← All cases
    Case #0053Channel EmailIndustry CybersecuritySender SDRFiled 2025-10-13Verified submission
    // Verdict

    THE WALL OF WORRY

    6 offenses identified across 3 categories
    D4.6/10
    91% CONF
    0CRIT
    5MAJ
    1MIN
    Exhibit A - original message
    ✉ EMAILcold · unsolicited
    Subject: Your attack surface is expanding Hi Marcus, I've been following Sentinel Shield's growth since your Series B announcement last month. Congratulations on the $42M raise. 4Here's what concerns me: as you scale from 50 to 200 employees, your attack surface grows exponentially. Every new SaaS tool, every new endpoint, every new contractor with VPN access is another vector. Most companies at your stage don't realize they have 3-4x more shadow IT than they think. I'm not saying this to scare you. I'm saying it because we ran a free external scan on sentinelshield.com and found 14 exposed subdomains, 3 with outdated TLS certificates. That's public information anyone can find. 5We helped Datadog's security team reduce their external attack surface by 60% in 11 weeks. We helped CrowdStrike's internal IT team do the same in 8. 6I'd love to set up a 30-minute call to walk through what we found. I can also loop in our CTO who previously ran security at Palo Alto Networks. We could also do a lunch meeting if that's easier. Or I can just send over the report. Let me know what works. Best regards, James Chen VP of Sales, AttackMap P.S. I also noticed you're hiring a CISO. Happy to make some introductions from my network.
    1OVER-LENGTHmajor
    Execution

    Message runs 206 words; healthy ceiling for this channel is ~150. Beyond 150 words, reply rates drop ~50% [Lavender 2024] because the reader has to commit before they can evaluate the offer.

    1/6
    Offenses · 6
    "

    Cargo-cult Research → Fear → Proof → Multi : following the structure without understanding why each element exists.

    Research → Fear → Proof → Multi-CTA
    The sender clearly did real homework: Series B amount, subdomain scan, hiring signals.
    But they buried the good research under manufactured urgency, too many proof points, and four competing CTAs.
    The scan results are genuinely valuable, but they're weaponized as fear rather than offered as a gift.
    Cutting this to the scan findings + one CTA would make it a B-grade message.
    §07

    Tag scope ledger

    How each offense was applied · 6 total

    Document
    3
    Subject line
    0
    Phrase
    3
    Document scope· 3
    • OVER-LENGTHmajor
      Span · entire body206 words · 1196 chars
      “Hi Marcus, I've been following Sentinel Shield's growth since your Series B announcement last month. Congratulations on the $42M raise. Her…”
    • NO-OPT-OUTminor
      Span · entire body206 words · 1196 chars
      “Hi Marcus, I've been following Sentinel Shield's growth since your Series B announcement last month. Congratulations on the $42M raise. Her…”
    • CTA-MISSINGmajor
      Span · entire body212 words · 1239 chars
      “Subject: Your attack surface is expanding Hi Marcus, I've been following Sentinel Shield's growth since your Series B announcement last mon…”
    Phrase scope· 3
    • PAIN-ASSUMPTIONmajor
      Span · phrase4 words · 23 chars
      “Here's what concerns me”
    • CTA-OVERLOADmajor
      Span · phrase47 words · 231 chars
      “I'd love to set up a 30-minute call to walk through what we found. I can also loop in our CTO who previously ran security at Palo Alto Networks. We could also do a lunch meeting if that's easier. Or…”
    • VANITY-PROOFmajor
      Span · phrase26 words · 149 chars
      “We helped Datadog's security team reduce their external attack surface by 60% in 11 weeks. We helped CrowdStrike's internal IT team do the same in 8.”

    Note. Document-scope tags evaluate the whole message (length, formatting, deliverability). Subject-scope tags evaluate the subject line alone. Phrase-scope tags pin to a specific quoted span shown in the evidence above.

    Final verdict
    THE WALL OF WORRY - Case #0053
    D · 4.6/10
    Worse than 70% of all audited messages
    Next: #0052 · THE BROKEN TEMPLATE →