SMSMBs.com
Sales + Outreach

How to find decision-makers at any company (free + paid)

The 2026 playbook for getting from a company name to the right inbox — fast, ethically, and without a $5,000/year tool.

Neil Brookes Updated 2026-06 7 min read

The job to be done

You have a target company. You need the email of a specific decision-maker — a VP of Engineering, a Head of Marketing, the COO. You need it in under five minutes. You'd rather not pay $99/month to a tool you'll touch twice. Here's how to do it in 2026.

Every approach below assumes you're sending B2B outreach to a person in their professional capacity. None of this works for finding personal phones or home addresses, and that's the whole point — public business contacts get you to "we should talk" while keeping you on the right side of GDPR, CAN-SPAM, CASL, and PECR.

Step 1 — Find the company on SMBs.com

Start with the free path. SMBs.com indexes 390k+ companies worldwide. Search by name, or browse by city + industry to discover companies that look like your ideal customer.

Each listing shows employee band, location, website, LinkedIn, and the number of decision-makers we've identified at that company. Click "N contacts" → sign in (free, 3 unlocks/day) → get the names, titles, and verified work emails of the people you should be talking to. Ranked C-suite first.

Step 2 — Cross-check on LinkedIn (always)

Once you have a name, validate on LinkedIn before sending. Apollo, ZoomInfo, and every B2B database lag reality by 6-18 months. People leave jobs. Titles change. Companies restructure. A 30-second LinkedIn check saves you from a "Hi Sarah, I noticed you're Head of Sales at Acme" email when Sarah moved to Beta Corp eight months ago.

Free LinkedIn search is enough for individual lookups. Don't pay for Sales Navigator until you're sending 50+ outreach messages a week.

Step 3 — Pattern-match the email if missing

About 12% of records we hold have a name + company + LinkedIn but no verified email. In that case, infer it from the company's email pattern.

Get the pattern by searching for any verifiable employee on Hunter.io free tier (50 lookups/month) or by checking the company's "Contact us" page for public emails. Common patterns:

  • first.last@company.com — most common (~45%)
  • first@company.com — startups, lifestyle businesses (~25%)
  • flast@company.com — banks, law firms, professional services (~15%)
  • first.last@subsidiary.com — large enterprises with multiple brands

Step 4 — Verify before you send

Sending to a bad email tanks your domain reputation, fast. Always verify, even if the source claims "verified." Use any of NeverBounce, DeBounce, ZeroBounce, or Apollo's built-in verifier. Cost is ~$0.005 per email at volume.

A "valid" deliverability result isn't a 100% guarantee — catch-all domains (where the server accepts everything) score "unknown" — but it filters out the obvious bouncers.

Step 5 — Write the email so it gets a reply

You have the name, title, email. None of it matters if the email is generic. See our cold-email playbook — short answer: open with a specific, recent reason you're reaching out (not "I came across your profile"), make one ask, and keep it under 90 words.

When to pay for a tool instead

If you're sending 100+ outreach messages a week, the math changes. Apollo, ZoomInfo, and Clay all save real time at scale. For under 50/week, the SMBs.com free tier + LinkedIn + Hunter free + a verifier covers it. Above 50/week, $29/month for unlimited unlocks (our Pro plan) starts to make sense.

Frequently asked questions

Is it legal to find someone's work email this way?

In the US: yes, under CAN-SPAM, as long as your message identifies the sender, doesn't use deceptive subject lines, and provides an unsubscribe option. In the EU: B2B emails to a person at a registered business are generally permissible under "legitimate interest" of GDPR, but require an opt-out and may need consent in some jurisdictions (Germany is strictest). Always check local rules.

Do I need LinkedIn Sales Navigator?

Only above 50 outreach messages/week. Below that, free LinkedIn search + a directory tool + Hunter free tier is enough.

What's the most accurate decision-maker data source?

LinkedIn is the freshest (people update their own profiles). Apollo and ZoomInfo lag by 6-18 months. SMBs.com sources from Apollo + public registries + ongoing re-verification.

NB
Neil Brookes
Founder, SMBs.com

Building SMBs.com — the free directory of every small business worldwide. Previously: founder + operator at FIH Inc, focused on small-business M&A advisory.

Unlock contacts at any company. Free.

390,000+ companies indexed worldwide. 3 decision-maker unlocks per day on the free tier. No credit card.

Sign up free