selling security is harder than selling software
Your buyer is a professional sceptic. Doubting people is literally their job. They sit through vendor pitches every week, and almost every one of those pitches tries the same move: fear. Breach statistics. Ransomware headlines. The cost of doing nothing, delivered like a threat.
Here is what I learned selling security for years: fear does not close deals. Fear freezes people. A frightened buyer does not sign faster, they go quiet, form another committee, and wait for the fear to pass.
Security is bought on trust. The CISO who champions you is putting their reputation on the line in front of their board. The IT director who picks you is betting their next appraisal on your product working. Nobody makes that bet on a vendor who scared them. They make it on a vendor who understood them.
i have done this, not read about it
In 2023 I joined ThreatSpike, a cybersecurity company, as its first commercial person. The founders were brilliant engineers doing what technical founders do: joining sales calls, talking for an hour about the technology, and hoping.
Over the following years I built the entire commercial engine. Discovery, qualification, proposals, pricing, the sales team itself, hired and trained from scratch. I sold to banks, law firms, retailers, manufacturers and hospitality groups. I sat across from CISOs, IT directors, procurement teams and boards. I left with the business generating £10M and a sales team that runs without me.
ThreatSpike was the proving ground, not the classroom. Before it came the best part of a decade selling security at NCC Group and SecureWorks, SDR through to senior sales. Everything in the Emotive Method was learned across those three companies, on real security deals with real sceptics.
"When James started at ThreatSpike, we were the embodiment of founder-led sales. I would join calls, talk non-stop for an hour and just hope the person on the other side chose to buy... James contributed so much to the growth of the company... He has that founder mentality and can do a lot with very little. ThreatSpike, and I specifically, owe a lot to James. He truly helped transform our business."
what security founders get wrong
- They demo too early. With no agreed problem, a demo is just paint thrown at the wall: every feature, every screen, hoping something sticks. A professional sceptic sits through it and learns exactly one thing. You never asked.
- They sell the technology, not the outcome. Your buyer is not buying detection rates. They are buying a quiet weekend, a clean audit, a board meeting where nothing is on fire.
- They let fear do the talking. Which makes them sound like every other vendor in the CISO's inbox.
- They chase. Security sales cycles are long, and the instinct when a deal goes quiet is to follow up harder. Chasing a security buyer reads as desperation, and desperate is the last thing anyone wants their security vendor to be.
- They never ask the one question that matters. I once asked a room of security professionals what would actually happen if they did nothing. The silence told me more about their pipeline than any forecast. If nothing happens when the prospect does nothing, there is no deal.
what working with me looks like
I work with a small number of security founders directly. We build your sales process on your real deals: discovery that earns the right to demo, qualification that kills fake pipeline before it eats your quarter, next steps that keep long security cycles moving, and proposals reviewed live so your champion can sell internally without you in the room.
No generic playbook. The process gets built around what you sell, who buys it and why they trust you.
"He broke down every single complex part of sales into simple frameworks and methodologies... The result of that? Doubling ARR year on year with limited resources."
read the method first
The whole methodology is published free on this site, chapter by chapter. Start with founder-led sales, then discovery, qualification and next steps. If it reads like the way you want to sell, we should talk.
Got a sales team already? There is a training page for that.
James Irving is the founder of Emotive JLI, a sales consultancy for technical founders. He learnt to sell the old school way: 50 cold calls per day in a Manchester boiler room, then enterprise cybersecurity, then ThreatSpike, where he joined as the first commercial person and left with a £10M sales engine. Tell him what you've built or watch the stories.