The short answer
Every visit to your website carries an IP address. Visitor identification tools look that address up against registry records and their own databases, discard addresses that belong to home broadband, mobile networks and hosting providers, and report the companies that remain, with the pages each one read. Vendors report naming a company for roughly 30% to 65% of visits on mostly US traffic, and less for European, mobile and small-company traffic¹². Treat any figure as a claim to test on your own traffic.
In this guide
- How to see which companies visit your website: the practical, step-by-step version, from the tools you may already own to a weekly routine.
- How IP-to-company lookup works: where the data comes from, how a lookup decides, and why match rates vary so much between sites.
- Speed to lead statistics: sourced research on response times, and why the earliest buying signal is often the visit, not the form.
What website visitor identification is
Most visitors to a B2B website never fill in a form, and those who do arrive late: 6sense's 2024 research found B2B buyers are nearly 70% of the way through their purchase before they engage a seller⁷. Your analytics tool counts them, shows the pages they read and where they came from, and stops there. Google Analytics, for example, reports traffic and behaviour, not the names of the organisations behind it. Visitor identification adds one thing: a company name against a visit, where one can be found.
There are two levels, and it matters which one a tool works at.
- Company-level identification says "someone at Company A read your pricing page twice this week". It is built mainly on IP address data and does not name a person.
- Person-level identification claims to name the individual, usually by matching cookies, device data or email addresses against third-party identity data. Vendors that offer it report much lower match rates for it¹, and it carries heavier data protection obligations in the UK.
For a lean B2B marketing team, company-level identification answers the useful question (which organisations are interested?) without building a profile of a named person. The rest of this guide is about company-level identification.
How it works, in four steps
- Capture the visit. A script on your pages, or your own server or edge network, records the visit's IP address, the time and the pages viewed.
- Look up the address. The tool checks the address against regional internet registry records, which say which organisation an address block is registered to, and against its own proprietary mapping of addresses to companies.
- Filter out what is not a company. Addresses registered to broadband providers, mobile networks, VPN services and cloud hosting are set aside. HubSpot's documentation, for example, notes that smaller companies and individuals may not have their own IP address and will show up as their internet service provider, which its tool filters out by default⁵.
- Report and enrich. What remains is grouped by company and usually enriched with public firmographic data: industry, size, location and website.
Each step loses some visits, which is why no tool identifies everyone. The detail of each step, including how vendors build their mappings and how they decide when a match is confident enough to report, is in how IP-to-company lookup works.
What match rates to expect
"Match rate" usually means the share of visits, or of visitors, that a tool attaches to a company. Vendors publish their own figures, and none of the figures below has been independently audited. They are the best public indications available, named as vendor claims.
The same 2026 vendor article puts mobile traffic at 15% to 30% at company level, and says SMB traffic matches at roughly half the rate of enterprise traffic¹. Two cautions apply to all of these numbers. First, a demo on a vendor's chosen traffic will look better than your production data. Second, a high match rate is not the same as an accurate one: a tool that labels more visits by guessing will report a higher rate and more wrong answers.
Why match rates vary so much
The biggest factor is not the tool. It is how your visitors connect to the internet.
- Residential and remote work. Someone working from home reaches your site through their home broadband, and that address is registered to the broadband provider, not their employer. In Great Britain, 28% of working adults were hybrid working between January and March 2025³, so a large share of B2B research now happens away from an office network.
- Mobile. Mobile networks share addresses among many subscribers, so a phone on 4G or 5G rarely resolves to a company. HubSpot states that traffic from a mobile network cannot be identified⁵. Just over half of UK web page views came from mobile devices in October 2026, in StatCounter's data⁴, although B2B research skews towards desktop.
- VPNs and privacy relays. A consumer VPN or Apple's iCloud Private Relay replaces the visitor's address with one belonging to the relay service. Apple says Private Relay hides the user's IP address from websites browsed in Safari for iCloud+ subscribers who turn it on⁶. A corporate VPN can help, if it routes traffic out through the company's own addresses.
- ISP-registered ranges. Many small and medium firms rent their connection from a business broadband provider, and the registry record names the provider, not the customer⁵. Unless a vendor has its own evidence linking that address to the firm, the visit stays anonymous.
- Company-owned ranges. Large organisations, universities and public bodies often hold address blocks registered in their own name, or run their own egress. These match well, which is why enterprise traffic resolves at a much higher rate than small-company traffic¹.
- Geography and data freshness. Vendor coverage is usually strongest where its customers are. Addresses also change hands when firms move office or change provider, so a mapping that was right last year can be wrong today.
For a UK B2B site selling to small and mid-sized firms, expect the lower end of the published ranges. That is still useful: if a few hundred companies visit in a month, even a partial list shows which ones are researching you now.
What to do with the data
A list of company names is only worth having if it changes what someone does this week. These are the uses that tend to justify the effort for a small team.
- Prioritise follow-up on high-intent pages. A target account that reads pricing, integrations or a comparison page is a better use of a salesperson's time than one that read a blog post. Alert on those pages, not on every visit. The speed to lead research shows why timing matters.
- Check whether the right companies arrive at all. If your target sector is engineering firms and almost none appear in a month, that is a positioning or channel problem, and no amount of follow-up will fix it.
- Learn which pages buyers actually read. Grouping visits by company shows the path a real buying team takes through your site. Those are the pages most worth improving.
- Support account-based marketing. Show that a campaign aimed at named accounts produced visits from those accounts, and which pages they read afterwards.
- Spot existing customers. A customer reading your cancellation or pricing pages is a signal for the account manager, not the sales team.
The step-by-step version, including the tools you may already own, filters to set up and a weekly routine, is in how to see which companies visit your website.
What it cannot tell you
- Who the person is. Company-level data names an organisation. Ten visits from one company may be one person or ten.
- Why they came. A visit from a competitor, a job applicant or a supplier looks the same as one from a buyer. Read the pages viewed before acting.
- Everyone. Most visits will stay anonymous. Small firms and remote workers are the least visible, so the list is biased towards larger organisations.
- Cause and effect. A company visiting after a campaign does not prove the campaign caused the visit.
UK GDPR and PECR considerations
Two sets of UK rules are relevant. This section names them factually; it is not legal advice, and you should take your own advice on your own set-up.
- IP addresses can be personal data. The ICO lists IP addresses among the online identifiers that may be personal data under the UK GDPR⁸. Company-level identification still processes the address, and a "company" can be a sole trader or a small partnership, where the company is in effect a person.
- A lawful basis is needed. Many vendors rely on legitimate interests for company-level identification. The ICO's guidance sets a three-part test for that basis (purpose, necessity and balancing), to be met before the processing starts and recorded as a legitimate interests assessment¹⁰.
- PECR covers storing or reading information on a device. If the tool sets cookies or uses similar technology in the visitor's browser, PECR's consent rules apply unless an exception does. The ICO published its final guidance on storage and access technologies on 29 April 2026, reflecting the new exceptions added by the Data (Use and Access) Act 2025⁹.
- Transparency. Your privacy notice should say that you identify visiting organisations, how, with which provider, and for how long the data is kept.
How to choose a visitor identification tool
Most of the published comparisons are written by vendors about themselves. A short checklist of your own is more useful.
- Test on your own traffic. Run a trial for at least two weeks and compare the match rate with the vendor's quoted figure.
- Check accuracy, not just coverage. Pick twenty identified companies at random and check whether they are plausible. Ask colleagues and friendly customers to visit and see whether they are named correctly.
- Ask about UK coverage. Ask for UK or European figures specifically, not a global average.
- Prefer company-level by default. Ask whether the tool can be limited to company-level data, and what it does with personal data it receives.
- Read the data terms. Where the data is processed, whether the vendor acts as your processor, how long it is kept, and whether it pools your visitors' data with other customers'.
- Understand the price unit. Some tools charge per identified company, some per visit and some per seat, which changes the cost a great deal as traffic grows.
- Check where the alerts go. A list in another dashboard that nobody opens is worth less than a short alert in the CRM or chat tool your team already uses.
Where Artiweave fits
Artiweave continuously improves the website a B2B company already has: it finds opportunities from evidence, proposes specific changes for a marketer to approve, publishes approved changes with automatic rollback and measures the outcome honestly. Company-level visitor identification is coming to the product, so the same evidence can show which companies read the pages being improved. It is not live yet, and we will not quote a match rate until we can measure one on real customer traffic. Artiweave is in private beta.
Frequently asked questions
Is website visitor identification the same as Google Analytics?
No. Google Analytics reports how many people visit, which pages they view and where they came from, but it does not name the organisations behind the visits. Visitor identification adds a company name where the visit's IP address can be matched to one.
Can visitor identification tell me which person visited?
Company-level tools cannot, and do not try. Some vendors offer person-level identification using cookies and third-party identity data, report much lower match rates for it, and it brings heavier data protection obligations in the UK.
What is a good match rate?
Vendors report 30% to 65% at company level on mostly US traffic, and lower for international, mobile and small-company traffic. For a UK site selling to smaller firms, the lower end is realistic. Test any tool on your own traffic and check accuracy as well as coverage.
Does it work for a small website?
Yes, with modest expectations. A site with 5,000 visits a month will see a list of companies rather than a statistical picture, which is still enough to spot a target account reading your pricing page.
Sources
- Warmly: Website Visitor Identification Match Rates (March 2026). Vendor's own production data; competitor figures are estimates.
- Leadinfo: How Reliable is IP Tracking for Identifying Website Visitors? (November 2025). Vendor claim, no method stated.
- Office for National Statistics: Who has access to hybrid work in Great Britain? (June 2025)
- StatCounter Global Stats: Desktop vs Mobile Market Share, United Kingdom (2026)
- HubSpot Knowledge Base: Prospects frequently asked questions (updated December 2025)
- Apple Support: About iCloud Private Relay
- 6sense: 2024 Buyer Experience Report, launch announcement (October 2024)
- ICO: What are identifiers and related factors?
- ICO: Final storage and access technologies guidance published (29 April 2026)
- ICO: What is the legitimate interests basis?
Improve the pages your buyers read.
Artiweave continuously improves the website your B2B company already has, with every change approved by you. Company-level visitor identification is coming. It is in private beta.