If you want to go enterprise right away, you need lot of dollars in my opinion or you need to have internal connections at a big ticket company. Otherwise, start small. Go for companies that are not looking for SOC2 (SMBs could be good to start with).

So the answer may be: you don't do SOC2 clients unless you already have connections. I could be wrong but I sell in SMB space so I may be biased.

Oh and you have to do it manually regardless. No ads. No content marketing etc. Talk to those potential customers.