ProgrammableMarketing/opal.dev (opens in a new tab)
PDF

Views

  • Plan
  • Roadmap
  • Research

On this page

  • The brief
  • Start here
  • Idea portfolio
  • Effort vs impact
  • This week · 6
  • This quarter · 9
  • Big bets · 4
  • Wildcards · 3
  • How we can help
Generated Oct 18, 2026
  1. Programmable
  2. Playbooks
  3. Opal Security
Opal Security logo

growth playbook · Oct 18, 2026

opal.dev (opens in a new tab)

Opal Security growth playbook

Diagnosis

Opal has a new CEO, product, technology, marketing and field engineering leadership, $59M raised, and more than 60% of the team joined in 2026. Its 21 open roles describe the plan: a commercial sales-led motion with five new regional enterprise AEs, events as a pipeline channel, ABM by regulatory pressure, a Growth Engineer to build scoring, routing and AEO, and a content hire for social, video, newsletter and analyst relations.

This playbook gives each of those hires a first 90 days. The quickest gains are in making Opal's strong customer proof readable and usable (crawlable numbers, comparison pages, a proof library) and in giving new AEs territory kits and real-time signals.

Growth Score

7/10

Biggest Opportunity

Own "agentic identity" in the moments buyers face it, from the auditor's evidence request to the CISO dinner, with templates, scans and customer proof that make the regional AEs' first calls specific.

Biggest Risk

Better-funded rivals (ConductorOne, Veza, Saviynt) market the same AI-agent story, and a sales-led company with a low-traffic site depends on events and outbound that are expensive to scale.

01

Start here

The three moves to make first. Each one is written up in full below.

  1. 1

    Territory kits for the five new regional AEs, built from the version-controlled best-fit customer profile score

    Write the best-fit customer profile rules (size, cloud, identity provider, regulatory pressure) in a versioned file.

    High impact First result in 4 weeks
  2. 2

    Make the customer numbers crawlable: an AEO audit of what AI answers can actually read on opal.dev

    Fetch the homepage, /zero and five customer pages without JavaScript and list what is missing.

    High impact First result in 4-6 weeks
  3. 3

    Comparison pages for ConductorOne, Lumos, Veza and Okta Identity Governance

    Pull closed-lost and won deals by competitor once the CRM tagging is fixed, and start with the most common rival.

    High impact First result in 4-8 weeks

02

Your idea portfolio

22 ideas, grouped by when to run them. Open any idea for how to run it: the steps, who to approach, copy you can use, and how to measure it.

  • 7 ideas are marked Unexpected: plays you are unlikely to have tried.

    2 of these are things Programmable can build and run for you.

Every idea placed by the effort it takes against the impact it could have. Quick wins sit top left; select a number to open that idea. The filters below narrow the list by status, timing, category and what Programmable can build.

Effort vs impactEach number is an idea. Select one to open it.
Impact →
Quick wins · 4Big bets · 13Fill-ins · 2Reconsider · 3
Effort →

Showing 22 of 22 ideas

This week 6

Quick wins with a clear first action.

  • 01

    The Growth Engineer post names "client-side rendering fixes" and "crawlability of proof points" as work to own. The site runs on Framer, and its best proof (88% less standing access at Chronosphere, 86K JIT requests at Databricks) sits in animated components that crawlers and AI answer engines may not read.

    High impactLow effort First result in 4-6 weeks Growth Engineer

    First action

    Fetch the homepage, /zero and five customer pages without JavaScript and list what is missing.

    How to measure it

    Proof points readable by crawlers

    Now
    –
    Target
    100% of homepage and customer numbers
    By
    2 weeks

    Steps

    1. 1

      Fetch without JavaScript

      Homepage, /zero, /platform and the customer pages.

      Growth Engineer 2 hours

    2. 2

      List the gaps

      Numbers, customer names and product names missing from the HTML.

      Growth Engineer 2 hours

    3. 3

      Fix rendering

      Move proof into static text blocks in Framer.

      Growth Engineer 2 days

    4. 4

      Add schema

      Organization, Product, FAQ and Review markup where it fits.

      Growth Engineer 1 day

    5. 5

      Track AI answers

      20 buyer questions checked weekly in the main assistants.

      Growth Engineer 2 hours a week

    6. 6

      Report

      Mentions and citations, monthly to marketing leadership.

      Growth Engineer 30 minutes a month

    First result
    4 to 6 weeks
    Cost
    $0, about a week of work
    Owner
    Growth Engineer

    Smallest test

    Fix the homepage proof strip and watch whether the numbers appear in AI answers within a month.

    Why it works

    Fetch every key page as a crawler would (no JavaScript), list which proof points, product names and customer names are missing, and fix them with server-rendered text, Organization and Product schema, and one plain-text page per customer number.

    CISOs and IAM leads now ask AI assistants "best identity governance for AI agents". If the answer engine cannot read Opal's proof, it cites competitors who publish plain comparison pages.

    Risks and how to handle them

    • Framer limits on rendering

      Use static text components for proof and keep animation decorative.

    Evidence

    • HiringGrowth Engineer: own the AI-native GTM stack, codify best-fit customer profile scoring "into documented, version-controlled infrastructure", deploy AI for enrichment, scoring, routing and outbound, "Own AEO technical execution: schema, client-side rendering fixes, crawlability of proof points", and fix "competitor mis-tagging"; Common Room, HockeyStack and RB2B class tools.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
    • programmable.infoSite scan: built on Framer; three comparison pages (SailPoint, Oasis, Clutch); 138 blog posts, 17 customer stories and event pages for Black Hat USA 2026, RSA Conference 2026, IANS forums and several Cyber Security Summits; Tranco rank about 918,000.Source
  • 02

    opal.dev scores F (26 of 100) on security headers in the site scan and C on Mozilla Observatory, while the product sells access control to CISOs. Security teams often scan a vendor's domain during evaluation.

    Medium impactLow effort First result in 1 week Security & Compliance Lead

    First action

    Run Mozilla Observatory on opal.dev and list each failed check.

    How to measure it

    Mozilla Observatory grade for opal.dev

    Now
    –
    Target
    A
    By
    2 weeks

    Steps

    1. 1

      List failures

      Each failed header from Observatory.

      Security & Compliance Lead 30 minutes

    2. 2

      Check Framer options

      Which headers Framer can set directly.

      Growth Engineer 1 hour

    3. 3

      Add the rest at Cloudflare

      Transform rules for the headers Framer cannot set.

      Security & Compliance Lead 2 hours

    4. 4

      Test the CSP

      Report-only first, so analytics and embeds keep working.

      Growth Engineer 2 days

    5. 5

      Enforce

      Switch the CSP to enforce once reports are clean.

      Security & Compliance Lead 30 minutes

    6. 6

      Monitor

      A monthly scan in the trust center checklist.

      Security & Compliance Lead 15 minutes a month

    First result
    1 week
    Cost
    $0
    Owner
    Security & Compliance Lead

    Smallest test

    Add HSTS and X-Content-Type-Options today.

    Why it works

    Add the standard headers Framer allows (or put the site behind Cloudflare, which already runs the DNS, to add them): HSTS preload, a content security policy, X-Content-Type-Options, frame-ancestors and a referrer policy. Re-scan and keep it at A.

    It removes a needless objection from deals that Enterprise AEs work for months, and it is consistent with the trust center Opal already publishes.

    Risks and how to handle them

    • A strict CSP breaks scripts

      Run report-only for a week first.

    Evidence

    • programmable.infoSecurity headers: grade F (26 out of 100) in the site scan and C (50 out of 100) on Mozilla Observatory for opal.dev; DMARC is at reject.Source
    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
  • 03

    Opal compares itself only with SailPoint, Oasis and Clutch, while ConductorOne ($79M Series B) and Veza (where the new CPO came from) are the vendors buyers shortlist for AI-native governance, and Lumos already publishes "ConductorOne competitors" pages.

    High impactLow effort First result in 4-8 weeks Product Marketing & Content A…

    First action

    Pull closed-lost and won deals by competitor once the CRM tagging is fixed, and start with the most common rival.

    How to measure it

    Demo requests from comparison pages

    Now
    –
    Target
    15 a month
    By
    8 weeks

    Steps

    1. 1

      Rank competitors

      By deals seen in the last 12 months.

      Growth Engineer 2 hours

    2. 2

      Interview AEs

      Where Opal wins and loses against each.

      Product Marketing & Content Associate 2 hours

    3. 3

      Write the pages

      Fact tables, two customer outcomes each, no attacks.

      Product Marketing & Content Associate 3 days

    4. 4

      Check with product

      CPO reviews accuracy on Veza and agent identity.

      CPO 2 hours

    5. 5

      Make the one-pagers

      Same content for AEs as PDFs.

      Product Marketing & Content Associate 1 day

    6. 6

      Publish with schema

      Crawlable tables, linked from /compare.

      Growth Engineer 1 day

    First result
    4 to 8 weeks
    Cost
    $0
    Owner
    Product Marketing & Content Associate

    Smallest test

    Publish the ConductorOne page first.

    Why it works

    Write four factual comparison pages and matching competitive one-pagers for AEs: architecture, agent and non-human identity coverage, just-in-time access, access reviews, policy as code (OpalScript), deployment options and named customer outcomes.

    The Product Marketing & Content Associate is asked for competitive one-pagers and SEO/AEO, and the Growth Engineer is fixing competitor mis-tagging in the CRM. Comparison searches are the highest-intent searches a sales-led company gets.

    Risks and how to handle them

    • Claims about competitors go out of date

      Date each page and review quarterly.

    Evidence

    • programmable.infoSite scan: built on Framer; three comparison pages (SailPoint, Oasis, Clutch); 138 blog posts, 17 customer stories and event pages for Black Hat USA 2026, RSA Conference 2026, IANS forums and several Cyber Security Summits; Tranco rank about 918,000.Source
    • Search resultsCompetitors: ConductorOne raised a $79M Series B (October 2025, over $100M total) and markets a multi-agent identity security platform; Veza is reported at about $110M raised; Saviynt raised $700M in January 2026; Lumos publishes "ConductorOne competitors" comparison pages.Source
    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
    • Your websiteJune 4, 2026: $23M led by Greylock and Battery Ventures, bringing total funding to $59M; CEO Howard Ting arrived in December 2025; new CPO Sameer Mehta (from Veza), CTO Alex Pien, VP of Field Engineering John Clark, VP of Marketing Michael Kwon and Head of Product and Solutions Marketing Christine Ooley. "More than 60% of Opal's team has joined since the start of 2026." (Wellfound's sidebar still shows $32M; the press release figure is used.)Source
  • 04

    The Opal Zero page dramatizes an auditor asking for every AI agent with access to financial data or PII, its owner, purpose, resources and last review date. GRC and IAM leads are being asked this now and most have no format for the answer.

    High impactLow effort First result in 3 weeks Senior Manager

    First action

    Draft the template columns with the Security & Compliance Lead.

    How to measure it

    Meetings from template downloads

    Now
    –
    Target
    20
    By
    8 weeks

    Steps

    1. 1

      Define the columns

      Agent, owner, purpose, systems, permissions, last review.

      Security & Compliance Lead 2 hours

    2. 2

      Write the guide

      Where to find agents in each system.

      Product Marketing & Content Associate 1 day

    3. 3

      Publish

      Landing page linked from /zero and the newsletter.

      Growth Engineer 2 hours

    4. 4

      Route downloads

      Best-fit customer profile score on download; fits go to the BDR.

      Growth Engineer 2 hours

    5. 5

      Write the follow-up

      A first email that offers a 20-minute inventory review.

      Business Development Representative 1 hour

    6. 6

      Promote

      LinkedIn post, newsletter and paid amplification to GRC titles.

      Senior Manager, Demand Generation 1 day

    First result
    3 weeks
    Cost
    $0 plus a small paid budget
    Owner
    Senior Manager, Demand Generation

    Smallest test

    Send the template to five existing customers' GRC leads and ask what is missing.

    Why it works

    Publish a spreadsheet and short guide: the columns an auditor expects, how to find agents in Okta, Entra, GitHub and cloud accounts, and a sample filled row. Gate it lightly, and route downloads by company fit to the BDR.

    The Demand Generation hire is asked to reach GRC leaders "scaling into regulatory scrutiny". A useful template reaches them before they have a project, and every download from a target account is a reason for a relevant first call.

    Ready to use

    ChecklistAI agent access inventory columns

    [ ] Agent name and platform (e.g. Claude Code, Cursor, Devin, internal bot)
    [ ] Accountable human owner
    [ ] Business purpose
    [ ] Systems it can reach (Okta apps, AWS roles, GitHub, Snowflake, Stripe MCP)
    [ ] Credential type (user token, service account, API key)
    [ ] Data classes reachable (PII, financial)
    [ ] Standing or just-in-time access
    [ ] Date last reviewed and reviewer

    Risks and how to handle them

    • Template reads as a sales pitch

      Make it fully usable without Opal; mention Opal only in one closing line.

    Evidence

    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source
    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source
    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
  • 05

    Opal is hiring Enterprise AEs for the Southeast, Midwest, Southern California, East Coast and Bay Area, and the Growth Engineer is asked to codify best-fit customer profile scoring. A new AE in a new region starts with no list.

    High impactMedium effort First result in 4 weeks Growth Engineer

    First action

    Write the best-fit customer profile rules (size, cloud, identity provider, regulatory pressure) in a versioned file.

    How to measure it

    First-60-day meetings per new AE

    Now
    –
    Target
    15
    By
    each AE's day 60

    Steps

    1. 1

      Write the best-fit customer profile rules

      Versioned in the repo, reviewed by sales leadership.

      Growth Engineer 1 day

    2. 2

      Enrich accounts

      AI enrichment for triggers by region.

      Growth Engineer 3 days

    3. 3

      Match a story

      Nearest customer story per account (industry and size).

      Product Marketing & Content Associate 1 day

    4. 4

      Draft first lines

      One specific sentence per account.

      Business Development Representative 2 days

    5. 5

      Hand over

      A kit per region in the CRM.

      Growth Engineer 1 day

    6. 6

      Score the score

      Monthly review of which triggers led to meetings.

      Growth Engineer 1 hour a month

    First result
    4 weeks
    Cost
    Enrichment tool costs
    Owner
    Growth Engineer

    Smallest test

    Build the Bay Area kit first and compare its meeting rate with the existing list.

    Build the prospect list. The list compiled from public sources, verified, deduplicated and delivered to your CRM. Usually live within days.

    Book a working session

    Why it works

    For each region, generate a ranked list of 100 accounts from the best-fit customer profile score, with the trigger behind each (IAM or platform hiring, a SOC 2 or SOX milestone, AI agent rollouts, funding), the closest Opal customer story and a suggested first line.

    Regional AEs ramp faster with a reason to call each account, and the score gets tested against real outcomes from day one.

    Risks and how to handle them

    • Generic AI first lines

      The BDR edits each line and cites a real trigger.

    Evidence

    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
    • HiringGrowth Engineer: own the AI-native GTM stack, codify best-fit customer profile scoring "into documented, version-controlled infrastructure", deploy AI for enrichment, scoring, routing and outbound, "Own AEO technical execution: schema, client-side rendering fixes, crawlability of proof points", and fix "competitor mis-tagging"; Common Room, HockeyStack and RB2B class tools.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
  • 06

    Every page carries a banner for Opal Zero at $30k for the first year, with no end date or terms visible. An open-ended offer does not create urgency.

    High impactLow effort First result in 2-4 weeks Senior Manager

    First action

    Agree the deadline and terms with the CEO and sales leadership.

    How to measure it

    Opal Zero deals closed under the offer

    Now
    –
    Target
    set with sales leadership
    By
    offer deadline

    Steps

    1. 1

      Set terms

      Scope, eligibility and a firm date.

      CEO 1 hour

    2. 2

      Publish

      A short terms page linked from the banner.

      Growth Engineer 2 hours

    3. 3

      Build the list

      Open opps, closed-lost, design-partner lookalikes.

      Growth Engineer 1 day

    4. 4

      Write the sequence

      Three emails with a design-partner quote each.

      Senior Manager, Demand Generation 1 day

    5. 5

      AE follow-up

      Calls to the top 50 accounts.

      Enterprise Account Executives 2 weeks

    6. 6

      Report weekly

      Opportunities and closes against the deadline.

      Senior Manager, Demand Generation 30 minutes a week

    First result
    2 to 4 weeks
    Cost
    $0
    Owner
    Senior Manager, Demand Generation

    Smallest test

    Send the sequence to closed-lost deals only.

    Build the prospect list. The list compiled from public sources, verified, deduplicated and delivered to your CRM. Usually live within days.

    Book a working session

    Why it works

    Publish terms (what is included, who qualifies, deadline), then run a sequence to open opportunities, closed-lost deals from the last 18 months and design-partner lookalikes, with AE follow-up.

    The demand gen post asks marketing to inspect whether activity turns into meetings and revenue. A dated offer to warm accounts is the fastest pipeline lever on the site.

    Risks and how to handle them

    • A deadline that keeps moving loses credibility

      Pick a date sales can hold.

    Evidence

    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source
    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source

This quarter 9

The core plays for the next three months.

  • 07

    The field marketing hire "inherits no calendar" but must know which conference "we should never do again". Opal ran or attended Black Hat, RSA, IANS forums and several Cyber Security Summits this year.

    High impactMedium effort First result in 1 month Senior Field Marketing Manager

    First action

    Export all 2026 event costs and lead lists and match them to CRM opportunities.

    How to measure it

    Event cost per qualified opportunity

    Now
    –
    Target
    -30% in 2027
    By
    end of Q2 2027

    Steps

    1. 1

      Collect costs

      Every 2026 event, sponsorship and dinner.

      Senior Field Marketing Manager 2 days

    2. 2

      Join to pipeline

      Contacts met to opportunities within 90 days.

      Growth Engineer 2 days

    3. 3

      Rank events

      Cost per opportunity and pipeline per dollar.

      Senior Field Marketing Manager 1 day

    4. 4

      Draft 2027

      Keep the top third, test two new ones.

      Senior Field Marketing Manager 2 days

    5. 5

      Plan RSA 2027

      Dinners and booked meetings first, booth second.

      Senior Field Marketing Manager 1 week

    6. 6

      Set the handoff

      SDR and AE follow-up within 48 hours of every event.

      Senior Field Marketing Manager 2 hours

    First result
    1 month
    Cost
    $0
    Owner
    Senior Field Marketing Manager

    Smallest test

    Score the three largest 2026 events first.

    Why it works

    Join each 2026 event to the opportunities and pipeline it touched, rank by cost per opportunity, then build the 2027 calendar from the winners, with RSA 2027 planned around dinners and meetings rather than booth traffic.

    It gives the new hire the data to defend kill/keep decisions, which the job post asks for, and moves budget to the formats that produce meetings.

    Risks and how to handle them

    • Long sales cycles hide event impact

      Count influenced pipeline and meetings, not only closed revenue.

    Evidence

    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • programmable.infoSite scan: built on Framer; three comparison pages (SailPoint, Oasis, Clutch); 138 blog posts, 17 customer stories and event pages for Black Hat USA 2026, RSA Conference 2026, IANS forums and several Cyber Security Summits; Tranco rank about 918,000.Source
    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source
  • 08

    Opal is building regional enterprise sales in five territories, and the field post wants intimate formats "a CEO and investors will attend". A dinner co-hosted by a customer CISO (Elastic, Databricks, Superhuman) is more credible than a vendor dinner.

    High impactMedium effort First result in 2 months Senior Field Marketing Manager

    First action

    Ask two customer security leaders to co-host the first two dinners.

    How to measure it

    Opportunities per dinner

    Now
    –
    Target
    3
    By
    third dinner

    Steps

    1. 1

      Pick co-hosts

      One customer leader per region.

      CEO 2 weeks

    2. 2

      Invite from the territory kit

      Top accounts in the region.

      Enterprise Account Executives 2 weeks per dinner

    3. 3

      Set the topic

      One practical question, no slides.

      Head of Product and Solutions Marketing 2 hours

    4. 4

      Run it

      12 seats, CEO or CPO attends.

      Senior Field Marketing Manager 1 evening

    5. 5

      Follow up

      Meetings booked within a week.

      Enterprise Account Executives 1 week

    6. 6

      Track ROI

      Cost per opportunity per dinner.

      Senior Field Marketing Manager 1 hour

    First result
    2 months
    Cost
    $5,000 to $10,000 per dinner
    Owner
    Senior Field Marketing Manager

    Smallest test

    One dinner in the Bay Area.

    Why it works

    Run one dinner a month rotating across the five regions: 12 seats, one customer co-host, one topic ("governing AI agents before the auditor asks"), the regional AE at the table, and meetings booked within a week.

    It gives each new AE a room full of their best accounts and puts customer voices in front of peers, which is how security buyers trust vendors.

    Risks and how to handle them

    • Low attendance from senior titles

      Customer co-host sends the invitation personally.

    Builds on

    Evidence

    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
  • 09

    The demand gen post segments accounts "by regulatory pressure". Each pressure has a different deadline and a different Opal story: Verily and Exelixis for healthcare, Databricks and CoreWeave for scale, Coinlist for financial services.

    High impactMedium effort First result in 6 weeks Senior Manager

    First action

    Tag target accounts by regulatory pressure using the enrichment data.

    How to measure it

    Qualified pipeline from regulatory plays

    Now
    –
    Target
    set per segment
    By
    end of quarter

    Steps

    1. 1

      Tag accounts

      Regulatory pressure per account.

      Growth Engineer 2 days

    2. 2

      Match stories

      One customer story per play.

      Product Marketing & Content Associate 1 day

    3. 3

      Write the guides

      One practical guide per pressure.

      Product Marketing & Content Associate 2 weeks

    4. 4

      Run webinars

      One per play with a customer speaker.

      Senior Manager, Demand Generation 4 weeks

    5. 5

      Amplify

      Paid to the accounts in each segment.

      Senior Manager, Demand Generation ongoing

    6. 6

      Sequence

      SDR outreach timed to the deadline.

      Business Development Representative ongoing

    7. 7

      Review weekly

      Meetings and opportunities by play.

      Senior Manager, Demand Generation 30 minutes a week

    First result
    6 weeks
    Cost
    $15,000 to $30,000 in paid amplification
    Owner
    Senior Manager, Demand Generation

    Smallest test

    Run the first-SOC 2 play alone for four weeks.

    Why it works

    Build four 1:few plays, each with a matched customer story, a short guide (for example "least privilege evidence for a first SOC 2"), a webinar, paid amplification to the accounts, and SDR sequences timed to the regulatory moment.

    Regulatory deadlines create urgency that "AI agents" alone does not. Matching the story to the pressure is the personalized program the demand gen hire is asked to run.

    Risks and how to handle them

    • Thin segments

      Merge the smallest two until the account count supports a play.

    Builds on

    Evidence

    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
    • Your websiteResource center and launches: "Identity governance report 2026: AI access", "Real-world guide to least privilege", user access review and Opal Zero webinars, a Paladin demo, Paladin announced at RSAC 2026, and a blog post on Okta Cross App Access.Source
  • 10

    The field post calls Opal's technical speakers "a critical asset". The CTO came from Meta, the CPO from Veza, and the Security & Compliance Lead runs the same problems customers face.

    Medium impactMedium effort First result in 1-2 quarters Senior Field Marketing Manager

    First action

    List three talk ideas per speaker and the next five CFP deadlines.

    How to measure it

    Accepted talks

    Now
    –
    Target
    6
    By
    mid-2027

    Steps

    1. 1

      Pick speakers

      CTO, CPO, VP of Field Engineering, Security & Compliance Lead.

      Senior Field Marketing Manager 1 hour

    2. 2

      Draft abstracts

      Three per speaker, practitioner-first.

      Product Marketing & Content Associate 1 week

    3. 3

      Track deadlines

      A CFP calendar by region.

      Senior Field Marketing Manager 2 hours

    4. 4

      Rehearse

      Internal run-throughs for each accepted talk.

      Head of Product and Solutions Marketing 2 hours each

    5. 5

      Cut content

      Clips, posts and a blog per talk.

      Product Marketing & Content Associate 2 days each

    6. 6

      Follow up

      Attendee lists to the regional AE.

      Senior Field Marketing Manager per event

    Who to approach

    • Identiverse

      The main identity practitioner conference.

    • fwd:cloudsec

      Cloud security practitioners, the platform-engineering audience.

    • BSides

      Regional events in each AE territory.

    First result
    1 to 2 quarters
    Cost
    Travel only
    Owner
    Senior Field Marketing Manager

    Smallest test

    Submit one talk to the nearest BSides.

    Why it works

    Submit talks on governing AI agents, least privilege at scale and policy as code to practitioner events (BSides, fwd:cloudsec, Identiverse, KubeCon security days), and cut each accepted talk into clips and a blog post.

    Practitioner talks reach IAM and platform engineers who influence the purchase, at a fraction of a booth's cost, and give the content associate material for months.

    Risks and how to handle them

    • Talks read as product pitches and get rejected

      Teach a method with real examples; mention Opal once.

    Evidence

    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • Your websiteJune 4, 2026: $23M led by Greylock and Battery Ventures, bringing total funding to $59M; CEO Howard Ting arrived in December 2025; new CPO Sameer Mehta (from Veza), CTO Alex Pien, VP of Field Engineering John Clark, VP of Marketing Michael Kwon and Head of Product and Solutions Marketing Christine Ooley. "More than 60% of Opal's team has joined since the start of 2026." (Wellfound's sidebar still shows $32M; the press release figure is used.)Source
    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
  • 11

    Opal has 17 customer stories and four strong homepage numbers. AEs, the newsletter, AI answers and analysts all need the same thing: short, quotable proof they can lift.

    High impactMedium effort First result in 6 weeks Product Marketing & Content A…

    First action

    Pull the single best number from each of the 17 stories.

    How to measure it

    Opportunities where a proof card was sent

    Now
    –
    Target
    50%
    By
    end of quarter

    Steps

    1. 1

      Extract the numbers

      One number and one quote per story.

      Product Marketing & Content Associate 2 days

    2. 2

      Fill gaps

      Ask customers without numbers for one.

      Head of Product and Solutions Marketing 3 weeks

    3. 3

      Build the page

      Crawlable cards with schema.

      Growth Engineer 3 days

    4. 4

      Give AEs a version

      Searchable by industry and use case in the CRM.

      Growth Engineer 2 days

    5. 5

      Use in the newsletter

      One proof card per issue.

      Product Marketing & Content Associate monthly

    6. 6

      Refresh quarterly

      Add new stories and update numbers.

      Product Marketing & Content Associate quarterly

    First result
    6 weeks
    Cost
    $0
    Owner
    Product Marketing & Content Associate

    Smallest test

    Make cards for the four homepage customers first.

    Why it works

    Turn each story into a structured card (customer, industry, number, quote, before and after), publish them as a crawlable library page, and give AEs a searchable version by industry and use case.

    The content associate is asked to support sales plays and the Growth Engineer to make proof points crawlable. One library serves both, plus analyst relations.

    Risks and how to handle them

    • Customers dislike being quoted out of context

      Each card links to the full story and is approved by the customer.

    Builds on

    Evidence

    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
    • HiringGrowth Engineer: own the AI-native GTM stack, codify best-fit customer profile scoring "into documented, version-controlled infrastructure", deploy AI for enrichment, scoring, routing and outbound, "Own AEO technical execution: schema, client-side rendering fixes, crawlability of proof points", and fix "competitor mis-tagging"; Common Room, HockeyStack and RB2B class tools.Source
  • 12

    The content associate is asked for "inventive campaigns (polls, bracket-style games) that make a technical category feel alive". Access mistakes (the forgotten admin, the agent with a production key) are universal and funny to the people who clean them up.

    Medium impactLow effort First result in March Product Marketing & Content A…

    First action

    List 16 access mistakes from support and field engineering stories (anonymized).

    How to measure it

    Guide downloads during the bracket

    Now
    –
    Target
    500
    By
    end of March

    Steps

    1. 1

      Collect mistakes

      16 anonymized stories from the field team.

      VP of Field Engineering 2 hours

    2. 2

      Design the bracket

      Daily polls on LinkedIn and X.

      Product Marketing & Content Associate 2 days

    3. 3

      Make short videos

      One per round, under 45 seconds.

      Product Marketing & Content Associate 1 week

    4. 4

      Line up voters

      Customers and partners share round one.

      Product Marketing & Content Associate 1 week

    5. 5

      Run it

      Daily posts through March.

      Product Marketing & Content Associate 30 minutes a day

    6. 6

      Close with the fix

      Final post on prevention and the guide.

      Head of Product and Solutions Marketing 1 day

    First result
    March
    Cost
    $0 to $2,000
    Owner
    Product Marketing & Content Associate

    Smallest test

    One poll this week: which access mistake is worst.

    Why it works

    Run a 16-entry LinkedIn and X bracket in March, one vote a day, with short videos for each round and a final post on how to prevent the winner, linking to the least-privilege guide.

    It builds reach with IAM and security practitioners cheaply and gives the newsletter and video channels a month of material.

    Risks and how to handle them

    • A story is recognizable

      Change details and get approval from the source.

    Evidence

    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
    • Your websiteResource center and launches: "Identity governance report 2026: AI access", "Real-world guide to least privilege", user access review and Opal Zero webinars, a Paladin demo, Paladin announced at RSAC 2026, and a blog post on Okta Cross App Access.Source
  • 13

    Opal has written about Okta Cross App Access and integrates with Okta, Entra, Databricks, Snowflake and the Anthropic Platform. The field post ties partner events to a "channel pipeline goal", and most Opal customers already run Okta.

    High impactMedium effort First result in 1 quarter Senior Field Marketing Manager

    First action

    Ask Opal's Okta partner contact about a joint webinar slot.

    How to measure it

    Partner-influenced pipeline

    Now
    –
    Target
    set with sales leadership
    By
    end of next quarter

    Steps

    1. 1

      Pick partners

      Okta first, then one data platform.

      VP of Marketing 1 week

    2. 2

      Pitch a joint session

      Agent access through Cross App Access.

      Senior Field Marketing Manager 2 weeks

    3. 3

      Write a solution brief

      How Opal and the partner work together.

      Head of Product and Solutions Marketing 1 week

    4. 4

      Run the webinar

      With a shared customer if possible.

      Senior Manager, Demand Generation 4 weeks

    5. 5

      Regional event

      Co-branded dinner in one AE region.

      Senior Field Marketing Manager 6 weeks

    6. 6

      Track

      Partner-tagged opportunities.

      Growth Engineer ongoing

    First result
    1 quarter
    Cost
    $5,000 to $15,000
    Owner
    Senior Field Marketing Manager

    Smallest test

    One joint blog post with an Okta product manager.

    Why it works

    Propose a joint webinar and regional event with Okta on governing agent access through Cross App Access, and a listing or solution brief in Okta's ecosystem; repeat with one data platform partner (Databricks or Snowflake).

    Partners bring audiences that already have the problem, and partner-sourced deals tend to close faster. It also positions Opal as the governance layer on top of the identity provider, not a rival to it.

    Risks and how to handle them

    • Partner competes in governance

      Focus on the integration story and shared customers.

    Evidence

    • Your websiteResource center and launches: "Identity governance report 2026: AI access", "Real-world guide to least privilege", user access review and Opal Zero webinars, a Paladin demo, Paladin announced at RSAC 2026, and a blog post on Okta Cross App Access.Source
    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
  • 14

    The Growth Engineer is asked to deploy AI for enrichment, scoring and routing with Common Room, HockeyStack and RB2B class tools. With five regional AEs and one BDR, a target-account visit to /zero or a comparison page is only useful if it reaches the right person quickly.

    High impactMedium effort First result in 4 weeks Growth Engineer

    First action

    Install account identification and measure how many target-account visits happen each week.

    How to measure it

    Meetings from routed visits

    Now
    –
    Target
    10 a month
    By
    8 weeks

    Steps

    1. 1

      Identify accounts

      Install the visitor identification tool.

      Growth Engineer 1 day

    2. 2

      Define high-intent pages

      Comparisons, /zero, template, customers.

      Senior Manager, Demand Generation 1 hour

    3. 3

      Score and route

      Best-fit customer profile score plus page intent to the regional owner.

      Growth Engineer 1 week

    4. 4

      Write openers

      Suggested first line per page type.

      Business Development Representative 1 day

    5. 5

      Set an SLA

      Response within one business hour.

      Enterprise Account Executives 30 minutes

    6. 6

      Review

      Which signals lead to meetings.

      Growth Engineer weekly

    First result
    4 weeks
    Cost
    Tool subscription
    Owner
    Growth Engineer

    Smallest test

    Route only comparison-page visits for two weeks.

    Why it works

    Identify visiting accounts, score them against the best-fit customer profile, and route high-fit visits (pricing-like pages, comparisons, Opal Zero, the inventory template) to the regional AE or BDR in Slack with the pages viewed and a suggested opener.

    It turns a low-traffic site into a high-signal one: every visit from a target account becomes a timely reason to reach out.

    Risks and how to handle them

    • Outreach based on visits feels intrusive

      Lead with something useful (the template, a story) rather than "I saw you visited".

    Builds on

    Evidence

    • HiringGrowth Engineer: own the AI-native GTM stack, codify best-fit customer profile scoring "into documented, version-controlled infrastructure", deploy AI for enrichment, scoring, routing and outbound, "Own AEO technical execution: schema, client-side rendering fixes, crawlability of proof points", and fix "competitor mis-tagging"; Common Room, HockeyStack and RB2B class tools.Source
    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
    • programmable.infoSite scan: built on Framer; three comparison pages (SailPoint, Oasis, Clutch); 138 blog posts, 17 customer stories and event pages for Black Hat USA 2026, RSA Conference 2026, IANS forums and several Cyber Security Summits; Tranco rank about 918,000.Source
  • 15

    Opal was named to Rising in Cyber 2026 by 150 CISOs and has a rebuilt leadership team, but enterprise buyers in a sales-led motion check analyst coverage before shortlisting. The content associate role includes supporting analyst relations.

    High impactMedium effort First result in 2 quarters Head of Product and Solutions…

    First action

    List the analysts covering identity governance and non-human identity, and the next research deadlines.

    How to measure it

    Analyst reports naming Opal

    Now
    –
    Target
    2
    By
    2 quarters

    Steps

    1. 1

      Map analysts

      Who covers IGA, PAM and non-human identity.

      Product Marketing & Content Associate 2 days

    2. 2

      Build the briefing

      Product, customers, roadmap, proof library.

      Head of Product and Solutions Marketing 1 week

    3. 3

      Book briefings

      CEO and CPO present.

      Head of Product and Solutions Marketing 1 month

    4. 4

      Line up references

      Three customers willing to speak.

      VP of Field Engineering 2 weeks

    5. 5

      Submit for reports

      Market guides and landscapes.

      Head of Product and Solutions Marketing per deadline

    6. 6

      Use the results

      AEs and the site cite any inclusion.

      Product Marketing & Content Associate ongoing

    First result
    2 quarters
    Cost
    $0 to analyst subscription costs
    Owner
    Head of Product and Solutions Marketing

    Smallest test

    One briefing with the analyst who covers non-human identity.

    Why it works

    Brief the identity analysts at the major firms on Opal Zero and Paladin with customer evidence, submit for relevant market guides and vendor landscapes, and offer customer references.

    Analyst inclusion shortens enterprise evaluations and gives AEs third-party validation against larger rivals such as SailPoint and Saviynt.

    Risks and how to handle them

    • Paid analyst relationships are expensive

      Start with free vendor briefings.

    Builds on

    Evidence

    • HiringJob posts: named to Notable Capital's Rising in Cyber 2026 list "by 150 leading CISOs"; customers include Databricks, Notion, CoreWeave and Superhuman.Source
    • Your websiteJune 4, 2026: $23M led by Greylock and Battery Ventures, bringing total funding to $59M; CEO Howard Ting arrived in December 2025; new CPO Sameer Mehta (from Veza), CTO Alex Pien, VP of Field Engineering John Clark, VP of Marketing Michael Kwon and Head of Product and Solutions Marketing Christine Ooley. "More than 60% of Opal's team has joined since the start of 2026." (Wellfound's sidebar still shows $32M; the press release figure is used.)Source
    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
    • Search resultsCompetitors: ConductorOne raised a $79M Series B (October 2025, over $100M total) and markets a multi-agent identity security platform; Veza is reported at about $110M raised; Saviynt raised $700M in January 2026; Lumos publishes "ConductorOne competitors" comparison pages.Source

Big bets 4

Larger plays that can change the trajectory.

  • 16

    Buyers cannot see their agent and standing-access problem until someone shows them, and today the only way to see Opal is a demo. Chronosphere cut standing access by 88%; most prospects do not know their starting number.

    High impactHigh effort First result in 2 quarters VP of Field Engineering

    First action

    Define the minimum read-only permissions for Okta and GitHub and what the report must show.

    How to measure it

    Opportunities from scans

    Now
    –
    Target
    30% of target-account scans
    By
    2 quarters after launch

    Steps

    1. 1

      Define scope

      Read-only permissions and the report fields.

      CPO 2 weeks

    2. 2

      Security review

      Data handling, retention and deletion.

      Security & Compliance Lead 2 weeks

    3. 3

      Build the scan

      Okta and GitHub first.

      VP of Field Engineering 6 weeks

    4. 4

      Design the report

      One page a CISO can forward.

      Head of Product and Solutions Marketing 2 weeks

    5. 5

      Route results

      Every scan goes to the regional AE.

      Growth Engineer 1 week

    6. 6

      Launch

      At RSA 2027 with a live scan station.

      Senior Field Marketing Manager 1 day

    First result
    2 quarters
    Cost
    About a quarter of engineering
    Owner
    VP of Field Engineering

    Smallest test

    Run the scan by hand with field engineering for ten prospects.

    Why it works

    Offer a read-only scan: connect Okta and GitHub, see how many agents and service accounts exist, how much access is standing, and the riskiest paths, with a report to share internally and a call with field engineering.

    The scan produces a number that starts the business case, generates qualified pipeline for the regional AEs, and lets marketing grow beyond events and ABM.

    Risks and how to handle them

    • Security teams hesitate to connect a vendor

      Read-only scopes, published data handling, automatic deletion.

    Evidence

    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source
  • 17

    Opal already published an identity governance report on AI access and sees requests like Databricks' 86K just-in-time grants. Aggregate data on how agents request and hold access is something no survey-based report can show.

    High impactHigh effort First result in Launch quarter Head of Product and Solutions…

    First action

    Ask the CTO which metrics can be aggregated across customers under existing agreements.

    How to measure it

    Pipeline influenced by the report

    Now
    –
    Target
    set with sales leadership
    By
    2 quarters after launch

    Steps

    1. 1

      Check agreements

      What aggregated data customers allow.

      Security & Compliance Lead 2 weeks

    2. 2

      Pick five questions

      What CISOs argue about.

      Head of Product and Solutions Marketing 1 week

    3. 3

      Analyze

      Aggregate with a minimum customer count per figure.

      CTO 4 weeks

    4. 4

      Write and design

      Twenty pages, one chart per finding.

      Product Marketing & Content Associate 4 weeks

    5. 5

      Brief press

      Embargoed briefings before RSA.

      Head of Product and Solutions Marketing 2 weeks

    6. 6

      Cut into content

      A quarter of posts, clips and webinars.

      Product Marketing & Content Associate ongoing

    First result
    Launch quarter
    Cost
    $10,000 to $20,000 design and launch
    Owner
    Head of Product and Solutions Marketing

    Smallest test

    Publish one finding as a blog post.

    Why it works

    Publish an annual report from anonymized, aggregated platform data (agents per employee, standing versus just-in-time access, review times, most-requested systems), launched at RSA with customer CISOs on stage.

    Original data earns press, analyst citations and AI-answer mentions, and gives every channel (dinners, ABM, newsletter) a year of material that positions Opal as the leader in agentic identity.

    Risks and how to handle them

    • Customer data concerns

      Aggregate only, with a minimum count per figure, and tell customers in advance.

    Evidence

    • Your websiteResource center and launches: "Identity governance report 2026: AI access", "Real-world guide to least privilege", user access review and Opal Zero webinars, a Paladin demo, Paladin announced at RSAC 2026, and a blog post on Okta Cross App Access.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source
    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
  • 18

    The field post mentions channel partners and a channel pipeline goal, and regional enterprise selling in five territories is easier with local partners who already advise CISOs.

    High impactHigh effort First result in 2 quarters VP of Marketing

    First action

    List the consultancies and resellers that appeared in the last 12 months of deals.

    How to measure it

    Share of new pipeline from partners

    Now
    –
    Target
    20%
    By
    3 quarters

    Steps

    1. 1

      Find existing partners

      From closed and open deals.

      Growth Engineer 1 week

    2. 2

      Design the program

      Deal registration, margins, enablement.

      VP of Marketing 1 month

    3. 3

      Recruit ten partners

      Two per region.

      Enterprise Account Executives 1 quarter

    4. 4

      Enable them

      Training and the proof library.

      VP of Field Engineering ongoing

    5. 5

      Run joint events

      One per region.

      Senior Field Marketing Manager ongoing

    6. 6

      Report

      Partner pipeline monthly.

      Growth Engineer monthly

    First result
    2 quarters
    Cost
    Partner margins and enablement
    Owner
    VP of Marketing

    Smallest test

    Sign one partner in one region.

    Why it works

    Launch a partner program for identity consultancies and security resellers: deal registration, margins, a partner version of the agent access scan, and joint events in each AE region.

    Partners extend the reach of a small team into regions and accounts it cannot cover directly, and identity consultancies are often in the room when governance tools are chosen.

    Risks and how to handle them

    • Channel conflict with direct AEs

      Clear deal registration and shared credit.

    Builds on

    Evidence

    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • HiringCareers page: 21 open roles (Sales 8, Engineering 6, Marketing 4, Field 1, Operations 1), including Enterprise Account Executives for the Southeast, Midwest, Southern California, East Coast and Bay Area, a Business Development Representative, a Solutions Engineer, a Strategic Customer Success Manager and a Forward Deployed Engineer.Source
    • Search resultsCompetitors: ConductorOne raised a $79M Series B (October 2025, over $100M total) and markets a multi-agent identity security platform; Veza is reported at about $110M raised; Saviynt raised $700M in January 2026; Lumos publishes "ConductorOne competitors" comparison pages.Source
  • 19

    The field post sets the goal: every CISO leaves thinking "Opal is the leader in agentic identity". Categories are won by whoever defines how to measure progress in them.

    High impactHigh effort First result in 1 quarter VP of Marketing

    First action

    Draft the five levels with the CPO and two customer security leaders.

    How to measure it

    Assessments by target accounts

    Now
    –
    Target
    300
    By
    2 quarters

    Steps

    1. 1

      Draft the model

      Five levels with observable criteria.

      CPO 2 weeks

    2. 2

      Test with customers

      Two security leaders review it.

      Head of Product and Solutions Marketing 2 weeks

    3. 3

      Build the assessment

      Ten questions, a score, a report.

      Growth Engineer 3 weeks

    4. 4

      Publish openly

      Free to use and cite.

      Product Marketing & Content Associate 1 week

    5. 5

      Use it everywhere

      Dinners, ABM plays, scans.

      Senior Manager, Demand Generation ongoing

    6. 6

      Publish benchmarks

      Once 200 companies have scored.

      Head of Product and Solutions Marketing 1 quarter

    First result
    1 quarter
    Cost
    About a month of work
    Owner
    VP of Marketing

    Smallest test

    Use the draft levels in the next three dinners.

    Why it works

    Publish an open Agent Access Maturity Model (five levels from "no inventory" to "just-in-time by policy"), a self-assessment tool that scores a company, and peer benchmarks once enough companies take it.

    It gives every channel a shared language, a reason to follow up ("you are at level 2"), and a resource analysts and AI answers can cite.

    Risks and how to handle them

    • Competitors publish their own models

      Be first and keep it vendor-neutral.

    Builds on

    Evidence

    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source

Wildcards 3

Unexpected experiments, each with a cheap way to test it.

  • 20

    OpalScript writes access workflows as code. Platform engineers, one of the buyer groups in the demand gen post, look for working examples before they evaluate a tool.

    Medium impactMedium effort First result in 2 months CTO

    First action

    Collect the ten policies field engineering writes most often for customers.

    How to measure it

    Demo requests from GitHub

    Now
    –
    Target
    10
    By
    2 quarters

    Steps

    1. 1

      Collect policies

      Ten common ones, anonymized.

      VP of Field Engineering 1 week

    2. 2

      Clean and test

      Each policy with a test.

      CTO 2 weeks

    3. 3

      Write the README

      What each policy does and when to use it.

      Product Marketing & Content Associate 2 days

    4. 4

      Publish

      Permissive license.

      CTO 1 day

    5. 5

      Announce

      Blog, newsletter and practitioner communities.

      Product Marketing & Content Associate 1 day

    6. 6

      Accept contributions

      Review PRs monthly.

      CTO monthly

    First result
    2 months
    Cost
    About three weeks of engineering
    Owner
    CTO

    Smallest test

    Publish five policies and measure interest.

    Why it works

    Publish a GitHub repo of common policies (just-in-time production access, contractor offboarding, agent access with an accountable owner, quarterly review rules) with tests and a README that links to a demo.

    It reaches technical evaluators where they already search, earns links, and gives field engineering ready examples for proofs of concept.

    Risks and how to handle them

    • Exposing implementation details

      Publish policies, not product internals.

    Evidence

    • Your websiteHomepage: "Your agents ask for access faster than anyone can answer. Opal Zero answers." Opal is "the access control plane for every identity"; products Opal Zero (launch offer $30k for the first year), OpalQuery, OpalScript and the Paladin agent; 60+ integrations including Okta, Entra ID, AWS, GitHub, Snowflake, Databricks, OpenAI, Anthropic Platform, Cursor and Devin. The only call to action is "Book a demo"; no trial or pricing.Source
    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source
    • HiringGrowth Engineer: own the AI-native GTM stack, codify best-fit customer profile scoring "into documented, version-controlled infrastructure", deploy AI for enrichment, scoring, routing and outbound, "Own AEO technical execution: schema, client-side rendering fixes, crawlability of proof points", and fix "competitor mis-tagging"; Common Room, HockeyStack and RB2B class tools.Source
  • 21

    The Opal Zero page is built around an auditor's evidence request. Audit firms and compliance automation platforms see every company facing that request, months before the audit.

    High impactMedium effort First result in 1 quarter Senior Manager

    First action

    Ask two audit partners whether they have started asking clients about AI agent access.

    How to measure it

    Opportunities from audit partners

    Now
    –
    Target
    15
    By
    2 quarters

    Steps

    1. 1

      Talk to auditors

      What evidence they want for agents.

      Security & Compliance Lead 2 weeks

    2. 2

      Design the export

      Matching the auditor's format.

      CPO 3 weeks

    3. 3

      Co-write a guide

      For auditors and GRC leads.

      Product Marketing & Content Associate 3 weeks

    4. 4

      Pitch platforms

      Compliance automation integrations.

      Senior Manager, Demand Generation 1 month

    5. 5

      Joint webinars

      For their customers before audit season.

      Senior Manager, Demand Generation quarterly

    6. 6

      Track

      Partner-tagged opportunities.

      Growth Engineer ongoing

    First result
    1 quarter
    Cost
    $0 to $10,000
    Owner
    Senior Manager, Demand Generation

    Smallest test

    One joint webinar with one audit firm.

    Why it works

    Offer audit firms and compliance platforms an evidence export format for agent and user access, co-write a guide for auditors, and run joint webinars for their customers preparing for audits.

    It reaches GRC leaders at the moment of regulatory pressure that the demand gen post targets, through partners they already trust.

    Risks and how to handle them

    • Auditor independence rules limit endorsements

      Frame it as education and data format, not endorsement.

    Builds on

    Evidence

    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source
    • HiringSenior Manager, Demand Generation: "Our go to market is a commercial sales-led motion"; 1:1 and 1:few ABM "segmented by regulatory pressure, cloud maturity, access complexity, and sales priority"; webinars, executive roundtables, paid amplification, partner campaigns and SDR sequences; buyers are IAM, security, infrastructure, platform engineering and GRC leaders in cloud-native organizations "scaling into regulatory scrutiny" that need to "prove least privilege" and "reduce access review fatigue".Source
    • HiringSenior Field Marketing Manager: "Events at Opal are a pipeline channel, not a hospitality function"; know "what a dinner cost per opportunity and which conference we should never do again"; "You'll inherit no calendar, no vendor list, and no precedent"; own dinners, booths, CFP submissions ("our technical speakers as a critical asset") and partner co-branded events "tied to the channel pipeline goal"; the goal is that a CISO leaves thinking "Opal is the leader in agentic identity".Source
  • 22

    The content associate role includes a podcast, influencers and newsletter sponsorships. IAM engineers have few places to compare notes on governing AI agents, and Opal's customers (Faire, Databricks, Superhuman) are already working on it.

    Medium impactMedium effort First result in 1 quarter Product Marketing & Content A…

    First action

    Invite the three Opal Zero design-partner quote givers as the first guests.

    How to measure it

    Target-account members

    Now
    –
    Target
    100
    By
    2 quarters

    Steps

    1. 1

      Book first guests

      Design partners from Faire, Databricks and Superhuman.

      Product Marketing & Content Associate 2 weeks

    2. 2

      Set the format

      30 minutes, one practical topic.

      Product Marketing & Content Associate 1 day

    3. 3

      Start the community

      Invite-only Slack for practitioners.

      Product Marketing & Content Associate 1 week

    4. 4

      Publish monthly

      Audio, video and clips.

      Product Marketing & Content Associate monthly

    5. 5

      Invite from target accounts

      Through the regional AEs.

      Enterprise Account Executives ongoing

    6. 6

      Measure

      Members, listens and influenced pipeline.

      Growth Engineer monthly

    First result
    1 quarter
    Cost
    $1,000 to $3,000 a month
    Owner
    Product Marketing & Content Associate

    Smallest test

    Record one episode with a design partner.

    Why it works

    Run a small invite-only community and a monthly podcast with customer and non-customer practitioners on how they govern agent access, with episodes cut into short video for LinkedIn and YouTube.

    Practitioners trust each other more than vendors, and each guest brings their own network. It feeds the newsletter, social and short-form video the role already owns.

    Risks and how to handle them

    • Community feels like a sales channel

      No pitches; vendors other than Opal welcome as guests.

    Evidence

    • HiringProduct Marketing & Content Associate: build an AI-powered content engine; own social "end to end" including "inventive campaigns (polls, bracket-style games)"; short-form video for LinkedIn, X and YouTube; the monthly newsletter and SEO/AEO; about one contributed article a month; analyst relations support; podcast, newsletter sponsorships and influencers; competitive one-pagers and click-through demos.Source
    • Your websiteOpal Zero page: the problem is shown as a SOC 2 Type II evidence request for "a complete list of every AI agent with access to financial data or PII" with owner, purpose, resources and last review date; design-partner quotes from Faire, Databricks and Superhuman.Source
    • Your websiteCustomer proof on the homepage: 88% reduction in standing access (Chronosphere), 86K just-in-time access requests (Databricks), 150+ apps under governance (Superhuman), 5,353 Okta entitlements (Mercari); Elastic's CISO, Mandy Andress: "Opal helps us protect more of our attack surface, with a small but mighty team." The site has 17 customer stories, including Notion, Verily, Rakuten and Match Group.Source

03

How Programmable can help

Where an idea in this playbook is something Programmable builds or runs, it's listed here with what we'd do. Everything else is yours to run.

Have it built

ProgrammableAgency

2 of the 22 ideas are things Programmable builds and runs for its customers: pages, outreach, prospect lists, booking flows and monitors. Pick one, or send the whole list.

Prospect lists2The list compiled from public sources, verified, deduplicated and delivered to your CRM.

A 30-minute session with the engineer who would build it, not a sales call. You leave with a plan whether or not you hire us.

Book a working session

Usually live within days.

Tools for the rest

ProgrammableInfo

Turn the research into a list you can act on

These ideas start with finding the right companies. Info finds them and the right person at each, researches every one and drafts the outreach, then asks before it sends.

  • Build this list in Info for idea #6 (opens programmable.info in a new tab)
  • Build this list in Info for idea #10 (opens programmable.info in a new tab)

New accounts: 100,000 free credits with code BETA100K

Find the companies (opens programmable.info in a new tab)
ProgrammableTalk

Fill the events in this plan

These ideas are events. Talk gets registrants for them and tells you who's coming and what their company does before the day.

Plan an event (opens programmable.talk in a new tab)
More example playbooks and reviews

More growth playbooks

Other companies we have researched, each read from what they are hiring for.

  • ettitude growth strategyA sustainable bedding and home brand selling sheets, duvet covers, pillowcases, towels, robes and blankets made from its patented…22 growth ideas
  • The Weather Company growth strategyThe company behind The Weather Channel, weather.com, Weather Underground and Storm Radar, and a weather data, forecasting, aviation, media…21 growth ideas
  • Prophet growth strategyA global growth consultancy: growth strategy, brand building, marketing transformation, campaigns, media and experiences, and AI-driven…20 growth ideas
  • Juno growth strategyNegotiates group discounts on private student loans and refinancing for students and graduates, free to members; lenders pay Juno on…21 growth ideas
  • Liquid Compute growth strategyA financial layer for GPU compute: the Liquid Compute Index (daily reference prices for A100, H100, H200, B200 and B300), an OTC desk for…24 growth ideas
  • Scout growth strategyAn AI-native student information system (Scout SIS) with agents for enrollment, compliance, state reporting and student success, plus a…22 growth ideas
  • Zarna growth strategyAI associates for private equity and investment banking: agents that work inside Outlook and Teams to log deals, emails and meetings into…22 growth ideas
  • Softr growth strategyA no-code AI app builder for client portals and internal tools, with its own database, workflows, permissions, AI agents and an MCP.21 growth ideas

See every playbook and website review

Independent research. Programmable wrote this playbook from public sources, as they stood on October 18, 2026, and cites them throughout. Opal Security did not commission, review or endorse it, and Programmable is not affiliated with Opal Security. Company and product names are trademarks of their owners, used only to identify them. The ideas are suggestions and opinion, not professional, legal or financial advice, and not statements about how Opal Security runs its business.

Something wrong, or do you represent Opal Security? Email [email protected] and we will correct it or take it down.

30/60/90 roadmap

What to focus on in each month, and the ideas that carry it.

  1. Days 1 to 308 ideas

    Make proof readable and give sales something to use: AEO fixes, headers, comparison pages, the inventory template, territory kits and a dated Opal Zero offer, plus the event review.

    Programmable can ship 2 of these in days.

  2. Days 31 to 607 ideas

    Build the engines the new hires own: ABM by regulatory pressure, signal routing, the proof library, CFPs and the Okta partnership, with the audit-partner and open-source tests.

  3. Days 61 to 907 ideas

    Category and reach: analyst relations, the bracket, the practitioner community, and scoping the scan, the report, the channel program and the maturity model.

The research behind the plan

3 research areas, each summarised in a few lines. Open any of them for the full detail.

Customers

What customers say

Customers value less standing access without slowing engineers. The most cited problem: access review fatigue.

  • Just-in-time access at scale (Databricks: 86K requests)
  • Proving least privilege to auditors
  • In their words: “least privilege”

Market

Competitive landscape

4 competitors compared: ConductorOne, Veza, SailPoint and Saviynt and Lumos.

  • Gap to exploit: Agent access evidence auditors will accept
  • ConductorOne: Broad platform pitch
  • Veza: Less focus on just-in-time workflows

Hiring signals

Opal has 21 open roles (Sales 8, Engineering 6, Marketing 4) and a leadership team rebuilt in 2026.

  • Enterprise Account Executives (five regions): Regional enterprise selling in the Southeast, Midwest, Southern California, East Coast and Bay Area…
  • Senior Field Marketing Manager: Events as a pipeline channel, judged on cost per opportunity, with technical speakers and partner events. Ideas 7…
  • Senior Manager, Demand Generation: Commercial sales-led motion: ABM segmented by regulatory pressure, webinars, roundtables, paid amplification and…

From the team that wrote this playbook

All products
  • ProgrammableAgencyWorking AI systems in days, not quarters (opens programmable.agency in a new tab)
  • ProgrammableInfoAn agent that finds, researches and asks first (opens programmable.info in a new tab)
  • ProgrammableDigitalScreenshots in, an animated product demo out (opens programmable.digital in a new tab)
  • ProgrammableWatchKnow the day a supplier falls out of compliance (opens programmable.watch in a new tab)
  • ProgrammableTalkGet registrants for your events, and know who’s coming (opens programmable.talk in a new tab)
  • ProgrammablePageText what you need, your customer gets a page that works (opens programmable.page in a new tab)
  • ProgrammableCommunityForums with labelled AI members, never empty (opens programmable.community in a new tab)
ProgrammableMarketing
ExamplesLeaderboardsProductsTermsPrivacyCookiesDPALegalContact

© 2026 AI-Powered Growth Intelligence