How to Find Your First 50 Cold Email Prospects (Without Buying a List)

You don't need a $300 email list to start cold outreach. You need 50 companies that look like your best customers — and they're findable for free in an afternoon.

The #1 excuse we hear from founders who "tried cold email": "I don't know who to email." The #2 excuse: "I don't have a list." Both are solvable in a single focused afternoon. Here's the exact process we use.

Step 1: Define the "lookalike" in one sentence

Before you search, you need a filter. Not a vague ICP ("SaaS companies") — a sentence that lets you say yes/no in five seconds:

"B2B SaaS companies with 10-200 employees, founder-led sales, that sell a tool to other businesses (not consumers), headquartered in the US or Europe."

Write down 5 companies you already know fit this. They're your seed list and your compass for finding the other 45.

Step 2: Mine your own backyard (free)

• Your competitors' customers: Go to your 5 competitors' sites. Find their "customers" or "case studies" pages. Every logo there is a warm lead — they already pay for a tool like yours.
• Job boards: Search "hiring [role] at [company]" — a company posting for a Sales or Growth role is actively spending on growth tools.
• Recent funding/founding announcements: Companies that just raised or launched a new product have budget and a reason to buy.

Step 3: Use directories that are actually free

• BuiltWith / SimilarWeb (free tiers): Pick a competitor's domain, see what tools they use and who else uses them.
• Crunchbase (free tier): Filter by industry, location, funding round, employee count. Export a shortlist.
• G2 / Capterra (free): Browse the "alternatives" pages of your category. Every alternative listing is a company actively evaluating tools like yours — right now.

Step 4: Find the right person at each company

You don't email "info@". You email a human. For each of your 50 companies:

1. Who decides? For a $29-99/mo tool: the founder (most likely), or the head of sales/marketing if the company is bigger.
2. Find their email with a free verifier or a quick search (`firstname@company.com` patterns, or tools like Hunter's free tier).
3. Verify it bounces? Never send blind. A 2%+ bounce rate poisons your domain.

Step 5: Score your list, send the top 20 first

Rank the 50 by "how obviously they'd say yes":

• They already use a tool like yours (10 pts)
• They're actively hiring for growth (5 pts)
• They just launched/raised (5 pts)
• You can reference something specific (10 pts)

Send the top 20 first. Not the whole list. Quality of targeting — not volume — is what determines reply rate.

The free-stack checklist

• 5 seed companies you already know
• Competitors' customer logos mined (free)
• 20-30 names from free directory tiers
• Decision-maker identified per company
• Emails verified, bounce risk <2%
• Score sorted, top 20 queued first

We build ColdCrow, an AI cold email writer that turns any prospect's profile into a personalized email with a deliverability score — free for the first three tries. Paste a URL or describe a company, get a sendable email in seconds.