsApprove

TBTamika BrashearCompliance Manager @ TessalineCompetitorLiked an Ironwake postApprove

OTOctavia ThackerayCISO @ Coppervane HealthHiringSOC analyst role openApproveAdd to campaign

RRRohit RavindranHead of IT @ Stonecrop FreightHiringDetection engineer roleApprove

SSSvetlana SokolovaVP IT @ Kettlewell BankStackSentinelOne in job postsApprove

CFClement FairbrotherIT Director @ ShorewickKeywordPosted on alert fatigueApprove

PCPilar CastañedaCOO @ Marrowgate TitleCompetitorLiked a Tallwater postApprove

RVRosario VillaseñorHead of GRC @ QuellstoneStackVanta in job postsApproveAdd to campaign

KAKenji AmundsenCISO @ GlintworkStackDrata in job postsApprove

ABAyodele BriscoVP Engineering @ HarborvaultKeywordPosted on a pentestApprove

TOTravis OkimotoCTO @ FennoscopeCompetitorLiked a Scarpline postApprove

LQLorena QuijadaHead of IT @ LumbergateKeywordPentest report postApprove

Bad leads (1)

DHDelaney HsuCTO @ Gantrywise

KeywordConfidence 90%

OTOctavia ThackerayCISO @ Coppervane Health

HiringConfidence 89%

RVRosario VillaseñorHead of GRC @ Quellstone

StackConfidence 86%

CompanySeniority

GantrywiseCoppervane HealthQuellstone

C-levelC-levelHead

CountryLinkedInUnited StatesProfile ↗

Keyword

Gantrywise is a 60-person US SaaS company. Delaney is the CTO and posted this week about preparing for a first SOC 2 audit.

Hiring

Coppervane Health is a 420-person US healthcare company with a SOC analyst role open. Octavia is the CISO and owns the hire.

Stack

Quellstone is a 220-person US SaaS company whose security job posts name Vanta. Rosario leads GRC there.

Qualified as a leadGantrywise is a 60-person US SaaS company. Delaney is the CTO and posted this week about preparing for a first SOC 2 audit.

Qualified as a leadCoppervane Health is a 420-person US healthcare company with a SOC analyst role open. Octavia is the CISO and owns the hire.

No engagement signals yet — this lead was sourced via Hiring.

Qualified as a leadQuellstone is a 220-person US SaaS company whose security job posts name Vanta. Rosario leads GRC there.

No engagement signals yet — this lead was sourced via Stack.

Ask AIApproveAdd to campaign

CampaignActive

Pancake runs one warm outreach campaign, tuned for you.

DHDelaney HsuOTOctavia ThackerayRVRosario VillaseñorInvited

Visit their profileDone
Like a recent postDone
Send a connection requestNowNo note — just the request, so it never reads as a pitch.
First message (after they accept)Upcoming6 hours after they accept
Follow-up messageUpcomingafter 3 days
Follow-up messageUpcomingafter 3 days

Up next · First message (after they accept)

Hi Delaney, I saw you’re preparing Gantrywise for its first SOC 2 audit. Which part of the prep is taking the most time?

Hi Octavia, thanks for accepting. I run a 24/7 security operations center. How does your team handle alerts that land overnight?

Hi Rosario, good to connect. We run pentests timed to SOC 2 audits. How far ahead do you usually book yours?

Writing from their activity…Drafted — sends when the sequence reaches this step.

Written from 1 signal + your Brain voice.

Written in your Brain voice.

Varnholt Security

Channels

# general# new-leads# sales

# new-leads

PancakeAPP8:30 AM

Hey 👋! Here are the fresh leads of the day. Enjoy!

Delaney Hsu — CTO, GantrywiseKeyword

Octavia Thackeray — CISO, Coppervane HealthHiring

Rosario Villaseñor — Head of GRC, QuellstoneTech stack

ApproveRejectApproved

Nikolai Pavlicek — VP Engineering, HeronfieldKeyword

Rohit Ravindran — Head of IT, Stonecrop FreightHiring

Kenji Amundsen — CISO, GlintworkTech stack

ApproveReject

Shanice Colquitt — Head of Security, LanyardlyHiring

Svetlana Sokolova — VP IT, Kettlewell BankTech stack

Ayodele Brisco — VP Engineering, HarborvaultKeyword

ApproveReject

Message #new-leads

Say who you sell to. Pancake turns it into signals to watch. You approve them once.

Illustrative. Names and companies are fictional.

Signals

Security work leaves a trail.

Pancake watches six buying signals. These four matter most to security firms.

Keyword

CTOs posting about audits

CTOs and compliance leads who post about SOC 2, ISO 27001 or a pentest arrive with their post quoted.

Watching

“SOC 2 audit”
“ISO 27001”
“pentest”
+3 more

Hiring

Teams hiring security staff

Pancake reads job posts for SOC, GRC and security engineering roles, then finds who leads security.

Watching

SOC analyst
GRC analyst
Security engineer
+2 more

Stack

Tools they hire for

Pancake finds companies whose job posts name the compliance and security platforms you work in.

Watching

Vanta
Drata
CrowdStrike
SentinelOne
+2 more

Competitor

Rival security firms’ audience

IT and security leaders who comment on or like a rival MSSP or pentest firm’s posts become your leads.

Watching

Ironwake Security
Tallwater Cyber
+1 more

Pancake can also watch the Influencer and Own brand signals. Hiring and Stack start switched off. One click turns each on.
Illustrative. Names and companies are fictional.

Control

You choose who hears from you.

Pancake contacts only the leads you approve and add to your campaign. Nothing goes out for 10 minutes, so you can undo.

Your own LinkedIn
Outreach goes out from your account, paced by LinkedIn’s own limits.
No pitch in the invite
Connection requests go out with no note.
Weekdays, business hours
Pancake sends Monday to Friday, 9 AM to 6 PM, in your time zone.

Add Delaney Hsu to your campaign?

Campaign: Active
Sends as: Keira Varnholt — your own LinkedIn account
Sequence: LinkedIn signal outreach
Messages: 3 personal messages, written from their activity in your Brain voice
First action: No earlier than 9:42 AM, inside the send window.
Send window: Mon–Fri · 9 AM–⁠6 PM (ET)
Objective: Book a meeting — replies get cal.example/keira

CancelAdd to campaign

Delaney Hsu added to your campaign

Nothing goes out before 9:42 AM. Undo any time until then.

Undo

Illustrative. Names and companies are fictional.

FAQ

Questions security firms ask.

Can Pancake tell me which companies got breached?

No. Breaches and news aren’t signals. Pancake finds people posting about audits and companies hiring security roles.

Can messages mention what’s exposed on their domain?

No. Pancake never scans or probes a prospect’s systems. Messages start from the lead’s own post when there is one, and from your Brain.

Security leaders ignore vendor pitches. Will this read like one?

The connection request has no note, so there’s no pitch to ignore. When a lead posted or commented, the message starts from that post. Leads you don’t approve never hear from you.

Can it find companies that need a pentest?

Only from public clues: posts about a pentest or security review, and job posts that name Vanta or Drata. It can’t see audit results or failed controls.

What does Pancake send, and where?

LinkedIn only, from your own account. A profile visit, a like, a connection request with no note, then up to three messages. No emails, no calls.

What do I approve?

Every lead. Pancake contacts only leads you approve and add to your campaign, and you get 10 minutes to undo.

Can I read the messages before they send?

You can read each one in the lead’s campaign journey. Messages send on their own when their step comes. You can’t edit or approve them one by one. To stop outreach, remove the lead or pause the campaign.

How many leads will I get?

Pancake aims for 5 to 15 new leads a day, delivered each morning. The count depends on how many people match your signals.

What does it cost?

$99 a month, flat, with unlimited seats. The 3-day free trial needs a card.

Audit season never ends.

$99 a month, flat.
First leads arrive tomorrow morning.

Start free Book a demo

Simple, transparent pricing

$99/month

5 to 15 new leads a day.
Every lead comes with its reason.
LinkedIn outreach from your account.
You approve every lead first.
One article a day for your site.
Unlimited seats.

Start free

3-day free trial

Pancake for cybersecurity firms: Find CTOs preparing for their first SOC 2 audit.

Reach the person who owns security.

Security work leaves a trail.

CTOs posting about audits

Teams hiring security staff

Tools they hire for

Rival security firms’ audience

You choose who hears from you.

Your own LinkedIn

No pitch in the invite

Weekdays, business hours

Questions security firms ask.

Pancake for teams like yours.

Audit season never ends.

Simple, transparent pricing