Founders are simultaneously the easiest and the hardest people to email. Easy because early-stage companies use predictable address formats and publish more than they realise. Hard because the good ones get a lot of cold email and have very little patience for the obviously automated kind.
This guide covers seven methods ranked by how often they actually work, what the free tools really give you, and how to avoid burning a domain in the process.
Start with timing, not the address
The address is the easy part. Whether the email gets read depends far more on when you send it.
A company that just closed a round is in a specific and short-lived state: it has new budget, it's hiring, and it hasn't locked in vendors yet. For context on that window, the median seed round in early 2026 was about $4.1M on a $24M post-money valuation, and the median Series A around $12M. The gap between them has stretched to roughly 616 days, which means a freshly funded company has a long runway it is actively deciding how to spend.
Find the funding event first, then find the founder. Doing it the other way round produces technically correct emails sent at meaningless moments.
Seven methods, ranked
1. The company's own website
Still the highest-yield first stop, and the one most people skip because it feels too obvious.
Check, in order: the About or Team page, the Contact page, the privacy policy (legally required contact details, frequently a real inbox), press releases and the press kit, and the blog author bylines.
Hit rate: high for companies under about 50 people.
2. Their public writing
Founders leak their addresses constantly in places that aren't their website:
- Newsletter footers and "reply to me directly" sign-offs
- Conference speaker pages and event bios
- Podcast show notes
- GitHub commit history:
git logexposes author emails, and technical founders commit under real addresses - Open-source contributions and issue threads
Hit rate: moderate, and the addresses found here are usually monitored personally.
3. Email pattern inference
Company addresses follow a small number of formats. Once you confirm one address at a company, you can infer the rest with high confidence.
| Pattern | Example for Jane Okafor at acme.com |
|---|---|
| first.last@ | jane.okafor@acme.com |
| first@ | jane@acme.com |
| flast@ | jokafor@acme.com |
| firstl@ | janeo@acme.com |
| first_last@ | jane_okafor@acme.com |
| lastf@ | okaforj@acme.com |
first@ is disproportionately common at very small startups, and first.last@ dominates as companies grow past the point where short handles collide.
Important: inference produces a candidate, not an address. Never send to an inferred address without verifying it. This is exactly how bounce rates climb past the 3% danger line.
4. Email finder tools
The purpose-built option. What the free tiers actually give you as of September 2026:
- Hunter: 25 searches and 50 verifications per month free. Paid starts at $34/month (Starter) on annual billing with 500 searches and 1,000 verifications. Its domain search is the fastest way to see a company's address pattern.
- Apollo: a free tier with limited credits; paid plans run $49–$119/user/month on annual billing. Broader database, more variable accuracy.
Hit rate: high for funded companies, lower for very early or non-US companies.
5. LinkedIn (indirectly)
LinkedIn rarely exposes an email, but it reliably gives you the exact spelling of a name, the current title, and confirmation the person still works there. That's what makes pattern inference work. Some founders also list a contact email in their profile's contact card or their bio.
Hit rate: low for direct addresses, high as a supporting input.
6. Mutual connections and warm intros
Still the highest-converting path by a wide margin, and the most under-used. A one-line forwardable intro from someone the founder already trusts outperforms any cold sequence.
Hit rate: low volume, very high response.
7. Just ask
Message them on LinkedIn or X with one sentence: what you do, and a request for the best address. Low tech, oddly effective, and it self-qualifies. A founder who replies has already opted in.
Which founder should you actually email?
Most startups have two or three co-founders, and picking the wrong one costs you the reply. A rough guide:
- CEO: commercial decisions, anything involving budget, partnerships, or go-to-market. Also the busiest inbox by a wide margin.
- CTO / technical co-founder: developer tools, infrastructure, security, anything that touches the stack. Often far more responsive than the CEO, and frequently the real decision-maker for technical purchases.
- COO / operations: hiring, process, finance, and internal tooling.
At companies under about 20 people, assume roles are fluid and the founder you can reach is usually worth reaching. Past roughly 50 people, a functional VP has typically taken over the buying decision and emailing the CEO gets you forwarded at best.
Two common mistakes
- Emailing the CEO about something operational. It signals you didn't look at the team page, and it gets deleted rather than forwarded.
- Emailing everyone at once. Founders talk to each other. Three near-identical emails landing in three inboxes on the same morning reads as automation, and it's the fastest way to be remembered badly.
Verify before you send
Every method above except a warm intro produces a candidate that needs checking. The rule is simple: never send to an unverified inferred address.
The 2026 deliverability bands are unforgiving:
- Under 1.5% bounce: best in class
- Under 3%: acceptable
- Over 3%: reputation damage begins
- Over 5%: stop sending and clean the list
Because bounce damage compounds into your domain reputation, a handful of guessed addresses can degrade delivery for every campaign that follows. Verification costs between $0.0005 and $0.008 per email depending on provider and volume. Guessing is never the cheaper option.
You can check a single address free with the Adamlead email verifier, or read the full verification guide for the complete ladder.
Writing the email once you have it
Finding the address is maybe 30% of the work. Founders reply to email that demonstrates you know something specific:
- Reference the actual trigger. "Saw you closed your Series A last month" beats "I hope this finds you well."
- Be short. Under 100 words. Founders read on a phone between meetings.
- Make one ask. A single, small, specific request. Not a calendar link plus a deck plus a question.
- Skip the flattery. "I'm a huge fan of what you're building" reads as filler because it usually is.
- Be honest about how you found them. It's disarming, and under GDPR you may need to say anyway.
What gets ignored
- Merge fields that obviously came from a spreadsheet
- A pitch with no evidence you know what the company does
- Four follow-ups in eight days
- "Quick question" as a subject line, which is now near-universally filtered by pattern-matching humans
The faster version
The workflow above (find the funding news, find the company, find the founder, infer the address, verify it) is four tools and a spreadsheet for every single prospect.
Adamlead collapses it: every company on file has a known funding date, the decision-makers are ranked by seniority, and each email carries a verification status with a 0–100 confidence score before you ever spend a credit. Start a 7-day free trial with 25 reveals, or browse startups that just raised to see what's on file first.
Funding benchmarks: Carta round-size data, 2026. Tool pricing verified against published pricing pages, September 2026. Bounce benchmarks from 2026 cold email benchmark reports.