GTMonkey cold email stack: the deep dive

Prices as of Sunday 4 October 2026. (vendor) means read on the vendor's own pricing or policy page today; (third party) means taken from a review, comparison or directory site and not confirmed by the vendor. EUR is converted at about USD 1.17 (assumed rate, not checked). Where a later check corrected the first research, the correction is used.

Summary

• Stack B (posted to you, about USD 130 to 145 a month at 2,000 emails) is already the cheapest sensible option. Tidied up (lemlist on yearly billing, CRM on a free tier) it comes to about USD 115 to 130. Nothing cheaper meets every must-have with vendor proof today.
• Cheaper senders exist but are unproven. Saleshandy Starter USD 41 monthly or USD 34 yearly (vendor: warm-up, API and webhooks included) and Instantly Growth USD 47 monthly or USD 37.60 yearly (vendor: webhooks on all plans) both undercut lemlist. Neither is vendor-proven on whole-company stop, out-of-office pause and the RFC 8058 header together. Test them in their trials; switch only if they pass.
• lemlist is the only cheap sender with a vendor-documented whole-company pause on one reply and AI out-of-office detection on the base plan, and at 10,000 to 20,000 a month it stays the cheapest because 50,000 emails a month are included at USD 55 yearly.
• Smartlead, the experts' favourite, fails our webhook must-have below USD 174 a month (vendor: no API or webhooks on Base USD 39 or Pro USD 94).
• Transactional engines are out for cold email. SES, SendGrid, Mailgun, Postmark, Resend, SMTP2GO, Brevo and Mailjet all bar cold, scraped or purchased lists in their own terms. Use them only for the CRM's own system mail.
• Two must-haves are ours to build or test: no sender documents a 1 percent bounce auto-pause (we build it from bounce webhooks), and lemlist's RFC 8058 one-click header is not confirmed (test raw headers on a Gmail inbox before launch).
• At scale the cost is mailboxes, not software. S2 at 10,000 a month is about USD 245 to 265, of which about USD 127 is 16 Google Workspace mailboxes.
• The generic info@ sub campaign (S3) adds about USD 20 to 30 a month and is PECR safe only for limited companies and LLPs matched on Companies House.

Planning assumptions

S1: cheapest stack meeting every must-have at 2,000 emails a month

S1 against B

Honest read: B is right. The only real lever left is the sender: Saleshandy Starter would save about USD 14 to 28 a month and Instantly Growth about USD 17 to 22, but only if a trial proves company-wide stop, out-of-office pause and the RFC 8058 header. The earlier option, Hunter Starter USD 49 plus ZeroBounce (USD 39 per 2,000 checks), is dearer than scrape plus MillionVerifier for the same job.

S2: the same at 10,000 emails a month

S3: generic email sub campaign, add-on to S1

Scope: about 1,000 extra sends a month (about 330 companies at 3 touches), only to role addresses (info, hello, sales, enquiries, office, admin) at companies matched to a live Ltd, PLC or LLP on Companies House.

Why it is within PECR: the ICO says "You can email or text any corporate body (a company, Scottish partnership, limited liability partnership or government body)." and that the PECR email rule "does not apply to corporate subscribers". The ICO also says that if you do not know the name of the person, "you are not processing personal data and the UK GDPR does not apply". Identity and a working opt-out are still required. A generic address at a sole trader is still an individual subscriber, so the Companies House gate is mandatory, not optional. SendGrid's policy names generic aliases such as info@ as banned without consent, another reason this must go through Workspace mailboxes and a cold sender.

What we build ourselves (all stacks)

• Companies House join: import the monthly bulk file, match scraped rows by normalised company name and postcode, keep only live Ltd, PLC and LLP records, store the registered name.
• Normalised company name pushed into lemlist, because its company pause matches the Company Name field exactly.
• Webhook receiver for replies, bounces, unsubscribes and sends into the mini CRM; one global suppression list.
• Bounce auto-pause: pause a campaign or mailbox when hard bounces pass 1 percent over a rolling 7 days, with a minimum of 200 sends before the rule fires; add a 0.3 percent complaint pause.
• Claude batch step that writes a short first email (under 80 to 100 words) and 2 follow-ups per lead, with human spot checks, then loads them as custom fields.
• Generic local-part allowlist and robots.txt handling for S3.
• Launch checks: SPF, DKIM, DMARC (p=none is enough), a raw-header test for List-Unsubscribe-Post on a Gmail inbox, Postmaster Tools on each domain.

Cross check with cold email operators

Most operator detail came from third-party summaries and vendor case studies, so confidence is moderate. Instantly's and lemlist's benchmarks are self-reported; Lavender sells the scoring it benchmarks.

Open source: where it saves and where it costs

Bottom line: open source saves real money on finding, costs more than it saves on verification, and on sending it trades USD 55 to 69 a month for deliverability risk we cannot afford at this stage. SES or SendGrid for cold email is not a saving either: it breaches their terms and gets the sending account paused.

Best tools by area

Find: data and enrichment

Verify

Expect about a quarter of small-business addresses on catch-all domains (vendor blogs, unaudited). Send verified-valid first; hold catch-all and role results for a small throttled slice with its own bounce counter.

Send: cold email platforms

Email engines (ESPs): not for cold email

Mailboxes and warm-up

Gmail rules (vendor): above 5,000 a day you need SPF, DKIM, DMARC, one-click unsubscribe with "List-Unsubscribe-Post: List-Unsubscribe=One-Click", and a spam rate under 0.10 percent, never 0.30 percent. We are far below 5,000 a day but should meet them anyway.

Orchestration, CRM and writing

Compliance notes

• UK PECR (ICO): companies, Scottish partnerships, LLPs and government bodies can be emailed without consent; sole traders and some partnerships cannot without consent or soft opt-in. Never hide identity; always give a valid opt-out.
• UK GDPR: named employee addresses are personal data, so record a legitimate interests assessment, link a privacy notice and honour objections. Unnamed generic addresses at companies are outside UK GDPR (ICO).
• Fines: the Data (Use and Access) Act 2025 reportedly raised PECR fines to UK GDPR levels, up to GBP 17.5 million (third party; confirm in-force date).
• US later (FTC, CAN-SPAM): applies to B2B; honour opt-outs within 10 business days; valid postal address; accurate headers; penalties up to USD 53,088 per email. US small business lists would need a source such as Data Axle (third party pricing).
• Google Maps: Maps Platform terms reportedly bar exporting or scraping Maps content (third-party mirror). This is a contractual and blocking risk, not a PECR one. The Companies House first route avoids it.

Risks

1. Workspace suspension. Google's AUP bars unsolicited mass email. Low volume, secondary domains, verified lists and fast opt-outs keep the risk down, not away.
2. RFC 8058 not confirmed on lemlist. If the header is missing, we fail a must-have and Gmail's guidance. Test before the first campaign.
3. Sole traders slipping through. A weak Companies House match lets individuals in. Registered offices are often an accountant's address, so name matching must carry most of the weight; when unsure, exclude.
4. Google Maps terms. Scraping Maps can mean blocks and a contract breach. Keep it a deliberate decision.
5. Claude subscription terms. Scripted use for a commercial lead engine is a grey area; move to the API before scaling.
6. Small-sample bounce pauses. A 1 percent line on 50 sends is one bounce. Use a 200-send minimum.
7. Catch-all and role addresses inflate bounces, especially in S3. Isolate on its own domain.
8. Prices moving. lemlist USD 69 monthly, MillionVerifier small packs, Apify add-ons and all third-party figures need checking at checkout.

Open questions

• Does lemlist send List-Unsubscribe-Post (RFC 8058)? Test raw headers on a Gmail inbox during the 14 day trial.
• Do Saleshandy and Instantly pass company-wide stop, out-of-office pause and the header test? If yes, the sender can drop to USD 41 to 47.
• Are we comfortable scraping Google Maps, or do we go Companies House first and find websites another way?
• When does copy writing move from the Claude subscription to the API, and at what budget?
• What share of UK limited company websites give a usable email? Pilot 200 sites and count.
• Direct Workspace or reseller mailboxes at 10,000 a month?
• Which legal entity and postal address sign the emails, and who signs off the legitimate interests assessment?

Sources

Every page the research read, by area. Links open the source; prices on vendor pages can change after 4 October 2026.