Inside Hush’s Referral Engine: Building a Network-Driven Sales Motion in Enterprise Security

Security leaders don’t trust vendor pitches. They trust each other. In a recent episode of Category Visionaries, Mykolas Rambus, founder of Hush, revealed how understanding this dynamic transformed their entire go-to-market strategy.

The Power of Crisis Moments

The traditional enterprise sales playbook starts with outbound prospecting. Hush took a different approach, recognizing that security leaders operate differently. “When things go sideways, when a leader is threatened, when they’ve had an incident, that’s when they message one another,” Mykolas explains. “That’s when they pick up the phone and call each other as peers industry.”

This insight fundamentally shaped their growth strategy. Instead of pushing for immediate sales, they focused on being “known to that community” and maintaining high responsiveness when incidents occur.

Building Trust Through Proof

Security leaders are inherently skeptical. As Mykolas notes, “CISOs and corporate security leaders are both very skeptical communities. They’ve seen a lot. They don’t believe a lot of vendor pitches.”

Rather than fighting this skepticism, Hush weaponizes it through what Mykolas calls their “diagnostic” approach: “We often talk about our diagnostic… if we’re a threat actor and say, look, here’s all the information about your employees. Here are the vulnerabilities.”

The Golden Nugget Strategy

The real power of their approach comes from what Mykolas calls “golden nuggets” – surprising vulnerabilities that change the conversation: “It’s the fact that they thought that their CEO was locked down. And turns out that the CEO’s dogs account on Instagram is where all of the information about their life, their movements, their family vacations is leaking from.”

These revelations create powerful word-of-mouth moments that drive referrals. When a CISO discovers their CEO’s vulnerability through their pet’s social media, it becomes a story they share with peers.

Patient Growth Over Pressure

Instead of aggressive sales tactics, Hush takes a long-term view. “We often say you may not need us now, but almost guaranteed, in 18 months or twelve months or six months, you’ll probably want to give us a call back,” Mykolas shares.

This patient approach has yielded impressive results. The company maintains a 92 NPS score, which Mykolas notes is “shockingly high” considering “Apple in the seventies.” This high satisfaction drives organic referrals within the security community.

Email as a Supporting Channel

While referrals drive their growth, Hush hasn’t abandoned traditional channels entirely. As Mykolas explains: “Part of this is just time making sure that we’re a trusted party and we are highly responsive and able to act that part of it. The other is email, right?”

The key is using these channels to support, not replace, their referral-driven approach. Email campaigns focus on staying top-of-mind until the moment of need arises.

Creating Viral Moments

The rise of AI-powered threats has created new opportunities for referral-driven growth. Mykolas points to recent incidents: “If you saw that scam that happened out of Hong Kong and someone was eventually conned into sending over $20 million, it’s becoming much more prevalent.”

These high-profile incidents create natural moments for security leaders to discuss solutions, driving organic adoption through peer networks.

For founders building enterprise security solutions, Hush’s approach offers a crucial lesson: sometimes the best growth strategy isn’t about reaching more prospects – it’s about being ready when the right prospects reach out to each other.