Deepwatch Appears in 3.8% of AI Answers. Here's Our Five-Step Plan to Improve Its AI Visibility.

Mark HuntleyBy Mark HuntleyFounder and CEO
10 minutes read

Key Takeaways

  • Deepwatch is mentioned in a small share of benchmark answers, but most appearances are positive recommendations.
  • The main gap is placement: the company rarely reaches the top three and never ranks first in the sample.
  • Month-to-month results improved in November 2026, with mentions and recommendations both rising from October.
  • The recommended work focuses on verified page updates, cited-source review, and content built around buyer questions.

Answer Capsule

In November 2026, Deepwatch appeared in 16 of 416 AI answers included in the Managed Detection and Response benchmark (3.85%). It received 12 recommendations (2.88%), with 5 Top 3 placements and 0 first-place recommendations. A mention means the company appeared in an answer; a recommendation means the answer affirmatively endorsed it.

Our plan compares the company with its competitors, checks conflicting AI claims against reliable sources, and identifies website pages, third-party sources and buyer questions to address. The historical results show how the figures changed across available months. Different monthly samples limit those comparisons, and conflicting AI claims require verification before corrections are proposed.

Current AI visibility

Questions This Section Answers

  • How do Deepwatch mentions, recommendations and placements compare with its Managed Detection and Response peers?

Deepwatch recorded 16 mentions (3.85%) and 12 recommendations (2.88%) across 416 answers included in the benchmark. Top 3 placements numbered 5; first-place recommendations numbered 0. Framing among its mentions was 12 positive, 4 neutral and 0 negative.

Rank

Company

Mentions

Mention rate

Recommendations

Recommendation rate

Top 3

Top 3 rate

#1

#1 rate

1

CrowdStrike Falcon

398

95.67%

325

78.13%

300

72.12%

227

54.57%

2

SentinelOne

345

82.93%

268

64.42%

198

47.60%

8

1.92%

3

Sophos Intercept X

257

61.78%

220

52.88%

96

23.08%

15

3.61%

4

Arctic Wolf

157

37.74%

125

30.05%

100

24.04%

52

12.50%

5

Rapid7 InsightIDR

95

22.84%

68

16.35%

16

3.85%

2

0.48%

6

Expel

71

17.07%

53

12.74%

29

6.97%

2

0.48%

7

Red Canary

56

13.46%

42

10.10%

13

3.13%

0

0.00%

8

eSentire

62

14.90%

38

9.13%

9

2.16%

0

0.00%

9

Secureworks Taegis

40

9.62%

23

5.53%

10

2.40%

1

0.24%

10

Deepwatch

16

3.85%

12

2.88%

5

1.20%

0

0.00%

Deepwatch appears in a small share of benchmark answers, yet most of those appearances carry an affirmative recommendation. That gap between reach and endorsement is the useful signal: when the company does surface, the answers tend to speak well of it rather than merely list it.

Position is the weaker dimension. Deepwatch sits in the top three in only a handful of answers and never takes first place, so it is present in the conversation but rarely the answer an AI service leads with. Reach, recommendation and placement should be tracked as separate goals.

For the agency, this argues for widening where Deepwatch shows up before chasing first-place framing. Proposed work would map which question types produce mentions and which produce recommendations, so effort goes where endorsement is already close.

What changed since last month

Questions This Section Answers

  • How did Deepwatch counts and coverage differ across the available monthly snapshots?

Metric

Jul 2026

Aug 2026

Sep 2026

Oct 2026

Nov 2026

Mentions

7 / 326 (2.15%)

7 / 447 (1.57%)

8 / 467 (1.71%)

8 / 447 (1.79%)

16 / 416 (3.85%)

Recommendations

5 / 326 (1.53%)

5 / 447 (1.12%)

6 / 467 (1.28%)

4 / 447 (0.89%)

12 / 416 (2.88%)

Top 3 recommendations

1 / 326 (0.31%)

0 / 447 (0.00%)

0 / 467 (0.00%)

1 / 447 (0.22%)

5 / 416 (1.20%)

#1 recommendations

0 / 326 (0.00%)

0 / 447 (0.00%)

0 / 467 (0.00%)

0 / 447 (0.00%)

0 / 416 (0.00%)

From October 2026 to November 2026, Deepwatch's mention count rose from 8 to 16, while its recommendation count rose from 4 to 12. The recommendation rate was 0.89% and 2.88% respectively.

The November sample shows more mentions and more recommendations than October, and the top-three count also rose. First place stayed at zero throughout, so the movement is in presence and endorsement rather than in leading position.

The monthly samples are separate selections, and a different answer total does not explain why counts or rates moved. The observed shift should be read as a recorded change in this sample, not as evidence that anything the company did caused it.

A sensible next step is to keep watching whether the gain holds across further samples before treating it as a trend. Proposed work would log which questions drove the November appearances so the pattern can be tested rather than assumed.

AI recommendation trend

Observed recommendation rate (%), Jul 2026 to Nov 2026

0%0.75%1.5%2.25%3%Jul 2026Aug 2026Sep 2026Oct 2026Nov 20261.53%Jul 2026: 1.53%1.12%Aug 2026: 1.12%1.28%Sep 2026: 1.28%0.89%Oct 2026: 0.89%2.88%Nov 2026: 2.88%
  • Deepwatch2.88%

Separate selected monthly samples. Missing points are unavailable, not zero. Provider/prompt equivalence is unverified; rate movement does not demonstrate causation.

/ Take the next step

Want to Understand Your AI Citation Footprint?

We start every engagement with a full audit of how AI systems reference your brand today.

Measurable, Repeatable Programme

Build a durable foundation of credible citations that compounds over time and continues to influence AI answers as new queries emerge

Citation Architecture Review

Identify which high-authority community sources are and aren't working in your favour across AI platforms.

AI Visibility Audit

Understand exactly how LLMs are referencing your brand today and which sources are shaping those answers.

Step 1. Measure

Questions This Section Answers

  • What should the agency measure and verify first for Deepwatch?

AI answers contained 0 conflicting claims about Deepwatch: 0 critical, 0 high, 0 medium, 0 low. Of these, 0 were rated critical or high priority; the critical claims are included in that total. These ratings help prioritize fact-checking. They do not establish that a company or publisher made an error.

No conflicting claims about Deepwatch were recorded in the captured answers, so there is nothing to fact-check from this month's evidence. That is a clean starting position, not proof that every statement elsewhere is accurate.

A visibility comparison would still help the client see where Deepwatch sits against the larger MDR names and which question types favor competitors. Pairing that with a short list of claims worth verifying gives the team a clear order of work.

Proposed work includes a baseline scorecard and a scoped fact-review register, each entry with an owner and an evidence requirement. Ratings would guide priority only; they would not be treated as findings that a company or publisher got something wrong.

Step 2. Make the website consistent

Questions This Section Answers

  • Which recorded claim differences about Deepwatch should be verified before proposed page edits?

No results are available for this part of the analysis.

Both columns quote AI answers, not verified company facts. Resolve the entity, date and source before deciding whether a correction is warranted; different dates can explain an apparent conflict.

This part of the analysis returned no results, so there are no disputed topics to resolve for Deepwatch this month. The absence is an empty observation, not a clean bill of health for every page.

Where claims do surface in future samples, the first task is to establish the entity, the date and the source behind each one. Apparent conflicts often dissolve once those are pinned down, and different dates can explain what looks like a contradiction.

Proposed work is a verification pass before any page brief is written. Briefs would be drafted only for topics that survive that check, and no correction would be proposed until a current primary source confirms the position.

Step 3. Align the external narrative

Questions This Section Answers

  • Which cited third-party pages are relevant to fact review for Deepwatch?

Cited page selected for review

Citation appearances in all captured answers

Answers mentioning the company

Conflicting claims linked to this page

https://mspcompanies.us/mssp-list

6

6

0

https://gartner.com/reviews/market/managed-security-services

17

5

0

https://msspalert.com/top-250

9

5

0

https://discovermsps.com/managed-security-service-providers/

5

5

0

https://gartner.com/reviews/market/managed-detection-and-response

68

4

0

https://reddit.com/r/cybersecurity/comments/1532oea/looking_for_a_compmay_that_does_overall_soc/

12

4

0

These pages were selected because they relate to the company in the captured answers. Their current contents still need checking before any correction request. A page linked to a conflicting claim is not necessarily its cause, and the same answer may contribute to more than one row.

The cited pages selected for review span directories, review platforms, an industry news list and a community thread. Several are cited often across captured answers, but citation alone does not show that a page shaped what an answer said.

None of these pages is linked to a conflicting claim about Deepwatch, so there is no correction case to pursue. The useful work is reviewing what each page currently says and whether Deepwatch is represented accurately and in the right company.

Proposed work is a source review with evidence-backed requests where a gap is confirmed. Publishers control their own pages, so requests would be framed as information, and any response recorded separately from the request itself.

Step 4. Optimize priority company pages

Questions This Section Answers

  • Which observed Deepwatch website pages should receive review briefs?

Company website page

Citation appearances in all captured answers

Benchmark answers citing the page

Recommending answers citing the page

https://deepwatch.com/

4

0

0

https://deepwatch.com/about/

1

0

0

https://deepwatch.com/aws-managed-security/

1

0

0

https://deepwatch.com/glossary/mdr-vs-xdr/

1

1

0

https://deepwatch.com/resource/deepwatch-overview/

1

0

0

https://deepwatch.com/trust/

1

0

0

https://security.deepwatch.com/

1

0

0

The company's website was cited 10 times across 7 distinct page addresses; the table shows 7 pages selected for review. Zeros in the answer columns mean no matching answers were recorded. A cited page is not automatically a page that accompanied a recommendation.

Deepwatch's own site was cited across several distinct pages, but almost none of those citations appeared in answers that recommended the company. The glossary page is the one exception where a benchmark answer cited it, and even there no recommendation followed.

That pattern suggests the site is being read for definitions and background rather than as a reason to recommend. The pages themselves still need checking before any conclusion is drawn about their content.

Proposed page briefs would use approved facts and the questions buyers actually ask, applied to the existing page list rather than assuming new pages are needed. Each brief would name the audience question it answers and the evidence behind every claim.

Step 5. Publish around buyer questions

Questions This Section Answers

  • Which observed buyer questions support content briefs for Deepwatch?

Question observed in the research

Benchmark answers to this question

Company mentions

Company recommendations

list of managed security service providers

2

2

2

What is the best security monitoring service?

2

1

1

Who is the best for managed cybersecurity?

3

1

1

list of mssp companies

1

1

1

managed detection and response tools

1

1

1

managed security service provider list

1

1

1

managed security service providers list

1

1

1

managed security services provider list

1

1

1

These are recorded answer observations, not search volume, verified demand, or proof of missing website content.

The recorded questions cluster around lists of managed security service providers and around best-of framings for security monitoring and managed cybersecurity. Deepwatch appeared in answers to most of them, and in each case the mention came with a recommendation.

These are answer observations, not search volume or proof that the website lacks anything. They show which phrasings the AI services were asked and where Deepwatch was named.

Proposed content briefs would address the list-style and best-of questions directly, checking existing coverage first. Where a page already exists, the brief would strengthen it with approved facts and clear comparisons rather than duplicate it.

Our 90-day action plan

Questions This Section Answers

  • How should the agency sequence the proposed Deepwatch work and judge completion?

Period

Deliverable

Completion criterion

Days 1–30

Baseline scorecard, scoped fact-review register and page/source shortlist

Each record has an owner, evidence requirement and review status

Days 31–60

Approved page briefs and justified publisher requests

Separate confirmed edits, no-change decisions, requests and responses

Days 61–90

Buyer-content briefs and a fresh scorecard

Record work completed separately from measured answer outcomes and comparability limits

The first month establishes the baseline: a scorecard, a scoped fact-review register and a shortlist of pages and sources to examine. Each record carries an owner, an evidence requirement and a review status so nothing sits unresolved.

The second month turns confirmed findings into approved page briefs and justified publisher requests. Confirmed edits, no-change decisions, requests and responses are logged separately, so a request is never mistaken for an accepted change.

The third month adds buyer-question content briefs and a fresh scorecard. Completed work is reported apart from measured answer outcomes, and the comparability limits of each sample are stated alongside any movement.

Methodology

Questions This Section Answers

  • How are Deepwatch answer metrics and citation populations defined?

This report covers 2026-11. The exact dates when the original AI answers were collected have not been verified. The visibility rates use 416 answers that met the benchmark's inclusion rules. A company is recommended only when the answer both endorses it and uses positive wording. Top 3 and first-place counts are part of those recommendations, not extra recommendations.

An answer can mention or recommend several companies, so company counts cannot be added to find the number of distinct answers. The net sentiment score is positive minus negative mentions, divided by all company mentions; it describes answer wording, not customer satisfaction.

The wider citation analysis covers 800 captured answers and 4977 appearances of cited URLs. Citation appearances across all captured answers differ from the number of benchmark answers citing a page and the number that also recommend a company. The current contents of cited pages and disputed company claims still need independent verification.

Monthly sample coverage:

Reporting month

Answers included

AI services covered

Services

Jul 2026

326

6

ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity

Aug 2026

447

6

ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity

Sep 2026

467

6

ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity

Oct 2026

447

6

ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity

Nov 2026

416

6

ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity

The answer samples differ between months. These comparisons show how the recorded results changed; they do not establish why they changed.

The benchmark covers answers that met its inclusion rules, and the monthly samples differ, so month-to-month comparisons show what was recorded rather than why it changed. An answer can mention or recommend several companies, so company counts do not add up to a number of distinct answers.

Recommendations require both an endorsement and positive wording, and top-three and first-place counts sit inside those recommendations rather than beside them. Citation appearances are a separate measure from benchmark answers citing a page.

The current contents of cited pages and any disputed claims still need independent verification before action.

Our first three priorities

First, widen the question types where Deepwatch is mentioned, since endorsement is already strong when the company appears. A scorecard split by question type would show where presence is missing rather than where praise is lacking.

Second, review the cited directory, review-platform and community pages for accuracy and placement, and prepare evidence-backed requests only where a gap is confirmed against current sources. No correction is warranted from this month's evidence.

Third, build buyer-question briefs around the list and best-of phrasings already observed, checking existing pages before proposing new ones. Each brief would rest on approved facts, with verification completed before publication.

/ Learn More

Understanding AI search visibility.

AI search experiences create answers by pulling information from many places online and summarizing it into a single response.

What Is AI Citation Intelligence?
AI citation intelligence is the process of measuring where AI platforms source their information and how frequently a brand is mentioned or referenced in AI-generated responses. Because LLMs synthesize across multiple sources, the sites and brands that appear repeatedly tend to influence how a topic or company is framed. This practice focuses on identifying which sources shape AI outputs and tracking brand visibility across different AI systems.
What Is Citation Architecture?
Citation architecture describes the set of sources that consistently inform how AI systems talk about a brand, product, or topic. LLMs draw from websites, articles, forums, and public discussion, and the sources they rely on most often become the backbone of their answers. Building strong citation architecture means ensuring that accurate, credible, high authority sources are the ones most likely to shape the way AI tools summarize and recommend a brand.
What Is Generative Engine Optimization?
Generative engine optimization (GEO) is the practice of improving the chances that AI systems use and cite your brand or content when generating answers. While traditional SEO is centered on ranking pages in search results, GEO focuses on how LLMs retrieve, interpret, and combine information when responding to a question. The objective is to strengthen the content and sources AI systems rely on, so your brand is treated as a trusted reference in AI responses.
What Is AI Share of Voice?
AI share of voice tracks how often a brand appears in AI-generated answers compared with competitors in the same category. It reflects visibility across AI platforms such as ChatGPT, Gemini, Claude, and Perplexity. Monitoring AI share of voice helps organizations see whether AI systems consistently include and recommend their brand for key queries or whether competitor brands are showing up more often.

About The Author

Mark Huntley

Mark Huntley

Founder and CEO

Mark Huntley, J.D. is founder of CiteWorks Studio, a strategic advisory focused on visibility, authority, and recommendation presence in AI-shaped search environments. His work centers on embedding-level GEO, vector optimization, and cosine gap engineering — helping brands align their digital presence with the retrieval systems that increasingly shape discovery, interpretation, and choice.

Archived editions

Browse earlier published research snapshots for this article. The latest edition remains at the current URL.

VIEW ALL CASE STUDIESREQUEST AN AI VISIBILITY AUDIT