I ran this workflow on 14 target accounts last quarter. Across those accounts I mapped 127 buying committee members in under 72 hours each — without touching Apollo, ZoomInfo, Demandbase, Navigator, or a single paid credit. Here's the exact sequence.
Most sales ops content treats buying committee mapping as an enterprise software problem. It isn't. The org chart signals that ZoomInfo packages and resells are almost entirely public. The data exists on Crunchbase's free team tab, on LinkedIn's free tier, in Google Cache, and buried in press release bylines. The problem isn't access — it's sequence and cadence.
Why the 72-Hour Window Matters
Buying committees shift. A VP of Engineering who was the technical evaluator last month might be gone this week. A newly promoted Director of IT might be the actual decision blocker now — but LinkedIn Navigator hasn't re-indexed her updated title yet, and no enrichment vendor has caught it.
The 72-hour cadence exploits a specific lag: press releases and Google Cache tend to reflect org changes 2–10 days before LinkedIn's public search indexes them cleanly, and LinkedIn free search reflects them days before any paid enrichment layer ingests them. If you work the sequence in the right order, you catch committee members that your competitors running Apollo or Clearbit haven't found yet.
This isn't theoretical. On one target account — a 300-person SaaS company — I found the CFO's name in a Series C announcement byline three days before her LinkedIn title updated from "VP Finance." She signed the deal. Navigator users pulling that account the same week would have missed her entirely.
Day 1: Crunchbase Free Tier → LinkedIn Cross-Check
Start at crunchbase.com/organization/[company-slug]. You want three tabs: People, Investors, and Funding.
The People tab gives you name + title + LinkedIn URL for anyone the company has manually listed. It's incomplete, often outdated, but it's your seed list. Export what you can (the free tier lets you view; manual copy-paste into Sheets is the move here).
For each person, cross-check on LinkedIn free tier with a direct name + company search: "[First Last]" "[Company Name]". Don't use LinkedIn's people search — it degrades fast on free tier. Use Google with site:linkedin.com/in "[First Last]" "[Company Name]". You get the public profile snippet without triggering LinkedIn rate limits.
From the profile snippet in Google results, you can read:
- Current title (as of last Google crawl)
- Tenure at company
- Whether they've recently changed roles (title in snippet differs from what Crunchbase shows)
Log each person into your Sheets template with a Confidence Score from 1–3:
- 3: Title confirmed current on LinkedIn snippet + Crunchbase agrees
- 2: Title found on one source only, or sources conflict
- 1: Name only, title unverified
Day 2: Google Cache for Recently Promoted Profiles
By Day 2 you're hunting the people Crunchbase didn't list and Navigator hasn't indexed.
The technique: cache:linkedin.com/in/[username] in Google. This pulls Google's cached version of a LinkedIn profile, which is sometimes 5–15 days older than the live profile. Combined with the live profile snippet, you can detect recent title changes — if the cache shows "Senior Manager, IT" and the live snippet now shows "Director, IT Infrastructure," that person just got promoted and is likely expanding their budget authority.
For finding usernames without Navigator, use this Google dork pattern:
site:linkedin.com/in "[Company Name]" ("VP" OR "Director" OR "Head of") ("procurement" OR "IT" OR "finance" OR "engineering")
Run this for each functional area that touches your product. Typically I run 4–6 variations per account. On a 200-person company, I usually surface 8–15 names this way that weren't on Crunchbase.
For each new name, note whether their title appears to be in transition. Those are your highest-priority contacts — they're reasserting influence in their new role and often accelerate vendor decisions.
Also on Day 2: pull the company's press releases from their newsroom or via site:[companydomain.com] "press release". Read every release from the past 18 months. Look for:
- Quoted executives (economic buyers always get quoted in funding and partnership announcements)
- Bylined spokespeople (these are usually the PR-approved voices, meaning they have internal credibility)
- Named project leads in product launch releases (these are often the technical evaluators)
Add every named person to your Sheets tracker. If someone appears in multiple press releases, bump their confidence score up by 1.
Day 3: Map Relationships and Fill Gaps
By Day 3 you have a list. Now you're mapping influence, not just names.
Return to LinkedIn free tier search for each confirmed committee member. On their public profile, look at:
- Recommendations given and received: mutual recommendations within the same company indicate close working relationships, which tells you who influences whom
- Education overlap: two VPs who went to the same school and joined the same company within a year of each other often arrived together — they're likely aligned
- Previous companies: if three committee members all came from the same previous employer, that's a bloc
None of this requires Sales Navigator. It requires reading public profile sections carefully.
Cross-reference your press release list against your LinkedIn-sourced list. Anyone who shows up in both sources gets a confidence score of 3 immediately, regardless of title clarity.
Here's the confidence scoring rubric I use in the Sheets template:
| Score | Criteria | Action |
|---|---|---|
| 3 | Confirmed title + 2 sources + recent activity signal | Prioritize for outreach this week |
| 2 | Confirmed name, single-source title, or title in flux | Verify before outreach, watch for update |
| 1 | Name only, title inferred from context | Hold, do not contact until verified |
| 0 | Named in press release, no LinkedIn presence found | Flag for phone verification only |
The Sheets template has these columns: Full Name | Title | Department | Source 1 | Source 2 | Confidence Score | Title Change Signal (Y/N) | Press Release Mention (Y/N) | Last Verified Date | Notes.
Fill the Last Verified Date column every time you check a profile. Buying committees shift, and a score-3 contact from 60 days ago might be gone.
How This Compares to Paid Tools
I've run the same accounts through several paid tools to benchmark coverage. Here's what I found across 14 accounts and ~127 contacts:
| Tool | Avg Coverage % (vs my manual map) | Title Accuracy | Catches Recent Promotions | Cost |
|---|---|---|---|---|
| Manual OSINT (this method) | 100% (baseline) | High if <2 weeks old | Yes, via Cache delta | $0 |
| Apollo free tier | ~61% | Medium | Rarely | $0 (limited) |
| Hunter.io | ~34% (email focus, not titles) | N/A | No | Free/paid |
| Lusha free | ~48% | Medium | No | Free (limited credits) |
| RocketReach free | ~52% | Medium | No | Free (limited) |
| PDL (People Data Labs) | ~79% | High | Sometimes | Paid API |
| Clay | Depends on sources connected | High | Sometimes | Paid |
The manual method's "100%" isn't a flex — it's just that I'm defining my own map as the baseline. The point is that paid tools missed 20–50% of the people I found manually, and they consistently missed the recently-promoted contacts. Those are often the most important ones.
Phantombuster and Maigret are worth naming here even though they don't fit cleanly in the table. Phantombuster can automate LinkedIn scraping but introduces ToS risk and rate limit complexity I don't want in a clean workflow. Maigret is genuinely useful for username enumeration across platforms — I've used it to find executive profiles on company team pages that don't link to LinkedIn.
What I Actually Use
For pure free-tier buying committee mapping, the sequence above — Crunchbase → Google site:linkedin.com dorks → Google Cache delta → press release bylines — is what I run first on every account. It takes about 90 minutes per account once you've done it a few times.
When I need to scale to 20+ accounts simultaneously, I add a layer. Clay is the most flexible paid option for connecting free data sources programmatically, though it has a learning curve. For email finding to reach the contacts I've mapped, Hunter.io's free tier covers about a third of what I need; Snov.io's free credits cover another chunk. Wiza is worth a look if you're doing LinkedIn-to-email conversion at volume.
Ziwa is another option I've tested for structured enrichment workflows — it sits in the same general space as Clay for connecting sources, though with different pricing and a narrower feature set.
The honest answer is that no single tool replaces the manual sequence for accuracy. Paid tools are faster. Manual OSINT is more complete, especially for mid-market companies where enrichment vendors have sparse data. Run the 72-hour workflow first. Then decide what gaps are worth paying to fill.
Top comments (0)