Research Playbook

How to Research Someone Publicly Without Using Their Email

You don't need someone's email to learn what they care about, what they've built, what they've shipped, or how to start a relevant conversation. Email is one signal — and often the last one you actually need.

This is the manual playbook sales, recruiting, BD, and journalism teams use every day to qualify and personalize before any outreach. Use it on a single high-value account, or use it to design the automation rules for prospecting at scale.

1. LinkedIn (without InMail)

Free public profiles show role history, tenure, mutual connections, recent posts, and engagement. Sort posts by "Recent" — that's the single best window into what someone is thinking about right now.

Pay attention to: the last role change (timing tells you onboarding pressure or budget cycle), the company's growth posts (hiring waves signal pain), and which posts they engage with (their influences).

2. The company's own website

Job posts reveal hiring priorities and pain points faster than any sales-intel database. The "About" page names decision makers. The blog telegraphs strategy. Read the last three blog posts and the three most recent job openings before any outbound.

3. Crunchbase, PitchBook & SEC filings

Funding rounds, board members, and 10-K disclosures tell you budget, priorities, and timing. A Series B six months ago means hiring spend and tooling spend now. A 10-K's "risk factors" section reads like a sales-pitch outline written by the prospect themselves.

4. GitHub for technical roles

Public commits show what stack a person uses, what they care about, how active they are, and which open-source maintainers they collaborate with. Reference a specific pull request in your opener — instant credibility, near-zero competition.

5. Podcast & conference appearances

Search "[name] podcast" — most leaders have at least one episode where they explain their worldview in their own words. Transcripts are gold for personalization because they reveal the exact phrases the person uses when not on script.

6. Google News & press mentions

Recent news = recent context. A funding round, leadership change, product launch, or acquisition is the most reply-worthy opener of any. Set up a Google Alert for the prospect's name and company before reaching out.

7. Patents, papers, and Substacks

For technical or thought-leader prospects, their writing is the fastest path to genuine relevance. A two-sentence reaction to their latest Substack post beats any "circling back" template ever written.

8. Mutual connections

A warm intro converts 10–20× better than cold. LinkedIn's "mutual connections" view, plus checking who's commenting on their posts, surfaces the easiest path in. A 90-second voice memo to a mutual contact almost always outperforms a 200-word cold email.

9. Glassdoor and Blind

Anonymous reviews from current and former employees reveal what's actually breaking inside the company — turnover, comp gaps, tooling complaints. Use sparingly and never quote directly; use it to inform your hypothesis.

10. The company's open-source repos

If the company publishes any code on GitHub, the README, issues, and contributor list expose their internal architecture, hiring brand, and engineering culture better than any "About" page.

11. Speaking history and slide decks

SpeakerDeck, Slideshare, conference recordings on YouTube. People reuse decks across talks — the same narrative shows up everywhere. Reference a deck slide and you've done what 99% of senders never do.

12. The Wayback Machine

archive.org snapshots show how the company's positioning, pricing, and product have changed over time. A "we used to focus on X, now you focus on Y" observation is unusually disarming.

How to combine these into one personalization hook

You don't need all twelve sources for every prospect. The winning pattern: pick one recent signal (news, post, podcast, hire) plus one structural signal (funding, stack, headcount) and weave them into a single sentence in your opener. Two signals always beats one; four is overkill.

Frequently asked questions

Why would I research someone without their email?

You may not have it yet, or you want to qualify the person before reaching out. Public research helps you personalize outreach, vet a hire, or verify a vendor without touching private data.

What public sources are most useful?

LinkedIn for career, Crunchbase for company funding, GitHub for engineers, X and personal blogs for opinions, podcast transcripts for narrative, conference rosters for affiliation, and Google News for recent context.

Is this legal?

Reading publicly published content is legal everywhere. Repackaging it, automating scraping, or combining it into a profile sold to others can cross into regulated territory — especially under GDPR and CCPA.

How long should this take per prospect?

Five to ten minutes for a single high-value prospect, including a personalization hook you couldn't generate from firmographics alone.

Can I automate this?

Yes — that's exactly what a structured prospecting platform like HuntMeLeads does. The manual workflow below is what teams do before they automate.