← All articles

Building an OT Security Outbound Campaign with Clay in 2026: A Step-by-Step Playbook

By Asaf Katz · July 13, 2026

QUICK ANSWER

Clay can build a targeted OT security outbound list in hours: pull accounts by SIC code (manufacturing, utilities, oil and gas), enrich with ICS tech stack signals using Claygent, layer in Dragos or Claroty install base data, and score by headcount and security hire activity. The result is a 300-500 account list where every entry has a confirmed OT exposure and a named security decision-maker.

How to Build an OT Security Outbound Campaign with Clay

OT security buyers are concentrated in specific industrial sectors with specific job titles. Clay''s combination of SIC code filtering, waterfall enrichment, Claygent web research, and intent signal scoring makes it the fastest way to build a verified, targeted list for OT security outbound in 2026.

Here is the exact process for building a 300-500 account campaign list for a cybersecurity vendor targeting OT environments.

Step 1 — Pull Target Accounts by Sector and Size

Start with Clay''s company search filtered by SIC codes that indicate OT-heavy environments:

Apply employee count filters — 500-10,000 employees is the sweet spot for most OT security vendors. Below 500, OT security is typically handled by an IT generalist with no dedicated budget. Above 10,000, enterprise procurement adds a procurement layer that slows the cycle.

Add US-only or targeted geography filters. Clay''s location data lets you filter by state or region, useful for OT security vendors with field service requirements or regulatory focus areas (Texas for oil and gas, Midwest for manufacturing, Mid-Atlantic for utilities).

Step 2 — Enrich with ICS and OT Tech Stack Signals

Use Claygent — Clay''s AI web research agent — to add OT-specific context to each account:

Run a Claygent prompt: "Does [Company Name] operate manufacturing plants, power generation facilities, or pipeline infrastructure? What industrial control systems (SCADA, DCS, PLCs) are mentioned in their job postings or public filings? Have they had any publicly reported OT security incidents?"

This gives you a confirmed OT exposure score for each account — distinguishing manufacturers with real operational technology from holding companies or distribution businesses.

Layer in Clay''s job posting data to look for active OT security hiring. A manufacturer posting a "Director of Operational Technology Security" or "ICS Cybersecurity Engineer" role right now is a company actively building its OT security capability — prime timing for an event invitation.

Step 3 — Find the Right Contacts

For OT security outbound, the primary contact universe includes:

Use Clay''s waterfall enrichment across Apollo, ZoomInfo, Cognism, and ContactOut to maximize verified email and phone coverage. For OT security, direct dial matters — these buyers do not respond to email-only sequences at high rates.

Step 4 — Score and Prioritize

Build a Clay scoring column (1-10) that weights:

Export the top 200-300 accounts by score into your sequencer. These are the accounts most likely to engage with an event invite or follow-up sequence right now.

Step 5 — Use the List for Event-Led Outbound, Not Cold Email

Cold email to OT security buyers in 2026 produces diminishing returns. The open rates are low, the response rates are lower, and the buyers who do respond are rarely the ones with active budget.

What consistently works is inviting these accounts to a live event — a virtual roundtable or panel discussion on a topic their security teams care about: NERC CIP compliance readiness, OT network segmentation under the Accenture-Dragos consolidation, ICS vulnerability management for manufacturers. The event is the reason to reach out. The Clay list is the targeting layer that ensures the right people get the invite.

LinkedOtter builds and runs these event programs for cybersecurity vendors: 754 webinar signups in 26 days, 38 C-level attendees from a 1,266-prospect cybersecurity campaign, 43 qualified meetings in 60 days. Events starting from $6,000.

Take the free 60-second check to see what an OT security event program generates. See proof from cybersecurity campaigns or explore pricing.

Frequently asked questions

What SIC codes target OT security buyers in Clay?

SIC 2000-3999 (manufacturing), SIC 4900-4999 (utilities), SIC 1300-1399 (oil and gas), and SIC 4400-4499 (water/maritime) are the primary SIC codes for OT-heavy environments.

What job titles should you target for OT security outbound?

CISO, Head of OT Security, Director of Industrial Cybersecurity, VP of IT (at manufacturers), and VP/Director of Operations for operational resilience conversations.

How does Claygent help with OT security prospecting?

Claygent can research each target account for confirmed OT/ICS infrastructure mentions, active OT security job postings, publicly reported incidents, and technology stack signals from job listings and public filings.

What company size is the OT security sweet spot?

500-10,000 employees is typically the best range. Below 500, OT security is handled by an IT generalist. Above 10,000, procurement layers slow the cycle significantly.

Does cold email work for OT security buyers?

Not well. OT security buyers respond poorly to cold email. Event invitations to relevant, expert-led topics outperform cold outreach significantly in this buyer segment.

How do you score OT security accounts in Clay?

Weight active OT security job postings (+3), regulatory filing ICS mentions (+2), known ICS technology install (+2), ideal employee count (+2), and verified senior contact (+1) for a 1-10 priority score.

Related

Take the free 60-second check