Most small offices don't have an IT person. They have whoever set up the Wi-Fi, a shared password list and an email domain nobody has looked at since the website went live. For a managed service provider, the best opener isn't a price: it's one specific, checkable problem.
Who needs outside IT help most
- Clinics and health practices (1,232,659 in our database): patient data, practice software and, for most of them, HIPAA obligations to protect it.
- Professional offices (610,535): law, accounting, insurance and real estate offices that live in email and shared files.
- Contractors and trades (874,737): a growing office team, laptops in trucks, and invoices that are a target for fraud.
Small clinics and offices rarely have someone in-house, which is why they buy IT as a monthly service.
Signals you can check from the outside
All of these are public and take a minute to look up, and none of them involve scanning anyone's systems:
- Email provider: a domain's mail (MX) records show whether it uses Microsoft 365, Google Workspace or a hosting company's mail. Hosting-company mail often means nobody has moved them to a business platform.
- SPF and DMARC: a domain with no DMARC record is easy to spoof, so a fake invoice "from" the business looks real. This is the strongest opener: specific, true, and a 20-minute fix.
- The website: no HTTPS, an old copyright year or an outdated platform suggests nobody is maintaining anything.
- A free email address: a business whose listed email is @gmail.com or @yahoo.com has probably never had IT set up.
An opener that works
Say what you found, why it matters to them, and the smallest next step:
- "I noticed yourbusiness.com has no DMARC record, which makes it easy for someone to send invoices that look like they came from you."
- "It's about a 20-minute fix. Happy to send you the steps, no strings."
Giving away the fix builds trust; the monthly contract comes from the conversation that follows. Avoid scare tactics and claims you can't back up, and never say you "scanned" or "tested" anything you didn't.
Timing
- New businesses: setting up email and devices for the first time. Reach them before they've settled on a nephew's setup.
- Growing offices: a second location, new hires or a new licence means more devices and accounts.
- After a scare: a business that just had an email account compromised is ready to talk, though you'll rarely know that from outside.
How we help
BeatTheDoor checks each business's website and its email setup (provider, SPF and DMARC) from public records, names the owner where records show it, and writes to them from your own domain with the specific gap you can fix. See leads for IT services companies, or book a 15-minute demo.
Counts from our database on October 9, 2026.