.png?width=1024&height=256&name=Aterous%20Logo%20-%20Black%20Transparent%20(1024x256).png)
Home › GTM Guide
Aterous Group · GTM Intelligence Series
The GTM Org & Strategy Guide
for Cyber & AI Startups
A stage-by-stage roadmap mapping GTM need, discipline, sales motion, and tech investment, from founder-led seed to enterprise scale. Built by practitioners who've run GTM for cyber and AI companies, not analysts writing about it from the outside.
4 growth stages covered Seed through Series C+ Linked frameworks + Aterous field perspectives Continuously updated as new content publishes
Stage 1
Seed / Pre-PMF
You don't have a repeatable motion. You have conviction, a hypothesis, and a handful of relationships. The goal isn't pipeline. It's signal. Every conversation is research.
$0 → $2M ARR 3–18 months 5–10 design partners
GTM Motion
Sales Motion
100% Founder-Led
You are the product, the credibility signal, and the closer. Every meeting is a customer interview. Close 5–10 design partners before any sales hire. Don't celebrate the hire. Celebrate repeatable close rates.
ICP & Target Accounts
25–50 Named Account Hypothesis
Build from your network and domain conviction. Firm size, vertical, tech stack signals, buying trigger. Run it every 90 days. Your first list will be wrong in at least 3 dimensions.
Messaging
Founder Narrative — Not a Deck
Why you built it. The pain you saw. Not a product sheet. The goal is a 90-second story that makes the buyer say "that's us." Write the message your customers give you, not the one you started with.
Outbound
Warm, Direct, Personal
LinkedIn DMs, intro requests, conference conversations, advisory relationships. No sequences. No cadences. No BDR. This isn't the time for automation, it's the time for listening.
Inbound / ABM
None Yet — Intentionally
Don't invest in content, campaigns, or ABM programs until you have a validated ICP and proven messaging. You'll build for the wrong buyer and waste 6 months learning what conversations would have taught you in 6 weeks.
Channel / Partners
Hold
Advisory relationships are fine. Formal partner programs are not. You need to understand why customers buy before you ask a VAR to figure it out for you.
Who Owns GTM
Founder / CEO
All deals. All discovery. All messaging.
Active Co-founder / CTO
Technical proof in prospect calls
Active AE / Sales Hire
Hire as you approach Series A, and wait for a repeatable close signal first
Conditional Marketing
Founder working with consultants. No full-time marketing hire at seed.
Consultants Tech Investment — Minimal. Set it right, not big.
Buy Now
HubSpot Starter CRM LinkedIn Sales Navigator Apollo.io (prospecting) Google Workspace Notion (playbook drafts)
Do Not Buy Yet
Outreach / Salesloft 6sense / Demandbase ZoomInfo full license Marketing automation
Most Common Failure Mode at This Stage
Building a tech stack before validating ICP. Buying Outreach, 6sense, or a marketing automation platform at seed is a distraction dressed as preparation. You don't have the pipeline volume to justify it, the ops to run it, or the message to put through it. The founders who succeed at this stage are obsessive about conversations, not tools.
Aterous Insights — Read These First
| Article | Type | Why It Matters at This Stage |
|---|---|---|
| Stop the Spray. Start the Focus. | Opinion | The case for a 25–50 account ICP list over a spray-and-pray market approach. Essential reading before building your first named account hypothesis. |
| The Messaging Problem | Framework | How to build messaging that talks to the practitioner, not the purchasing committee. The framework for translating founder conviction into buyer language. |
| What Our Messaging Actually Sounded Like (Before and After) | Applied | The raw field reality of the bad pitch, the wrong persona, and the message that finally worked. The applied post that follows The Messaging Problem framework, showing what messaging looks like before and after the work is done. |
| The ICP Audit: How to Know Your Named Account List Is Already Wrong | Framework | The quarterly audit framework for ICP maintenance: how to score accounts on fit, access, and timing, when to cull without demoralizing the team, and what Tier A vs. Tier B classification actually means as a resource allocation decision. |
Coming to This Guide — Stage 1
Coming
"Why Cyber Buyers Don't Trust Your Messaging (And What They Actually Respond To)"
The specific credibility gap cyber startups face, examining how practitioner-buyer language differs from the marketing copy most seed-stage companies default to, and why domain expertise in the message is non-negotiable.
Opinion · Messaging & Positioning
Widely-Adopted Frameworks & Resources — Stage 1
GT
The foundational framework for early-market strategy in tech: identifying the beachhead segment, the "bowling alley" approach to ICP focus, and why the chasm between early adopters and mainstream buyers defines stage-1 GTM strategy. Especially relevant for cyber startups selling to security-conscious early adopters.
→ Aterous angle: Stop the Spray. Start the Focus. operationalizes Moore's beachhead concept with named account discipline
CD
Customer Development methodology: the foundational argument that startups must search for a business model through customer discovery before executing on one. The reason founder-led sales isn't optional at Stage 1, it is the discovery process itself. Free summary and resources at steveblank.com.
→ Aterous angle: Validates why "no AE before design partners" is a strategic principle, not a budget constraint
JB
The JTBD framework reframes ICP from "who is the buyer" to "what job are they hiring this product to do." Particularly powerful for cyber messaging, as buyers hire security products for different jobs (compliance, risk reduction, incident response) even within the same org. Forces precision in Stage 1 messaging work.
→ Aterous angle: The Messaging Problem maps directly to JTBD clarity, messaging what they're hiring you to do
Recognize your GTM in this stage? 30 minutes. No pitch. An honest look at where you are and what to fix first.
Book a GTM Audit Stage 2
Series A — Building the Motion
You've validated ICP. Now you systematize. The first sales hires are the hardest, not because finding good AEs is hard, but because the transition from founder-led to AE-led is slower and more fragile than everyone expects.
$2M → $10M ARR 12–30 months 1–3 AE hires
GTM Motion
Sales Motion
Founder + First AE(s)
Hire 1–2 AEs who can hunt. Founder stays on strategic deals for 12+ months. AEs run process, with the founder closing and coaching. The AE ramp is 3–6 months. Quota attainment in month 1 is not the measure. Consistent close rates in month 4 is.
ICP & Named Accounts
50–150 Tiered Named Accounts
Tier A (high fit + high signal), Tier B (fits but needs nurture). Run a quarterly ICP audit. Stop selling to accounts that take 18 months to close. That's not a pipeline problem, that's a targeting problem.
Messaging
First Formal Sales Playbook
Document what the founder says that works. Persona-level messaging for the top 2–3 buying roles (CISO, VP Security, SOC Lead). Build the deck AEs can actually use, not the deck that looks good on a website.
Outbound
AE-Sourced First. Light SDR Next.
AEs own their own pipeline until you have 3+ AEs. Hiring an SDR before that means they have no one to hand to. The SDR:AE hand-off model breaks below 3 AEs. Don't copy what a Series B company does at Series A.
Inbound Starts
Content as Credibility, Not Leads
Blog, LinkedIn, thought leadership. Not designed to generate MQLs, but to create credibility when accounts look you up after a cold outreach. The CISO will Google you. Make sure what they find is worth reading.
Forecasting
First Pipeline Discipline
Weekly forecast call. Stage-gate your pipeline. Define what "qualified" means before the quarter starts. If you can't forecast, you can't manage, and you can't hire for what you can't measure.
Who Owns GTM
Founder / CEO
Strategic accounts, coaching, closing
Active AE / SE / SDR Pods
Hire pods once repeatable growth signal is understood
Signal-Gated SDR
Part of the pod model, not a standalone hire before 3+ AEs
Pod Hire Marketing
Generalist with domain knowledge. Trusted, engaging content is the priority, defining incremental strategy and ramping inbound and outbound.
Hire Now Tech Investment — Upgrade With Intent
Buy Now
HubSpot Sales Pro Apollo or ZoomInfo Lite LinkedIn Sales Nav (team) Gong (call recording) Chili Piper (routing) Loom (async demos)
Not Yet
Outreach / Salesloft 6sense / Bombora Highspot / Seismic Marketing automation platform
Most Common Failure Mode at This Stage
Pulling the founder out of deals too early. The board celebrates the sales hire and expects immediate pipeline relief. The founder steps back. Close rates drop. The AE gets blamed. The real cause: the founder's credibility, domain expertise, and relationship capital were doing more work than anyone admitted. Stay in deals 12 months longer than feels comfortable. Then step back methodically, account by account, not all at once.
Aterous Insights — Read These First
| Article | Type | Why It Matters at This Stage |
|---|---|---|
| The Founder-Led Sales Trap: When to Stay In and When to Step Back | Framework | The single most mismanaged transition in early-stage GTM. What signals indicate the AE is ready to own the deal, how long founders should stay on calls, and what actually happens to close rates when you pull out too fast. |
| Build the Human Motion. Then Add the Tools. | Framework | The sequencing framework for SDR vs. AE vs. founder-led, covering when to make each shift and what signals indicate readiness vs. board pressure. |
| Stop Praying. Start Forecasting. | Applied | The first pipeline discipline every Series A team needs. How to build a forecast process before you have a full ops team to run it. |
| Your Named Account List Is Your GTM Strategy. | Framework | The transition from a founder's informal target list to a structured named account program that AEs can execute against. |
| The SDR Model Is Broken for Early-Stage Cyber Startups | Opinion | The case that SDRs hired before $5M ARR almost always underperform, not because they're bad, but because the pipeline infrastructure, messaging clarity, and AE capacity aren't there to make them effective. Essential reading before making your first SDR hire. |
Coming to This Guide — Stage 2
Coming
"The First 90 Days of an AE Hire: What We Got Right and Wrong"
Real ramp timelines, what quota coverage looked like month 1–3, what the founder had to keep doing, and the moment the transition actually worked.
Applied · Sales Motions
Widely-Adopted Frameworks & Resources — Stage 2
PR
The framework behind Salesforce's outbound engine: separating prospecting (SDR), closing (AE), and customer success. Widely cited for the "Cold Calling 2.0" methodology, using brief, curious prospecting emails rather than aggressive cold calls. Sets expectations for SDR economics and ramp timelines.
→ Aterous angle: Build the Human Motion directly challenges Predictable Revenue applied too early, as the model requires pipeline volume and AE depth that most Stage 2 cyber companies don't have yet
CH
Research across 6,000+ B2B reps showing that the best sellers "teach, tailor, and take control" rather than building relationships. Particularly powerful for cyber, where the status quo (doing nothing) is often the main competitor. The Challenger approach teaches buyers to see their risk differently. Ideal framework for founder-to-AE messaging transfer.
→ Aterous angle: The insight-led selling approach in Challenger is what separates domain-expertise-driven sales from generic SaaS selling in cyber. See: Why Domain Expertise Compounds
SP
Based on 35,000 sales calls over 12 years: Situation, Problem, Implication, Need-Payoff questioning framework. The gold standard for discovery in complex B2B sales, especially when buyers haven't fully articulated their pain. Cyber buyers rarely come with a defined RFP at Series A; SPIN helps AEs draw out and quantify pain.
→ Aterous angle: Pairs directly with MEDDIC qualification at Stage 3: SPIN builds discovery quality, MEDDIC enforces deal structure
Building your first sales team? We help Series A cyber and AI companies navigate the founder-to-AE transition without losing deals in the process.
Book a GTM Audit Stage 3
Series B — Formalizing at Scale
Repeatability is the mandate. Pipeline needs to be a machine, not a miracle. You need programs that work without the founder in every deal, ABM that's actually ABM, and a RevOps function before you need one.
$10M → $30M ARR 18–36 months Full GTM org
GTM Motion
Sales Motion
AE Team + Dedicated SDRs + SEs
SDR:AE ratio of 1:2 or 1:3 in cyber/AI. Add SEs when selling to technical buyers with complex POCs. Sales manager hire when you have 4+ AEs. Don't let individual AEs freelance their own processes. Consistency at this stage is what creates forecast accuracy.
ABM
Formal Named Account Program
1:few ABM for 50–100 Tier A accounts. Intent data to surface active research signals. Coordinated SDR + AE + marketing plays against the same accounts, not just better emails, but actual multi-channel account programs with defined plays.
Messaging
Persona-Level, Vertical-Level
CISO vs. SOC Lead vs. CTO messaging diverges here. Different pain, different proof, different language. Sales playbooks per persona. Vertical messaging for finance, healthcare, and critical infrastructure, the segments where cyber buying cycles accelerate fastest.
Inbound + Demand Gen
Content Engine Live
SEO, events, webinars, analyst relations begin. MQL → SQL handoff formally defined. Marketing owns a pipeline contribution target, not just MQL volume. Marketing gets credit for closed revenue, not just leads generated.
Deal Qualification
MEDDIC/MEDDPICC Adoption
Mandatory at this stage for deals >$50K ACV. Map Economic Buyer, Champion, Decision Process, and Paper Process for every deal before forecast. No champion identified = no forecast inclusion. This is the discipline that prevents late-stage pipeline blow-ups.
Channel Exploration
First Partner Conversations
MSSP introductions, VAR pilot conversations, GSI discussions. Do not formalize yet. Prove the model with 2–3 referral deals before building a partner program. Partners amplify your GTM; they don't fix a broken one.
Who Owns GTM
VP Sales
Team management, forecast, process
Critical Hire AE Team (4–8)
Named account ownership, closing
Active AE / SE / SDR Pods
Hire additional pods, expanding the makeup as the motion matures and segments diversify
Expand Marketing
Hire specialists to augment content, adding demand gen and event expertise alongside the generalist foundation
Build Now Tech Investment — The Full Motion Stack
Buy Now
HubSpot Sales & Marketing Enterprise FireFlies.ai (conversation intelligence) 6sense or Bombora (intent) ZoomInfo (contact data) Highspot or Seismic Looker or Tableau
Buy With a Plan — Not Speculatively
6sense only after CRM data is clean Enablement tool needs playbooks first Partner tools after first 2–3 referral deals Crossbeam (partner tracking) — later
Most Common Failure Mode at This Stage
Buying 6sense or Demandbase before your CRM data is clean. Intent tools amplify good data and brutally expose bad data. If your ICP definition is fuzzy, your account tiers aren't built, or your HubSpot properties are inconsistent, intent data will send your SDRs after accounts that feel active but don't fit. Get the foundation right before buying the signal layer on top of it.
Aterous Insights — Read These First
| Article | Type | Why It Matters at This Stage |
|---|---|---|
| You're Not Doing ABM. You're Doing ABM Messaging. | Opinion | The foundational opinion piece that separates real ABM programs from better email sequences. Sets up the need for the ABM Framework post coming to this guide. |
| How to Build an ABM Program That Isn't Just Costly Outbound | Framework | The framework that follows the ABM Opinion post. What a real 1:few ABM program looks like for a $10–15M ARR cyber startup, covering the orchestration across SDR, AE, and marketing that most companies skip, and the metrics that prove it's working vs. just running. |
| Stop Clicking. Start With a Strategy. Then Set Up HubSpot. | Applied | The tech stack setup discipline this stage requires, strategy first and configuration second. Critical reading before any Series B team buys their next tool. |
| AI is the GTM Accelerator for Pre-Series B Startups. | Applied | How AI augments the GTM motion at scale, particularly relevant as Series B teams build their first demand gen and RevOps functions. |
Coming to This Guide — Stage 3
Next Up
"Tech Stack by Stage: What to Buy, What to Wait On, and What to Never Buy at All"
The vendor-specific tradeoffs, the sequencing logic, and the classic mistake of buying Demandbase before the CRM data is clean. The companion post to this roadmap, highly useful for any founder or VP of Sales being demo'd by every GTM tool vendor.
Framework · GTM Ops
Coming
"How We Set Up HubSpot for ABM (and What We'd Do Differently)"
Companion to the HubSpot setup post, specifically covering account-based views, engagement scoring at the account level, and the pipeline reporting that actually shows if ABM is working.
Applied · GTM Ops
Planned
"Inbound Is a Lagging Indicator. Stop Reporting It Like a Leading One."
The nuance that inbound demand gen in early-stage cyber almost always reflects outbound efforts made 6–9 months ago, and how Series B teams should set board expectations accordingly.
Opinion · ABM & Demand Gen
Widely-Adopted Frameworks & Resources — Stage 3
ME
The dominant qualification framework for complex enterprise B2B SaaS, covering Metrics, Economic Buyer, Decision Criteria, Decision Process, Identify Pain, and Champion (+Paper Process, +Implications of Pain). Used by 73% of SaaS companies with $100K+ ACV deals. Free introductory content and certification at meddic.academy. The framework that prevents late-stage pipeline blowups and creates forecastable revenue.
→ Aterous angle: MEDDIC defines "qualified" before the quarter starts, directly addressing the forecasting discipline in Stop Praying. Start Forecasting.
IT
The original ABM taxonomy defining 1:1 (Strategic), 1:few (ABM Lite), and 1:many (Programmatic) ABM programs. The most widely cited framework for ABM program design. Free research and definitions available. Sets the industry standard for what ABM actually is, and the reference point for Aterous's "You're Not Doing ABM" position.
→ Aterous angle: You're Not Doing ABM establishes why most companies are running 1:many at best, and the upcoming Framework post will define what 1:few looks like in practice for cyber
G2
Goals, Plans, Challenges, Timeline: HubSpot's consultative qualification framework for inbound and ABM-influenced leads. Complements MEDDIC for mid-market deals; useful for SDR discovery calls. Full playbooks and training freely available at HubSpot Academy. Particularly relevant for the Series B inbound motion where marketing-sourced leads need structured qualification.
→ Aterous angle: A GPCT-structured discovery sequence can be built directly into HubSpot deal stages. See Stop Clicking. Start With a Strategy.
Scaling your GTM machine? We help Series B cyber and AI companies build ABM programs that actually generate pipeline, not just account lists.
Book a GTM Audit Stage 4
Series C+ — Category Leadership
You're not just selling. You're shaping the market. Enterprise motion, MSSP channel at scale, analyst positioning, and a RevOps function that treats pipeline like a product. The GTM challenge shifts from "how do we close deals" to "how do we define the category."
$30M+ ARR Series C and beyond Enterprise + Channel
GTM Motion
Enterprise Sales
Named Enterprise AEs + SAMs
Strategic Account Managers own the top 20–30 enterprise accounts. ENT AEs have 8–12 month cycles. SDR model shifts to AE-sourced or partner-sourced for enterprise, as cold SDR outreach into Fortune 500 security teams yields poor returns at this stage.
ABM — 1:1 Enterprise
White-Glove Strategic Programs
Executive briefings, custom content, dedicated resources for your top 20 accounts. Not better emails, but actual executive alignment programs, QBRs before they're customers, and analyst-level insight delivered to the account. ABM at this stage is relationship, not campaign.
Channel at Scale
MSSP, VAR, GSI Programs
Formal program with deal registration, co-sell motions, and enablement. MSSPs move fast in cyber, so prioritize them. GSI relationships (Accenture, Deloitte, KPMG) for enterprise. Channel amplifies your GTM. It doesn't replace a broken one.
Category Creation
Gartner, Forrester, Analyst Push
Invest in analyst relations. Contribute to MQ and Wave processes. Publish a market POV, not just product features. You're defining the buying criteria now, which means your positioning shapes how the market evaluates every competitor.
Expansion Revenue
Installed Base as GTM Engine
NRR becomes the GTM metric. Land-and-expand motions into the installed base. Customer success is now a revenue function, not a support function. The best enterprise accounts source more pipeline than any SDR team.
Revenue Operations
Full RevOps Function
Dedicated RevOps owns forecasting models, pipeline inspection, compensation design, territory planning. If RevOps is a part-time role at this stage, you will have blind spots in your pipeline that compound every quarter until they become a board problem.
Who Owns GTM
CRO
Full revenue ownership across Sales, CS, Partnerships
Critical VP Marketing
Demand gen, category creation, analyst
Active VP Partnerships
MSSP, VAR, GSI program ownership
Build RevOps Director
Forecasting, tools, territory, comp
Critical Tech Investment — Enterprise MarTech Stack
Full Stack
Salesforce or HubSpot Enterprise Demandbase or Terminus (ABM) Clari (forecasting) Impartner (PRM / partner) Drift / Qualified (conversational) Tableau / dbt (data pipeline) Workato (integrations)
Enterprise-Grade Enablement
Seismic or Highspot (full deployment) Gong Engage (enterprise) 6sense Enterprise Chorus.ai (competitive intelligence)
Most Common Failure Mode at This Stage
Building a channel program before the direct motion is clean. Bringing in MSSPs and VARs when your AEs can't close repeatably just means the partner struggles with the same objections your team does. Fix the direct motion, document the winning sales process, and then give partners something that actually converts. Partners amplify what's working. They don't fix what isn't.
Aterous Insights — Read These First
| Article | Type | Why It Matters at This Stage |
|---|---|---|
| Why Domain Expertise Is the Only GTM Advantage That Actually Compounds | Opinion | The category creation argument, examining why domain expertise is the differentiator that separates market leaders from market participants, especially relevant as you push into analyst positioning and category definition. |
More Stage 4 content coming soon. See below for what's in the pipeline.
Coming to This Guide — Stage 4
Next Up
"Why Most Cyber Startups Are Doing Demand Gen for the Wrong Buyer"
The CISO is rarely the economic buyer and almost never the champion. The programs built to reach them are often the wrong investment at the wrong time, especially as you move enterprise.
Opinion · ABM & Demand Gen
Next Up
"The MSSP Channel Playbook: What Most Cyber Startups Get Wrong"
The enablement requirements, deal registration discipline, co-sell motions, and the common mistake of signing too many MSSP agreements without activating any of them. Implementation-level detail that no analyst firm covers.
Applied · Sales Motions
Coming
"Category Creation for Cyber Startups: How to Get on the Gartner Radar Without a $5M Analyst Budget"
The practical framework for analyst relations at Series C, covering how to contribute to MQ/Wave processes, what a market POV actually looks like vs. a product brochure, and how to build category positioning before you can afford Forrester or Gartner retainers.
Framework · Messaging & Positioning
Planned
"What NRR Actually Tells You About Your GTM (And What It Hides)"
NRR becomes the headline metric at Series C+, but how it's calculated, what it masks, and what it means for your expansion GTM motion is rarely explained plainly. A GTM Ops post for CROs and CFOs navigating board conversations about growth efficiency.
Framework · GTM Ops
Widely-Adopted Frameworks & Resources — Stage 4
PB
The category creation framework used by Salesforce, Uber, and leading enterprise tech companies. Argues that category kings capture 76% of market value, making category design more valuable than product differentiation. Highly relevant for Series C cyber companies deciding whether to define a new category or fight for position in an existing one.
→ Aterous angle: Domain expertise as a compounding GTM advantage is the precondition for category creation. Why Domain Expertise Compounds is the entry point to this Stage 4 theme
MM
The enterprise extension of MEDDIC, adding Paper Process (procurement, legal, security review) and Implications of Pain. Non-negotiable for $200K+ ACV deals with 9–12 month cycles. Prevents the most common late-stage loss pattern in enterprise cyber: a champion who can't navigate procurement. Free resources and certification at MEDDIC Academy.
→ Aterous angle: The Stop Praying. Start Forecasting. discipline scales into MEDDPICC as ACV and cycle length increase
WD
SPICED (Situation, Pain, Impact, Critical Event, Decision) is the modern full-lifecycle qualification framework increasingly adopted in B2B SaaS alongside expansion revenue models. Winning by Design's Revenue Architecture framework also addresses the land-and-expand motion that defines Series C+ GTM, particularly relevant for cyber companies moving from single-product to platform plays. Free content at winningbydesign.com.
→ Aterous angle: The expansion revenue / NRR content coming to this guide maps directly to SPICED's emphasis on impact and critical event selling in ongoing accounts
Building toward category leadership? Aterous helps Series B and C cyber companies build the GTM infrastructure to get there without the analyst-firm price tag.
Book a GTM Audit