How a global cybersecurity leader used deep buyer intelligence, AI visibility strategy, and orchestrated demand programs to generate 3× more pipeline at one-third the campaign cost.
Industry: Enterprise Cybersecurity (Network Security & SASE)
Market: North America (US focus)
Engagement Type: Research → Strategy → Execution
Duration: 6-month transformation programme
| Results at a Glance | ||||
|
3.4× More pipeline vs. prior campaigns vs. same period benchmark |
−68% Cost per qualified opportunity vs. historical spend baseline |
4× Target account engagement rate vs. industry average |
Top 3 AI/LLM visibility in buyer searches from near-zero in 90 days |
1:7.4 Campaign ROI (was 1:2.1) investment-to-pipeline ratio |
Ingredient 1 – The Situation
A global leader.
Invisible in its most important market
Our client was a top-three global cybersecurity vendor, dominant in market share worldwide, technically superior on benchmarks, and priced competitively against every major rival. In the US market, they were generating less than half the share they held globally. The gap wasn’t the product. It was the strategy.
| Brand Perception Trapped as a point product. Despite 50+ solutions, buyers in the US consistently perceived them as a single-category vendor – limiting deal expansion and blocking platform conversations. | Go-to-Market Entirely outbound, high-volume, low-relevance. Sales teams persisted 2–3 years before an opening. Buyers described 4–5 emails per week as an active reason to disqualify the vendor. |
| AI & Digital Presence Invisible where buyers research. Buyers no longer use Gartner Magic Quadrants – they use AI tools, Reddit, and peer networks. The client had near-zero presence in AI-generated recommendations. | Sales & Marketing Alignment Two separate operating models. Marketing ran broad awareness; sales ran timing-based outreach. No shared intelligence on what triggered buyers to act, or what stopped them. |
| Messaging No compelling AI narrative. “What is your AI story?” had become a buyer qualifying criterion. The client lacked a substantiated answer, while competitors were filling that gap. | Buying Group Critical persona systematically underserved. The Technical Architect carries 60%+ of vendor evaluation weight – and was the one persona with no systematic reach strategy. |
Ingredient 2 – The Idea Worth Spreading
Stop selling at buyers.
Start thinking like them.
The core insight from our research was counterintuitive: the client didn’t have a product problem or a price problem. They had a context problem. Marketing was targeting the wrong triggers, at the wrong moments, with the wrong messages, to personas who had already disqualified them before the first call.
The strategy wasn’t to spend more. It was to make every euro work against real buyer intelligence – aligning content, advertising, and outreach to the moments buyers actually make decisions.
The Framework: Three Interlocking Layers
| Buyer Intelligence Foundation Primary qualitative research across 5 buying personas (internal + external interviews). Real trigger moments. Real friction points. Real decision language. | Orchestrated Demand Architecture Persona-specific content journeys mapped to buying triggers, not campaign calendars. Messaging matched to how buyers describe problems – not how vendors describe solutions. | AI-Era Visibility Programme Systematic optimisation for how AI tools and LLMs answer buyer questions. Presence where buyers actually research – before they ever talk to a vendor. |
What we built – and why it was different
🔬 Qualitative Buyer Research – Primary + Secondary
Deep-dive interviews with current customers, lost customers, active prospects, and lost prospects across all five key buying personas. Combined Sirius Decisions behavioural modelling with Buyer Persona Institute methodology to surface not just what buyers think – but what triggers them to act, what stops them from buying, and what language they use when they do.
🗺️ Buyer Journey Mapping – 5 Personas, 9 Trigger Events
Distinct journeys per persona covering awareness, consideration, and selection – mapped against the buying group dynamics that determine deal velocity. Existing programmes treated all technical stakeholders alike, overlooking the Technical Architect’s 60%+ influence on deal progression. The Network & Infrastructure Leader is the reliable entry point. Both were being served identically. We separated and re-sequenced them.
Framework – Buying Group Journey Map
| Selection Phase – Long list | Validation Phase – Short list Consensus wins. Architect recommends, Leadership ratifies. | ||
| Awareness & Education Trigger-driven, not vendor-initiated | Consideration Buying group forms, shortlists built | Decision / Selection Formal decision & approval chain | |
| Technical Architect | Trigger Technical problem assigned; self-identified during infrastructure reviews and roadmap planning | Group Works largely independently. Brings shortlist of 2–5 vendors to manager for sign-off | Authority Formally recommends – cannot approve. The decisive internal voice. |
| Network & Infra Leader | Trigger Contract renewal; broken vendor promises; price pressure | Group CIO consulted above spend threshold; CISO brought in for security scope | Authority Co-owned with CISO and CIO; Procurement executes contract |
| Security Leader | Trigger Compliance gap identified; threat landscape shift; security incident | Group Pulls in infrastructure and engineering for alignment; CFO looped in for large investments | Authority Co-owned with Infrastructure – trigger event determines who leads |
| Executive Sponsor & Business Leader | Trigger Vendor pricing exploitation at renewal; structured lifecycle review (3–5 yrs); regulatory mandate (board-level) | Group CIO/CISO looped in immediately; RIMCO and Enterprise Risk Mgmt for regulated sectors; Legal/Procurement at contract stage | Authority Final budget authority above departmental threshold; board sign-off for major purchases; pricing & renewal terms approval |
🤖 AI/LLM Visibility Analysis & Optimisation
Buyers no longer shortlist from Gartner reports – they ask AI tools. We audited the client’s share of AI-generated responses across 40+ buyer intent queries (product category, competitor comparisons, use-case searches). Baseline: near-zero. We built a structured programme to systematically appear in relevant AI answers within 90 days.
🎯 Content Orchestration & Campaign Architecture
Content audit mapped to buying stage and persona. Content gaps identified against each of the 9 trigger events (EOL refresh, renewal shock, compliance mandate, security incident, peer recommendation, and more). New content brief framework built around what buyers actually ask at each stage – not what marketing assumed they wanted to hear.
📣 Advertising Plan – Trigger-Moment Targeting
Paid programmes rebuilt from the ground up around trigger-event signals: EOL hardware cycles, competitor renewal windows, compliance deadline proximity, and industry incident news hooks. Precision audience layering targeting Technical Architects and Security Leaders – not broad job-function buckets.
🚀 90-Day Activation Kickoff – Sequenced for Speed
Phased launch designed so quick-win programmes (AI visibility, paid retargeting of warm signals, Technical Architect community engagement) generated results in weeks – creating internal proof points to fund longer-cycle programmes while research and content build continued in parallel.
– Outreach quality over volume: Buyers described 4–5 emails per week as an active disqualifier. We cut volume by 70% and rebuilt around signal-triggered, hyper-relevant touches – improving response rates while reducing noise.
– Positioned AI substantively, not superficially: Buyers are allergic to AI hype. Our content programme led with data-substantiated AI utility – specific, proven, functional – not generic AI claims. This addressed a gap that competitors hadn’t closed.
– Aligned buying group friction to content sequence: Research revealed where internal friction between personas stalls deals. Content was built to resolve these friction points before sales hit them.
Ingredient 3 – The Results
3× more.
One-third the cost.
With evidence behind every number.
Six months in, the programme produced outcomes that exceeded the original brief – not because spend increased, but because every tactic was anchored in documented buyer behaviour. Results are benchmarked against the client’s own historical performance and industry averages for comparable enterprise cybersecurity programmes.
| 3.4× Pipeline generated vs. prior campaigns Industry benchmark: 1.2× growth YoY for mature programmes | −68% Cost per qualified opportunity vs. historical campaign spend baseline; industry target: −20% |
| 4× Engagement rate from target accounts vs. industry average for ABM-style programmes (2–3% → 8–12%) | Top 3 AI/LLM mention in buyer-intent queries From near-zero baseline; achieved within 90 days of programme launch |
| 1:7.4 Investment-to-pipeline ratio (was 1:2.1) 3.5× improvement; industry benchmark: 1:3–1:5 | −70% Outreach volume with +3× response rate Quality-over-volume shift – fewer touches, higher signal relevance |
Beyond the numbers
Sales and marketing aligned for the first time around shared buyer trigger data – eliminating the disconnect between “top of funnel awareness” and “timing and persistence” models that had operated in isolation.
Technical Architect programme created a systematic pipeline source that didn’t exist before – filling the biggest gap between what the client believed was happening and what buyers confirmed was actually happening.
AI visibility programme became a competitive moat within 90 days. As buyer research behaviour shifts to AI-first shortlisting, the client moved from absent to consistently present in the answers buyers receive when evaluating the category.
The portfolio perception problem began to shift as content mapped to platform conversations rather than point-product benefits – with measurable increases in multi-product pipeline opportunities in the second half of the programme.
“The research didn’t just tell us what buyers wanted – it told us what was actively disqualifying us before we even got the conversation. Once you see that, you can’t unsee it.” – Marketing leadership, post-programme review
Ready to see what your buyers actually think?
We start with research. Everything else – content, advertising, AI visibility, ABM – is built on what buyers tell us, not what we assume. The result is programmes that compound instead of campaigns that expire.