For sure. Big challenge with those companies—that I found—is that they want a lot of credentials + proof that are simply outside of the reach of small businesses. So even if you're full-time, it may be a "good luck" scenario.

Although SOC2 is fairly easy to get, it's expensive for bootstrapped founders (maybe $30-45k all in.)

It wasn't enterprise, but the 600 person company (that I knew very well) simply wouldn't work with us in the end because we were too small (2 of us.) It sucked, a lot, because the deal cycle took about 18 months to get to a firm no. Since then, everyone involved has left the company