# Reach RevOps leaders at companies that use HubSpot

250 accounts and 500 people, about 315 verified work emails and 945 emails sent from inboxes on your own domain.

Family: [Technology signals](https://www.routergrowth.com/workflows/technology-signals.md) · HTML page: https://www.routergrowth.com/workflows/technology-hubspot-revops

## Give this to your agent

```text
Using RouterGrowth, run this workflow: Find B2B companies that use HubSpot with 100 to 1000 employees and email their head of RevOps. 250 accounts, 2 contacts each, three-step sequence.
Show me the price before every call, and stop after each stage with a sample of the results so I can adjust.

1. Source the accounts: company.search x 25 searches. Companies matching the industry, size and location, ten or so per search.
2. Qualify on the signal: company.technologies x 250 companies. Keep the accounts where the trigger is real; the rest never reach outreach.
3. Find the people: people.search x 500 profiles. 2 contacts per account by title and seniority, with current role.
4. Get the contact: contact.find x 350 (500 tried, 70% found), contact.verify x 350 verdicts. Charged on a match only: a miss is free, so the estimate is a ceiling.
5. Context for the first line: web.scrape x 250 pages. One page per account and a few recent posts per person, so the opener is about them.
6. Run the outreach: email.send x 945 (315 contacts x 3 steps). Sequence from inboxes on a domain you own, one call per email.
7. Read the replies: email.messages x 95 inbox reads. Poll the inboxes, classify replies, hand the warm ones to a human.

Before sending: email.domain x 1, email.inbox x 2, on a domain I own.

Budget for one run: about $17.64 plus $6.98 one-time setup. Run routergrowth inspect on any capability before the first call to confirm the quote.
```

## Why this works

A company on HubSpot with a RevOps function has data it does not trust and workflows that have grown by accident. The head of RevOps is the one cleaning it up.

The first line, as your agent would write it:

> You run on HubSpot with a hundred-plus people, which usually means duplicate contacts and three versions of lifecycle stage. Which one hurts most?

## The workflow, stage by stage

Source the accounts → Qualify on the signal → Find the people → Get the contact → Context for the first line → Run the outreach → Read the replies

| # | Stage | Calls | Cost |
|---|---|---|---:|
| 1 | Source the accounts | `company.search` x 25 | $0.06 |
| 2 | Qualify on the signal | `company.technologies` x 250 | $5.25 |
| 3 | Find the people | `people.search` x 500 | $0.19 |
| 4 | Get the contact | `contact.find` x 350, `contact.verify` x 350 | $7.24 |
| 5 | Context for the first line | `web.scrape` x 250 | $1.40 |
| 6 | Run the outreach | `email.send` x 945 | $3.31 |
| 7 | Read the replies | `email.messages` x 95 | $0.19 |
| + | One-time setup | `email.domain` x 1, `email.inbox` x 2 | $6.98 once |

One run: $17.64 for 2,765 calls. Assumptions: 2 contacts per account unless the brief says otherwise, 70% email find rate, 90% verification pass, 3 emails per contact, 30% LinkedIn accept rate. Prices are the catalog's at the time this page was built; `routergrowth inspect` returns the exact quote before a call.

### Source the accounts

Companies matching the industry, size and location, ten or so per search.

### Qualify on the signal

Keep the accounts where the trigger is real; the rest never reach outreach.

### Find the people

2 contacts per account by title and seniority, with current role.

### Get the contact

Charged on a match only: a miss is free, so the estimate is a ceiling.

### Context for the first line

One page per account and a few recent posts per person, so the opener is about them.

### Run the outreach

Sequence from inboxes on a domain you own, one call per email.

### Read the replies

Poll the inboxes, classify replies, hand the warm ones to a human.

## Run it from the command line

```bash
# RouterGrowth workflow: Find B2B companies that use HubSpot with 100 to 1000 employees and email their head of Rev
npm install -g routergrowth && routergrowth setup

# one-time setup
routergrowth run -c email.domain -i '{"domain":"<domain>"}'
routergrowth run -c email.inbox -i '{}'

# 01 Source the accounts  (company.search x 25)
routergrowth run -c company.search -i '{"query":"<query>"}'

# 02 Qualify on the signal  (company.technologies x 250)
routergrowth run -c company.technologies -i '{"domain":"<domain>"}'

# 03 Find the people  (people.search x 500)
routergrowth run -c people.search -i '{}'

# 04 Get the contact  (contact.find x 350, contact.verify x 350)
routergrowth run -c contact.find -i '{"first_name":"<first_name>","last_name":"<last_name>","company_domain":"<company_domain>"}'
routergrowth run -c contact.verify -i '{"email":"<email>"}'

# 05 Context for the first line  (web.scrape x 250)
routergrowth run -c web.scrape -i '{"url":"<url>"}'

# 06 Run the outreach  (email.send x 945)
routergrowth run -c email.send -i '{"inbox_id":"<inbox_id>","to":"<to>"}'

# 07 Read the replies  (email.messages x 95)
routergrowth run -c email.messages -i '{"inbox_id":"<inbox_id>"}'
```

## Questions

### How do I find companies that use a specific technology?

The agent sources companies in your segment with company.search, then company.technologies reads the stack detected on each one's site. The companies running the technology you named stay in the list; the rest never reach the contact stage.

### What are technographics used for in sales?

Qualifying before you spend on contacts. What a company runs tells you whether it can use your product, which integration to mention and who owns the decision.

### How accurate is technology detection?

It reads what is visible on the company's public site and pages, so front-end and marketing tools are detected reliably and internal systems less so. Treat a match as a strong signal and confirm it in the first reply.

### Can I build a list of the customers of a competitor?

When the competitor's product leaves a trace on its customers' sites, yes: name it in the brief and the same workflow keeps the companies where it is detected.

### What does this workflow cost to run?

About $17.64 for one run of 2,765 calls, plus $6.98 once for the sending inboxes. Each call is quoted before it runs and a lookup that finds nothing is not charged, so the figure is a ceiling. There is no subscription: the run is paid from a prepaid balance.

## Related

- [Reach sales operations leaders at companies that use Salesforce](https://www.routergrowth.com/workflows/technology-salesforce-sales-ops.md)
- [Reach marketing leaders at companies built on Webflow](https://www.routergrowth.com/workflows/technology-webflow-marketing.md)
- [Reach support leaders at companies running on Intercom](https://www.routergrowth.com/workflows/technology-intercom-support.md)
- [Reach data leaders at companies that use Segment](https://www.routergrowth.com/workflows/technology-segment-data.md)
- Guide: [Buying signals: score accounts on hiring, funding and tech changes](https://www.routergrowth.com/use-cases/company-buying-signals.md)
- Guide: [Lead enrichment: email finder, verification and company data in one API](https://www.routergrowth.com/use-cases/contact-enrichment.md)
- Skill: [Cold email pipeline](https://www.routergrowth.com/skills/cold-email-pipeline.md)
- Skill: [Hiring-signal outbound](https://www.routergrowth.com/skills/hiring-signal-outbound.md)

Adjust the volumes and assumptions: https://www.routergrowth.com/free-gtm-tools/workflow-generator#q=Find%20B2B%20companies%20that%20use%20HubSpot%20with%20100%20to%201000%20employees%20and%20email%20their%20head%20of%20RevOps.%20250%20accounts%2C%202%20contacts%20each%2C%20three-step%20sequence.