> Why would I enter into a commercial relationship with you if our first interaction is you misrepresenting yourself or worse, outright lying to me?

A 'security' consultancy posted an article on LinkedIn on 'critical security vulnerabilities' they found on the web app from a company I worked at. The company hired them to do an assessment. The most critical vulnerability was a bug on a login page preventing registration.

So not only does cold calling work, bad-mouthing on social media seems to be a viable strategy. I'd have blacklisted them.