I’m launching a brand-new SaaS security product and I plan to get it to $1M ARR in 12 months, bootstrapped
Here’s my 5-step hypothesis for the game plan: 👇
Step 1: Find a VC-backed product and create a 'Low-Cost’ version:
We're creating a product to provide visibility into Admin mistakes on SaaS platforms . There are 10-15 products doing this that are VC-backed. (www.getclearsight.com)
Right now, any admin can install apps through the SaaS app stores, change the security configurations, or extend permissions to other people. In the meantime, the security team is completely unaware of what's going on.
We are looking for customers that track ‘what's going on' inside their SaaS tools. We will automate that process for them.
Step 2: Plan a different GTM motion
→ My goal is to get the first five customers through cold outreach, personal network, and events. We’ll also test AWS, Azure, and GCP marketplaces to see if they drive organic traffic.
→ Onboarding should be simple and self-serve.
Step 3: Develop the product
We'll use Bubble for the front end and Make for the back end. We will connect to 150+ SaaS apps through a white-labeled integration platform(Paragon). We’ll find out exactly How far can No-code go 😊
The product should be ready within 30 days or less.
Step 4: Create a viral (and free) offer
I want to create a PLG motion with a free offer vs. the industry standard of ‘Get Pricing.’
People will not use a free security product. We’ll need to make a useful offer but de-risk it for them until they trust us. What kind of free offer would be a good fit?
Step 5: Activate Marketing channels.
Testing Reddit for PPC. The cost is lower than LinkedIn. Yet, if you filter by subreddits, you can ‘target by title’.
I’m creating the ‘Hands-On CISO’ podcast to interview security leaders. This would give me facetime with them and help me learn more about the field. I’ll produce high-quality content that they can share on their social media to build their brand.
If the AWS marketplace is successful (from step 2), I will double down on it. I will also consider integrating through the SFDC/HubSpot/Zendesk app stores.
Step 6: Add AI for Threat analysis
After we get some direction from customers, we plan on adding AI to perform a basic security review. This will allow us to automate more steps they're doing.
We'll treat the AI component as a 'junior security analyst'.
From here, we’ll try to find ways to go even faster.
I’m feeling positive about the playbook. And, I’m also preparing for things to go not according to plan.
So, in summary, the plan is to:
→ Find a good ‘Low-Cost’ concept
→ Challenge existing GTM
→ Develop using No-code
→ Create a free offer
→ Marketing.
IF it works, I think we can get to $1M ARR in 12 months.
That’s a big IF :)
At least we’ll have fun 😉
This is really interesting. I’m currently building a tool around Terraform security analysis and seeing similar challenges with visibility.
Nice clickbait title
I feel like security improvements are such a good idea. We are certainly in a new age with scams and fraud.
I like the ambition
Thank you! :)
I am new to saas and what not but i was wondering if clearsight developed and wrote there own software and you are using bubble - wont you be at a disadvantage of (a) limitations from bubble i.e the plugins (b) cost of bubble?
Would listing on like producthunt give you traction for customers? Or at the very least, exposure
Good question. I try to:
Producthunt would likely give exposure but I'm not sure if it's the right audience. It's definitely something we'll test, though.
Looks like a solid playbook. I have a question on paid advertisement, how much is the PPC on reddit compared to linkedin and who you exactly targeting?
I'm targeting the cybersecurity/infosec subreddits. It's currently ~$0.5 per click but no meaningful results yet.