Cold email for SaaS gets a bad name from the people who do it badly. You have seen their work: a 300-word email about "synergies", sent to 10,000 people from the main company domain, then four "just bumping this up" messages.
We run outbound for SaaS clients every week, and the channel still books meetings when the basics are right. Below is the exact order we set things up in, from the first ICP call to the reply that turns into a demo, with a sample sequence you can adapt.
Step 1: Who exactly are you emailing?
Every B2B cold email strategy that fails, in our experience, fails here first. A useful ICP for cold email names a few hundred people who share one specific problem you can describe in a single line. "Mid-market companies that need better analytics" is far too wide to email.
We write the ICP as filters a tool can actually run:
Company
Industry, headcount band, geography, funding stage, and a trigger such as a recent raise, a new office or a relevant job post.
Tech stack
What they already use, which matters most if your product plugs into or replaces a known tool.
Person
The one or two titles who feel the pain and can say yes to a call. For a ₹5 lakh deal, that is rarely the CEO of a 2,000-person company.
Exclusions
Current customers, open deals, competitors, and anyone who has unsubscribed before.
The tools we build lists with
| Tool | What we use it for |
|---|---|
| Apollo | The first pull: company and contact filters, plus emails for most mid-market titles. |
| LinkedIn Sales Navigator | Checking that people are still in the role, and finding accounts Apollo misses, especially in India. |
| BuiltWith | Filtering accounts by the technology on their website. |
| Clay | Enrichment and waterfall email finding, plus pulling the one fact per account that makes the first line relevant. |
| Hunter | Finding and verifying emails that the other tools could not confirm. |
Verify every address before it goes near a sending tool, because a high bounce rate burns a new domain fast. Our rule is to drop anything a verifier marks as invalid and to send "catch-all" addresses in small batches only.
Start small. A launch to 300 well-chosen accounts will teach you more in two weeks than 5,000 sends to a blurry list.
Step 2: Deliverability setup, before you write a word
Most founders want to write copy first. Resist it, because fixing a damaged domain takes far longer than setting one up properly.
Use secondary domains
Buy two or three domains that look like your brand, for example getrostrly.com or rostrly.co if your company is Rostrly. Redirect each one to your main website so a curious prospect lands somewhere real. Your primary domain carries invoices, product notifications and your team's daily mail, and it should never carry cold outreach.
Set up SPF, DKIM and DMARC
These three DNS records tell inbox providers that you are who you say you are. Google and Yahoo made them mandatory for bulk senders in February 2024. Gmail's sender guidelines say anyone sending more than 5,000 messages a day to Gmail accounts must set up SPF, DKIM and DMARC, keep spam rates reported in Postmaster Tools below 0.30%, and support one-click unsubscribe for marketing messages. Google recommends staying below 0.10%. Yahoo's rules match closely and add that unsubscribes must be honoured within two days.
A small program may never hit 5,000 a day to Gmail. We treat these rules as the baseline for every client anyway, since a clean setup costs an afternoon. Set DMARC to p=none at the start, check that the From domain aligns with your SPF or DKIM domain, and use a 2048-bit DKIM key if your provider supports one.
Warm up, then cap volume
New inboxes need a few weeks of warm-up before they send cold email. Instantly recommends three to four weeks for a brand-new domain, and we treat two to three weeks as the bare minimum. After that, we keep each inbox to roughly 30 to 50 cold emails a day, which is our own operating rule. Scale by adding inboxes, and keep the per-inbox number flat.
If you want the full first-month timeline for this setup, our guide to building an outbound pipeline in 30 days lays it out week by week.
Step 3: How do you write a cold email sequence that gets replies?
Keep it short, specific and about them. Instantly's 2026 Cold Email Benchmark Report, which covers campaigns sent on its platform during 2025, found that the best-performing campaigns kept emails under 80 words. The same report found that 58% of replies came from the first email and 42% from follow-ups, with four to seven touches as the useful range.
Here is how we build each email:
- 1Subject line: two to four words, lowercase, sounds like an internal email. Skip exclamation marks.
- 2First line: one observation about their company that proves you looked.
- 3The problem: one sentence on the pain, in their words.
- 4The offer: what you do about it, with one concrete detail.
- 5The ask: a single low-effort question. "Worth a look?" beats "Can we book 45 minutes on Thursday?"
Example: a 4-step sequence for a fictional SaaS
This is an example we wrote for this post. Rostrly is a made-up shift-scheduling tool for logistics companies with 50 to 500 staff, and the target is a Head of Operations. None of this copy comes from a real client campaign.
Subject: rotas at {{company}}
Hi {{first_name}}, I saw {{company}} open a second warehouse in {{city}} this year. When a site moves from one shift pattern to three, the rota usually ends up in a spreadsheet that one supervisor guards closely.
Rostrly builds shift rotas from your headcount and leave data in about ten minutes and sends changes to staff on WhatsApp.
Worth a 15-minute look?
Hi {{first_name}}, one thing I left out. Most ops heads we speak to lose a few hours every week to swap requests and last-minute absences. I recorded a two-minute video of how Rostrly handles a no-show on a night shift. Shall I send it over?
Hi {{first_name}}, a different question. Do you know how much of last quarter's overtime at {{company}} was planned, and how much came from gaps in the rota? Rostrly shows that split per site. If the number is fuzzy today, a short call would make it clear.
Hi {{first_name}}, I'll stop here. If shift planning sits with someone else at {{company}}, I'd be grateful for a name. If the timing is wrong, just reply "later" and I'll check back next quarter.
Every email also carries a plain-text opt-out line and the sender's postal address in the signature. See the compliance section below.
Notice that each follow-up adds something new: a video, a sharper question, an easy exit. "Just bumping this" adds nothing, so we never send it.
Step 4: Personalization that scales
We use three levels and match the effort to the deal size.
Segment level
The whole email is written for one narrow group, such as Heads of Operations at 3PL companies in western India. In our experience, this step moves reply rates more than any clever first line.
Trigger level
A first line based on a real event: a new site, a funding round, a hiring spree, a tool they just adopted. Clay and Sales Navigator surface most of these.
One-to-one
A line written by hand after reading their posts or website. We save this for the top 50 or so accounts where one deal would pay for the whole quarter.
ChatGPT and Claude help draft trigger-level first lines at volume. We still check a sample of every batch by hand, because one wrong "Congrats on the Series B!" undoes a hundred good emails.
If LinkedIn is part of your plan, run it alongside email so the same prospect sees your name in two places. Our post on LinkedIn outreach for B2B covers how we sequence the two.
Step 5: Pick a sending tool
All three tools we use handle multiple inboxes, warm-up, scheduling and a shared reply view.
| Tool | Where we find it fits best |
|---|---|
| Instantly | Simple to set up, good for founders running their own campaigns across a handful of domains. |
| Smartlead | Agencies and teams running many inboxes and clients, with strong inbox rotation and API access. |
| Lemlist | Multichannel sequences where email and LinkedIn steps run in one flow, plus image and video personalization. |
These are our working opinions from using each tool. Check current pricing and features on each vendor's site before you buy.
Whichever you choose, turn off open tracking for cold campaigns. Pixels can hurt deliverability and Apple Mail's privacy features make open rates unreliable, so measure replies.
Step 6: Follow-ups and timing
Space follow-ups so they feel like a person sending them: two days, then four, then a week. Instantly's 2026 report found Tuesday and Wednesday brought the most replies, with Wednesday the single best day, so we launch new sequences on a Monday and let the first follow-up land midweek.
Stop the sequence the moment someone replies. An automated follow-up landing after a prospect has written back kills trust fast.
Step 7: Reply handling and the CRM
The reply is where most cold email programs leak. A prospect says "send me more" on Thursday, nobody answers until Tuesday, and the moment passes.
We sort every reply into one of five buckets within one working day:
Answer within hours, offer two time slots, and create a deal in the CRM.
Agree on a month, set a task, and stop all sequences.
Thank them, ask for the right name, and add the referral as a new contact.
Answer it honestly in two or three sentences, then ask once more.
Remove them from every list straight away and add them to the suppression list.
Every positive reply goes into HubSpot, Pipedrive, Attio or Salesforce, whichever the client already runs. We connect the sending tool to the CRM with n8n, Make or Zapier so contacts, replies and sequence status sync without anyone copying and pasting.
If you are deciding whether this work should sit with an in-house SDR or an outside team, our comparison of outsourced SDR vs in-house SDR walks through the trade-offs.
Step 8: What reply rate should you expect?
Instantly's 2026 benchmark puts the average reply rate across its platform at 3.43%. Senders above 10% made up the top 10% of the dataset. Treat 3% to 4% as the line to beat in your first month and 10% as what a sharp list and offer can reach.
| Metric | What we watch for | Basis |
|---|---|---|
| Bounce rate | Under 2%. Above that, pause and re-verify the list. | Our operating rule |
| Spam complaint rate | Under 0.10%, and never 0.30% or higher | Gmail sender guidelines |
| Reply rate | 3.43% is average; 10%+ is the top tier | Instantly 2026 benchmark |
| Positive replies | The share of replies that are interested or referrals. This is the number that matters. | Our operating rule |
| Meetings booked | Tracked per segment and per email step | Our operating rule |
If replies sit below 1% after 300 to 500 sends, the problem is usually the list or the offer. Rewriting subject lines rarely fixes it. Go back to Step 1.
Step 9: Compliance basics for SaaS founders
This section is a summary to help you ask the right questions, so check your own setup with a lawyer before you rely on it.
United States (CAN-SPAM)
The FTC says the law makes no exception for business-to-business email. You need accurate headers and honest subject lines, a valid physical postal address, a clear way to opt out, and you must honour opt-outs within 10 business days.
EU and UK (GDPR)
Recital 47 says processing personal data for direct marketing "may be regarded as carried out for a legitimate interest", which is the basis most B2B cold email relies on. Article 21 gives every recipient the right to object at any time, after which you must stop. Some EU countries add stricter e-marketing rules on top.
India (DPDP Act 2023)
The Digital Personal Data Protection Act has no general legitimate interest ground like GDPR, so processing relies mainly on consent or a short list of defined legitimate uses. The DPDP Rules were notified on 14 November 2025 with an 18-month phased compliance period. If India is a target market, get specific advice before scaling.
Our checklist for every campaign: a real sender name, a postal address, a one-line opt-out, one suppression list shared across tools, and opt-outs processed within two days.
How we run cold email for SaaS clients
Everything above is what our GTM Pipeline plan covers: ICP and list building, domains and DNS, warm-up, sequences, follow-ups, reply handling and CRM sync. First outbound touches go out within 7 days, and pipeline should be building by weeks 3 to 4. It costs ₹30,000 a month, month-to-month, and pricing is on the GTM Wave homepage. You own the domains, lists, sequences and CRM data.
Frequently asked questions
Does cold email still work for B2B SaaS?
It does, as long as the list is tight and the sending setup is clean. Instantly's 2026 Cold Email Benchmark Report, based on campaigns sent during 2025, puts the average reply rate at 3.43%, and the top 10% of senders get above 10%. Most of the gap between those two numbers comes from targeting and relevance.
How many emails should a cold email sequence for SaaS have?
Plan for four to seven touches over two to three weeks. Instantly's 2026 benchmark found 58% of replies come from the first email and 42% from follow-ups, so a sequence that stops after one or two emails leaves a large share of replies unsent.
Should I send cold email from my main company domain?
You should send it from secondary domains that look like your brand, such as a .co or a get- prefix version, and point them to your main site. If a secondary domain picks up spam complaints, your main domain, which carries invoices, product email and team mail, stays clean.
What do the Google and Yahoo 2024 sender rules require?
Since February 2024, Gmail requires anyone sending more than 5,000 messages a day to Gmail accounts to set up SPF, DKIM and DMARC, keep spam rates in Postmaster Tools below 0.30%, and offer one-click unsubscribe on marketing mail. Yahoo has matching rules and asks senders to honour unsubscribes within two days.
How many cold emails can I send per inbox per day?
We keep each warmed-up inbox to roughly 30 to 50 cold emails a day and scale by adding inboxes and domains. No inbox provider publishes that figure; it is our own operating rule, and it keeps any single inbox from looking like a bulk sender.
Is cold email legal in India under the DPDP Act?
The Digital Personal Data Protection Act, 2023 has no general legitimate interest ground like GDPR, so processing personal data relies mainly on consent or a short list of defined legitimate uses. The DPDP Rules were notified on 14 November 2025 with an 18-month phased compliance period. Founders emailing Indian prospects should get legal advice on their specific setup.
Want this running for your SaaS next week?
Our Outbound & Pipeline team sets up the domains, builds the list, writes the sequence and handles replies, with first touches out within 7 days. Book a call and we'll tell you honestly whether cold email suits your market. You can also read how we work first.