CASE STUDY 5 · CONTENT INTELLIGENCE
The Cybersecurity Firm That Was Losing Procurement Shortlists Before the First Call
A Bengaluru-based cybersecurity firm offering VAPT, SOC services, and cloud security was being shortlisted by only one in three prospects who found them through AI research. Two competitors were consistently cited ahead of them for the same buyer queries. After deploying citation-native content and closing three specific citation gaps, the firm moved from appearing in 1 of 8 prompts to 5 of 8 in 9 weeks.
| Sector | Cybersecurity Services |
|---|---|
| Location | Bengaluru, India |
| Anonymised | Yes — client name withheld |
The Challenge
The firm's sales team had noticed a pattern: when they asked prospects how they had found out about them, AI-referred prospects were arriving with a pre-formed view that two specific competitors were the "top" options for enterprise VAPT in India. Some prospects were using the AI recommendation as negotiating leverage — citing the competitor's positioning to push on pricing.
The firm was ranked well on Google for several terms. Their website had detailed service pages. But the content had been written for keyword ranking, not for AI extraction — long, well-written prose that buried the answer to the buyer's actual question in paragraph three.
What the Diagnostic Found
The citation gap map identified three specific sources winning citations for the firm's target prompts: a Nasscom.in feature article on Indian cybersecurity companies, a Quora answer about VAPT providers, and a G2 comparison page for cloud security tools.
The firm was absent from all three. They were not in the Nasscom feature, had no Quora presence, and had a G2 listing in the wrong category — listed under IT Management, not Cybersecurity Services.
Their own content — while thorough — was not structured for extraction. A buyer asking "what does VAPT cover" would get a four-paragraph explanation. The competitor's page answered the same question in one sentence followed by a bulleted list of seventeen specific vulnerability types. AI cited the competitor.
What Dattva Did
The Dattva Citation Gap Intelligence service had identified three specific source URLs driving competitor citations — each gap type had a different closing strategy. Three targeted content actions were executed.
First: the top five service pages were restructured using the direct answer format. "What is VAPT" now opened with: "Vulnerability Assessment and Penetration Testing (VAPT) is the process of identifying exploitable weaknesses in a company's network, applications, and infrastructure before attackers do — covering external perimeter, internal network, web application, and API layers." FAQPage schema added with eight questions matching exact buyer language.
Second: a Quora answer was posted to the highest-traffic thread asking about VAPT providers in India. The answer opened with a direct response, cited a specific data point on average enterprise breach costs in India (₹19.5 crore per incident, IBM Cost of Data Breach Report 2024), and named the firm's SOC-as-a-service offering in context.
Third: the G2 listing was recategorised under Cybersecurity Services and Penetration Testing. The description was rewritten to match the exact language buyers use in prompts. Three client review requests were sent with specific prompts to mention the service type and the regulatory compliance outcome.
The Lesson
Good content written for keyword ranking is not the same as content written for AI extraction. The difference is structural: AI extracts the first complete, attributable answer it finds. If that answer is in paragraph three after two paragraphs of context, the AI skips it and cites a competitor whose page answers in sentence one. The rewrite is not a content quality problem — it is a structural formatting problem. This is the structural work covered under Dattva's GEO Content Engine.
FAQ
What is citation gap analysis in a GEO context?
Citation gap analysis identifies the specific source URLs that AI platforms are citing when recommending competitors — and maps which of those sources the client is absent from. Each gap has a type (article, discussion, review, listicle) and a closing time. A Quora answer gap closes in 2-4 weeks. An editorial article gap takes 4-8 weeks. A review platform gap takes 6-10 weeks depending on how quickly reviews accumulate.
Why did restructuring existing pages produce citations when the original pages did not?
AI platforms extract the first complete self-contained answer to the implied question. The original pages answered the question thoroughly but not immediately — the answer was preceded by context and background. After restructuring, the answer appeared in sentence one. Gemini and Perplexity began citing the restructured pages within four weeks of re-indexing.
How specific should the Quora answer be to earn AI citations?
Specific enough that the answer cannot be given by anyone who has not actually done the work. Generic answers ("VAPT is important for compliance") are not cited. Answers that include a named data point with a verifiable source, a specific service description, and context about who this applies to are cited consistently. The Quora structure AI extracts from is: direct answer in sentence one, stat with source in sentence two, context in sentence three.
Can a small cybersecurity firm compete with large SI companies in AI citations?
Yes, on specific long-tail queries. A large system integrator will dominate "best cybersecurity company India" but is unlikely to have structured content for "VAPT provider for fintech company Bengaluru" or "cloud security assessment for Series B startup India." These specific queries are where smaller firms with genuinely relevant experience can win citations before larger firms notice the category.
See where your brand stands in AI answers today
Run a free AI Visibility diagnostic across ChatGPT, Perplexity, Gemini, and Claude — with prioritised, copy-paste fixes at no cost.