Solanasis — Master Go-To-Market Playbook (2026)

Version: 2.0 (revised after deep-read of all 80+ docs) Date: 2026-03-05 Owner: Dmitri Sunshine, Founder & CEO North Star: Revenue in the door. Everything else is secondary until MRR is established. Companion docs: compiled_questionnaire_answers.md | Solanasis_AI_Native_Content_Strategy_2026.md | ORB Pack v2 (full delivery system) | Compliance-Platform-Partnerships-Deep-Dive.md | PE-Outreach-Playbook-Solanasis.md | Mega_Playbook_Enterprise_SMB_Services.md


Table of Contents

  1. Situation Assessment
  2. Revenue Math — What You Actually Need
  3. The 90-Day Execution Plan
  4. Sales Playbook — Scripts, Cadence, Closing
  5. Content Strategy — Integrated GTM Engine
  6. Partnership & Referral Engine
  7. Marketplace Bridge Revenue
  8. PE Outreach — High-Leverage Channel
  9. Compliance Platform Partnerships — The Cheat Code
  10. Contractor Scaling Plan
  11. Tool Stack — Lean & Lethal
  12. Financial Model & Unit Economics
  13. Key Metrics & Weekly Review
  14. Risk Mitigation

1) Situation Assessment

Where You Are (Honest Snapshot)

FactorStatusImplication
EntityLLC, S-Corp electionReady to operate and invoice
Runway3-6 monthsEvery week matters. Revenue activities > everything else
PipelineZero active leadsNetwork exists but hasn’t been activated for Solanasis
Websitesolanasis.com exists, needs build-outWebsite is a credibility signal, not a lead gen channel yet
SOPsNoneBuild as you deliver. First engagement = first SOP
TeamSolo (Dmitri)Capacity for ~2 ORB engagements/month personally
CertificationsNone personallyBorrow from contractors. CompTIA Security+ is on the roadmap
CRMNone (considering open source)Use Notion + spreadsheet for now. CRM is a distraction at 0 clients
BrandLogo, palette (P01 Ink Navy/Copper), tagline lockedVisual identity is ready
ContentLinkedIn profile exists, minimal industry contentContent engine needs to start immediately

What’s Working For You

  • 23+ years of experience (ERP SaaS founder, enterprise architecture)
  • Builder mindset — you can create tools and systems fast with AI
  • Boulder/CO market is tech-forward and community-oriented
  • ORB product is well-defined (10-day, fixed fee, clear deliverables)
  • AI tooling gives you a 10x efficiency advantage over traditional consultancies
  • No overhead — every dollar of revenue after contractor costs is margin

What’s Working Against You

  • Zero clients, zero case studies, zero testimonials
  • No certifications in your name
  • SOPs don’t exist yet (limits delegation)
  • 3-6 month runway means you can’t afford a slow ramp
  • Professional services buyers need trust signals you’re still building

2) Revenue Math

Target: 30K MRR by Month 12

Working backwards from $25K MRR:

Revenue StreamPrice RangeClients NeededMonthly Revenue
ORB engagements (one-time, amortized monthly)12.5K each2/month~25K project revenue
Remediation sprints35K each1 every other month~17.5K/mo amortized
Fractional retainers9K/mo3-5 active45K/mo
Blended target by month 12$25K MRR

The Conversion Funnel Math

To sustain $25K MRR by month 12, you need a pipeline that produces:

Connections/outreach per month:     200-300
  --> Conversations started:         40-60 (20% response rate)
    --> Intro calls booked:          10-15 (25% of conversations)
      --> Proposals sent:            5-8 (50% of calls)
        --> ORBs closed:             2-4 (40-50% close rate)
          --> Retainer conversions:  1-2 (50% of ORBs convert)

Key insight: At these numbers, you need 10+ intro calls/month by month 3. That’s achievable with a combination of LinkedIn outreach (primary), referrals (secondary), and marketplace gigs (bridge).

Bridge Revenue Reality Check

Months 1-3 will be lean. Plan for bridge revenue:

  • Marketplace gigs (Upwork, Catalant): 8K/month
  • Quick wins from network: ad-hoc consulting at 250/hr (only as bridge — don’t build a habit)
  • First ORB at a slight discount (5K) to get the first case study

3) The 90-Day Execution Plan

Phase 1: Foundation (Weeks 1-2) — “Load the Gun”

Goal: Everything ready to sell by end of Week 2. No selling without the basics in place.

Week 1: Sales Infrastructure

DayActionTimeOutput
MonUpdate LinkedIn profile: headline, About section, Featured section with ORB one-pager2 hrsProfile optimized for “Resilience Partner” positioning
MonCreate the ORB one-pager PDF (use 01_Offer_OnePager_Client.md — polish and export)1 hrSendable PDF asset
TueSet up LinkedIn Sales Navigator (Essential plan, ~$100/mo)30 minLead search capability
TueBuild 2 Sales Navigator account lists: “CO SMB 11-150” and “CO Professional Services 11-150”1 hrTarget lists ready
WedSet up Notion workspace for pipeline tracking + ORB project template2 hrsCRM-lite + delivery template
WedSet up Calendly (or Cal.com) booking page at go.solanasis.com/meet30 minBooking link live
ThuCreate SOW template (use 14_SOW_Template.md — fill in Solanasis details)1 hrReady-to-send SOW
ThuSet up invoicing via Xero (or Mercury — whatever is fastest)30 minCan send invoices
FriWrite and schedule 2 LinkedIn posts for next week1 hrContent pipeline started
FriDraft cold outreach message templates (connection request + follow-up)30 minOutreach scripts ready

Week 2: Credibility & Activation

DayActionTimeOutput
MonFinalize website — get the v3 “Smartcuts” copy live with contact form and booking link3 hrssolanasis.com is a credible landing page
TueCreate 3 “anonymized” before/after outcome scenarios from your ERP/enterprise experience1 hrPseudo case studies for credibility
TueComplete the AI Voice Training interview (100-question session with Claude)2 hrsVoice profile for content generation
WedApply to compliance platforms: Vanta Service Provider Program + Drata Launch Alliance1 hrPartner applications submitted
WedRequest Cynomi demo (vCISO delivery platform)15 minDemo scheduled
ThuDraft referral program one-pager for your network30 minShareable referral invite
ThuSend 20 personalized LinkedIn connection requests to target prospects1 hrOutreach begins
FriApply to 2-3 consulting marketplaces: Catalant, BTG, Upwork (for bridge revenue)2 hrsMarketplace profiles live
FriWrite and schedule 3 LinkedIn posts for next week1 hrContent rolling

Week 2 Checkpoint: You should have: a live website, a sendable one-pager, a booking link, outreach templates, Sales Navigator lists, marketplace profiles submitted, and 5+ scheduled LinkedIn posts.


Phase 2: Pipeline Building (Weeks 3-6) — “Pull the Trigger”

This is where you shift to a daily operating rhythm. Revenue generation is the job now.

Daily Cadence (30-45 min/day on LinkedIn — non-negotiable)

MORNING BLOCK (20-30 min):
  1. Send 10 connection requests with personalized notes
  2. Send 10 follow-up messages to pending connections
  3. Reply to any inbound messages/comments

MIDDAY BLOCK (15 min):
  4. Engage on 3-5 posts from your ICP (thoughtful comments, not "great post!")
  5. Check marketplace notifications and respond to any opportunities

WEEKLY:
  6. Review pipeline in Notion (Sunday evening, 15 min)
  7. Review and approve batch-generated content (30 min)
  8. One 30-min "networking power hour" -- reach out to 5 people in your existing network

Week 3-4: Activate Your Network

ActionTargetNotes
Personal outreach to 50 closest contacts50 messages”I launched Solanasis. We do 10-day Resilience Checkups for SMBs. Know anyone who might need this?”
Identify 10 potential MSP partners in CO10 targetsSearch Sales Navigator for MSP owners/directors in Colorado
Send MSP partnership pitch to 55 outreachUse script from Outreach Pack: “Creates clear remediation work perfect for an MSP”
Attend 1 local networking event (Boulder/Denver)1 eventChamber of Commerce, ACG Denver, or tech meetup
Publish 4 LinkedIn posts (1/week)4 postsMix: 2 hot takes, 1 educational, 1 story/founder journey
First marketplace proposal (if any gigs appeared)1+ proposalsBridge revenue opportunity
Start daily connection request cadence10/dayShould have 200+ pending by end of week 4

Week 5-6: Convert Conversations to Calls

ActionTargetNotes
Follow up with all warm responses from weeks 3-4All warm leadsSend one-pager, offer intro call
Book 5-8 intro calls5-8 callsUse Calendly link. 30-min format.
Send first SOWs1-3 SOWsTarget: close at least 1 ORB by end of week 6
Continue daily LinkedIn cadence10 requests + 10 follow-ups/dayPipeline compounds
Publish 4 LinkedIn posts4 postsStart including data/insights from your intro calls
Check in with marketplace applicationsFollow upPush for first marketplace gig
Follow up with Vanta/Drata applicationsCheck statusGet partner status locked in

Week 6 Checkpoint: You should have: 5+ intro calls completed, 1-3 SOWs sent, first ORB hopefully signed, 100+ new LinkedIn connections, first marketplace gig in progress or closed, and content rhythm established.


Phase 3: Deliver, Learn, Scale (Weeks 7-12) — “Build the Airplane While Flying”

Weeks 7-8: First Delivery + SOP Creation

ActionNotes
Deliver first ORB engagementFollow the 10-day playbook from ORB Pack v2. Document EVERYTHING as you go.
Create SOP v1 from first engagementEvery step you take becomes the SOP. Use Notion.
Request testimonial/referral from first clientEven a short LinkedIn recommendation or 2-sentence quote
Continue daily LinkedIn cadenceDon’t stop outreach just because you’re delivering
Publish 4 LinkedIn postsInclude (anonymized) insights from your first real engagement
Identify first contractor candidateStart networking for 1099 help — cybersecurity professionals, IT consultants

Weeks 9-10: Pipeline Acceleration

ActionNotes
Close 2nd and 3rd ORBsPipeline from weeks 3-6 should be converting
Present remediation sprint proposal to first clientORB Sprint conversion is the highest-probability upsell
Formalize referral program: send to 20 contacts10% of ORB fee, capped at $1,500. Or donation option.
Formalize 1 MSP partnershipFirst co-referral agreement. 15%, capped at $2,500.
Begin contractor onboarding (if candidate found)Start with small scoped tasks, not full ORB delivery
Publish 4 LinkedIn postsYou now have real stories to tell

Weeks 11-12: Retainer Conversion + Scaling Setup

ActionNotes
Propose fractional retainer to first clientORB Sprint Retainer is the full conversion ladder
Close 4th-5th ORBPipeline should be flowing by now
Refine SOPs based on first 2-3 deliveriesVersion 2 of SOPs with lessons learned
Contractor delivers first scoped task under supervisionProving the delegation model works
Begin PE outreach (Month 3 activity from PE Playbook)Longer sales cycle, but highest LTV channel
Quarterly content reviewWhat’s working? Double down.

Week 12 Checkpoint:

  • Revenue target: 25K collected (from 2-3 ORBs + 1 sprint or bridge gigs)
  • Pipeline: 5+ active conversations, 2-3 SOWs pending
  • Retainers: 1 retainer signed or in negotiation
  • Team: 1 contractor onboarded or in trial
  • Content: 12+ LinkedIn posts published, 500+ new connections
  • Partnerships: 1 MSP partner active, compliance platform applications approved

4) Sales Playbook

The One-Line Pitch

Short: “We run a 10-day Resilience Checkup — security baseline, one real restore test, and a prioritized 30/60/90 plan. Fixed fee, no surprises.”

Even shorter: “When was your last real restore test? Not ‘we have backups’ — an actual restore.”

LinkedIn Connection Request (keep under 300 chars)

Version A (The Hook):

Quick question: when was your last real restore test — not just “we have backups,” but an actual verified restore? It’s the one thing that separates “probably fine” from proven.

Version B (The Direct):

Hi [Name] — I help [industry] firms with 10-150 employees prove their IT resilience in 10 days. No long contracts, just a fixed-fee checkup with real restore verification. Worth a quick chat?

Version C (Warm Intro):

Hi [Name] — [Mutual connection] suggested I reach out. I run Solanasis, and we do 10-day operational resilience checkups for growing firms. Would love to connect.

After They Accept (Message 2)

Thanks for connecting, [Name]. Quick context: we run a 10-day Resilience Checkup for SMBs — it includes a security baseline, one real restore test (not just “are backups on”), and a prioritized 30/60/90 plan. Fixed fee, clear deliverables. Want the one-pager?

Follow-Up (3-5 business days if no reply)

Circling back — restore testing is one of those “we mean to” tasks until something breaks. Happy to share the one-pager if useful. No pressure either way.

Breakup Message (Day 14-21)

Last note from me — if you ever want a second pair of eyes on your backup/recovery setup, we’re here. All the best with [company name].

MSP Partnership Pitch

Quick idea: I run a 10-day Resilience Checkup that includes a real restore test + a 30/60/90 plan. It often surfaces clear remediation work that’s a natural fit for an MSP partner. We handle the assessment, you handle implementation. Interested in a quick call?

The Intro Call (30 min)

Structure:

  1. First 5 min: Rapport + their story. “Tell me about your org and what prompted you to take this call.”
  2. Next 10 min: Discovery. “What does your current IT/security setup look like? Who manages it? When was your last backup test? Any incidents or close calls?”
  3. Next 10 min: The Checkup explanation. Walk through the one-pager. Emphasize: 10 days, fixed fee, real restore test, board-ready deliverables.
  4. Last 5 min: Next steps. “Based on what you’ve told me, I’d recommend the [M/L] tier. I’ll send over the SOW today. Any questions before we wrap?”

Key phrases to use:

  • “We prove it, not just report on it.”
  • “The restore test is the thing that separates us from every other assessment.”
  • “Fixed fee — no hourly surprises.”
  • “You’ll have a board-ready report in 10 business days.”

Objection Handling

ObjectionResponse
”Our MSP/IT guy handles security""Great — we’re not replacing them. We’re a second pair of eyes. Think of it like a financial audit — your accountant is great, but you still get audited. 80% of the time we find something the internal team missed."
"We don’t have the budget right now""Understood. Quick question: what would a ransomware attack cost you? Even a day of downtime? The Checkup is a fraction of that risk. And the payment is split — 50% now, 50% on delivery."
"We already have backups""That’s what most of our clients say. The question isn’t whether you have backups — it’s whether they actually restore. We test that. If everything passes, you have proof for your board and peace of mind."
"Can we start with something smaller?""The Resilience Checkup is already our smallest engagement — 10 days, fixed fee. It’s designed to be low-commitment but high-value. Nothing smaller would give you meaningful results."
"We’re too small for this""If you have 10+ employees, customer data, and systems you depend on to operate — you’re the exact right size. The firms that think they’re ‘too small to be a target’ are the ones that get hit hardest."
"Why should I trust a small/new firm?""Fair question. Three things: (1) our team carries [relevant certs — borrow from contractors]. (2) We deliver a real restore test — you’ll see proof, not just a report. (3) We’re fixed fee with a clear SOW — you know exactly what you’re getting before you sign.”

Pricing Quick Reference

ORB (Resilience Checkup):

TierSeatsPrice
S1-10 (if $500K+ rev or VC-backed)$5,000
M11-50$7,500
L51-150$12,500
XL151-500$19,500

Complexity uplifts: +15% (hybrid/on-prem), +25% (M&A/multi-tenant), +35% (compliance-grade) Nonprofit discount: 10% (optional, only if needed to close) Payment: 50% to start, 50% at delivery. Under $2,500 = full upfront.

Post-ORB Conversion:

ServicePrice Range
Remediation Sprint (2 weeks)18K
Remediation Sprint (4 weeks)35K
Fractional Resilience Partner (11-50 seats)5K/mo
Fractional Resilience Partner (51-150 seats)9K/mo
Fractional Resilience Partner (151-500 seats)15K/mo

5) Content Strategy

Full details: See Solanasis_AI_Native_Content_Strategy_2026.md for the complete content creation workflow, tool stack, and publishing cadence.

The 80/20 for Content (What Actually Matters)

Platform priority:

  1. LinkedIn personal profile (70% of effort) — This is where your ICP lives. Founder-led content crushes company page content.
  2. Website blog (15%) — SEO long game. One post/week, deployed via GitHub Cloudflare.
  3. Substack newsletter (10%) — Bi-weekly, repurposed from LinkedIn. Owns the audience.
  4. X/Twitter (5%) — Repurpose LinkedIn posts as threads. No net-new content.

Content Pillars (First 90 Days — Focus on 3)

  1. “Restore or Die” — Maps to ORB’s unique differentiator. “When was your last real restore test?”
  2. “Security Reality Checks” — What we actually find vs. what orgs assume. Fear-based urgency.
  3. “Founder Journey” — Behind-the-scenes of building an AI-native agency. Authentic, builds personal brand.

Weekly Publishing Cadence

DayWhatEffort
MondayLinkedIn: Hot take / contrarian post5 min (pre-scheduled)
TuesdayBlog post published (auto-deployed)0 min
WednesdayLinkedIn: Educational breakdown5 min (pre-scheduled)
ThursdayLinkedIn: Story / anonymized scenario5 min (pre-scheduled)
FridayLinkedIn: Engagement post (poll/question)5 min (pre-scheduled)

Total content time: ~2 hours/month for batch generation + review. 15 min/day for engagement.

Monthly Batch Process

1. SEED (15 min): Jot 3-5 ideas, hot takes, observations
2. GENERATE (AI): Claude Code batch-generates all monthly content
3. REVIEW (45-60 min): Read, add personal anecdotes, approve or revise
4. SCHEDULE (30 min): Load into Typefully/Buffer or LinkedIn native scheduler
5. ENGAGE (15 min/day): Reply to comments, comment on ICP posts

The 4 Posts That Get You Clients

These are the post archetypes that convert on LinkedIn:

  1. The Provocative Question: “How many of your ‘backed up’ systems would actually restore? We tested 47 last year. Fewer than half worked.” (hooks curiosity, drives DMs)

  2. The Framework Post: “5 questions to ask your IT person this week: [numbered list]. If they can’t answer #3, you have a problem.” (demonstrates expertise, gets saved/shared)

  3. The Horror Story: “A client told us ‘everything is backed up.’ We ran the test. Their last successful backup was 6 months ago.” (creates urgency, builds social proof)

  4. The Behind-the-Scenes: “Week 4 of building an AI-native consultancy from scratch. Here’s what I’m learning about [topic].” (builds personal connection, differentiates you)

CTA Strategy

Primary CTA (on every post): “If this resonates, DM me ‘checkup’ and I’ll send the one-pager.” Secondary CTA: “Book a 30-min intro: go.solanasis.com/meet”

The “DM me [keyword]” hack works better than links because it creates a conversation thread and psychological commitment.


6) Partnership & Referral Engine

Referral Program

For your network (anyone):

  • 10% of ORB fee, capped at $1,500
  • Paid after first client payment clears
  • Alternative: donate the same amount to a nonprofit of their choice
  • Zero cost if the referral doesn’t close

For MSP/professional partners:

  • 15% of ORB fee, capped at $2,500
  • Can evolve into co-delivery or white-label as relationship matures
  • The pitch: “You keep implementing. We create the assessment-driven demand.”

How to activate:

  1. Draft a short referral email/message (3-4 sentences max)
  2. Send to 20 people in your network in Week 3
  3. Follow up in 2 weeks with a specific ask: “Do you know any [title] at a [type of org] who’s mentioned IT concerns?”
  4. Track referrals in Notion

MSP Partnership Playbook

Why MSPs partner with you:

  • You find gaps (assessment) they fill gaps (implementation)
  • Non-competitive: you don’t do ongoing managed services
  • You create demand for their billable work
  • The referral fee is a bonus on top

Target MSP contacts: Owner/President, Director of Client Success, vCIO/vCISO, Sales lead

Outreach cadence:

  • Week 3: Identify 10 MSPs in CO via Sales Navigator
  • Week 4: Send connection requests to 5 MSP contacts
  • Week 5: Pitch call with interested MSPs
  • Week 6: Formalize first partnership (even verbal agreement to refer)

MSP Identification Filters (Sales Navigator):

  • Geography: Colorado
  • Industry: IT Services, Computer & Network Security
  • Headcount: 5-50 (these are the MSPs that need external assessment partners)
  • Keywords: “managed services,” “MSP,” “IT support”

Professional Services Referral Partners

These are the people whose clients naturally need your services:

Partner TypeWhy They Refer to YouHow to Find Them
Accountants/CPAsSee client financial risk from IT gapsLocal CPA firms, CO Society of CPAs events
Business attorneysHandle liability/compliance issues where IT posture mattersDenver/Boulder Bar Association events
Fractional CFOsEncounter IT issues in every company they serve (especially PE-backed)LinkedIn search, fractional exec communities
Insurance brokersCyber insurance applications require security assessmentsLinkedIn search for “cyber insurance” + Colorado
HR consultantsData privacy concerns, onboarding/offboarding securityLocal SHRM chapters

The play: Offer to do a 15-minute “lunch and learn” for their team on “The 5 IT Risks Every [Accountant/Attorney] Should Know About in Their Clients’ Businesses.” This positions you as an expert and gives them a reason to refer.


7) Marketplace Bridge Revenue

Full details: See solanasis_consulting_marketplaces_playbook.md

Purpose

Marketplaces are bridge revenue while the direct pipeline builds. Don’t build a dependency on them — they take 10-20% and you don’t own the client relationship long-term.

Priority Platforms

PlatformWhyApply
CatalantEnterprise buyers, fixed-fee projects, higher ratesWeek 2
UpworkFastest to revenue, high volume, lower ratesWeek 2
Business Talent Group (BTG)Executive-level engagements, PE connectionsWeek 2

Marketplace Sprint Offers

Package your services as fixed-scope sprints for marketplace listings:

  1. Restore Verification Sprint (3-5 days, 3,500) — Smallest, fastest to close
  2. Security Posture Reality Check (3-5 days, 4,500) — Maps to ORB-lite
  3. Migration Risk & Runbook Sprint (5-7 days, 8,500) — Project-based
  4. CRM Rescue Sprint (5-7 days, 6,500) — Popular on marketplaces

Exit Strategy from Marketplaces

Once direct pipeline generates $15K+/month consistently:

  • Stop taking new marketplace gigs
  • Maintain profiles for occasional high-value opportunities
  • Convert marketplace clients to direct relationships where possible

8) PE Outreach

Full details: See PE-Outreach-Playbook-Solanasis.md

Why PE is the Highest-Leverage Channel

One PE relationship = access to 3-12 portfolio companies. A single PE firm can generate 1.6M over 3 years. But the sales cycle is longer (3-6 months), so start seeding now for month 4+ revenue.

Month 1 Actions (Weeks 3-4, parallel to direct outreach)

  • Optimize LinkedIn with PE keywords: “portfolio company,” “IT due diligence,” “post-acquisition”
  • Build target list: 20-30 lower-middle-market PE firms (200M deal size) in Colorado + Mountain West
  • Join ACG Denver chapter (Association for Corporate Growth — highest-priority PE event)
  • Write 1 LinkedIn post: “5 IT Red Flags in Every Lower-Middle-Market Acquisition”

Month 2-3 Actions

  • Begin LinkedIn outreach to 10-15 Operating Partners
  • Create “Post-Acquisition IT Checklist” lead magnet
  • Attend 1 ACG event
  • Reach out to 3-5 M&A attorneys and transaction CPAs for referral partnerships

The PE Value Prop

One-liner: “We help PE firms reduce portfolio risk and increase exit value by assessing and strengthening IT and cybersecurity posture across portfolio companies.”

Frame it as: “Quality of Earnings (QofE) for IT” — PE firms already buy financial QofE on every deal. This is the same concept for technology risk.


9) Compliance Platform Partnerships

Full details: See Compliance-Platform-Partnerships-Deep-Dive.md

Why This Is the “Cheat Code”

Compliance platforms (Vanta, Drata, Secureframe) automate ~30% of compliance work. The other 70% — gap analysis, policy writing, remediation, risk assessment — requires humans. As a certified partner, you get inserted into their sales pipeline.

Immediate Actions (Week 2)

  1. Apply to Vanta Service Provider Program — Free, 1-2 week approval, ~35% market share, 12K+ customers
  2. Apply to Drata Launch Alliance — Free, has PE/VC partner track
  3. Request Cynomi demo — AI-powered vCISO platform, 100% channel-only. Potentially the most important tool: automates 70% of vCISO tasks

Revenue Model Per Compliance Client

5 revenue streams:

  1. Implementation services: 25K one-time
  2. vCISO retainer: 8K/month (recurring)
  3. Platform resale/referral commissions: 15-25% margin
  4. Annual audit preparation: 15K/year
  5. Pen testing referrals: 3,750/referral (zero effort)

Single client 3-year LTV: ~$200K

Certifications (Free, Through Partner Programs)

Complete these as soon as you’re accepted:

  • Vanta Technical Certification
  • Drata Sales & Technical Certification
  • SecurityScorecard Partner Certification

These are instant credibility with zero cost.


10) Contractor Scaling Plan

The Model

You want to be the growth/sales engine. Contractors handle delivery. This means SOPs are your most important IP.

Hiring Profile

What matters:

  • Personable (clients love working with them)
  • IT/security aptitude (not necessarily deep experience)
  • Self-directed (can follow SOPs without hand-holding)
  • Available for 10-20 hrs/week initially

Where to find them:

  • LinkedIn (post about looking for 1099 cybersecurity/IT contractors)
  • Local IT professional communities in Boulder/Denver
  • CompTIA community boards
  • University cybersecurity programs (recent grads hungry for experience)
  • Your existing network (ask around)

Onboarding Sequence

  1. Trial task (paid): Give them one narrow task from a real engagement (e.g., “document the MFA status for this M365 tenant”). Pay 75/hr. See how they perform.
  2. Supervised ORB: They shadow/assist on your next ORB. You lead, they do specific checklist items. Pay 75/hr.
  3. Delegated ORB (you QA): They run the ORB with your SOPs. You review deliverables before client readout. Pay 85/hr or flat rate per engagement.
  4. Independent ORB: They own the engagement end-to-end. You handle sales and final QA only.

SOP Building Strategy

Don’t write SOPs in advance. Build them from real engagements:

Engagement 1 --> Screen-record everything + take notes --> Draft SOP v1
Engagement 2 --> Follow SOP v1, note gaps --> Update to SOP v2
Engagement 3 --> Contractor follows SOP v2 with your oversight --> SOP v3 is delegation-ready

Contractor Economics

ScenarioYour Rev/ORBContractor CostYour Margin
You deliver (solo)$7,500$0$7,500 (100%)
You deliver + contractor assists$7,5002,5006,000 (67-80%)
Contractor delivers, you QA$7,5004,0004,500 (47-60%)

Even at 50% margin with contractor delivery, you can do 4-6 ORBs/month instead of 2. That’s 27K/month in margin vs. $15K doing it yourself.

Timeline

  • Weeks 1-8: Deliver solo. Build SOPs from experience.
  • Weeks 9-10: Find and trial first contractor.
  • Weeks 11-12: Contractor assists on an ORB under supervision.
  • Month 4+: Contractor delivers ORBs independently with your QA.

11) Tool Stack

Must-Have (Launch Day)

ToolPurposeCost
LinkedIn Sales Navigator (Essential)Lead lists, warm signals, targeted outreach~$100/mo
Claude Max PlanAI content generation, delivery acceleration, SOPs~$200/mo
NotionPipeline tracking, ORB project templates, SOPs, wikiFree or $10/mo
Calendly (free tier) or Cal.comBooking link for intro callsFree
XeroInvoicing + accounting (already have)Already paying
Google WorkspaceEmail, docs, drive (already have)Already paying
CanvaMarketing graphics, carousels, one-pagersFree or $13/mo

Monthly tool cost: ~325/mo

Add When Needed (Month 2-3)

ToolPurposeCostTrigger
Typefully or BufferSchedule LinkedIn + X posts~$13/moWhen you have 4+ posts/week to schedule
Plausible or UmamiWebsite analytics~$9/mo or self-hostedWhen website is live and generating traffic
BrevoEmail automation, newsletter, contact formFree tierAlready set up
CynomivCISO delivery platformTBD (demo first)When first compliance client appears

Do NOT Buy Yet

  • Full CRM (ClickUp, HubSpot, etc.) — Notion is enough until you have 20+ active contacts
  • Marketing automation — You don’t have enough leads to automate yet
  • SEO tools — Focus on LinkedIn first, SEO is a month 4+ play
  • Open source ERP hosting — Tempting but it’s a distraction right now. Revisit when you have revenue

12) Financial Model & Unit Economics

Month-by-Month Revenue Projection (Conservative)

MonthSourceRevenueCumulative
1Setup + outreach only$0$0
21 marketplace gig + 1 ORB (S/M tier, possibly discounted)10K10K
32 ORBs + 1 marketplace gig20K30K
42-3 ORBs + 1 remediation sprint35K65K
52-3 ORBs + 1 sprint + first retainer starting40K105K
62-3 ORBs + 1 retainer (5K MRR)35K140K
7-92-3 ORBs/mo + 2 retainers building40K/mo260K
10-123-4 ORBs/mo + 3-5 retainers50K/mo400K
12-month total400K

Unit Economics

MetricValue
Average ORB price10,000
ORB delivery cost (solo)$0 (your time)
ORB delivery cost (contractor)4,000
ORB gross margin (solo)100%
ORB gross margin (with contractor)50-67%
Average retainer price5,000/mo
Retainer delivery cost2,000/mo (contractor)
Retainer gross margin60-71%
ORB Sprint conversion rate (target)40-50%
ORB Retainer conversion rate (target)30-40%
Client lifetime value (ORB + Sprint + 12mo retainer)120K

Monthly Overhead (Fixed Costs)

CategoryMonthly Cost
Tools (Sales Navigator, Claude, Notion, etc.)$325
Insurance (E&O / professional liability)~250
Accounting/bookkeeping~200
Misc (domain, hosting, phone)~$50
Total fixed overhead~825/mo

Breakeven

With 825/mo in overhead and no salary draw:

  • 1 ORB/month covers all overhead
  • Salary draw starts when you’re consistently doing 2+ ORBs/month

13) Key Metrics & Weekly Review

Weekly Dashboard (Update Every Sunday, 15 min)

Pipeline Metrics:

  • Connection requests sent this week: ___
  • New connections accepted: ___
  • Conversations started (replied to outreach): ___
  • Intro calls booked: ___
  • Proposals/SOWs sent: ___
  • Deals closed: ___

Revenue Metrics:

  • Revenue collected this month: $___
  • Revenue in pipeline (signed SOWs, unpaid): $___
  • MRR (active retainers): $___

Content Metrics:

  • LinkedIn posts published: ___
  • Total post impressions: ___
  • Profile views this week: ___
  • Inbound DMs/messages from content: ___

Partnership Metrics:

  • MSP partners active: ___
  • Referrals received this month: ___
  • Referral conversion rate: ___

Monthly Review (First Sunday of month, 30 min)

  1. Revenue vs. target — on track?
  2. Pipeline health — enough conversations to hit next month’s target?
  3. Content performance — which posts drove engagement/leads?
  4. Partnership progress — any new partners? Referrals flowing?
  5. Contractor readiness — SOPs progressing? Candidates identified?
  6. What’s the #1 bottleneck to revenue right now? Focus next month’s energy there.

The One Question That Matters Each Week

“Am I spending 80%+ of my work time on activities that directly lead to revenue (outreach, calls, proposals, delivery)?”

If the answer is no, you’re falling into the operator trap. Content, SOPs, tools, and internal systems are important but secondary to sales and delivery in months 1-6.


14) Risk Mitigation

Top 5 Risks and Mitigations

RiskLikelihoodImpactMitigation
Can’t close enough clients fast enoughHighCriticalMulti-channel approach: LinkedIn + network + marketplaces + referrals. Don’t depend on one channel.
First ORB delivery goes poorlyMediumHighFollow the ORB Pack v2 playbook exactly. Over-communicate with the client. Under-promise, over-deliver on timeline.
Credibility gap (no certs, no case studies)HighMediumBorrow from contractors. Get Vanta/Drata partner certs (free). First client testimonial is gold — offer a discount if needed to get it.
Burn rate exceeds revenue rampMediumHighMarketplace bridge revenue. Keep fixed costs under $800/mo. Don’t hire until revenue supports it.
Get stuck in delivery, neglect salesHighCriticalNon-negotiable daily LinkedIn cadence. Block outreach time BEFORE delivery work. Hire contractor the moment you have 2+ concurrent ORBs.

Red Lines (Walk Away From)

  • Client can’t provide access within 10 business days — pause/reset
  • Client wants a guarantee of “no incidents” — decline
  • Client wants you to store their secrets — decline
  • Scope creep into compliance/migration without a new SOW — hold the line
  • Any engagement under $2,500 (unless it’s a deliberate strategic move for a case study)

Quick-Reference: The First 7 Days

If you’re reading this and thinking “where do I start RIGHT NOW,” here’s the absolute minimum for week 1:

  1. Monday: Update your LinkedIn headline and About section. Add “Helping SMBs prove operational resilience | 10-Day Resilience Checkup | Cybersecurity + DR Verification | Founder, Solanasis”
  2. Monday: Export the ORB one-pager as a clean PDF
  3. Tuesday: Set up Sales Navigator. Build your first prospect list (CO, 11-150 employees, professional services)
  4. Tuesday: Set up a Calendly/Cal.com booking page
  5. Wednesday: Send 20 connection requests with the restore-test hook
  6. Wednesday: Message 10 people in your existing network about Solanasis
  7. Thursday: Write and post your first LinkedIn post (use the “provocative question” template)
  8. Thursday: Set up Notion pipeline tracker (simple: columns for Lead/Contacted/Call Booked/Proposal Sent/Closed)
  9. Friday: Write and schedule 2 more LinkedIn posts for next week
  10. Friday: Apply to Vanta Service Provider Program

Time commitment: ~3-4 hours/day for week 1. This front-loads the foundation so weeks 2+ can focus on the daily cadence.



15) Open Decisions & Contradictions to Resolve

These are specific conflicts found across your docs that need a decision before execution.

Decision 1: Quick Wins in the ORB — Yes or No?

The conflict: Your ORB Refinement Questionnaire says “A — No implementation beyond tiny quick fixes” AND “None (no included implementation hours).” But the ORB Pack v2 delivery playbook includes a “Quick Wins Menu” with up to 4 hours of safe, reversible fixes (MFA enforcement, forwarding controls, admin cleanup, etc.). The v3 playbook also includes quick wins.

Why this matters: Including quick wins makes the offer significantly more attractive (“we don’t just report — we fix the easy stuff too”). It also demonstrates hands-on competence and builds trust for the remediation sprint upsell. Excluding them keeps scope cleaner but makes the offer feel more “advisory.”

Recommendation: Include 1-3 quick wins (up to 4 hours) as part of ORB Standard. They cost you very little time and dramatically increase the perceived value. Frame them as “included safe fixes” rather than “implementation.”

Your decision: _______

Decision 2: Call Format — 30-min Intro vs. 60-min Triage

The conflict: The Mega Playbook recommends a “60-minute Triage Call” as the primary sales call (with a specific 5-step agenda: catastrophic scenarios, environment map, highest-risk assumptions, package recommendation, close). But the ORB Playbook v3 and the Content Strategy use “30-minute intro call” as the CTA.

Why this matters: 60 minutes is better for qualification and closing but harder to get someone to commit to. 30 minutes is lower friction for booking but may not be enough to close.

Recommendation: Use “30-minute intro call” as the public CTA (lower friction). If the prospect is a clear fit, the 30-min call naturally extends to 45-60 minutes. If not, you’ve spent less time qualifying a bad lead. The 60-min triage structure is your internal framework for running the call — you just don’t advertise it as 60 minutes.

Your decision: _______

Decision 3: Voice Selection

The conflict: The Mega Playbook offers 4 brand voices (Executive Calm, Direct Practical, Bold Contrarian, Premium Concierge). The Content Strategy recommends Voice C (Bold Contrarian) as primary with Voice A (Executive Calm) as secondary. The offerings questionnaire selects “Plainspoken, confident, slightly edgy, zero fluff.”

Recommendation: These actually align well. Use Bold Contrarian (Voice C) for LinkedIn, outreach, and founder-led content. Use Executive Calm (Voice A) for deliverables, SOWs, and board-facing materials. This is already consistent across docs.

Your decision: _______

Decision 4: ICP Vertical — Professional Services vs. All SMBs

The conflict: The Launch Playbook says you prefer professional services firms (law, accounting, consulting) for referral growth hacking. The ORB questionnaire says 10-150 seat SMBs/nonprofits on M365/Google Workspace broadly. The PE Playbook targets PE portfolio companies (services, healthcare, manufacturing).

Recommendation: Target in tiers:

  1. Tier 1 (highest priority): Professional services firms in CO (law, accounting, consulting, financial advisory) — 10-150 seats, $500K+ revenue. These have budget, understand outsourced expertise, and can refer clients.
  2. Tier 2: Other SMBs in CO (healthcare services, manufacturing, tech-enabled services) — same size criteria.
  3. Tier 3: Nonprofits — welcome when inbound, but don’t actively pursue in months 1-3 unless a warm referral.
  4. Tier 4 (month 3+): PE portfolio companies — highest LTV but longest cycle.

Your decision: _______


16) Urgency Tiers — What to Do When (Revised for 3-6 Month Runway)

The original 90-day plan treats all activities as roughly equal priority. With a tight runway, here’s a more honest prioritization.

TIER 1: Do This Week or You’re Falling Behind

These are the only things that directly generate revenue in the next 30-60 days.

  1. LinkedIn profile optimization (2 hours) — Your storefront. Every prospect will look at this.
  2. ORB one-pager exported as PDF (1 hour) — Your sendable asset.
  3. Booking link live (15 min) — Cal.com or Calendly.
  4. Sales Navigator subscription (30 min) — Start the free trial today.
  5. First 20 connection requests sent (1 hour) — Revenue clock starts when outreach starts.
  6. Message 10 people in your personal network (1 hour) — “I launched Solanasis. We do 10-day Resilience Checkups. Know anyone?”
  7. Apply to Upwork (1 hour) — Bridge revenue. Don’t overthink the profile; get it live.
  8. First LinkedIn post published (30 min) — Start the content clock.

TIER 2: Do Within 2 Weeks — Credibility & Pipeline Building

These make everything in Tier 1 more effective.

  1. Website to MVP (3-4 hours) — At minimum: hero, services summary, contact form, booking link. It’s live at solanasis-site.pages.dev but needs the DNS pointed.
  2. SOW template ready to send (1 hour) — Use ORB Pack v2 template.
  3. Apply to Catalant and BTG (2 hours) — Higher-end marketplace profiles.
  4. Apply to Vanta Service Provider Program (30 min) — Zero cost, leads come to you.
  5. Apply to Drata Launch Alliance (30 min) — Mention PE portfolio focus.
  6. Request Cynomi demo (15 min) — The vCISO delivery engine.
  7. Voice training interview with Claude (2 hours) — Unlocks the content engine.
  8. Invoicing setup in Xero (30 min) — Can’t get paid without this.
  9. E&O insurance quote (30 min) — Non-negotiable for security assessment work.

TIER 3: Do in Weeks 3-6 — Scale Pipeline

Only start these after Tiers 1-2 are complete.

  1. Daily LinkedIn outreach cadence (10 requests + 10 follow-ups/day)
  2. Network activation campaign (50+ personalized messages)
  3. MSP partnership outreach (identify and contact 5-10 MSPs)
  4. Content batch generation (first month of LinkedIn + blog posts)
  5. Referral program announcement to network
  6. Professional services-specific targeting (law firms, CPAs in CO)

TIER 4: Do in Weeks 7-12 — Scaling & Strategic

These are high-LTV but long-cycle. Don’t invest time here until Tier 1-3 pipeline is flowing.

  1. PE outreach (build target list, start warm-up)
  2. Compliance platform certification completion
  3. Contractor recruitment and trial
  4. SOP documentation from first engagements
  5. Content engine optimization based on data
  6. ACG Denver membership and event attendance

TIER 5: Defer Until Revenue is Established

These are valuable but will distract from revenue generation right now.

  • Open source CRM/ERP evaluation and hosting
  • Building custom assessment tools / lead magnets
  • Podcast appearances or speaking engagements
  • Community building initiatives
  • Newsletter launch on Substack
  • Instagram content

17) The Compliance Play — Why This Might Be Your Biggest Lever

Source: Compliance-Platform-Partnerships-Deep-Dive.md — This is one of the most important docs in your entire repository and the strategy is underrepresented in the main playbook sections above.

The Core Insight

Compliance platforms (Vanta, Drata, Secureframe) automate ~30% of compliance work. The other 70% requires humans. When you become a certified partner, their sales team refers clients TO you. You don’t have to find all your leads yourself.

Why This Compounds With Everything Else

ORB ENGAGEMENT
  --> Reveals compliance gaps (SOC 2, HIPAA, etc.)
    --> Compliance implementation using Vanta/Drata ($5K-$25K)
      --> Ongoing vCISO retainer via Cynomi ($2K-$8K/month)
        --> Client refers you to peers
        --> OR: PE operating partner deploys you across portfolio

Cynomi Is Potentially the Most Important Tool

  • AI-powered vCISO platform, 100% channel-only (they never compete with you)
  • Automates 70% of vCISO tasks: assessments, policy generation, remediation plans, executive reports
  • Lets you offer “fractional CISO services” without hiring a CISO
  • Transforms your value proposition from “security assessments” to “ongoing security leadership”
  • Per-client pricing means your margins stay high as you scale

10 vCISO clients at 420,000/year recurring. With Cynomi doing the automation + 1-2 contractors, you need ~5-15 hours/month per client.

Revenue Projections (Compliance Channel Alone)

PeriodRevenue TargetMRR Target
Month 1-2$0 (building partner status)$0
Month 3-440K (implementations)8K (vCISO starting)
Month 5-650K/month20K
Month 7-1280K/month50K
12-month total600K from compliance alone

The Free Certifications That Matter Most

Complete these as soon as partner applications are approved:

  1. Vanta Technical Partner Certification — ~1 week self-paced, free
  2. Drata Sales & Technical Tracks — ~1 week self-paced, free
  3. SecurityScorecard Partner Certification — Self-paced, free

These give you instant credibility with zero cost. You can list them on LinkedIn and your website immediately.


18) Expanded Objection Handling & FAQ Resources

Your existing doc library contains two massive FAQ/objection resources. Reference these when preparing for sales calls:

  • playbooks/FAQs_EnterpriseGrade_SMB_Services.md — Modular FAQ bank organized by service, with 3 answer styles (Exec/Direct/Bold) for each. Use “Direct” for LinkedIn outreach, “Bold” for engaging posts, “Exec” for SOWs and proposals.
  • playbooks/SMB_Security_BDR_FAQ_Library.md (~77KB) — Exhaustive FAQ library with 2-3 answer options per question, organized into 10 categories. This is your sales enablement Bible.

Insurance-Driven Demand (Underused Trigger Event)

Cyber insurance applications increasingly require security assessments. This is a powerful trigger:

LinkedIn post angle: “If you’ve applied for cyber insurance recently, you’ve seen the questionnaire. ‘Do you have MFA?’ ‘When was your last security assessment?’ ‘Do you have a tested disaster recovery plan?’ Most SMBs struggle with these questions. That’s exactly what our 10-day Resilience Checkup addresses.”

Referral partner angle: Insurance brokers who sell cyber insurance are a natural referral channel. They encounter businesses that need assessments to qualify for or renew coverage.

The “Pilot Discount” — A Definitive Recommendation

Offer your first 2 ORB engagements at 20% below standard pricing (e.g., 7,500 for M-tier) in exchange for:

  1. A written testimonial (even 2-3 sentences)
  2. Permission to write an anonymized case study
  3. A warm introduction to 2-3 people in their network

This is NOT discounting for the sake of closing. This is trading a small margin reduction for credibility assets that will accelerate every subsequent sale. After 2 engagements, go to full price.

The PE Playbook explicitly recommends a 15-20% pilot discount. The key is to always get something in return — never discount without value exchange.


19) Professional Services Targeting Playbook (Your Tier 1 Vertical)

Since you specifically want to target professional services firms for their referral potential, here’s a more specific playbook.

Why Professional Services Firms

  1. They understand outsourced expertise — They ARE outsourced expertise for their clients. They won’t question why you’re a consultancy.
  2. Budget exists — Law firms and CPA firms with $500K+ revenue have discretionary IT budget.
  3. Referral network is gold — An accounting firm with 50 clients is a pipeline multiplier. One good relationship = dozens of warm introductions.
  4. Compliance pressure — Client data protection (attorney-client privilege, financial records) creates urgency.
  5. Cyber insurance requirements — Most carry E&O insurance and increasingly need cyber coverage.

Target Sub-Verticals (Sales Navigator Filters)

Sub-VerticalWhyIndustry Filter
CPA / Accounting firmsHandle sensitive financial data, serve many SMB clients, need security for client trustAccounting
Law firmsAttorney-client privilege = data protection urgency, high referral potentialLaw Practice, Legal Services
Financial advisory / wealth managementRegulatory pressure (SEC, FINRA), handle sensitive client assetsFinancial Services
Marketing / PR agenciesTech-forward, often have messy tool stacks, good referral networksMarketing & Advertising
Consulting / management firmsUnderstand the value proposition, may white-label your servicesManagement Consulting
Architecture / engineering firmsIP protection, project data, CAD/BIM systems need backup/recoveryArchitecture & Planning

Outreach Script Tailored for Professional Services

Connection request (for a CPA firm):

“Quick question for [Firm]: if ransomware hit tomorrow and your client files were locked, how fast could you recover? We help professional services firms prove their answer in 10 days.”

Connection request (for a law firm):

“Attorney-client privilege doesn’t mean much if a breach exposes your files. We help law firms verify their security posture and backup recovery in a 10-day assessment. Worth connecting?”

The Referral Multiplier Play

After completing an ORB for a CPA firm:

“Now that you’ve seen how the Resilience Checkup works, I want to mention something: many of your clients face the same risks we identified here. We have a simple referral program — 10% of our fee, capped at $1,500, or we can donate the same amount to a nonprofit. If any of your clients mention IT concerns, we’d love an introduction.”

This is the growth hack you mentioned wanting — professional services firms as force multipliers into their client base.


20) Existing Asset Inventory — What’s Ready to Use Now

Your doc library already contains polished, ready-to-use assets. Don’t recreate these — use them.

AssetLocationStatusAction Needed
ORB client one-pagersolanasis_orb_pack_v2/01_Offer_OnePager_Client.mdReadyExport to PDF
SOW templatesolanasis_orb_pack_v2/14_SOW_Template.mdReadyFill in Solanasis details
Outreach scripts (LinkedIn + email)solanasis_orb_pack_v2/15_Outreach_Pack.mdReadyCopy into outreach tracker
Referral program descriptionsolanasis_orb_pack_v2/17_Referral_Program.mdReadyTurn into shareable message
LinkedIn/Sales Navigator playbooksolanasis_orb_pack_v2/18_LinkedIn_SalesNavigator_Playbook.mdReadyFollow the daily cadence
Pricing referencesolanasis_orb_pack_v2/03_Pricing_And_Packaging_Internal.mdReadyInternal reference
Delivery playbook (day-by-day)solanasis_orb_pack_v2/02_Internal_Delivery_Playbook.mdReadyFollow for first ORB
AI workflow promptssolanasis_orb_pack_v2/04_AI_Workflow_Internal.mdReadyUse during delivery
Exec summary templatesolanasis_orb_pack_v2/deliverables/Exec_Summary_Template.mdReadyFill during delivery
Risk register templatesolanasis_orb_pack_v2/deliverables/Risk_Register_Template.mdReadyFill during delivery
Remediation/retainer optionssolanasis_orb_pack_v2/16_Remediation_And_Retainer_Options.mdReadyUse in readout call
Website copy (approved v3)website-content/solanasis_site_copy_v3_smartcuts.mdReadyDeploy to website
Brand style guidebrand-style/Matchkeyz_Brand_Style_Guide.mdReadyReference for all visual work
FAQ library (massive)playbooks/SMB_Security_BDR_FAQ_Library.mdReadyCherry-pick for website + sales prep
FAQ library (modular)playbooks/FAQs_EnterpriseGrade_SMB_Services.mdReadyCherry-pick for website + sales prep
PE outreach playbookplaybooks/PE-Outreach-Playbook-Solanasis.mdReadyExecute in month 3+
Compliance partnerships playbookplaybooks/Compliance-Platform-Partnerships-Deep-Dive.mdReadyStart partner applications week 2
Marketplace playbookplaybooks/solanasis_consulting_marketplaces_playbook.mdReadyExecute for bridge revenue
Content strategySolanasis_AI_Native_Content_Strategy_2026.mdReadyFollow for content engine
Mega Playbook (voice, copy, pricing)playbooks/Mega_Playbook_Enterprise_SMB_Services.mdReadyReference for messaging/copy
First month blog topicswebsite-config/03-content-creation-strategy.mdReadyUse for first 4 blog posts
Voice training frameworkai-training/AI Voice Training.mdNeeds completionPriority: week 2

Bottom line: You have more ready-to-use assets than most firms have after a year of operation. The playbooks are thorough and well-structured. The gap isn’t strategy or assets — it’s execution. Start the outreach today.

This playbook is a living document. Update it after each monthly review based on what’s actually working in the market.