$60K to $310K ARR in 18 months.
A Belfast cyber SaaS · $60K → $310K ARR.
Industry archetype drawn from patterns across multiple Belfast UK cybersecurity and fintech SaaS engagements. Representative metrics across 18 months: 5.2x ARR, 122% net revenue retention, 24% trial-to-paid conversion, NPS 58.
Existing-customer expansion outpaced churn.
Free-trial conversion to paid plan.
A Belfast cyber SaaS sitting at the security-review intersection.
The archetype represents a slice of Belfast UK cybersecurity B2B SaaS we ship into reliably: a $60K ARR product with strong technical foundations born out of the CSIT cluster at Queen's University Belfast, a passable but underperforming marketing site, and a roadmap full of integration work that the founders have been pushing into the next quarter for two years. Founded by a Belfast operator with a security-engineering background; sells to mid-market and enterprise security buyers across the EU and US who require security-review-aware product surfaces, SOC 2 transparency, and clear data-residency content before booking a demo. Pre-engagement state: a marketing site on an aging Webflow setup with content scattered across the homepage, no clear security posture page, and a docs portal that lived inside the product app rather than as a public IA-first site.
Three structural problems compounded the growth ceiling. One, the marketing site failed to surface evidence (named customer logos, real benchmark numbers, third-party validation, security certifications, data-residency posture) in the way Belfast cyber buyers expect; the bounce rate on the home page was 76 percent. Two, the docs portal was indexed inside the product app, so search engines saw "log in to view" and missed the high-intent organic traffic that comes from technical buyers reading API docs. Three, the trial-to-paid funnel had no real onboarding sequence and no security-review workflow; trial users either self-served to success or bounced quietly during enterprise procurement, and the team did not know which.
12 weeks. Five workstreams. One launch.
Workstream 1 · Marketing-site rebuild on Next.js. Migration from aging Webflow to Next.js on Vercel. Evidence-led content surfaces (named-customer logos, real benchmark numbers, third-party validation, security certifications, data-residency posture). Bounce rate dropped from 76 percent to 49 percent across the first 90 days post-launch.
Workstream 2 · Public security-aware docs portal. Extracted docs from the product-app sandbox and built a public, indexable docs portal at /docs on Mintlify. Per-page TechArticle schema, dedicated security and trust pages, plus a public SOC 2 questionnaire. Six months post-launch the docs portal accounted for 27 percent of inbound trial signups via organic search.
Workstream 3 · Onboarding redesign with security-review workflow. Replaced the implicit "figure it out" first-session experience with a guided four-step activation flow tied to the product's three core jobs-to-be-done plus a parallel security-review workflow for enterprise buyers. Trial-to-paid conversion lifted from 11 percent to 24 percent over 6 months.
Workstream 4 · Integration UI surfaces. Built a public integrations directory with per-integration deep-dive pages, screenshots, setup guides, and a "request an integration" CTA targeting the SIEM, identity, and observability tools that cyber buyers expect. The integrations directory now drives roughly 13 percent of inbound trial signups and is the most-cited page by sales reps in discovery calls with US and Israeli FDI-backed buyers.
Workstream 5 · Evidence-led case studies + benchmark content. Three deep-dive customer case studies with named customers and real numbers; one annual benchmark report tied to the Belfast cybersecurity dataset. The benchmark report became the highest-converting top-of-funnel asset in the marketing program and earned citations from the wider CSIT cluster trade press.
Next.js core. Boring choices.
Next.js + Vercel
App Router, ISR for case studies and benchmark content, Edge for low-latency global delivery. Core Web Vitals all green at month 3.
Stripe
Stripe Billing for subscriptions, dunning, and trial-to-paid conversion. Manual-quote workflow for enterprise buyers with security-review needs.
Mintlify
Public docs portal at /docs with API reference, security guides, SOC 2 questionnaire, and changelog. Schema.org TechArticle markup for organic search. AI assistants resolve queries against the docs.
PostHog + GA4
PostHog for product analytics and feature-flag-driven onboarding experiments. GA4 for marketing-site reporting through Looker Studio.
Customer.io + HubSpot
Customer.io for product-driven lifecycle email (trial-to-paid sequences). HubSpot for sales-team-driven outbound and account-based marketing into US and Israeli FDI-backed accounts.
Linear + Notion
Linear for engineering. Notion for cross-functional planning and security-review playbooks.
The numbers behind the headline.
| metric | pre-engagement | month 6 | month 18 |
|---|---|---|---|
| ARR | $60K | $155K | $310K |
| Net revenue retention | 94% | 110% | 122% |
| Trial-to-paid conversion | 11% | 19% | 24% |
| CAC payback (months) | 17 | 13 | 10 |
| Logo count (cumulative) | 22 | 52 | 86 |
| NPS | 32 | 48 | 58 |
Metrics representative of the archetype; specific brands within the pattern range plus or minus 20 percent on each line.
If your Belfast SaaS looks like this archetype.
The pattern this archetype represents (Belfast UK cybersecurity or fintech SaaS in the $40K to $250K ARR range, sitting on an aging marketing site, with a docs portal hidden inside the product app, with a leaky trial-to-paid funnel) is one of our most-shipped engagement shapes for the post-CSIT cluster. The 12-week timeline holds steady across SaaS at this stage; the workstreams compress or expand in the same proportions; the metrics typically land within plus or minus 20 percent of the archetype numbers above.
Five capabilities transfer directly to a comparable Belfast engagement. First, marketing-site rebuild on Next.js with evidence-led content surfaces that respect the Belfast buyer's security-review-aware, certification-first instinct. Second, public security-aware docs portal that captures the technical-buyer organic search traffic the product-app docs cannot. Third, onboarding redesign plus parallel security-review workflow that lifts trial-to-paid conversion by 9 to 14 percentage points typical. Fourth, integration UI surfaces that drive a steady 11 to 15 percent of inbound trial signups. Fifth, an evidence-led benchmark or research-report content asset that earns top-of-funnel attention without paid amplification.
Every Belfast engagement starts with a 30-minute discovery call. The scope, timeline, and budget come back in writing within 48 hours. Greenwich Mean Time or British Summer Time, same-day response Monday to Friday 9 to 6.
Belfast cyber SaaS. 5x trajectories don't ship themselves.
30-minute call on GMT or BST. Written scope and fixed-price quote in 48 hours. In-person across central Belfast, the Cathedral Quarter, the Titanic Quarter, Queen's, and Catalyst Inc for retainer engagements.