How do I track which marketing actually brings in cybersecurity clients?
Long sales cycles and many touches make attribution hard. A simple setup still tells you where clients come from.
- Which channel brought our last five clients?
- How do we track long sales cycles?
- Is our agency's report right?
Record the source on every lead and deal, ask "how did you hear about us?" on forms and in the first call, tag campaign links and report pipeline and revenue by source each month. With long security sales cycles, look at the last six to twelve months, not last month. Automation fills in source fields and builds the report; people interpret it.
The minimum setup
- Original source on every contact and deal in the CRM.
- A free-text "how did you hear about us?" field.
- UTM tags on every campaign link.
- A monthly report: leads, opportunities, pipeline and revenue by source.
Self-reported attribution matters
Security buyers often hear about you in a podcast, a peer recommendation or a community before they ever click. Software can't see that, but the buyer can tell you. AI can group free-text answers into themes.
How we look at it at ShoutEx
We set up tracking before changing budgets, then review it quarterly. The approach is the same one we describe for SaaS: see our attribution answer. Our budget and metrics guide covers what to report.
- Reports that stop at clicks and leads.
- Source fields left blank.
- Judging channels on one month.
- Ignoring what buyers say.
- Source recorded automatically.
- Self-reported attribution.
- Pipeline and revenue by source.
- Quarterly decisions, not weekly.
What buyers and practitioners say
Here is what marketers and researchers say.
B2B marketers discuss self-reported attribution and why it often reveals channels software misses, such as podcasts and communities.
Browse the threads →HubSpot users share how they set up original source tracking and attribution reports.
Browse the threads →Much of the buying journey happens without vendors, which is why tracking alone misses part of the story.
Read Gartner's research →Community summaries describe recurring themes in public threads, not individual posts. Vendor pages describe vendor claims, so test them on your own calls.
Read next
Go deeper in the ShoutEx guides, or check the sources behind this answer.
We'll set up tracking that ties marketing to clients and revenue.
Book a call →Follow-up questions
What's a good marketing budget for a security firm?
It depends on deal size and growth goals. Set it from target pipeline rather than a percentage.
Can AI attribute deals automatically?
It can help classify sources and touches. Final judgment needs context from the sales team.
How do we track partner-sourced deals?
Use a partner field and deal registration so partner credit is clear.