Answer six questions to size your cybersecurity market, name the buyer persona you are really selling to, and get a channel mix and first-touch sequence built for them.
Market sizes are modelled estimates from the assumptions under How we estimate, not a count from a contact database.
Someone shared their persona. Review the selections, then build your own.
Step 1 of 6 · Region
Region drives the modelled segment size, reachability, and buyer-relevant frameworks.
Mixing strategic and hands-on titles changes the persona. Choose 1–4.
Buying behaviour can shift as organizations become larger and more complex.
Regulated and operationally complex industries can buy differently.
Installed technology can narrow the segment; intent topics model who may be researching now.
Each go-to-market play benefits from a different modelled channel mix.
Modelled estimates—not contact-database counts.
Titles:
The pains, hooks, and objection response below are planning hypotheses to validate—not claims about Arches CRM or any cybersecurity product.
Common objection:
Buyer-relevant frameworks (not Arches CRM compliance claims)
Fit signal score: /75 ·
The complete on-page result remains free. Submit your work email only if you want to unlock a local PDF download marked “Estimates.” This form does not promise email delivery.
Every value is a planning placeholder in assumptions version 2026-09-v1. Contact estimates sum each selected role base multiplied by region share, size fit, selected industry share, and the combined “any of” technology/intent filter.
contacts = Σ(role base × region share × size fit × industry share × signal filter)
Likely range is 80%–120% of the point estimate. Reachability and channel mix use the selected region, role composition, size, and use case. Counts are rounded to three significant digits. Percent tiles use half-even whole-number rounding.
“Confidence” is only a segment-breadth rule: below 300 is Low, 300–150,000 is High, and above 150,000 is Medium. It is not a statistical confidence interval or a measure of source-data accuracy. Accounts in market are calculated from intent-share assumptions and three modelled contacts per account; they are not known active accounts.
| Assumption group | What it affects |
|---|---|
| Role bases and size affinity | Modelled contact population by title and company band |
| Region shares and reachability | Contact estimate, email, mobile, LinkedIn, and framework context |
| Industry shares | Share of the role population included in the selected industries |
| Installed technology and intent shares | Any-of filter and an account estimate derived from intent-share assumptions |
| Use-case channel bases | Email, LinkedIn, phone, and ABM allocation |
| Role | Global base | Affinity | Kind |
|---|---|---|---|
| CISO / VP Security | 60,000 | exec | exec |
| SecOps / SOC Lead | 180,000 | prac | prac |
| Director of Security | 120,000 | exec | exec |
| Cloud Security Architect | 90,000 | prac | prac |
| GRC / Compliance Officer | 150,000 | prac | grc |
| IAM / Identity Lead | 70,000 | prac | prac |
| AppSec / DevSecOps | 110,000 | prac | prac |
| IT Director / Head of IT | 400,000 | itdir | it |
| MSSP / MSP Owner | 45,000 | mssp | mssp |
| SMB IT / Owner | 900,000 | smb | it |
| Band | Band share (decimal) | exec | prac | itdir | mssp | smb |
|---|---|---|---|---|---|---|
| 1–10 | 0.1 | 0.1 | 0.1 | 0.3 | 1.2 | 2.2 |
| 10–50 | 0.16 | 0.3 | 0.3 | 0.8 | 1.6 | 2 |
| 50–250 | 0.2 | 0.7 | 0.8 | 1.3 | 1.3 | 1.2 |
| 250–1k | 0.18 | 1.2 | 1.2 | 1.4 | 0.6 | 0.3 |
| 1k–5k | 0.16 | 1.6 | 1.4 | 1 | 0.3 | 0.05 |
| 5k–25k | 0.12 | 1.8 | 1.6 | 0.8 | 0.1 | 0.02 |
| 25k+ | 0.08 | 2 | 1.8 | 0.6 | 0.05 | 0.01 |
| Region | Share (decimal) | Email % | Mobile % | LinkedIn % | Framework topics |
|---|---|---|---|---|---|
| North America | 0.42 | 94 | 62 | 88 | SOC 2, HIPAA, CCPA, NIST CSF |
| Europe / UK | 0.27 | 91 | 41 | 85 | GDPR, NIS2, DORA, ISO 27001 |
| APAC | 0.16 | 86 | 48 | 78 | DPDP (India), PDPA (Singapore), ISO 27001 |
| ANZ | 0.04 | 92 | 55 | 90 | Essential Eight, Privacy Act, ISO 27001 |
| LATAM | 0.06 | 84 | 52 | 80 | LGPD (Brazil), ISO 27001 |
| MENA | 0.05 | 83 | 46 | 74 | UAE PDPL, SAMA CSF, ISO 27001 |
| Industry | Share (decimal) |
|---|---|
| BFSI | 0.12 |
| Healthcare | 0.11 |
| Technology / SaaS | 0.16 |
| Manufacturing | 0.13 |
| Retail / eCom | 0.09 |
| Government / Public | 0.07 |
| Energy / Utilities | 0.04 |
| Education | 0.06 |
| Logistics | 0.05 |
| All industries | 1 |
| Type | Signal | Share (decimal) |
|---|---|---|
| Installed | CrowdStrike | 0.18 |
| Installed | SentinelOne | 0.08 |
| Installed | Palo Alto | 0.22 |
| Installed | Fortinet | 0.25 |
| Installed | MS Defender | 0.45 |
| Installed | Okta | 0.2 |
| Installed | Splunk / SIEM | 0.2 |
| Installed | Zscaler / ZTNA | 0.12 |
| Installed | AWS heavy | 0.35 |
| Installed | Azure heavy | 0.4 |
| Intent | SOC modernization | 0.06 |
| Intent | MDR / XDR | 0.08 |
| Intent | SOC 2 / ISO 27001 | 0.07 |
| Intent | Zero Trust | 0.09 |
| Use case | Phone | ABM ads | ||
|---|---|---|---|---|
| Cold email outbound | 60 | 20 | 10 | 10 |
| 1:Few ABM campaign | 25 | 25 | 10 | 40 |
| Event or webinar invite | 50 | 30 | 10 | 10 |
| LinkedIn outbound | 20 | 60 | 10 | 10 |
| Phone / SDR cadence | 30 | 15 | 50 | 5 |
| Multi-channel sequence | 35 | 30 | 20 | 15 |
| Assumption | Value |
|---|---|
| Maximum selected titles | 4 |
| Range multipliers | 0.8 to 1.2 |
| Significant digits | 3 |
| Low confidence below | 300 |
| High confidence through | 150000 |
| Baseline intent share | 0.07 |
| Contacts per account | 3 |
| Email executive penalty | 3 |
| Mobile executive multiplier penalty | 0.35 |
| LinkedIn SMB penalty | 8 |
| LinkedIn MSSP penalty | 3 |
| MSSP archetype threshold | 0.5 |
| GRC archetype threshold | 0.5 |
| IT archetype threshold | 0.5 |
| Executive archetype threshold | 0.5 |
| Practitioner archetype threshold | 0.5 |
| Generalist maximum average band | 2.5 |
| Sequence channel minimum | 10 |
| Channel total | 100 |
| Executive channel adjustment | Phone −10, ABM +5, LinkedIn +5 × executive share |
| EU channel adjustment | Email −5, LinkedIn +5 |
| SMB channel adjustment | ABM −5, Email +5 |
| Sequence days | 1, 2, 4, 6, 9, 14 |
| MSSP score | 25 |
| ABM/multi score | 15 |
| Two-intent score | 15 |
| Priority-region score | 10 |
| High-confidence score | 10 |
| Hot score threshold | 50 |
| Warm score threshold | 25 |
These displayed values are versioned planning placeholders, not sourced contact counts, compliance claims, active-intent observations, or performance guarantees. Changing them requires the separate admin and server-side versioning work described in the implementation plan.
An ICP describes the organizations and buyer roles most likely to benefit from an offer, including region, size, industry, technology, and use case.
The model applies the published planning assumptions to your six selections. It does not query a contact database.
Your ICP selections, modelled market range, archetype, buyer context, channel mix, first-touch sequence, formulas, and estimate notice.
Yes. The preview is free and public. Contact details are required only for the downloadable brief.
Review Arches CRM separately to decide whether it fits your team’s follow-up workflow. The persona-builder results do not establish a product fit or promise an outcome.
Planning disclaimer: every count, reachability percentage, market signal, channel allocation, score, and sequence is a modelled estimate based on versioned planning assumptions. This tool does not provide contact records, verify buyers, certify compliance, or guarantee reach, response, meetings, pipeline, or revenue.
Log in
Start Free Trial 