How to Find a Founder or CEO's Contact Info

I've spent a big chunk of my career hunting for founder and CEO contact details. Before Coldlytics, I did it by hand to build an M&A deal pipeline, one business owner at a time.

Here's what that taught me. Most founder, CEO and owner contact information is out there. It's just scattered across a dozen places, and no single method works every time. You need a few tools in your belt and a sensible order to use them in.

This guide is that order. Below are the 12 methods I actually use, which ones work best for small businesses versus bigger companies, how to verify what you find, and when it makes sense to stop doing it by hand.

CEO, founder or owner: who are you actually looking for?

The title on the door changes with company size, and so do the best places to look.

If you sell to Main Street businesses, you're mostly in the top two rows. That's good news, because owners of small businesses are far easier to reach than Fortune 500 CEOs. It's also why, in our own database, 9 in 10 of the contacts are owners or decision-makers.

If you're not sure which role you should be targeting in the first place, our guide to finding B2B decision makers breaks down who signs off on what.

What contact info you can realistically find

Set your expectations before you start digging.

The goal is a direct business email and, if you can get it, a direct dial. A generic inbox doesn't count. More on that below.

1. Visit the Company Website

This is still the highest hit rate of anything on the list, especially for small businesses.

Check the About, Team, Our Story and Contact pages. Owner-run businesses love to put a face on the brand: "Hi, I'm Dana, I started this bakery in 2014." Sometimes the email is right there. If not, you'll almost always get the name, and often a direct phone number or social handle.

Larger companies rarely publish their CEO's email, but the leadership page still confirms exactly who's in charge. That's half the job done. Pair the name with method 4 and you're usually there.

A few spots people miss:

• The footer and the privacy policy. Small businesses often list a real person's email as the privacy contact.
• Blog author bios. Founders write a lot of early blog posts.
• The "press" or "media" page. Even if it's a PR address, it shows you the company's email format.

2. Check Their LinkedIn Profile

LinkedIn is the best place to confirm you've got the right person, with the right title, who still works there. People change jobs constantly, and an out-of-date name is the fastest way to waste an email.

Click "Contact info" on their profile. Some founders list their email there, although LinkedIn usually only shows it to first-degree connections. Here's what that panel looks like on my profile:

If the email isn't there, you've still got options:

• Check the "About" section and featured links. Founders often link a booking page or personal site that has an email on it.
• Look for mutual connections. A warm intro beats a cold email every time.
• Engage first. If it's one specific founder you really want, comment on their posts with something genuinely useful for a couple of weeks, then connect.

3. Use Google Search Operators

A plain Google search rarely turns up an email. Search operators change that.

Once you have the person's name and the company domain, try these:

• "Dana Ruiz" "@danasbakery.com" finds any page that mentions her alongside the company's email domain.
• site:danasbakery.com "email" OR "contact" searches only the company's own site.
• "Dana Ruiz" owner Phoenix helps when the business name is generic.
• "@danasbakery.com" -info -hello surfaces any real person's address at the company, which tells you the format.
• "Dana Ruiz" filetype:pdf finds menus, brochures, event programs and proposals that list contact details.

The quotes force an exact match, site: limits results to one website and the minus sign excludes words. You can point site: at LinkedIn, a local chamber of commerce or an industry directory too. Get creative and keep trying.

4. Guess the Email Format, Then Verify It

Most companies use a predictable email format. Once you have the founder's name, you can usually build the address yourself:

• first@company.com (very common for founders and small-business owners)
• first.last@company.com
• flast@company.com
• firstl@company.com

If you can find any real employee email (in a press release, a job posting, an email signature, a PDF), you've almost certainly found the pattern the whole company uses.

Then verify before you send. This step isn't optional. Bounced emails damage your sender reputation, and once you're over about 2% bounces, your cold email starts landing in spam. Run your guess through an email validation tool. Most offer a handful of free checks.

If you work with AI assistants, there's a shortcut. Coldlytics has a find_email tool in its MCP server and API: give it a name and a company domain, and it either returns the person if we already have them or applies the company's email pattern and verifies the address live. It only costs a credit when it comes back with a verified email.

5. Use a Chrome Extension While You Browse

Methods 1 to 4 work, but doing them for every company gets old fast. This is where a browser extension earns its keep.

With the Coldlytics Chrome extension, you open a company's website and a side panel shows you the decision-makers we hold for that business, with a verified email and direct dial you can reveal on the spot. It also shows the company's revenue estimate, headcount, year founded and tech stack, so you can qualify the business while you're there.

A few details that matter:

• It's free on every plan. You get 50 lookups a month on the free plan and spend credits only when you reveal a contact.
• You only pay for valid emails. A verified email is 1 credit, a direct dial is 1 credit, and catch-all emails are revealed free.
• Not in the database? One click adds the company to a research queue, and our human researchers find the owner for you.
• It reads only the address bar. It never reads or injects anything into the pages you visit.

It works best on small and mid-sized business websites, which is exactly where the big databases tend to come up empty.

6. Check the Google Business Profile and Reviews

For local businesses, this is an underrated goldmine.

Search the business name on Google and look at its Business Profile. For a small business, the listed phone number often rings the owner directly, or at least someone who can transfer you.

Then scroll through the reviews. When the business replies, Google shows "Response from the owner," and owners frequently sign their replies with their first name. Reviews themselves help too: "Mike, the owner, came out on a Sunday to fix our AC" tells you exactly who to ask for.

This is also a quick way to check that a business is still operating and actually worth contacting.

7. Read Through Public Filings & Registrations

It's a bit of grunt work, but public records are reliable because they're legally required.

• State business registrations. Every state's Secretary of State (or equivalent) has a free business entity search. Annual reports and statements of information often list the owner, managing member or officers, plus a business address. In some states you'll find a phone number or email too.
• SEC EDGAR. For public companies, the SEC's EDGAR database lists executives and officers, and filings often include a corporate phone number.
• Licensing boards. Contractors, dentists, attorneys, real estate brokers and many other trades are licensed by the state, and license lookups name the license holder, who is often the owner.

The registered agent you'll see listed isn't always the owner. Plenty of small businesses use a registered agent service, so look for the names of the officers or members instead.

8. Look for Press Releases, News and Podcasts

Companies put out press releases when something changes: a new CEO, an acquisition, a new location, an award. They often include a media contact, which shows you the company's email format, and sometimes the founder's own details.

Check the company's own news page first, then search local business journals and trade publications for the niche. For smaller businesses, local news coverage ("Phoenix bakery owner opens second location") is common and almost always names the owner.

Founders who appear on podcasts are another good source. Show notes frequently link to a personal site or booking page.

9. Check Social Media

Small-business owners are much more relaxed about sharing contact details on social media than corporate executives.

• Instagram and Facebook. Local businesses often list an email or phone number on their business page, and the owner frequently posts from a personal account linked in the bio.
• X. Founders, especially in tech, often put an email or DM link right in their profile.
• YouTube and TikTok. Creators and coaches usually list a "business inquiries" email in the channel description.

Freelancers, coaches and solopreneurs are the easiest of all. Their whole business depends on being reachable.

10. Search Business Directories & Niche Databases

Many industries maintain public directories of their members. Trade associations, state bar directories, chambers of commerce, the BBB and local business associations all list companies with a named contact, often the owner.

Industries where people want to be found, like real estate brokers, attorneys, accountants and contractors, are the easiest. Search for [industry] association directory [state] and see what turns up. You'll often get a name and phone number for free in a few seconds.

11. Mine Their Own Emails: Newsletters and Job Posts

Two sources that people overlook:

• Join the mailing list. Plenty of small businesses send their newsletter from the owner's real address. Check the "from" and "reply-to" lines. If it's a no-reply@ or a shared inbox, move on, but if it's dana@, you're done.
• Find old job postings. Founders at small companies are often the hiring manager. Job posts regularly say "send your resume to dana@company.com." Even when the email isn't the founder's, it reveals the company's email format.

Here's what the "from" line looks like when a founder sends their own newsletter:

12. Call the Company

Old school, and it still works, especially with small businesses where the owner is a few feet from the phone.

Don't be tricky. Be friendly and honest about why you're calling: "I've got an idea for getting more of your Google reviews to convert, who's the best person to send it to?" You'll get some no's and plenty of yeses.

If they won't give out an email, ask for the best time to catch the owner, or for their direct line. A phone number is often easier to get than an email address, and a quick call can beat a cold email anyway.

Sometimes you'll get redirected to an office manager or a marketing lead. Don't treat that as a failure. At a lot of businesses, that person is the decision-maker for what you're selling.

Putting it together: a 10-minute workflow

Here's the order I actually work in for a single company.

1Step 1: Confirm who's in charge

Website team page, then LinkedIn, then the Google Business Profile. You want a full name, a current title and confirmation they're still there.

2Step 2: Find the email pattern

Look for any real email on the site, in a press release, a job post or a newsletter. If you find one, you know the format.

3Step 3: Build and verify the address

Apply the pattern to your founder's name and verify it. If it fails, try the next most common format.

4Step 4: Grab a phone number

Google Business Profile, the website or a quick call. A direct dial is a bonus, not a must.

For a single dream client, this is time well spent. For a list of 200 local businesses, it's a week of your life.

When to stop doing it by hand

Doing this manually has real advantages. Your data is fresh, nobody else has your exact list, and it costs nothing but time. The catch is the time. At 10 to 20 minutes per contact, the free route stops making sense somewhere around a few dozen contacts.

This is where Coldlytics fits. Voyager DB lets you search millions of US small businesses in plain English, like "roofing companies in Texas with 10+ employees," and reveal the owner's verified email or direct dial instantly. When the database runs out, Contact Research puts a human research team on it: they find the decision-makers, verify every email with ZeroBounce, and deliver up to 1,000 contacts within 24 hours on business days. Researched contacts stay exclusively yours for 30 days.

You only pay for valid emails, and if one bounces, we credit it back. The free plan gives you 25 credits a month with no card, and paid plans start at $49 a month for 250 credits.

If you're an agency hunting for clients, our guide to finding local businesses that need marketing help shows how to build the list of companies first, using signals like unclaimed Google profiles and few reviews.

Is it legal to email a founder you found?

In the US, yes. Cold email to a business address is legal under the CAN-SPAM Act as long as you play by its rules:

• Use honest "from" names and subject lines.
• Include your business's physical mailing address.
• Give a clear way to opt out, and honor opt-outs within 10 business days.
• Don't use addresses collected by automated harvesting tools. CAN-SPAM treats that as an aggravated violation.

Stick to business addresses for business outreach, and never use a personal email you happened to find.

What to send once you have it

Finding the email is the easy part. A few rules from a few million cold emails:

• Make it about their business. "Noticed your Scottsdale location has 12 reviews and the Tempe one has 140" beats any template.
• Keep it short. Owners read email on their phone between jobs. Three to five sentences.
• Ask one easy question. "Worth a quick look?" beats "Can we book 30 minutes?"
• Follow up. Most replies come from the follow-ups, not the first email. Our guide to cold email follow-ups covers the cadence.

FAQ

How do I find a founder's contact information for free?

Start with the company website and LinkedIn to confirm the founder's name and current role. Then find any real email at the company to learn its format, build the founder's address and verify it with a free email validation tool. The Google Business Profile, state filings and press releases fill in the gaps, especially for phone numbers.

What if the company has no website?

Use the Google Business Profile, social media pages and your state's business entity search to find the owner's name. The listed phone number is often your best route in. Coldlytics' own database only includes businesses with a working website, so for the rest, a phone call or a human researcher is the way to go.

Should I email the CEO or someone lower down?

At a small business, email the owner. They make almost every buying decision. At a company with a few hundred employees, the CEO often isn't the buyer for day-to-day purchases, so target the head of the relevant department and use the CEO only for big, strategic pitches.

Why did my verified email still bounce?

Verification checks that a mailbox exists at that moment, but people leave, inboxes get shut down and some servers accept everything (called catch-all) and bounce later. Keep your lists fresh, re-verify anything older than a few months and remove bounces immediately.