Compliance-Deadline Outbound for Lean Security Teams
If you run an MSSP, a pen-test shop, or a small security product company, your cold email motion looks nothing like an enterprise SDR floor. There's no Salesforce-synced pod selling to Fortune 500 CISOs — there's a founder or a two-person growth team selling to SMBs and mid-market companies who suddenly need security help because a cyber insurance questionnaire, a SOC 2 audit, or a customer security review just landed on their desk. Instantly fits that motion: a fast campaign builder, bulk mailbox import, and a unified inbox a small team can actually keep up with.
What Instantly doesn't do is provision the sending infrastructure — the domains, mailboxes, and IPs your campaigns run on. That's the layer ColdRelay handles. This guide covers how lean security teams wire the two together: bulk-importing ColdRelay mailboxes into Instantly, timing campaigns to the compliance deadlines your prospects are already sweating, and using A/Z variants to find out whether proof or compliance pressure opens more doors.
Why Run Instantly on ColdRelay Infrastructure
Instantly's paid plans let you connect unlimited email accounts — which is exactly why the infrastructure question matters more, not less. Unlimited connections mean nothing if the mailboxes behind them share reputation, sit on recycled IPs, or arrive with broken DNS. And if you're a security company, the bar is higher still: the first thing a technically curious prospect does is check whether your email authenticates. A security vendor failing its own SPF check doesn't get a second look.
ColdRelay provides that layer. You provision dedicated mailboxes on isolated Azure tenants with dedicated IPs, with SPF, DKIM, and DMARC pre-configured — ready in about an hour, and exportable in exactly the CSV shape Instantly's bulk import expects. ColdRelay supports 100-150 mailboxes per domain, so even a solo founder can run a meaningful pool on two or three secondary domains without touching the primary domain clients trust for deliverables and reports.
The pairing is additive, not competitive: ColdRelay is the infrastructure underneath, Instantly is the sending and sequencing layer on top. You keep Instantly's campaign builder, A/Z testing, and Unibox — you just point them at mailboxes built to land.
Visit Instantly →Connecting ColdRelay Mailboxes to Instantly
Provision mailboxes on ColdRelay
Choose secondary domains adjacent to your brand but separate from the primary domain you use for client reports, pen-test deliverables, and support. ColdRelay supports 100-150 mailboxes per domain; most small security vendors start with 20-60 mailboxes across 1-2 domains. Everything provisions on isolated Azure tenants with dedicated IPs in about an hour, with SPF, DKIM, and DMARC already configured.
Bulk-import the mailboxes into Instantly via CSV
Export your mailbox list with SMTP/IMAP credentials from the ColdRelay dashboard, then in Instantly go to Email Accounts → Add New → Bulk Import (SMTP/IMAP) and upload the CSV. Instantly's unlimited-accounts model means the whole pool connects under one plan — no per-seat math, which is exactly what a lean team wants.
Set each account's daily limit to 2 and skip Instantly's warmup
In each account's settings, cap the daily campaign limit at 2 outbound emails. That mirrors ColdRelay's per-mailbox budget — 4 sends/day total, split 2 outbound + 2 warmup — and since ColdRelay's warmup runs continuously as part of that budget, you can leave Instantly's warmup toggle off and start campaigning the same day, with no separate warmup period.
Build the campaign with A/Z variants on the opener
In Instantly's campaign builder, attach the full mailbox pool and create A/Z variants of step one: a proof-led opener (a finding from a recent engagement, an anonymized before/after) against a compliance-led opener (the insurance questionnaire or SOC 2 deadline your prospect is facing). Let the variants run to statistical weight before picking a winner — this single test usually decides your messaging for the quarter.
Launch and work replies in Unibox
Once live, every reply across the pool lands in Instantly's Unibox. For a founder-led motion, that single view is the whole sales floor — triage daily, and use campaign analytics to compare reply rates by variant and segment rather than chasing opens.
The Cybersecurity Instantly Playbook
Anchor campaigns to deadlines your prospects already have
SMBs and mid-market companies rarely buy security proactively — they buy when a cyber insurance renewal questionnaire, a SOC 2 audit window, or a big customer's vendor security review forces the issue. Build Instantly campaigns around those moments: segment lists by renewal season or audit cycle, and open with the deadline, not your service catalog.
Write for the office manager and the IT generalist, not the CISO
Your buyer at a 50-person company is an owner, ops lead, or one-person IT department — not a security professional. Strip the acronym soup from your Instantly sequences and write in plain English: what the questionnaire asks, what fails, what it costs to fix. The reader who has to Google your subject line never replies.
Let A/Z variants settle the proof-vs-compliance question per segment
Pen-test findings impress technical buyers; deadline pressure moves compliance-driven ones — and you won't know which segment you have until the data says so. Run proof-led and compliance-led openers as A/Z variants in every Instantly campaign, and keep the winner per segment rather than declaring one global champion.
Run one campaign per service line, one pool of mailboxes
A pen-test offer, an MSSP monitoring retainer, and a vCISO engagement have different buyers, price points, and urgency. Keep them as separate Instantly campaigns with their own copy and analytics, all drawing on the same ColdRelay mailbox pool — capacity is shared, positioning is not, and your reporting stays honest.
Typical Cybersecurity Outbound Benchmarks (Instantly + ColdRelay)
| Metric | Benchmark | Notes |
|---|---|---|
| Inbox placement rate | 95%+ | Dedicated IPs, isolated tenants, and pre-configured SPF/DKIM/DMARC — table stakes when your prospects' MSP filters their mail |
| Reply rate | 2-4% | SMB and mid-market buyers reply more than enterprise CISOs; deadline-anchored copy sits at the top of the range |
| Reply lift from deadline-timed sends | 1.5-2x | Campaigns aligned to insurance renewals or audit windows vs. evergreen sends to the same segment |
| Outbound capacity per mailbox | 2/day | 4 sends/day total per mailbox — 2 outbound + 2 warmup |
| Time to first campaign | Same day | ~60 minutes to provision on ColdRelay, plus CSV import and campaign setup in Instantly |
What It Costs: Instantly + ColdRelay
You pay per mailbox per month for the infrastructure, with volume tiers that drop as you scale (see the table below). Dedicated IPs, isolated Azure tenants, and pre-configured DNS are included.
Instantly is billed separately on its own subscription for the campaign builder, A/Z testing, and Unibox — paid plans connect unlimited email accounts, so its cost doesn't grow with your mailbox pool.
Infrastructure cost scales with mailbox count; Instantly's cost stays flat as you add accounts. For a lean security team, that means one predictable software bill and one infrastructure bill that tracks exactly with sending capacity.
| Mailboxes | ColdRelay price / mailbox / month |
|---|---|
| 1–199 | $1.00 |
| 200–999 | $0.85 |
| 1,000–4,999 | $0.70 |
| 5,000+ | $0.55 |
Each mailbox sends 4 emails per day — 2 outbound to prospects + 2 warmup. ColdRelay provisions mailboxes on isolated Azure tenants with dedicated IPs; Instantly handles the sending, sequencing, and inbox rotation on top.
Frequently Asked Questions
Does ColdRelay replace Instantly?
No — they're complementary layers and you use them together. Instantly is the sending and sequencing layer: campaigns, A/Z variants, Unibox, analytics. ColdRelay is the infrastructure layer underneath: the secondary domains, mailboxes, and dedicated IPs Instantly sends from. Neither does the other's job.
Instantly allows unlimited email accounts — does that mean unlimited sending?
No. Unlimited accounts means Instantly won't charge you per connected mailbox; the safe sending volume is still set by the infrastructure. Each ColdRelay mailbox sends 4 emails/day total — 2 outbound + 2 warmup — so your real capacity is 2 outbound sends per mailbox per day. To send more, you add mailboxes on ColdRelay, and Instantly's flat pricing means connecting them costs nothing extra.
Do we need to run Instantly's warmup before launching campaigns?
No separate warmup period. ColdRelay's warmup runs continuously as part of each mailbox's 4 sends/day budget — 2 outbound + 2 warmup — so mailboxes are campaign-ready from day one. Leave Instantly's warmup toggle off, cap each account at 2 outbound/day, and launch the same day you provision.
How many mailboxes does a small MSSP or pen-test shop actually need?
Less than you'd think. At 2 outbound sends/day per mailbox, 30 mailboxes gives you 60 sends/day — around 1,200 prospects a month at a sustainable pace, which is plenty for a founder-led motion targeting compliance-driven SMBs. ColdRelay supports 100-150 mailboxes per domain, so you can start small on one or two secondary domains and scale the pool as replies turn into a real pipeline.