Visitor identification (or website visitor identification) is the process of working out who an anonymous website visitor is, either the company they are browsing from or, with more data, the individual person. B2B teams use it to see which accounts are researching them before anyone fills in a form.
There are two levels, and they differ in method, accuracy and legal exposure. Most confusion about "visitor identification" comes from mixing them up.
How visitor identification works
Company-level identification
The visitor's IP address is matched against a database of IP ranges and the organizations behind them (see reverse IP lookup). The result is a company name plus firmographic data: industry, size, location. No form fill is needed. It works best for visitors on corporate networks and worst for people on home broadband, mobile data or consumer VPNs.
Person-level identification
- Known visitors: someone who filled in a form, clicked a tracked email link or logged in is tied to a cookie, so later visits are attributed to them.
- Identity graphs: third-party providers match cookies, device IDs or hashed emails against their own networks to name visitors who have never given you their details.
First-party person-level identification (someone who gave you their details) is standard marketing automation. Third-party person-level identification is where accuracy and privacy questions get serious.
Example
Example (illustrative): a site gets 10,000 sessions a month. After filtering bots, company-level lookup resolves some share of the rest to companies; the share depends on how many visitors are in offices versus at home. Say 1,500 sessions resolve to 600 companies. Of those, 80 match the ICP, and 12 of the 80 viewed pricing or a demo page. Those 12 accounts go to their account owners with the pages viewed. Separately, 150 sessions belong to known contacts who previously filled a form, so marketing automation already knows who they are. The value is not the 600; it is the 12.
Company-level vs person-level
| Company-level | Person-level (third-party) | |
|---|---|---|
| Method | IP-to-company lookup | Cookies, device IDs, identity graphs |
| Output | Company name, firmographics, pages viewed | Name, email, job title |
| Accuracy | Good for office networks, weak for remote workers | Varies widely; hard to audit |
| Privacy exposure (EU/UK) | Lower, but IP processing still counts | High: personal data, consent questions |
| Best use | Account prioritization, personalization | Outreach where legally permitted, mainly outside the EU |
Privacy and GDPR
GDPR names IP addresses and cookie identifiers as online identifiers that can be used to profile and identify people (GDPR Recital 30). Even company-level identification therefore processes personal data in the EU, so you need a lawful basis (often legitimate interests, documented), a privacy notice that mentions it, and data minimization. Storing or reading cookies or similar tracking on a device also falls under ePrivacy rules, which usually require consent for non-essential tracking; the UK regulator's ICO guidance on cookies and similar technologies is a clear explanation. This is not legal advice; check with your counsel.
How B2B teams use visitor identification
- Alerting account owners when target accounts view high-intent pages.
- Prioritizing outbound by recent on-site activity.
- Personalizing pages by industry or company size.
- Measuring ABM: are target accounts engaging with the site at all?
- Feeding account-level engagement into scoring in the CRM.
Frequently Asked Questions
How accurate is website visitor identification?
Company-level matches are usually reliable for visitors on corporate networks and unreliable for home, mobile and VPN traffic, so the share of traffic identified varies a lot by audience. Vendors' headline match rates are not comparable. Run a trial on your own traffic and spot-check matches against accounts you know visited.
Can you identify individual visitors without a form fill?
Only through third-party identity data that links cookies or devices to named people. In the EU and UK this involves personal data and usually requires consent, so most B2B teams there stick to company-level identification plus their own known contacts. Elsewhere, check state privacy laws before using person-level data.
Is visitor identification the same as web analytics?
No. Analytics tools count sessions and behavior in aggregate. Visitor identification attaches those sessions to a company or person so sales and marketing can act on individual accounts. They complement each other: analytics shows which pages work, identification shows which accounts are using them.
Related
Go deeper with the visitor identification guide, see what to track in B2B website visitor tracking, and compare tools in visitor identification software. Markettailor's visitor identification works at company level.