Bridgehead Prepared for Tal at Enclave
For Tal

Vulnerability Management Software Sales Playbook

Tal, we’ll build your new AE’s first 100 accounts in 10 days. The first 25 are below, and they’re yours either way.

If your AE seat stays open another quarter, ignore this. If it doesn’t, the next two minutes are worth it.

What we noticed

You launched from stealth with $6M on March 26, and on October 28 you launched Enclave Red, models that run the test instead of refusing it.

Your Account Executive role has been posted since September 24, and the posting says the AE builds pipeline with security and engineering leaders on their own.

  1. March 26 Launched from stealth with $6M, backed by 8VC
  2. September 24 Account Executive role posted
  3. October 28 Enclave Red launched
  4. November 2 Workflows launched
  5. November 9 Role still open; the first 25 accounts are on this page

What changes for your new AE

Your new AE starts day one with 100 accounts you approved and drafts written to the first five, instead of spending the first weeks building outbound lists. Your posting says they build pipeline themselves; this puts the first security teams in their hands on the first morning, each with the reason to call now.

Your first 25 accounts

Picked from how you describe your buyers in your launch post, your blog and your posting. Each one has the reason it’s here and the source.

Yours either wayKeep these 25 whether or not we ever talk.
Cut any you wouldn’t callTell us why, and we replace it. We keep going until you’d keep at least 80 of the 100.
  1. Linear Remote, North America · Product system for teams and agents; used by more than 50,000 companies
    1

    Linear builds for teams and agents, and its security hire is told to use AI to speed up code review and triage so the program scales without more headcount. That is the job you describe: a fleet taking the breadth while one person makes the calls.

    Signal: Oct 15, 2026 Source
    Buyer: Head of engineering or the security lead the role reports into
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  2. Replit Foster City, CA · Agent platform with millions of users
    2

    Two security leaders are being added to a platform where agents write and run code for millions of users, and the architect's job is guardrails for agents invoking tools. That is the surface your AI pentest attacks, and the new hires are who judges the result.

    Signal: Oct 6, 2026 Source
    Buyer: Head of security or the cloud security lead
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  3. Harvey San Francisco, CA · Agentic AI platform for legal and professional services
    3

    A company selling agentic AI to law firms is adding a staff-level product security hire, and the posting asks for experience with LLM application risk.

    Signal: Oct 28, 2026 Source
    Buyer: Head of security or the product security lead
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  4. Decagon San Francisco, CA · Conversational AI for enterprise customer support
    4

    Three security roles in about a week for a platform whose agents handle sensitive customer data for named enterprise customers. A team staffing that fast is the one that needs reviews and attack testing to keep pace with what it ships.

    Signal: Sep 29, 2026 Source
    Buyer: Head of security or the platform security lead
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  5. Writer New York, NY · Enterprise AI platform with autonomous agents
    5

    The posting asks the new hire to run SAST and DAST in CI and to integrate AI agents so the security team keeps pace with engineering. A staff AppSec owner is arriving this month with a mandate for agents, so the buying conversation is about to begin.

    Signal: Nov 3, 2026 Source
    Buyer: Head of security or the application security lead
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  6. Notion San Francisco, CA · AI workspace where teams and agents work together
    6

    Notion is writing the security rules for how its engineers use coding agents and MCP tools, and it is hiring detection staff in parallel. Code from coding agents is what outruns human review, which is your opening line.

    Signal: Sep 28, 2026 Source
    Buyer: Head of security or the AI product security lead
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  7. LiveKit Remote, United States · Infrastructure for voice and video agents
    7

    The company is building its vulnerability management and security operations program around this hire, on a platform that runs agents for named large customers. The person who owns a program while it is being built decides what to automate before the process hardens.

    Signal: Nov 5, 2026 Source
    Buyer: Head of engineering or the head of security
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.
  8. Braintrust San Francisco, CA · Agent observability platform
    8

    The posting already wants agents doing triage with human-in-the-loop controls, and the company's customers include Notion, Stripe and OpenAI. A team that already wants agents doing defense work is closer to your fleet idea than most.

    Signal: Oct 24, 2026 Source
    Buyer: Head of security or head of engineering
    Why it’s ranked here

    A strong fit.

    • Ships software with AI coding agents or builds its product on them, so pull requests outrun human review.
    • Runs an AI agent or LLM product in production that an attacker could probe.
    • Posted a security role in the last 60 days, so a seat is being filled now.
    • Sells to enterprise customers whose security reviews gate deals.
    • Not a security vendor, and not already building agents or offense that do your job.
    • A security team small enough that one more hire is a real decision, not a large organization.

Your new AE’s first 100 accounts, in 10 days

The first 25 are above, and they’re yours either way.

Email Kash

We build a handful of these a month, for founders hiring now.

10 days

from kickoff to your team running it

  • 100 accounts you approve, each with the reason
  • Drafts to the first five, in your voice
  • Your team runs it without us
  • Any account you cut, we replace

How does Enclave sell?

An outside read from your launch post, your blog posts, your site and your posting, built to be corrected: tell us anything that’s wrong. Tap a clip to play it from that moment.

In your posts and interviews18 quotes
  1. Who buys
    “Code now ships faster than anyone can review it.”
    Your post: Why We're Funding Research Into Making the Web Safer, November 4
  2. Who buys
    “Teams are drowning in noise while the risks that matter slip through.”
    Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26
  3. Who buys
    “So the scarce resource is judgment: the attention needed to decide what’s real, and the capacity to actually fix it.”
    Your post: The Economics of Vulnerability Noise, July 6
  4. The problem
    “Finding problems has become almost free. Checking them and fixing them is still expensive, and still (mostly) requires a human to do the work.”
    Your post: The Economics of Vulnerability Noise, July 6
  5. The problem
    “The scanners run all night.”
    Your post: The Economics of Vulnerability Noise, July 6
  6. The problem
    “pull requests stack up faster than humans can reason about them”
    Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26
  7. The problem
    “nearly half of that code contains security flaws”
    Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26
  8. The problem
    “Defense still mostly runs one person at a time.”
    Your post: Workflows, Your Fleet Against the Swarm, November 2
  9. The problem
    “Against something that tries every path in parallel, sequence loses.”
    Your post: Workflows, Your Fleet Against the Swarm, November 2
  10. Why you win
    “the AI labs creating coding agents that generate vulnerabilities, shouldn't be the ones auditing them”
    Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26
  11. Why you win
    “Enclave is the independent reviewer for the AI era of software.”
    Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26
  12. Why you win
    “Verification did not rely on a model reporting its own success.”
    Your post: The Exploit Survival Curve Just Went to Zero, September 10
  13. Why you win
    “We published the misses alongside the wins”
    Your post: The Exploit Survival Curve Just Went to Zero, September 10
  14. Why you win
    “Red models run the test instead of refusing it.”
    Your post: Teams Need Models That Will Run the Test Instead of Refusing It, October 28
  15. Why you win
    “What defense needs is a fleet: many autonomous agents working at once, each on a scoped piece of the job”
    Your post: Workflows, Your Fleet Against the Swarm, November 2
  16. When a store moves
    “PHP2Shell shows how much of that protection is gone.”
    Your post: Workflows, Your Fleet Against the Swarm, November 2
  17. When a store moves
    “published CVEs rose 68% from April to July”
    Your post: Workflows, Your Fleet Against the Swarm, November 2
  18. When a store moves
    “Enclave Red can attempt the exploit and show whether it actually works on your infrastructure.”
    Your post: Teams Need Models That Will Run the Test Instead of Refusing It, October 28
What your customers sayFrom Account Executive posting, enclave.ai
  1. AEAccount Executive posting
    “Run outbound and build pipeline with security and engineering leaders”
    Account Executive posting · Account Executive posting
  2. Eenclave.ai
    “Almost no security team knows how to run agents at scale. Yours will.”
    enclave.ai · enclave.ai
  3. Eenclave.ai
    “Our forward-deployed engineers embed with your team, build custom agents for your environment and stay until your team runs them on its own.”
    enclave.ai · enclave.ai

Words you use

  • “autonomous security team”
  • “swarm”
  • “fleet”
  • “agent-native”
  • “independent reviewer”
  • “real attack paths”
  • “noise”
  • “Enclave Red”

How the list learns your calls

In the first session you react to accounts like these: keep or cut, and why, the way you’d tell a cofounder. Each reason becomes a rule you can read, the pool re-scores, and ten more show whether it learned. Keep eight of ten and the hundred is built on your rules.

  1. You cut one on the call, and say why
  2. It becomes a rule
  3. The pool re-scores
  4. Ten more test it

Which questions can only you answer?

Your posts and your posting don’t say which companies you’d never spend a demo on, or what a security leader has to see before an agent fleet gets a trial. About 30 minutes of you reacting to real accounts answers these.

  1. 1

    Does a company with its own offensive security engineer ever buy?

    Row 24 (ClickHouse) is hiring one, and row 19 (Plaid) and row 17 (Perplexity) already run red teaming or offense.

  2. 2

    Does a company building its own security agents buy a fleet or compete with it?

    Row 22 (Cohere) is hiring an engineer to build security agents in-house.

  3. 3

    Is a first security hire a better call than a team hiring three at once?

    Row 7 (LiveKit) is building its program around one hire; rows 11 (Thinking Machines) and 12 (Anyscale) are staffing several.

  4. 4

    Where does a security organization get too big to be a first account?

    Row 23 (Snowflake) and row 25 (OpenAI) are the two largest on the list.

  5. 5

    Do chip and infrastructure companies belong in an AE's first week?

    Row 21 (Cerebras) is a hardware company with an inference cloud.

What does your Account Executive’s first morning look like?

Without

The CRM you have now. The early weeks go to learning which accounts you’d call, and why.

With · Account Executive, first morning

  • LLinearDraft written
  • RReplitDraft written
  • HHarveyDraft written
  • DDecagonDraft written
  • WWriterDraft written

A hundred accounts you approved, the rules behind them and drafts to the first five, so their time goes to buyers.

From week two, your mornings too: one brief, drafts to approve, every message sent by you.

How the 10 days run

What happens in the ten working days?

November 16, 2026 to December 1, 2026. About a day of your time in total.

  1. Before by November 16

    You send the customers you’d clone and three deals that went wrong, plus 10 to 20 emails or posts you wrote. “How you sell” is drafted from your talks and posts.

    You: 20 minutes
  2. Day 1 November 16

    The playbook session: we fill the gaps and correct the draft together. Your CRM is connected.

    You: 2 hours
  3. Day 2 November 17

    Your first rules are written; a few hundred companies are scored against them.

    You: none
  4. Day 3 November 18

    You review the first 25 (talking it through is fine).

    You: 30 minutes
  5. Day 4 November 19

    Your reasons become rules; you see the re-score and judge 10 more. First touches are written in your voice to the accounts you kept, and you read ten. Touches start logging to the CRM.

    You: 30 minutes
  6. Day 5 November 20

    The hundred is built. The research tool is set up; you test it on three accounts you know.

    You: 15 minutes
  7. Day 6 November 23

    The morning run is set up; your first morning, with us.

    You: 30 minutes
  8. Day 7 November 24

    You review all hundred, and any cut is replaced. Team training, session one.

    You: 1 hour 20 minutes
  9. Day 8 November 25

    Your first morning on your own. Training session two, hands-on for each person.

    You: 1 hour plus your morning
  10. Day 9 November 30

    Your second morning on your own. Each person on your team runs the morning alone.

    You: your morning
  11. Day 10 December 1

    Your third morning on your own. A week of touches is in the CRM. Handover sign-off.

    You: 30 minutes plus your morning
Kash Badami

Who builds it?

The person in the video does the work with you, from the first session to the handover.

$100M+in deals sold in a single year
$0 to $10MARR in 12 months, for a company I built
  1. “Kash and I built ERT Credit together in 2021. He took my MVP and turned it into a SaaS that hit $10M ARR in twelve months.”

    Jordan Anderson, CEO, PayStreetgobridgehead.ai/about

  2. “Analytical in approach, technologically-knowledgeable, and earnest in conviction, Kash was able to drive pipeline in a notoriously challenging tech region.”

    JBJason Brandt, Managing Director, Sales, ePlus inc.LinkedIn recommendation, April 2020

Where does this go from here?

Three options. Each one is fine.

Not a fit

Say so in a line, and that’s the end of it.

Not now

Keep the 25 and the read on how you sell, and share them. When the role fills, the offer stands.

Talk with Kash

Ask Kash to call you, or email him. He calls to set up a 30-minute strategy session. Bring your cofounder or your sales leader.

Your new AE’s first 100 accounts, in 10 days

The first 25 are above, and they’re yours either way.

Email Kash

We build a handful of these a month, for founders hiring now.

10 days

from kickoff to your team running it

  • 100 accounts you approve, each with the reason
  • Drafts to the first five, in your voice
  • Your team runs it without us
  • Any account you cut, we replace

Enclave sales playbook, in brief

Enclave sells an autonomous security team: agents that review pull requests, pentest applications and research new CVEs. Tal Hoffman launched it from stealth on March 26 with $6M, backed by 8VC.Your launch post: Security's Blindspot & The Last Mile of Shipping Software, enclave.ai

Its buyers are security and engineering leaders whose code ships faster than anyone can review it; Tal writes that “pull requests stack up faster than humans can reason about them” and that “teams are drowning in noise while the risks that matter slip through.”Your launch post: Security's Blindspot & The Last Mile of Shipping Software, Account Executive posting

The open Account Executive role asks for someone who runs outbound, owns the cycle from first conversation to close and helps shape how Enclave sells.Account Executive posting

The first 25 accounts for a new Account Executive are AI-native companies with a security role posted on their own job board, each scored on six rules with a dated source: sixteen strong fits, five in the middle and four edge cases that test the rules.

Prepared by at Bridgehead · November 9, 2026 · Every source

Questions founders ask

Can’t my AE build this when they start?

They can. But wouldn’t you rather they were selling? Reps spend 28% of their time selling, and the average new AE takes 6.2 months to ramp. This replaces the weeks they would spend building the list and learning what you already know.

28%: Salesforce, State of Sales (7,700+ sellers, 2022) · 6.2 months: Bridge Group, 2026 AE report (158 companies)

How much sooner does my new AE get to work?

From day one, because the accounts you approved and the first drafts are waiting. The average new AE takes 6.2 months to ramp, and at a $200K median OTE that is about $103K paid before they are fully productive. Only 48% of AEs hit quota.

6.2 months: Bridge Group, 2026 AE report (158 companies) · $103K: arithmetic ($200K median OTE × 6.2 months ÷ 12); Bridge Group, 2026 AE report (158 companies) · 48%: Bridge Group, 2026 AE report (158 companies)

We tried an outreach tool and it sounded like a robot. How is this different?

Nothing goes out on its own. Every account on the list is one you approved, every draft is written to one person, and you send each message yourself. It learns your voice from what you’ve written and from every edit you make.

How much of my time does it take?

About a day, spread across the ten working days: the 2-hour session on how you sell, short list reviews you can talk through, two training sessions and your first mornings. The hours your AE gets back go to selling, where reps spend just 28% of their time today.

28%: Salesforce, State of Sales (7,700+ sellers, 2022)

What happens after you leave?

It keeps learning. Each week it proposes rule changes from what your cuts, replies and silences showed, and you approve or reject each in a line.

Where does my data live?

In your own accounts: your Claude, your CRM, your files. Nothing runs on anyone else’s side, and any rule can be changed in plain English.

How is it priced?

The first engagement is one fixed price for the ten days. It depends on how many people we train and which systems we connect, so Kash quotes it on a short call. After handover, you can keep us on a retainer to keep supporting your sales process and refining it, if you choose that route.

The research behind this page 9 sources · 3 postings · 0 customers · 50 stores looked at

Your talks and posts

  1. Your launch post: Security's Blindspot & The Last Mile of Shipping Software, March 26, 2026
  2. enclave.ai
  3. Your post: Workflows, Your Fleet Against the Swarm, November 2, 2026
  4. Your post: Why We're Giving Open Source a Security Team, October 22, 2026
  5. Your post: Teams Need Models That Will Run the Test Instead of Refusing It, October 28, 2026
  6. Your post: The Economics of Vulnerability Noise, July 6, 2026
  7. Your post: Why We're Funding Research Into Making the Web Safer, November 4, 2026
  8. Your post: The Exploit Survival Curve Just Went to Zero, September 10, 2026
  9. enclave.ai/about

Your open roles

  1. Account Executive, first posted September 24, 2026
  2. Field Marketing Manager, first posted September 24, 2026
  3. Product Partnerships, first posted September 24, 2026

Your customers

(santehq.com/customers and your posts). Customer photos are from santehq.com/customers.

How the 25 were picked

50 stores found and scored on 6 rules; the 25 chosen to teach: 16 strong, 5 middle, 4 at the edges. Logos are from each store’s own site.

  • Sources: Enclave’s own site and blog, its Account Executive posting (read through the Ashby posting API), and each account’s own job posting on its Ashby board, each opened and saved on November 9, 2026.
  • About 50 AI-native and developer-infrastructure companies were checked for open security roles on their own job boards; the 25 chosen teach the rules.
  • Enclave names no customers on its site, so no customer was removed; none of the 25 appears on enclave.ai or in its blog posts as a customer.
  • A posting is a dated sign that a security seat is being filled. It doesn’t say who owns the testing budget, so buyer titles are roles, not names.
  • Postings dated on or after November 9 are counted as posted on that date.