Expel Appears in 17.1% of AI Answers. Here's Our Five-Step Plan to Improve Its AI Visibility.
This report supports CiteWorks Studio's examination of how AI search is recommending Managed Detection and Response. For more detail, you can also read Managed Detection and Response: AI Visibility Discovery Index.
On this report
Browse sections
- Answer Capsule
- Current AI visibility
- What changed since last month
- Next Step
- Step 1. Measure
- Step 2. Make the website consistent
- Step 3. Align the external narrative
- Step 4. Optimize priority company pages
- Step 5. Publish around buyer questions
- Our 90-day action plan
- Methodology
- Our first three priorities
- Learn More
Key Takeaways
- Expel appears in a meaningful share of managed detection and response answers, but it is less often placed first than recommended.
- November results improved versus October, with higher mentions, recommendations, and top-three placements in a separate monthly sample.
- No conflicting claims were flagged in the captured answers, so the immediate focus is building a repeatable fact-check process.
- The plan prioritizes owned pages, cited third-party sources, and buyer questions around MDR provider comparisons and lists.
Answer Capsule
In November 2026, Expel appeared in 71 of 416 AI answers included in the Managed Detection and Response benchmark (17.07%). It received 53 recommendations (12.74%), with 29 Top 3 placements and 2 first-place recommendations. A mention means the company appeared in an answer; a recommendation means the answer affirmatively endorsed it.
Our plan compares the company with its competitors, checks conflicting AI claims against reliable sources, and identifies website pages, third-party sources and buyer questions to address. The historical results show how the figures changed across available months. Different monthly samples limit those comparisons, and conflicting AI claims require verification before corrections are proposed.
Current AI visibility
Questions This Section Answers
- How do Expel mentions, recommendations and placements compare with its Managed Detection and Response peers?
Expel recorded 71 mentions (17.07%) and 53 recommendations (12.74%) across 416 answers included in the benchmark. Top 3 placements numbered 29; first-place recommendations numbered 2. Framing among its mentions was 57 positive, 14 neutral and 0 negative.
Rank | Company | Mentions | Mention rate | Recommendations | Recommendation rate | Top 3 | Top 3 rate | #1 | #1 rate |
|---|---|---|---|---|---|---|---|---|---|
1 | 398 | 95.67% | 325 | 78.13% | 300 | 72.12% | 227 | 54.57% | |
2 | SentinelOne | 345 | 82.93% | 268 | 64.42% | 198 | 47.60% | 8 | 1.92% |
3 | 257 | 61.78% | 220 | 52.88% | 96 | 23.08% | 15 | 3.61% | |
4 | 157 | 37.74% | 125 | 30.05% | 100 | 24.04% | 52 | 12.50% | |
5 | 95 | 22.84% | 68 | 16.35% | 16 | 3.85% | 2 | 0.48% | |
6 | Expel | 71 | 17.07% | 53 | 12.74% | 29 | 6.97% | 2 | 0.48% |
7 | Red Canary | 56 | 13.46% | 42 | 10.10% | 13 | 3.13% | 0 | 0.00% |
8 | 62 | 14.90% | 38 | 9.13% | 9 | 2.16% | 0 | 0.00% | |
9 | Secureworks Taegis | 40 | 9.62% | 23 | 5.53% | 10 | 2.40% | 1 | 0.24% |
10 | 16 | 3.85% | 12 | 2.88% | 5 | 1.20% | 0 | 0.00% |
Expel is mentioned in a meaningful share of benchmark answers and is recommended in most of those mentions, which suggests the brand is recognized as a credible option rather than merely listed. The gap between recommendation reach and first-place placement is the more telling signal: buyers hear the name, but answers rarely put Expel at the front of the list.
That pattern points to a positioning opportunity rather than a visibility emergency. The agency would build a scorecard that separates mention reach, recommendation strength and placement, so the client can see where the brand already earns trust and where it needs sharper supporting evidence.
What changed since last month
Questions This Section Answers
- How did Expel counts and coverage differ across the available monthly snapshots?
Metric | Jul 2026 | Aug 2026 | Sep 2026 | Oct 2026 | Nov 2026 |
|---|---|---|---|---|---|
Mentions | 33 / 326 (10.12%) | 33 / 447 (7.38%) | 47 / 467 (10.06%) | 45 / 447 (10.07%) | 71 / 416 (17.07%) |
Recommendations | 29 / 326 (8.90%) | 30 / 447 (6.71%) | 31 / 467 (6.64%) | 34 / 447 (7.61%) | 53 / 416 (12.74%) |
Top 3 recommendations | 6 / 326 (1.84%) | 10 / 447 (2.24%) | 11 / 467 (2.36%) | 12 / 447 (2.68%) | 29 / 416 (6.97%) |
#1 recommendations | 1 / 326 (0.31%) | 1 / 447 (0.22%) | 1 / 467 (0.21%) | 1 / 447 (0.22%) | 2 / 416 (0.48%) |
From October 2026 to November 2026, Expel's mention count rose from 45 to 71, while its recommendation count rose from 34 to 53. The recommendation rate was 7.61% and 12.74% respectively.
The November sample shows a clear upward movement in mentions, recommendations and top-three placements compared with October. The first-place count also edged up, though it remains small in absolute terms. These are separate monthly samples, so the movement describes what was recorded, not why it happened.
The practical reading is that the brand's presence in answers is strengthening, but the sample change limits how much can be attributed to any specific effort. The agency would treat this as a baseline to watch across future months rather than a result to bank.
AI recommendation trend
Observed recommendation rate (%), Jul 2026 to Nov 2026
- Expel12.74%
Separate selected monthly samples. Missing points are unavailable, not zero. Provider/prompt equivalence is unverified; rate movement does not demonstrate causation.
/ Take the next step
Want to Understand Your AI Citation Footprint?
We start every engagement with a full audit of how AI systems reference your brand today.
Measurable, Repeatable Programme
Build a durable foundation of credible citations that compounds over time and continues to influence AI answers as new queries emerge
Citation Architecture Review
Identify which high-authority community sources are and aren't working in your favour across AI platforms.
AI Visibility Audit
Understand exactly how LLMs are referencing your brand today and which sources are shaping those answers.
Step 1. Measure
Questions This Section Answers
- What should the agency measure and verify first for Expel?
AI answers contained 0 conflicting claims about Expel: 0 critical, 0 high, 0 medium, 0 low. Of these, 0 were rated critical or high priority; the critical claims are included in that total. These ratings help prioritize fact-checking. They do not establish that a company or publisher made an error.
No conflicting claims about Expel appeared in the captured answers, so there is no immediate fact-check queue to work through. That is a useful starting position: the priority shifts from correcting errors to building a repeatable way of catching them if they appear.
The agency would set up a visibility comparison against the leading competitors and a standing list of claims to verify. Together these give the client a clear view of where it stands and a lightweight process for checking anything that looks wrong before acting on it.
Step 2. Make the website consistent
Questions This Section Answers
- Which recorded claim differences about Expel should be verified before proposed page edits?
No results are available for this part of the analysis.
Both columns quote AI answers, not verified company facts. Resolve the entity, date and source before deciding whether a correction is warranted; different dates can explain an apparent conflict.
This part of the analysis returned no results, so there are no disputed topics to resolve for Expel this month. The absence of findings is not evidence that the website is accurate; it means nothing was flagged in this pass.
The agency would still propose a verification step: confirm entity details, dates and sourcing on the pages most likely to be quoted, then prepare conditional page briefs only where a real discrepancy is confirmed. Ambiguous matches would stay out of any correction queue until the company is clearly identified.
Step 3. Align the external narrative
Questions This Section Answers
- Which cited third-party pages are relevant to fact review for Expel?
Cited page selected for review | Citation appearances in all captured answers | Answers mentioning the company | Conflicting claims linked to this page |
|---|---|---|---|
https://gartner.com/reviews/market/managed-detection-and-response | 68 | 25 | 0 |
https://prophetsecurity.ai/blog/top-soc-as-a-service-providers | 19 | 19 | 0 |
https://gartner.com/reviews/market/managed-security-services | 17 | 13 | 0 |
https://msspalert.com/top-250 | 9 | 8 | 0 |
https://intezer.com/guides/mdr-providers | 14 | 7 | 0 |
https://privacy-pc.com/articles/top-socaas-companies.html | 7 | 7 | 0 |
These pages were selected because they relate to the company in the captured answers. Their current contents still need checking before any correction request. A page linked to a conflicting claim is not necessarily its cause, and the same answer may contribute to more than one row.
The cited pages most associated with Expel in the answers are review and comparison sources, including market review pages and provider roundups. Citation frequency shows where answers draw material from, not that those sources shaped a recommendation or contain an error.
The agency would review a short list of these sources for accuracy and freshness, then prepare evidence-backed requests where something is genuinely out of date. Publisher control is never assumed, and a citation alone would not justify a correction request.
Step 4. Optimize priority company pages
Questions This Section Answers
- Which observed Expel website pages should receive review briefs?
Company website page | Citation appearances in all captured answers | Benchmark answers citing the page | Recommending answers citing the page |
|---|---|---|---|
https://expel.com/cyberspeak/what-is-soc-as-a-service-socaas/ | 3 | 3 | 3 |
https://expel.com/gartner-mdr-market-guide/ | 3 | 3 | 1 |
https://expel.com/cyberspeak/what-is-an-mdr-solution/ | 2 | 2 | 0 |
https://expel.com/blog/expel-named-a-leader-in-the-forrester-wave-mdr-services-q1-2025/ | 1 | 1 | 0 |
https://expel.com/blog/the-2025-gartner-market-guide-for-managed-detection-response-services/ | 1 | 1 | 1 |
https://expel.com/cyberspeak/how-mdr-works-with-managed-siem/ | 1 | 1 | 0 |
https://expel.com/forrester-wave/ | 1 | 1 | 0 |
The company's website was cited 12 times across 7 distinct page addresses; the table shows 7 pages selected for review. Zeros in the answer columns mean no matching answers were recorded. A cited page is not automatically a page that accompanied a recommendation.
Expel's own pages were cited across several addresses, with the SOC-as-a-service explainer and the market guide page appearing most often. Citation counts here are small, and a cited page is not automatically one that accompanied a recommendation.
The agency would prepare page briefs for the priority pages using approved facts and the questions buyers actually ask. Each brief would check existing coverage first, so new content fills a real gap rather than duplicating what the site already says.
Step 5. Publish around buyer questions
Questions This Section Answers
- Which observed buyer questions support content briefs for Expel?
Question observed in the research | Benchmark answers to this question | Company mentions | Company recommendations |
|---|---|---|---|
Who are the MDR service providers? | 5 | 4 | 3 |
What is the best MSP for cybersecurity? | 3 | 2 | 2 |
list of managed security service providers | 2 | 2 | 2 |
soc service providers | 2 | 2 | 2 |
soc vendors | 2 | 2 | 2 |
What are some MSSP companies? | 3 | 2 | 1 |
What are the best MDR solutions? | 5 | 2 | 1 |
Who is the largest MSSPs? | 3 | 2 | 1 |
These are recorded answer observations, not search volume, verified demand, or proof of missing website content.
The recorded questions cluster around provider lists and comparisons: who the MDR providers are, what the best options are, and how MSSPs fit in. Expel appears in answers to several of these, which suggests the brand is already part of the consideration set for list-style queries.
The agency would turn these observations into content briefs, checking existing coverage before proposing anything new. The aim is to give buyers clear, verifiable answers to the questions they are already asking, without treating answer counts as proof of search demand.
Our 90-day action plan
Questions This Section Answers
- How should the agency sequence the proposed Expel work and judge completion?
Period | Deliverable | Completion criterion |
|---|---|---|
Days 1–30 | Baseline scorecard, scoped fact-review register and page/source shortlist | Each record has an owner, evidence requirement and review status |
Days 31–60 | Approved page briefs and justified publisher requests | Separate confirmed edits, no-change decisions, requests and responses |
Days 61–90 | Buyer-content briefs and a fresh scorecard | Record work completed separately from measured answer outcomes and comparability limits |
The first month establishes the baseline scorecard, a scoped fact-review register and a shortlist of pages and sources, each with an owner and review status. The second month produces approved page briefs and justified publisher requests, with confirmed edits, no-change decisions and responses recorded separately.
The final month delivers buyer-content briefs and a fresh scorecard. Completed work would be reported separately from measured answer outcomes, and no visibility gain would be claimed as a result of the agency's activity.
Methodology
Questions This Section Answers
- How are Expel answer metrics and citation populations defined?
This report covers 2026-11. The exact dates when the original AI answers were collected have not been verified. The visibility rates use 416 answers that met the benchmark's inclusion rules. A company is recommended only when the answer both endorses it and uses positive wording. Top 3 and first-place counts are part of those recommendations, not extra recommendations.
An answer can mention or recommend several companies, so company counts cannot be added to find the number of distinct answers. The net sentiment score is positive minus negative mentions, divided by all company mentions; it describes answer wording, not customer satisfaction.
The wider citation analysis covers 800 captured answers and 4977 appearances of cited URLs. Citation appearances across all captured answers differ from the number of benchmark answers citing a page and the number that also recommend a company. The current contents of cited pages and disputed company claims still need independent verification.
Monthly sample coverage:
Reporting month | Answers included | AI services covered | Services |
|---|---|---|---|
Jul 2026 | 326 | 6 | ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity |
Aug 2026 | 447 | 6 | ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity |
Sep 2026 | 467 | 6 | ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity |
Oct 2026 | 447 | 6 | ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity |
Nov 2026 | 416 | 6 | ChatGPT, Copilot, Gemini, Google AI Mode, Google AI Overviews, Perplexity |
The answer samples differ between months. These comparisons show how the recorded results changed; they do not establish why they changed.
The monthly samples differ, so comparisons show how recorded results changed, not why. Recommendation counts require both endorsement and positive wording, and top-three and first-place figures sit inside those recommendations rather than adding to them. Company counts cannot be summed into distinct answers because one answer can cover several companies.
Citation appearances across all captured answers differ from benchmark answers citing a page. The current contents of cited pages and any disputed claims still need independent verification.
Our first three priorities
The first priority is a standing fact-check and visibility scorecard, since no conflicting claims surfaced this month but the process needs to exist before errors appear. The second is page briefs for the most-cited owned pages, built on approved facts and checked against existing coverage.
The third is buyer-question content around provider lists and comparisons, where Expel already appears but placement is weak. Each piece would be verified against primary sources before publication, and progress would be tracked separately from any change in answer visibility.
/ Learn More
Understanding AI search visibility.
AI search experiences create answers by pulling information from many places online and summarizing it into a single response.
What Is AI Citation Intelligence?
What Is Citation Architecture?
What Is Generative Engine Optimization?
What Is AI Share of Voice?
Archived editions
Browse earlier published research snapshots for this article. The latest edition remains at the current URL.


