Article content and detailed guides remain in English. The selected language applies to controls and quick instructions.

Back to articles

Use cases

Using Email Research for Competitive Intelligence

By Email ExtractorPublished 8 min read
On this page

What Competitive Intelligence from Email Research Looks Like

Competitive intelligence (CI) means gathering publicly available information about competitors to make better business decisions. Email research, domain analysis and related public data sources reveal details about competitor organisations that are difficult to find through traditional research:

Intelligence type What it reveals How email research helps
Organisational structure Who works where, team sizes, reporting lines Company email patterns, team page analysis, conference speaker affiliations
Hiring activity Growth areas, new initiatives, technology bets Job postings with team email contacts, recruiter outreach patterns
Technology stack What tools and platforms competitors use Email headers, MX records, marketing technology signals
Market positioning How competitors describe themselves to prospects Sales outreach emails, marketing emails, newsletter content
Partnership network Who competitors work with Co-branded emails, partner directory listings, joint webinar promotions
Customer base Who competitors sell to Case study contacts, testimonial sources, user community members
Geographic expansion Where competitors are growing Email domain patterns by region, job postings by location

Domain and Email Infrastructure Analysis

What MX records reveal

A company's MX (Mail Exchange) records show which email infrastructure they use:

MX record pattern What it indicates
aspmx.l.google.com Google Workspace (formerly G Suite)
*.mail.protection.outlook.com Microsoft 365
*.pphosted.com Proofpoint email security
*.mimecast.com Mimecast email security
*.barracudanetworks.com Barracuda email security
*.iphmx.com Cisco IronPort email security
In-house MX records Self-hosted email (large enterprises or technical companies) 
# Check a competitor's MX records
dig MX competitor.com +short

# Check SPF record (reveals email sending services)
dig TXT competitor.com +short | grep "v=spf1"

# Check DMARC record
dig TXT _dmarc.competitor.com +short

What SPF records reveal

SPF records list every service authorised to send email on behalf of a domain. This reveals the marketing, sales and operational tools a company uses:

SPF include Tool / service
_spf.google.com Google Workspace
spf.protection.outlook.com Microsoft 365
sendgrid.net SendGrid (email delivery)
amazonses.com Amazon SES (email delivery)
mktomail.com Marketo (marketing automation)
mcsv.net or servers.mcsv.net Mailchimp
hubspot.com HubSpot (CRM/marketing)
salesforce.com Salesforce
zendesk.com Zendesk (support)
freshdesk.com Freshdesk (support)
outreach.io Outreach (sales engagement)
intercom.io Intercom (customer messaging) 
# Parse SPF record to find all included services
dig TXT example.com +short | grep "v=spf1"
# Example output:
# "v=spf1 include:_spf.google.com include:sendgrid.net
#  include:mktomail.com ~all"
# This company uses Google Workspace, SendGrid and Marketo.

What DMARC records reveal

DMARC element What it indicates
p=none Company monitors but does not enforce email authentication (less mature)
p=quarantine Company quarantines unauthenticated email (moderate maturity)
p=reject Company rejects unauthenticated email (mature email security)
rua=mailto:... Where aggregate reports are sent; may reveal a third-party DMARC service
ruf=mailto:... Where forensic reports are sent

Organisational Intelligence from Public Sources

Team page and directory analysis

Source Intelligence value How to collect
Company "About" or "Team" page Org structure, team size, key personnel Save as HTML; extract names and titles
LinkedIn company page (employees tab) Department sizes, growth trends, seniority distribution Manual review (scraping LinkedIn violates ToS)
Conference speaker bios Technical expertise, thought leadership, project details Save conference pages as HTML or PDF
Patent filings R&D team members, innovation areas USPTO/EPO searches
Regulatory filings Officers, subsidiaries, financial data SEC EDGAR, state business registrations
Press releases New hires, product launches, partnerships Company newsroom

Save team pages, conference speaker lists or press releases as HTML or PDF files. Upload to Email Extractor to extract any email addresses contained in the pages.

Job posting analysis

Job postings reveal what a competitor is building, what technology they use and where they are growing:

Job posting element Intelligence value
Job title What roles they are creating; new teams or initiatives
Required skills Technology stack, methodologies, tools
Team description How they structure their organisation
Location Geographic expansion plans
Salary range (if listed) Compensation benchmarks
Reporting structure Organisational hierarchy
Volume of postings Hiring velocity; growth rate
Repeated postings Roles they struggle to fill; potential retention issues
Job posting source How to access
Company careers page Direct website access
LinkedIn job postings LinkedIn search
Indeed, Glassdoor Job board search
Hacker News "Who's Hiring" Monthly threads
AngelList / Wellfound Startup-focused job board
Government job postings USAJobs.gov, state job sites

Technology stack research

Beyond DNS records, additional sources reveal a competitor's technology:

Source What it reveals How to check
BuiltWith or Wappalyzer Website technology stack Online lookup or browser extension
Job postings (required skills) Backend, frontend, infrastructure technology Aggregate required skills across postings
GitHub organisation page Open source projects, programming languages, frameworks GitHub search
Conference talks and blog posts Technology choices, architecture decisions Company blog, conference archives
Integrations page What tools their product connects to Company website
Status page Infrastructure provider, architecture (microservices vs monolith) statuspage.io or company status page
Security.txt or humans.txt Team information, security contacts Check /.well-known/security.txt and /humans.txt

Building a Competitive Intelligence Programme

Setting up monitoring

What to monitor Frequency Tools
Competitor job postings Weekly Job board alerts, RSS feeds
Domain DNS changes (MX, SPF) Monthly DNS monitoring scripts
New patent filings Monthly USPTO alerts, Google Patents
Press releases and news Daily or weekly Google Alerts, Feedly
Pricing page changes Monthly Wayback Machine, page monitoring tools
Product changelog Weekly RSS feeds, product blog subscriptions
Conference appearances Per event Conference website monitoring
Regulatory filings Quarterly SEC EDGAR alerts, state business databases
Social media activity Weekly Social monitoring tools
Customer reviews Monthly G2, Capterra, Trustpilot monitoring

Organising intelligence

Category What to track Format
Company profile Overview, founding, funding, leadership One-pager per competitor
Product comparison Features, pricing, positioning Feature matrix spreadsheet
Technology stack Tools, infrastructure, development practices Technology inventory
Team and org Department sizes, key hires, departures Org chart or team list
Financial Revenue (if public), funding, growth metrics Financial summary
Strategy signals Job postings, patents, partnerships that indicate direction Signal log with dates
Win/loss analysis Deals won or lost against each competitor CRM data and sales team debrief notes

Turning intelligence into action

Intelligence Action
Competitor is hiring for a new product area Assess threat; consider entering the same space or differentiating
Competitor switched from Marketo to HubSpot May indicate downscaling enterprise marketing; opportunity with their enterprise customers
Competitor patent in your technology area Review for potential infringement; consider licensing or designing around
Competitor posting many senior sales roles Expanding sales capacity; prepare for more competitive deals
Competitor laying off in a specific department Opportunity to hire their talent; may indicate strategic retreat
Competitor keynoting at an industry conference Prepare counter-messaging; consider attending or sponsoring
Competitor's customer posting negative reviews Opportunity to reach dissatisfied customers with targeted outreach

Email-Based Competitive Intelligence

Signing up for competitor communications

What to sign up for Intelligence value How to manage
Newsletter Messaging, content strategy, product updates Use a dedicated email address
Product trial Features, UX, onboarding flow, pricing Use a non-company email
Webinars Thought leadership, sales messaging, customer stories Register with monitoring email
Community / forum Customer pain points, feature requests, satisfaction Use monitoring account
Partner programme Partnership structure, commission rates, co-marketing Use business email if appropriate

Analysing competitor email marketing

Element to analyse What it reveals
Send frequency How aggressively they communicate with their list
Subject lines Messaging themes, urgency tactics, personalisation approach
Email design Brand maturity, resource investment in email
CTAs (calls to action) What they want recipients to do; current business priorities
Personalisation level How sophisticated their marketing automation is
Segmentation Whether different content goes to different audiences (sign up with multiple profiles)
Unsubscribe process Compliance maturity; how they handle opt-outs
Sending infrastructure Email headers reveal ESP (email service provider) and sending domain

Analysing email headers

When you receive email from a competitor (newsletter, marketing, sales outreach), the email headers contain technical details:

Header What it reveals
From: / Reply-To: Email sending domain; sometimes a subdomain (e.g., email.competitor.com)
X-Mailer or X-Campaign Email marketing platform used to send
List-Unsubscribe Unsubscribe mechanism; sometimes reveals the ESP
Received: headers Sending infrastructure; IP addresses
DKIM-Signature: d= Authenticated sending domain
Return-Path: Bounce handling domain; may differ from From domain
X-SG-ID, X-PM-Message-Id, etc. Vendor-specific headers that identify the ESP
Activity Status Notes
Checking public DNS records Permitted Public information; standard research
Reading public job postings Permitted Published for public viewing
Signing up for competitor newsletters Permitted Standard competitive research
Reviewing public patent and grant databases Permitted Government data; designed for public access
Saving publicly accessible team pages Generally permitted Respect robots.txt and terms of service
Scraping LinkedIn profiles Against LinkedIn ToS Use LinkedIn manually or use authorised tools
Using fake identities to access gated content Ethically questionable Violates trust; may violate terms
Accessing non-public information Not permitted Trade secrets, confidential data, hacking
Inducing employees to share confidential information Not permitted May violate trade secret laws
Reverse engineering products Varies by jurisdiction Check local laws; often restricted by licence agreements

Data handling

Practice Why it matters
Document your sources Ensures intelligence is based on public information
Separate fact from inference Clearly label what is observed vs interpreted
Store data securely Competitive intelligence is sensitive to your own company
Review periodically Old intelligence can lead to bad decisions
Share appropriately Not everyone in your organisation needs all CI data
Comply with data protection laws GDPR, CCPA apply to personal data collected through CI

Extract emails

Explore tools

Verify emails

Check address validity before using your list.

ZeroBounce

Email Verification

Verifies email lists and provides tools for monitoring deliverability.

Useful when list cleaning and sender health belong in one workflow.

Explore ZeroBounce (opens in a new tab)