← All guides

How to find clients for an IT consulting business

The short answer

Nobody changes IT provider because a better one wrote to them. They change when the arrangement they have stops working: the internal person leaves, a compliance deadline lands, two companies merge, or something goes down badly enough to be discussed at board level.

That makes this a waiting game played well rather than a persuasion game played hard. The consultancies that stay full are the ones already known to a company on the week its situation changes.

The good news is that most of those changes are visible from outside, and one of them, the in-house IT person leaving, is advertised publicly by the company itself.

Find your next 10 clients, free →

10 leads, no card. You approve every lead and every message before anything sends.

Who signs, and why the technical case rarely decides it

Under about fifty staff there is no IT function, so it is the owner or the finance director, and they are buying the end of a problem they do not want to think about. The technical detail actively hurts you here. What they want to hear is that it stops being their concern.

Between fifty and a few hundred there is usually one overworked IT manager, and they are the most misread buyer in this trade. Consultancies pitch them as though they are the obstacle. They are not. They are drowning, and the right offer takes the worst part of their week away without implying they were failing.

Above that, procurement gets involved and the sale becomes about risk: references, certifications, insurance, exit terms. The best technical answer loses to the safest supplier at this size, reliably, and being annoyed about that does not change it.

The five channels, in the order they pay

Ranked for a consultancy or MSP of a few people, without a vendor badge that opens doors on its own.

  1. The in-house IT person leaving

    Highest intent signal in the trade, and it is published

    A company advertising for a sysadmin, IT manager or head of IT is telling you, publicly and with a date, that the person holding everything together is going or gone.

    What follows is predictable. Nothing is documented. Nobody knows which licences renew when. The role takes three months to fill and another three to become useful, and in the meantime the finance director is fielding questions about a backup nobody has tested.

    That is a co-managed engagement waiting to happen, and it is far easier to sell than a full outsource, because it does not require anyone to admit a mistake. You are covering a gap, not replacing a decision.

    The window is narrow. Once the replacement is in and settled the door closes for a year or two, so this channel needs checking weekly rather than quarterly.

  2. Compliance and regulatory deadlines

    A real deadline, which is rare and valuable

    Most IT spending can be postponed forever. Compliance spending cannot, because somebody external has set the date.

    In Europe that currently means NIS2 for in-scope sectors, DORA in financial services, ISO 27001 where a customer is demanding it, and the security questionnaires that now arrive with every enterprise contract. Any of these turns a vague intention into a funded project with an owner.

    The most reliable version is second-hand: a company that has just won a large customer and been handed a security questionnaire it cannot answer. That is an urgent, specific, well-funded problem with a name on it.

    The discipline this channel needs is honesty. If you are not genuinely competent on the framework, say so and refer it. Overclaiming here is found out during the audit, which is the worst possible moment and a small market to be found out in.

  3. Vertical depth, especially regulated ones

    Slow to build, extremely hard to compete with

    A generalist MSP competes on price and response time, both of which are easy to undercut. An MSP that knows how a dental practice handles patient data, or what a law firm's insurer requires, or what an architecture practice does with enormous files, competes with almost nobody.

    Regulated verticals are best because the compliance requirement does the selling for you and the switching cost is genuinely high once you are embedded.

    It also transforms the outreach problem. You stop needing something clever to say to each stranger, because the thing that is true of all of them is specific enough to lead with.

    The cost is that you will turn work down for a year before the referral loop inside the vertical starts running. Most firms quit before that.

  4. Growth, moves and mergers

    Earlier than the pain, lower hit rate

    An office move means a new network. Rapid headcount growth means the setup that worked for thirty is failing at ninety. A merger means two of everything and a deadline to reconcile them.

    These get you in before the crisis, which means less competition, but also before anyone has agreed a budget. Expect a longer path and write a different email: shorter, less certain, and explicitly early.

    A second site is the most reliable of the three, because connectivity between offices is a problem the company cannot pretend is not there.

  5. Vendors, accountants and the trades near you

    High trust, low volume, worth setting up once

    Software resellers, telecoms providers, accountants and bookkeepers all sit next to companies with IT problems and none of them wants to solve one.

    Accountants are the underrated one. They see the finance system, the payroll, and the invoices for whatever the current arrangement is, and they get asked "do you know anyone for IT" more often than any vendor does.

    It is fifth because it does not scale and it is not under your control. Set it up, then go back to the first three.

The signals worth watching

All public, all dated, and none of them requiring intent data. The dates matter more here than in most trades, because IT buying windows shut hard.

A job ad for a sysadmin, IT manager or head of IT
The person holding it together is leaving. The single highest-intent signal in this trade, and the company publishes it itself.
A job ad naming a specific legacy system
It tells you the stack before you speak to anyone. An ad asking for on-premise Exchange or an unsupported ERP is a migration project describing itself.
A compliance deadline in their sector
NIS2, DORA, or a customer demanding ISO 27001. Somebody external set the date, so the spend cannot be postponed the way IT spend usually is.
A merger, acquisition or new parent company
Two of everything and a deadline to reconcile them. Large, urgent, and nobody internal wants to own it.
A second office, or a move
A new network and connectivity between sites. A problem the company cannot quietly ignore.
Headcount growing fast
What worked at thirty people breaks at ninety, usually around onboarding, access control and backups, and usually all at once.

A list of companies in your area tells you who might need you one day. A signal tells you whose arrangement just broke, and only one of those has a budget this quarter.

The same signals, written as searches

This is what you would actually type into Wisemation. Not filters, not a technology dropdown: it reads the meaning, so describing the situation works better than describing the record. Each one below turns a signal above into something you can run. Click any of them to run it on ten leads, free.

The last one is worth dwelling on. It is not a company attribute, it is something a company happened to write in a job advert, and that is the sort of thing a filter-based database cannot express at all.

What the first email actually says

The default consultancy email is a capability list. Managed services, cloud migration, cyber security, 24/7 support, certified engineers. It fails because it describes you, and because it is word for word what every competitor sends.

What works is naming the situation they are actually in and being specific enough that it could not have been sent to anyone else. Not "we help companies like yours with IT". Rather: your IT manager is leaving, here is the part of that which is about to hurt, and here is the bit of it we can take.

Then make the ask small and technical rather than commercial. Not a meeting to discuss requirements. One question, or one thing you will check for free, ideally something they already suspect is wrong.

Leave out the certifications in the first email. They matter enormously at procurement stage and they are noise before anyone cares who you are.

SubjectBefore your IT manager leaves

Hi Lars,

Saw you are hiring an IT manager. Assuming that is a replacement, the thing that usually bites is not the gap itself, it is that the licence renewals and the admin passwords tend to live in one person's head and nobody finds out which ones until something expires.

Happy to do a documented handover list with whoever is leaving, while they are still there. Two hours, no charge, and it is yours whether or not you ever use us.

Worth doing before their last day, or is it already covered?

Marta

It names a specific consequence the reader has not thought about yet, offers something genuinely useful for free, and asks a question that is easy to answer either way. No capability list, no certifications, no request for a meeting.

What this costs, done properly

All of it is doable by hand, and most consultancies do a version of it by hand, badly, in the gaps between billable work. This is what each step takes, and what is left of it when it runs itself.

Find who has a live trigger this week
By hand

Job boards for the IT roles, news for the mergers, sector press for the compliance deadlines. Redone weekly, because these windows close.

With Wisemation

You describe it in a sentence. It searches across the open web per run rather than reading a purchased database, which is what reaches the mid-market European firms a US-built list never indexed.

Work out who owns the problem
By hand

Guess between the finance director, the operations lead and the outgoing IT manager, then find an address and hope it is current.

With Wisemation

Researches each company, identifies the person, and verifies the address live before that lead counts. Dead domains, disabled mailboxes and role inboxes never reach you.

Decide who is actually a fit
By hand

Gut feel, plus a standing temptation to chase work slightly outside what you are genuinely good at because the logo is impressive.

With Wisemation

Scores each one against your brief, writes the reason it fits, and drops the rest. Leads that do not match are free and never count against your month.

Write something that names their situation
By hand

Ten minutes each if you know the sector. For eighty companies that is a week you needed for delivery, which is why the template gets sent instead.

With Wisemation

Writes the whole sequence from that research: the first email, the follow-ups, and the LinkedIn connection request and message, each written for that company rather than a template with a name in it.

Follow up across a long cycle without losing track
By hand

A spreadsheet, and the specific problem that IT sales cycles outlast the enthusiasm that created the spreadsheet.

With Wisemation

Runs from your own inbox and your own LinkedIn account, and follow-ups stop the moment somebody replies.

You approve every lead and every message before anything leaves. What stays with you is the part that closes IT work anyway: being credible on a call with somebody technical, and being the safe choice when procurement finally arrives.

What reliably does not work

Four things nearly every IT firm tries, usually before anything else.

  • Leading with the capability list

    Managed services, cloud, cyber, 24/7 support. It is identical to every competitor's opening, it describes you rather than them, and the reader has learned to skip that paragraph on sight. If the sentence is true of your competitor too, it is not doing any work.

  • Selling fear

    Ransomware statistics and breach horror stories from a stranger read as manipulation, and they insult whoever currently owns IT there. It also puts you in the same category as the genuinely predatory end of this market, which is a category you cannot easily climb out of.

  • Pitching a full outsource first

    It asks somebody to admit their current arrangement was a mistake, which is expensive in pride before it is expensive in money. Co-managed, or one project, gets you in the building. The full contract is a conversation for month nine.

  • Treating the IT manager as the obstacle

    Going over their head to the FD is how you acquire an internal enemy who will be in the room for every decision that follows. They are overworked, not obstructive, and an offer that takes the worst part of their week away is an ally for years.

What none of this will do for you

Everything in the table above is mechanical, and mechanical work is safe to hand over. The rest is not.

It starts conversations. It does not have them. Somebody still has to take a call with a technical person and be genuinely credible about their environment within the first two minutes. Nothing is faking that, and the market is small enough that trying would be remembered.

It also will not carry you past a capability you do not have. If the trigger you chase is a compliance framework you cannot actually deliver against, outreach just gets you into rooms where that becomes obvious faster. Chase the triggers you can genuinely serve, and refer the rest, which is worth more in referrals than the work was worth in fees.

Where to start with no pipeline

Take the last ten engagements that were profitable and that you would happily do again. There is almost always a vertical or a technical situation repeating in there, and that is the thing to aim at rather than the market you wish you served.

Then work one list of live triggers weekly, and one list of everyone else in the vertical twice a year. In a region that is perhaps three hundred companies, which is small enough to know properly and large enough to last several years.

Give it two quarters minimum. IT has one of the longest gaps between first contact and signature of any service, because you are usually waiting for somebody else's contract or somebody else's resignation, and the standard failure is stopping in month two.

If you want the version of this that runs itself, here is Wisemation for it consulting & managed services. Or read what it costs.

Questions people actually ask

How long is the sales cycle for managed IT?
Longer than almost anyone plans for. A co-managed project off a live trigger can close in weeks. A full managed services contract usually waits for the incumbent agreement to end, which means the honest answer is somewhere between three months and two years, and the variable is their contract date rather than your follow-up.
Is it worth targeting companies that already have an MSP?
Yes, but not to win now. Aim to be the name they already have when the incumbent misses something, because at that point they want a replacement this week rather than a procurement exercise. A short, useful, no-pitch note twice a year does that better than persistent selling, which mostly gets you filtered.
Should I specialise by technology or by industry?
Industry, if you have to choose. Technology specialisation puts you in a comparison with everyone else holding the same vendor badge. Industry specialisation, especially a regulated one, means you understand a constraint your competitors have to research, and it is the constraint that decides the purchase.
Do certifications help win the first conversation?
Barely, and they are decisive later. Nobody opens an email because you are certified, so leading with it wastes the only two lines you get. At procurement stage, particularly above two hundred staff, missing certifications will remove you from a shortlist without anyone telling you why.
Is cold outreach to IT buyers legal in Europe?
Business-to-business email to a named person at a company is generally permitted under GDPR on legitimate interest grounds, provided you identify yourself, explain why you are writing, and give a real opt-out that you honour. Some countries are stricter, Germany in particular. This is not legal advice and it is worth twenty minutes with somebody who gives it.

More guides in the series.

Ten companies whose IT situation just changed

Describe the kind of client you serve and what just changed for them, in a sentence. You will see the companies it finds, why each one fits, and the exact emails it would send, before you decide anything.

Find your next 10 clients, free →