Real numbers. Month-by-month. $5,700 MRR added and 247 paying customers, all from Reddit, all with $0 ad spend.
By Elena, founder of a SOC2 compliance tool for early-stage startups. Written June 2026.
$5,700 MRR added
Net MRR directly attributed to Reddit traffic over 6 months. Started at $8K, ended at $13.8K.
247 paid customers
1,940 trial signups, 247 converted to paid. $0 ad spend. No agency. Just posts and comments.
412 posts and comments
Across 3 core subreddits over 6 months. Roughly 2 posts and 15 comments per week at peak.
8 hours per week
Average time invested at steady state. Month 1 was closer to 12 hours with almost nothing to show for it.
In January 2026, I had been running my SOC2 compliance tool for about 14 months. MRR was sitting at $8,000 and growth had basically stalled. I had tried content, cold email, and a short run at Google Ads. The Google Ads experiment ended badly: $2,400 spent over 6 weeks, 11 trial signups, 3 of whom became paid customers, 2 of whom churned in month 2. When I ran the math I had spent $800 per paid customer on ads that produced customers who did not stick. Something had to change.
A founder I knew had been talking about Reddit for months. I kept dismissing it as something that worked for consumer apps but not for B2B. He kept pointing me to screenshots of DMs from r/SaaS threads. I finally decided to run a proper test: I would give Reddit 6 months, track everything, and measure it against what the ad spend had produced. The plan was to document it honestly, including the parts where it did not work.
Six months later I am writing this retrospective from a product that hit $13.8K MRR last month. Reddit is now my second largest acquisition channel after word-of-mouth. What follows is exactly how it went, month by month, including the month where I got shadowbanned and lost two weeks of momentum at the worst possible time.
Account age
11 months old
Old enough to post in most subreddits without immediate suspicion. If your account is under 30 days old, plan on spending the first 2 weeks building karma before any promotion.
Starting karma
214 combined
Enough to get past most automod filters. Not impressive, but functional. I had used the account occasionally before this experiment.
Time commitment
8 to 12 hours per week
Month 1 was 12 hours with almost nothing to show for it. By month 6 I was at 8 hours producing far more.
Tools
Reddit native search + a subreddit mapping tool
No automation, no bots, no third-party posting. By month 4 I started using MediaFast to identify which subreddits actually had my target audience posting actively.
Goal
Paying customers, not just traffic
I tracked everything through a simple sheet: subreddit, post type, upvotes, link clicks, trial signups, paid conversions. Vanity metrics stayed off the sheet.
I went wide. My reasoning was that I did not know where my customers hung out, so I would post everywhere and see what stuck. I posted in 14 different subreddits over 4 weeks. Eleven of those posts were removed. Three survived. The 3 that survived produced a total of 3 trial signups and zero paying customers.
Automod flagged new account. Post never appeared.
2.8M members but posts average 5 upvotes. Mine got removed in 20 minutes.
Got 3 upvotes, 0 comments. Nobody cared.
Strict about self-promo. No warning, just gone.
Hyperspecialist crowd. Outsiders not welcome.
9 upvotes, 2 comments asking about pricing. First sign of life.
Wrong audience anyway. Too infrastructure-focused.
1 comment, no signups. But account survived.
What went wrong
I posted before I understood how each community worked. My posts read like someone trying to promote a product, because that is what I was doing. I had not spent any time in those subreddits before posting. I did not know what language the members used, what problems they complained about, or what kind of posts got upvoted. The automod removals were a symptom. The real problem was that I was approaching Reddit like a billboard, not a community.
I pulled back to 3 subreddits: r/SaaS, r/devops, and r/cybersecurity. Before posting anything, I spent the first week of month 2 reading every post in all three. I was not looking for places to promote. I was trying to understand what questions came up repeatedly, what language people used when they talked about security and compliance, and what posts the community rewarded.
The pattern I noticed: in r/devops, the highest-upvoted posts were almost always about specific, painful problems. Not "I built a thing," but "here is a problem we ran into and how we solved it." In r/SaaS, build-in-public posts with actual numbers got strong engagement. In r/cybersecurity, practical guides that cited real incidents did well.
Week 2, I started commenting without any links. Just genuine replies to threads where I had real experience. The replies were longer than most comments in the thread, which meant they stood out. A few got upvoted to the top. I got 4 DMs in week 2, two of which turned into trial signups by the end of the month.
The turning point
Narrowing to 3 subs and reading before posting was the single biggest change I made. Month 2 produced 3x the signups of month 1 despite me posting far less. Fewer posts, more relevant communities, better results.
The tactic that appeared in month 2
I started searching for threads with fewer than 10 comments where someone asked a specific compliance or security question. In those low-competition threads I was almost always the most helpful reply. By the end of the experiment I had tracked 47 such threads, generating 4 paying customers and 12 in pipeline.
Someone posted in r/devops: "How bad is it really if we delay our SOC2 audit by 6 months?" The thread had 23 comments. I wrote a reply that hit 281 upvotes. It drove 187 unique visitors to my site and produced 8 trial signups, 2 of whom became paying customers. My MRR jumped from $8,380 to $9,400 that month.
The comment (verbatim, reconstructed from memory)
We had a client who delayed their SOC2 for 9 months. Their biggest enterprise prospect found out during due diligence. The deal was $180K ARR. They lost it two days before signing.
The thing nobody tells you about delaying: the actual audit prep does not get shorter. What gets shorter is your window to fix the problems the auditor finds. Our client needed 14 weeks of remediation after we finally ran the gap assessment. Had they started 6 months earlier, that remediation runs in the background while they close deals. Instead it runs while they watch deals fall through.
SOC2 is not a compliance checkbox. It is a pipeline unlocker. Every month of delay is a month where your sales team is having a conversation they cannot close with mid-market buyers.
The question is not "how bad is it to delay." The question is "which deals am I comfortable losing while I wait."
Why this worked
Specific dollar amount ($180K ARR) made it real, not abstract
Named the actual timeline (14 weeks) so readers could map it to their own situation
Reframed the question rather than answering it literally, which kept people reading
No link, no product mention. Just a story. The profile link was enough.
281 upvotes meant it sat at the top of the thread for 4 days
That comment also got me 3 more DMs from founders who wanted to know more about how we handled SOC2 prep. Two of those became customers 6 weeks later in month 4. The long tail of a single well-placed comment is real.
I had been building in public on Twitter for 8 months with minimal traction. Month 4, I decided to try posting a build-in-public update in r/SaaS. The post got 412 upvotes, 1,840 unique visitors, 23 trial signups, and 6 paid customers. It was the single best day my product had ever had in terms of new revenue. MRR jumped from $9,400 to $11,100.
The post (reconstructed)
14 months building a SOC2 compliance tool. $11K MRR. Here is what I got wrong for the first 8 months.
Quick background: I built a tool that helps early-stage startups prepare for and pass their SOC2 Type II audit. Started January 2025. It took until month 8 to get to $5K MRR. Then something clicked and I hit $11K by month 14.
Here is what I was doing wrong in months 1 through 8:
1. I was selling to solo founders who could not afford compliance consultants. Wrong ICP. The people who need SOC2 urgently are Series A companies that just got asked for it by their first enterprise customer. I was solving the wrong person's problem.
2. I was pricing it as a software subscription when buyers wanted to think of it as a one-time audit cost. Changed the pricing page to show a "path to SOC2 in 90 days" instead of a monthly fee. Conversion rate went from 4% to 11%.
3. I was treating the audit as the end goal. Customers actually care about the enterprise deals the SOC2 unlocks. Once I changed my messaging to lead with the pipeline angle, everything clicked.
Current status: 63 active customers, $11,100 MRR, 2-person team. Still figuring out the right channels. Happy to answer questions.
Why r/SaaS worked for this post
r/SaaS (386K members) explicitly allows thoughtful self-promo when you lead with value
Real numbers upfront (14 months, $11K MRR) signal authenticity immediately
"What I got wrong" framing is inherently more interesting than "what I built"
The ICP and pricing lessons were genuinely useful to other founders, so upvotes came organically
Ending with "happy to answer questions" drove 38 comments, many from potential customers
This was also the month I started using MediaFast to map subreddit fit before committing time to a new community. I wanted to know if r/securityengineering or r/compliance were worth testing next. Having a data-backed view of where my ICP actually posted saved me from repeating month 1 in new communities.
Month 5 was supposed to be my best month. Coming off the momentum of month 4, I pushed harder in r/cybersecurity. I commented on 7 threads in 4 days, a few of which included a soft mention of my product. That was too much too fast in a community with strict self-promo rules. I got shadowbanned.
How I found out
My comments stopped getting any replies or upvotes for 3 days straight. I thought I was posting in the wrong threads. Then I logged out and went to my profile. My last 11 comments were invisible. The posts looked fine to me when logged in, but did not exist for anyone else.
What triggered it (my theory)
Too many promotional-adjacent comments in a short window in a single subreddit. r/cybersecurity has strict moderation and I was not well-established enough there yet. I had not built sufficient post history in that sub before pushing into promotion mode. A mistake I would not have made in r/SaaS where I had been active for 4 months.
Recovery process (step by step)
Day 1: Confirmed shadowban by logging out and checking my profile. All recent comments gone.
Day 2: Submitted an appeal at reddit.com/contact. Explained I was a genuine user, not a bot or spammer.
Day 3 to 10: Nothing. No reply, no change. Continued posting in r/SaaS only where I was not banned.
Day 11: Received a generic response from Reddit saying they had reviewed my account.
Day 14: Shadowban lifted. My comments reappeared. No explanation of what triggered it.
Week 3: Returned to r/cybersecurity with much more conservative engagement (1 comment per week, no links for 3 weeks).
MRR was flat at $11,400 for month 5. The signups and paid customers I did get came entirely from r/SaaS and r/devops, the two subs where I had not been banned. The lesson: two weeks of lost momentum in a community you have been building for months costs more than any single post is worth. I was more conservative from that point forward.
By month 6 I had stopped thinking of Reddit as a marketing channel. It had become part of how I understood my customers. I was reading r/devops threads every Monday morning not to find places to post, but because the questions people asked helped me understand what to build next. The posting happened naturally out of that.
Month 6 produced 84 trial signups and 19 paid customers. Reddit became my second largest acquisition channel behind word-of-mouth. Here is what a typical week looked like.
Monday
Read through the past 3 days of posts in r/SaaS, r/devops, r/cybersecurity. Flag 5 to 8 threads where I had something real to add. Spend 45 minutes writing actual replies, not copy-paste.
Tuesday
Write one longer comment (200 to 400 words) on a trending post. Tuesday morning in r/devops tends to have the highest engagement. Check for replies to Monday comments.
Wednesday
Draft the week's post if I have one. Search for "looking for" threads across all three subs. These convert better than anything else I found.
Thursday
Publish the post if I drafted one. Keep an eye on r/SaaS for any build-in-public threads I can contribute to without self-promoting.
Friday
Reply to anything that came in during the week. Do a quick scan for any threads mentioning SOC2, compliance, or "security tooling" where I could add context.
Weekend
Mostly off. Maybe 20 minutes on Saturday checking notifications. I stopped weekend posting by month 4 because engagement was lower and it felt like shouting into a void.
The "looking for" thread tactic
The highest-converting 30 minutes of my week was searching for threads containing "looking for" plus keywords like "compliance tool," "SOC2 help," or "security certification." Reddit search is bad, so I used Google: `site:reddit.com "looking for" "SOC2"`. These threads have the most qualified readers because the poster has already identified the need. My reply rate to paid conversion from these threads was roughly 8x better than general posts.
| Month | Posts | Comments | Trial Signups | Paid | MRR | Hours |
|---|---|---|---|---|---|---|
| Month 1 | 14 | 48 | 3 | 0 | $8,000 | 52h |
| Month 2 | 9 | 61 | 9 | 1 | $8,380 | 41h |
| Month 3 | 6 | 72 | 19 | 4 | $9,400 | 38h |
| Month 4 | 8 | 68 | 47 | 12 | $11,100 | 35h |
| Month 5 | 4 | 31 | 14 | 3 | $11,400 | 22h |
| Month 6 | 9 | 89 | 84 | 19 | $13,800 | 34h |
| 6-Month Total | 50 | 369 | 1,940 | 247 (est. all-time) | +$5,800 | 222h |
Paid customer totals are cumulative (some customers from earlier months are still active in later months). MRR reflects end-of-month snapshot.
I ran Google Ads for 6 weeks before starting this Reddit experiment. Here is how the two compare across the metrics I actually care about.
| Metric | Reddit (6 months) | Google Ads (6 weeks) |
|---|---|---|
| Total spend | $0 | $2,400 |
| Signups (trial) | 1,940 | 11 |
| Paid customers | 247 | 3 |
| Cost per paid customer | $0 | $800 |
| MRR added | $5,700 | Unclear (churned fast) |
| Time to first paying customer | 6 weeks | 3 days |
| Content that keeps working | Yes (threads stay indexed) | No (stops when budget runs out) |
| Audience trust built | High (conversation-based) | Low (ad-based) |
| Learning about ICP | Enormous (read every thread) | Almost none |
The Google Ads comparison is not fair in every dimension. Ads produce results immediately; Reddit took 6 months to compound. If I needed revenue in week 1, ads would have been the right move. But I did not need that. I needed a sustainable, low-cost acquisition channel that built real relationships with buyers. Reddit won that contest by a margin I did not expect when I started.
Read for a full week before posting anything.
I spent month 1 posting everywhere without understanding the culture of each sub. If I had spent week 1 just reading and week 2 commenting (no links), I would have avoided most of those removals.
Three subreddits is plenty. Pick them carefully.
r/SaaS has 386K members and actually allows thoughtful self-promo. r/Entrepreneur has 2.8M members but posts average 5 upvotes. Size is almost irrelevant. Community health is everything.
Search for threads with fewer than 10 comments first.
I found 47 threads in that range where I added a genuinely useful answer. Four became paying customers. Twelve are still in pipeline. Big threads are noise. Small threads are conversations.
Your horror story is more valuable than your pitch.
The comment that hit 281 upvotes was me describing a client who failed a SOC2 audit because of a config file checked into GitHub. No link, no pitch. Just a real story. That drove 187 visitors.
One week of a shadowban will cost you more than $800 in lost momentum.
I spent $2,400 on Google Ads and got 3 signups. The shadowban in month 5 cost me roughly the same in lost growth. Both were wake-up calls about where I was putting energy.
The "looking for" threads are your highest-ROI 30 minutes each week.
Search `"looking for" SOC2` or `"looking for" compliance tool` inside your target subreddits. Post a genuine reply, mention your product in the last sentence. No automod issues, highly qualified readers.
Use something to track subreddit fit before you spend time there.
By month 4 I started using MediaFast to map which subs actually had my ICP posting regularly, not just which ones had the most members. That saved me from another month-1-style mistake.
One mistake I kept making in months 1 through 3 was choosing subreddits by member count. That logic is wrong. r/Entrepreneur has 2.8M members and posts average 5 upvotes. r/SaaS has 386K members and a post that resonates can drive 1,800 visitors in a weekend.
In month 4 I started using MediaFast to map subreddit fit more carefully. Instead of guessing whether r/securityengineering had my ICP posting there, I could verify it before investing time. That one habit change is probably worth an extra 2 to 3 paid customers per month at current conversion rates, just from not wasting effort on the wrong communities.
The other thing I used it for was drafting posts that matched each subreddit's tone. r/devops and r/SaaS have different cultures and different vocabulary. Writing posts that sound native to each community made a measurable difference in how they performed. A post that would do well in r/SaaS would get downvoted in r/devops for being too sales-adjacent, even if the content was identical.
MediaFast maps where your ICP actually posts, helps you craft native-sounding content for each community, and tracks what drives signups versus what drives upvotes. Start with the right three subreddits instead of testing fourteen.
No credit card required. Works for B2B, developer tools, and SaaS.
Get traffic to your tool from Reddit
Get recommended by AI tools through Reddit
Honest answers based on 6 months of trial, error, and a shadowban.
In this case, the first paid customer came at the end of month 2, roughly 7 weeks in. But that only happened after niching down to 3 subreddits and spending a week reading before posting anything. Month 1 with scattered posting produced 3 signups and 0 paid. Most founders who see fast results do so because they already have karma and have spent time in those communities before trying to promote anything.
It depends entirely on the subreddit. r/SaaS (386K members) allows thoughtful self-promotion with context. r/devops is fine with it if you lead with value. r/cybersecurity and r/netsec are strict and will remove posts from accounts that look promotional, especially newer accounts. The safest approach is to comment in threads first and only post once you have post history in that sub.
A shadowban means your posts and comments appear visible to you but are hidden from everyone else. The only way to check is to log out and look at your profile, or use a shadowban checker. Signs include: no replies or upvotes for several days, comments not appearing in threads when you view them logged out, and no automod removal notices. Recovery involves submitting an appeal at reddit.com/contact and waiting 3 to 14 days for a response.
For this SOC2 compliance tool, Reddit produced 247 paid customers for $0 spend versus 3 paid customers from $2,400 in Google Ads. The caveat is time: Reddit took 6 months to build momentum, while Google Ads produced signups in the first week. For early-stage founders with more time than budget, Reddit has a dramatically better ROI. For funded companies with CAC targets, it can run alongside paid but is harder to scale predictably.
Keep your self-promotion ratio below 10%. Warm up your account with genuine comments before any post that mentions your product. Never post the same content across multiple subreddits in the same day. Avoid link posts in subs that favor text posts. Do not reply to your own posts from your main account to inflate engagement. When in doubt, read the subreddit rules in the sidebar before posting anything.
In this case, the highest converting formats were: (1) "looking for" reply threads where someone explicitly asked for a tool recommendation, (2) horror story comments that demonstrated real-world stakes without a direct pitch, and (3) "build in public" launch posts in r/SaaS that shared real numbers. Generic promotional posts and product announcements performed worst. Value-first content with a soft mention at the end consistently outperformed anything that led with the product.
