← BreachLock
BreachLock role-play cheat sheet
For the mock cold call at the end of most SDR interviews.
What they sell, in one line
Penetration testing as a service: security experts and a platform that find and fix vulnerabilities before attackers do.
Who you'd be calling
CISOs, security managers, IT and compliance leads at software and other mid-size to enterprise companies needing regular security testing.
Your opener
“Hi, this is Sam. I know you didn't expect my call. I work with security teams on penetration testing that's faster and easier to schedule than the old consulting-style engagements. Do you have a quick moment to tell me how you handle pen tests today?”
Problems you solve for them
- Customers and auditors require pen tests for compliance such as SOC 2 and PCI
- Traditional pen tests are slow, expensive and only a snapshot in time
- Security teams don't know which vulnerabilities to fix first
Discovery questions to ask
- How often do you run penetration tests, and who does them?
- Are customers or auditors asking for pen test reports?
- After a test, how do you decide what to fix first, and how long does that take?
Objections they'll throw at you
“I'm busy.”
→ Understood, I'll be quick. Can I ask just one thing: is pen testing something you handle yearly, or more often?
“We're not interested.”
→ That's fair. Is that because your testing is already covered, or just not a priority right now?
“We already work with a pen testing vendor.”
→ Good to hear you're testing. How long does it take to get a report back, and can you easily retest after fixing issues?
“Send me an email.”
→ Happy to. So it's useful, is your main driver compliance, customer requests or reducing real risk? Then we can set 15 minutes to go through it.
Competitors worth knowing
Cobalt, Synack, HackerOne, Bugcrowd
Interview tips for this company
- Learn the basics: what a pen test, a vulnerability and SOC 2 are. You don't need to be technical, just credible.
- The company says it wants competitive, coachable SDRs. Show you take feedback well, with a real example of improving after coaching.
Written from public information about BreachLock to help you practice. Ask an insider what their role play looked like; it's the best prep there is.