AEO Competitive Audit

ChatGPT cites Cisco.

Not Whalebone.

An independent 40-query audit of Whalebone's visibility in AI-powered search platforms. We tested the exact questions telco procurement managers ask when evaluating DNS security solutions.

January 2026
40 Queries Tested
3 AI Platforms
52%
ChatGPT
21 of 40 queries
⚠️ PROBLEM
80%
Gemini
32 of 40 queries
✓ STRONG
80%
Perplexity
32 of 40 queries
✓ STRONG
The Core Problem

Whalebone dominates Gemini and Perplexity. But loses on ChatGPT—where 60% of B2B buyers research.

When a telco procurement manager asks ChatGPT "Which vendors offer network-based DNS security?"—Cisco Umbrella, Cloudflare, and DNSFilter get cited. Not Whalebone. That's not a branding problem. That's a pipeline problem.

The Irony: Your Content Gets Cited—For Wrong Queries

Semrush shows 35 Whalebone pages getting cited by AI. But look at WHAT they're being cited for:

Your Page Getting Cited But For This Query Brand Mentioned?
/post/o2-telefonica-germany-launches... "Differences between Alice mail and O2 mail" Missed
/post/o2-telefonica-germany-launches... "How secure is O2 Cloud?" Missed
/post/googles-zip-domain-names... "Zipix and Zippik brand analysis" Missed
/post/googles-zip-domain-names... "Zip domains and TLDs" Missed
💡 The Problem Isn't Visibility—It's Relevance
Your O2 case study IS getting picked up by AI. But for German consumer queries about "O2 mail" and "O2 cloud"—not for telco procurement managers evaluating DNS security vendors. Even when cited, Whalebone brand gets "Missed."
Section 2

Why Automated Tools Fail for Niche B2B Brands

Semrush AI Visibility scores hide a critical problem: brand dilution

We started with Semrush AI Visibility—the industry-standard tool. What we found explains why automated scores are meaningless for niche B2B brands in the telco security space.

Semrush AI Visibility Scores (January 2026)
Company AI Score Mentions Cited Pages ChatGPT Gemini
Whalebone 14 56 35 8 22
Allot 15 76 112 15 15
CUJO AI 15 120 46 45 17

All three companies score 14-15/100. All marked "Low - Rarely mentioned in LLM outputs compared to competitors."

🚨 The Problem: These Scores Are Meaningless
All three telco security competitors score nearly identical (~15). Why? Because Semrush tracks word matches, not buyer intent. The data is polluted with irrelevant queries that have nothing to do with your actual product or target market.

📊 Whalebone: AI Cites You for Wineries, Not Security

Whalebone AI Visibility
Semrush Dashboard 14/100 "Low" Score
Whalebone Topics
Top Performing Topics "Whalebone Winery and Vineyard" 🍷
Whalebone Cited Pages
Cited Pages Detail O2 case study cited for "Alice mail vs O2 mail" — Brand: Missed
Whalebone's Brand Dilution Problem
Semrush matches the WORD "whalebone" — not the COMPANY. Top topics include: "Whalebone Winery" 🍷, "Whalebone: Meaning, Synonyms, and Uses" 🐋, "Outer Banks Tourism" 🏖️. Your O2 case study gets cited for German consumer queries about "O2 mail" — not telco security.

📊 Allot: AI Cites Generic Security Glossary

Allot AI Visibility
Semrush Dashboard 15/100 "Low" Score
Allot Cited Pages
Cited Pages Detail /100-plus-cybersecurity-terms-definitions/
Allot's Strategy: Own Generic Terms
Allot's top cited page is a glossary: "100+ Cybersecurity Terms Definitions." AI cites them for "IT security keywords", "cyber security definitions", "security terms" — not telco procurement queries. High volume, low intent.

📊 CUJO AI: Cited for Gaming Consoles & Baby Monitors

CUJO AI Visibility
Semrush Dashboard 15/100 "Low" Score
CUJO Cited Pages
Cited Pages Detail "How to unpack UPX-packed files?" — Missed
CUJO's Citations: Completely Off-Target
CUJO's top cited content is about UPX anti-unpacking malware techniques, "Most popular gaming consoles", and "How to choose a secure baby monitor camera". Nothing about their ISP/router security product. All showing "Brand: Missed."
Why We Did a Manual 40-Query Audit

Automated tools fail for niche B2B brands because they track word frequency, not buyer intent. A procurement manager asking "Which vendors offer network-based DNS security for telcos?" won't show up in Semrush's topic matching.

So we built a custom audit: 40 high-intent queries that real telco decision-makers ask when evaluating DNS security solutions. Tested manually across ChatGPT, Gemini, and Perplexity. Checking for Whalebone citations, competitor mentions, and source URLs.

40
Buyer-Intent Queries
8
Topic Clusters
3
AI Platforms Tested
Section 3

Platform Scorecard

Whalebone citation rates across AI platforms

Whalebone Citation Rate by Platform
ChatGPT
52%
Gemini
80%
Perplexity
80%
⚠️ The Platform Mismatch
Whalebone's AI visibility is concentrated on the wrong platforms. ChatGPT has 60% market share among B2B buyers but Whalebone only achieves 52% citation rate there. Meanwhile, 80% on Gemini/Perplexity—platforms with lower enterprise adoption—doesn't move the revenue needle.
Competitor Comparison (Estimated Citation Rates)
Whalebone
70%
Allot
~30%
CUJO AI
~17%
cyan AG
~12%
Section 4

The ChatGPT Gap

Why Cisco and Cloudflare win on the platform that matters

When buyers ask ChatGPT about DNS security, they don't see Whalebone. They see Cisco Umbrella, Cloudflare, DNSFilter, and BlueCat. These companies own the "What is DNS security?" educational content layer that ChatGPT prefers to cite.

Who Gets Cited for "DNS Security Solutions" on ChatGPT
Cloudflare
90%
Cisco Umbrella
85%
DNSFilter
60%
BlueCat
45%
Whalebone
0%
🚨 0% Citation Rate on Core Category
When buyers ask ChatGPT "What DNS security solutions stop threats before they reach users?"—Whalebone is not cited at all. Cisco Umbrella's blog post "What is DNS Layer Security" gets cited instead. This is your core product category, and you're invisible.

"The companies that own the educational content layer—'What is X?'—control the AI narrative. Whalebone needs a /dns-security-guide/ content hub to compete."

— Content Strategy Insight

Section 5

AI Positioning Audit

40 decision-maker queries tested across ChatGPT, Gemini & Perplexity

We tested 40 high-intent queries that telco procurement managers typically ask AI assistants. The results reveal a critical positioning gap: Whalebone wins on telco-specific and branded queries but loses completely on generic DNS security questions.

Query Tested ChatGPT Gemini Perplexity
1. What DNS security solutions stop threats?
2. Network-based security for telcos?
3. ISP security without app installation?
4. DNS protection for mobile operators? ~ ~
5. How can telcos monetize security?
6. Whalebone Aura features?
7. Enterprise DNS security vendors?
8. Zero-friction security for subscribers?
9. DNS4EU security project providers?
10. Whalebone vs Allot comparison?
Hit Rate (40 queries) 52% 80% 80%
Manual Testing Evidence (All 3 Platforms)

Click to view full screenshots of AI query testing conducted January 2026.

ChatGPT test ChatGPT
Perplexity test Perplexity
Gemini test Gemini
Section 6

Visibility by Topic Cluster

Performance varies dramatically by topic—you own your brand but disappear on generic queries

Cluster
ChatGPT
Gemini
Perplexity
Primary Core
20%
60%
60%
Telco & ISP
80%
100%
100%
DNS-Specific
0%
40%
40%
Enterprise & Gov
20%
100%
100%
Zero-Friction
100%
80%
80%
Consumer & SMB
100%
80%
80%
Trust & Authority
0%
80%
80%
Brand & Product
100%
100%
100%
🎯 Critical Gap: DNS-Specific Queries
0% citation rate on ChatGPT for DNS-specific technical queries. When buyers ask "What DNS security solutions stop threats?"—Cisco gets cited. This is your core product category. You should own this conversation.
Section 7

O2 Case Study Test: 0/10 Citations

We tested 10 questions your own case study answers—AI cites competitors for every one

Promoted
Whalebone is actively promoting this case study 13,237+ followers • "Telefónica Germany launched a security product customers actually use"
Whalebone LinkedIn Ad
LinkedIn Promoted Post 13,237 followers • Actively promoting
O2 Case Study Cover
Case Study PDF O2 Telefónica Germany Success Story
Question (Your Case Study Answers This) AI Cites Instead Whalebone?
"How can telcos launch security as VAS?" Allot, CUJO AI, F-Secure
"Effective pricing for telco security?" Generic advice
"Network-based vs endpoint for telcos?" Cisco Umbrella, Cloudflare
"Monetize security without apps?" Allot NetworkSecure
"Security without installation?" Cisco, Cloudflare, CUJO AI
"Which telcos launched network security?" Comcast, BT, Deutsche Telekom
"GTM support from security vendors?" Generic answer
"Train sales to sell security?" Generic advice
"Barriers to mobile security adoption?" Generic research
"Deploy telco security at scale?" Generic timeline
💡 The Irony
Your O2 Germany case study (€0.07/day pricing, 6-month deployment, Wayra partnership, frontline sales training) answers every question above. But AI doesn't know it exists. You're paying for LinkedIn ads promoting a case study that AI can't find.
Section 8

Google SEO Report Card

Does Whalebone rank on page 1 for buyer-intent searches?

Query Who Ranks on Google Page 1 Whalebone?
"Network-based security for telcos" Allot, Ericsson, Fidelis, AlgoSec
"Telco cybersecurity solutions" Cisco, Fortinet, IBM, Palo Alto
"DNS protection for mobile operators" Cisco, Akamai, Infoblox
"ISP security without app installation" Allot, vxSafenet, NordLayer
"O2 Telefonica Germany security service" Whalebone blog, Telecoms Tech News
📍 The Pattern
Whalebone only ranks when someone searches for your brand or case study. For generic buyer-intent queries, competitors dominate both Google AND AI answers. Buyers doing research don't know to search for you yet.
Section 9

Strategic Recommendations

Actionable steps to close the ChatGPT gap

Immediate (0-30 Days)
Close the ChatGPT Gap
  • Target the 5 critical queries where Cisco/Cloudflare win
  • Create /dns-security-guide/what-is-dns-security/ with schema markup
  • Restructure O2 case study for AI discoverability
Short-Term (30-90 Days)
Own DNS-Specific Queries
  • Build content hub: "DNS filtering vs firewalls", "Protective DNS for telcos"
  • Create comparison pages: "Whalebone vs Cisco Umbrella", "Whalebone vs Allot"
  • Publish AEO-optimized FAQ schema on all product pages
Long-Term (90+ Days)
Amplify DNS4EU Authority
  • ChatGPT cites ENISA for EU cybersecurity queries—leverage DNS4EU consortium leadership
  • Build citation network through industry reports and analyst content
  • Monitor AI visibility monthly—track score progression against competitors

The Gap is Fixable. The Window is Now.

Before Cisco and Allot widen the lead, let's discuss how to own your narrative in AI search.