The cold outreach playbook
Finding businesses with weak websites is the easy half. This is the other half: what to send, when to send it, and what actually turns an audit into a paying client.
Most agency outreach fails for the same three reasons. It is obviously templated, it leads with the agency rather than the prospect, and it asks for a meeting before it has demonstrated anything worth meeting about.
What follows is a sequence built around the opposite: specific evidence first, a small ask second, and a graceful exit if the answer is no. It assumes you already have a shortlist and an audit for each business on it.
Qualify before you write
Not every business with a weak website is a good prospect. Sending to all of them is how you end up with a low reply rate and a damaged sending domain.
Three signals matter more than the SEO score itself:
- Evidence they already spend on marketing. A business running Google or Meta ads has a budget and has already decided that acquiring customers is worth paying for. ppclift flags ad activity for exactly this reason.
- A problem that costs them money. No mobile viewport on a business where most searches happen on a phone is a revenue problem, not a technical one.
- Reachability. A named contact beats a generic info@ address by a wide margin.
The first email
The job of the first email is not to sell. It is to prove you looked at their business specifically, and to make replying easy.
Keep it under 120 words. Name one problem, not five. Say what it costs them in plain language, then ask a question that can be answered in one line.
Subject: quick note about the Watson Plumbing site
Hi Sarah,
I was looking at plumbers around Ballarat and noticed your site does not have a mobile viewport set, so on a phone it loads at desktop width and the phone number is very hard to tap.
Given most emergency plumbing searches happen on a phone, that is likely costing you calls. It is usually a one-line fix.
Want me to send the full list of what I found? No charge either way.
Anthony
Note what it does not do. It does not describe the agency, list services, attach a brochure, or ask for 15 minutes in the calendar. The only ask is permission to send something useful.
The follow-up sequence
Most replies come from the second and third contact, not the first. Most annoyance comes from the fifth. Three touches spread across two weeks is a reasonable balance.
- Day 1: the specific problem, as above.
- Day 4: the audit itself. Attach the PDF report. This is the highest-value message in the sequence because it gives them something they can use whether or not they hire you.
- Day 11: a short close-out. 'I will leave this here, but the report is yours to keep and any developer can action it.' A surprising share of replies arrive after this one, because it removes the pressure.
Stop after three. A fourth and fifth message converts almost nobody and materially raises your spam complaint rate, which affects delivery for every prospect after them.
Sending the audit
A branded PDF report changes the nature of the conversation. It moves you from somebody asking for attention to somebody who has already done unpaid work.
Put your own logo and contact details on it so it reads as your analysis. Lead the email with the single worst finding and let the report carry the rest.
Do not send a report you have not read. Automated findings occasionally need context, and being asked about something in your own attachment that you cannot explain undoes the credibility the report just bought you.
Pricing the first job
The gap between a free audit and a retainer is usually too wide to cross in one step. A small, fixed-price first project is far easier to say yes to.
Fixing the technical faults found in the audit is a natural first engagement: it is bounded, the deliverable is obvious, and you can demonstrate the before and after with a second audit. That second report is also the most natural possible lead-in to ongoing work.
Staying on the right side of the law
In Australia, the Spam Act 2003 governs commercial electronic messages. Business addresses published without a statement to the contrary generally allow inferred consent for messages relevant to that person's role, but the other obligations are not optional.
Identify yourself and your business clearly, include a functional way to opt out, and honour opt-outs promptly. Keep a suppression list and never send to an address on it again.
This is general information rather than legal advice. If you are sending at volume, confirm your approach with a qualified adviser and check the rules for the jurisdictions you are sending into.
Check your own site. Every message in this sequence works better with evidence. Run a free audit and see every check on one page, with no account required.