Spotsaas Editorial
How to Identify Anonymous Website Visitors: Tools & Methods (2026)
Written by
Spotsaas Editorial Team
Published July 17, 2026

Website visitor identification matches anonymous traffic to companies using IP-to-business databases, then enriches the match with firmographic or contact data. Realistic company-level match rates run 30-65% of US traffic, not the 80-90% some vendors imply. Tools range from free (RB2B, Leadfeeder’s free tier) to $700-$30,000+/year for full-stack platforms.
How website visitor identification works
Every visitor identification tool starts with the same raw material: an IP address, a first-party cookie, or (less often) a device fingerprint. What happens next determines whether you get a company name, a person’s name, or nothing usable at all.
IP-to-company resolution
The core mechanism is a lookup against a corporate IP database. Vendors like Leadfeeder, Snitcher, and Albacross maintain (or license) databases that map IP address ranges to registered businesses — the same kind of data that powers “who owns this IP block” WHOIS-style lookups, but built specifically for B2B identification. When a visitor’s IP falls inside a range assigned to a known company’s office, VPN, or corporate network, the tool returns a company match.
Reverse DNS lookups add a second signal: some corporate networks register hostnames that reveal the owning organization even when the IP-range database is thin. Neither method identifies a person — both stop at the company level.
Cookie and device graphs
Person-level tools go a step further. They combine the IP signal with a device or cookie graph — a database connecting browser fingerprints, ad-tech cookie IDs, and known email/LinkedIn identities collected through data partnerships. This is how a tool like RB2B can return an actual name and LinkedIn profile instead of just a company. It’s also why person-level identification only works reliably in markets with mature ad-tech cookie ecosystems, which in practice means the US.
Form-fill enrichment
A third path skips real-time matching altogether. When a visitor eventually fills out a form on your site (or on a partner site, in the case of shared identity networks), that email gets tied back to their prior anonymous sessions. This is lower coverage — it only works after someone converts — but it’s the most accurate signal available, since it’s self-reported rather than inferred.
How accurate is this, honestly
Company-level match rates sit in the 30-65% range depending on traffic mix, according to benchmarking from Warmly and MarketBetter, with the higher end reserved for traffic that’s heavily weighted toward corporate office networks. Person-level match rates are lower and noisier: 5-20% of US traffic, with most vendors landing closer to 10-15% in practice.
Three things push match rates down every year. Remote work is the biggest: over 60% of US knowledge workers now browse from home networks, coworking spaces, or coffee shops, and those IPs resolve to residential ISPs like Comcast or Spectrum, not an employer. VPNs and privacy tools mask the real IP entirely. And mobile carrier traffic routes through shared IP pools that can’t be resolved to a single company at all. Any vendor claiming 80%+ match rates across all traffic is very likely counting something other than clean company identification — check whether that number includes form-fill matches, repeat visitors, or a narrow “corporate-only” traffic sample before you trust it.
Company-level vs person-level identification
This is the distinction that determines what you can actually do with the data, and it splits the entire tool category in two.
Company-level tools — Leadfeeder, Snitcher, Albacross, Factors.ai in its core mode — tell you “Acme Corp visited your pricing page four times this week.” That’s an account signal. It’s useful for routing a lead to the rep who owns that account, adding the company to a retargeting audience, or flagging it for an SDR to research. It does not tell you who at Acme Corp was looking, so outreach has to start cold at the company level, not addressed to a named person.
Person-level tools — RB2B, and Warmly’s individual-identification feature — go further and attempt to name the actual visitor: “Jane Smith, VP Marketing at Acme Corp, viewed your pricing page.” That’s a much stronger signal for outbound, but it depends on matching the visitor’s IP or cookie against a database of known individuals, which is a materially different (and more legally sensitive) kind of data processing.
That’s why RB2B’s person-level identification is explicitly a US-only product built on a US-only identity database, as confirmed on RB2B’s own GDPR page: “Person-Level ID is US-Only, GDPR doesn’t apply… RB2B doesn’t have any product or service that is directed to the EU or UK, in a manner that might even theoretically subject its services to the GDPR.” The company offers a separate, company-level-only product for non-US traffic, built in partnership with Demandbase, which stops short of resolving individuals and therefore sits on firmer legal ground under EU rules. Warmly runs a similar split: broad company-level coverage everywhere, with named-person resolution concentrated on US traffic where the underlying identity graphs are richest.
The practical takeaway: if your buyers are mostly in the US, person-level tools can put a name in front of your SDRs before the first form fill. If a meaningful share of your traffic is European, budget for company-level identification as the baseline and treat person-level matches as a US-only bonus, not a core capability.
The best visitor identification tools in 2026
Pricing below reflects publicly listed rates as of July 2026. Several vendors (Factors.ai, Vector) have moved toward demo-gated or usage-based pricing, so treat these as directional rather than final quotes.
| Tool | Identification level | Starting price | Free option |
|---|---|---|---|
| Leadfeeder | Company | €99/mo (annual), 50 companies | Yes — 100 companies/mo, 7-day retention |
| HubSpot Breeze Intelligence (formerly Clearbit) | Company + contact enrichment | $75/mo minimum (HubSpot + credits) | No |
| Snitcher | Company | $49/mo | 14-day trial, no free tier |
| Warmly | Company + person (US) | $700/mo (Startup plan) | Yes — 500 visitors/mo |
| RB2B | Person (US-only), company elsewhere | $79/mo (Starter) | Yes — 150 credits/mo, company-level only |
| Factors.ai | Company + intent | $399/mo (last listed; now demo-gated) | Yes — 200 companies/mo |
| Albacross | Company | €59/mo (annual) | 14-day trial, no free tier |
| Vector | Person (US) | $399/mo (Reveal product) | No |
Leadfeeder
Leadfeeder is company-level website visitor identification, and its brand history is worth knowing before you evaluate it: Leadfeeder merged with German sales-intelligence firm Echobot in 2022, and the combined company rebranded as Dealfront in 2023. On March 24, 2026, Dealfront reverted to the Leadfeeder name, unifying the platform back under the brand most buyers already knew. Contracts, pricing, and data didn’t change — only the URL and some internal feature names did.
The free plan covers 100 identified companies a month with 7-day data retention. Paid plans start around €99/mo (annual billing) for 50 companies and scale up by identified-company volume to roughly €1,199/mo; a €399/mo Platform tier adds access to Dealfront’s 60-million-company contact database. Limitation: it’s company-level only — no named individuals — and cost is tied directly to how many companies you identify, so a traffic spike can push you into the next pricing tier automatically.
HubSpot Breeze Intelligence (formerly Clearbit)
HubSpot acquired Clearbit in late 2023 and folded it into the platform as Breeze Intelligence in 2024, shutting down Clearbit’s standalone free tools and APIs in the process. It’s now sold as enrichment and identification credits layered on top of a HubSpot subscription, starting around $75/mo for a HubSpot Starter plan plus a small credit pack. Mid-market teams running meaningful identification volume typically land at $1,000-$5,000+/mo once HubSpot seats and credit packs are combined.
Limitation: Breeze Intelligence only works inside HubSpot. If your CRM of record is Salesforce, Pipedrive, or anything else, there’s no direct integration — you’re stuck building a custom connector or migrating your CRM.
Snitcher
Snitcher is a company-level identification tool priced simply: plans start at $49/mo with unlimited users, unlimited websites, and every core feature included regardless of tier. It enriches identified companies with firmographic data and lets you build workflow triggers — Slack alerts, CRM tasks — off page-view and visit-frequency signals.
Limitation: Snitcher identifies companies, not people. Getting an actual named contact at that company requires separate “reveal” credits — one credit per email address, five per phone number — so the advertised $49/mo doesn’t cover contact-level prospecting.
Warmly
Warmly combines company-level and (for US traffic) person-level identification with built-in orchestration: Slack alerts, live chat routing, and automated email sequences that fire the moment a target account or named visitor shows up. The free plan covers 500 identified visitors a month. Paid plans start at $700/mo for the Startup tier (companies under $2M ARR) and climb to $1,440/mo and beyond for larger teams; full annual bundles that combine de-anonymization with AI-driven inbound orchestration run $10,000-$30,000/year.
Warmly reports roughly 65% company-level and 15% individual-level match rates — in line with independently reported industry ranges, though these are still vendor-self-reported figures rather than third-party audited numbers. Limitation: the jump from the free plan to the cheapest paid tier is steep ($0 to $700/mo), with no mid-tier option for smaller teams that want person-level data without the full orchestration suite.
RB2B
RB2B built its reputation on free, person-level identification for US traffic, delivering names and LinkedIn profiles straight to Slack. As of January 2026, the free plan was scaled back to company-level identification only (150 credits/mo) — named contact data now requires a paid plan, starting at $79/mo (Starter, 300 resolutions/mo), $140/mo (Pro, 600 resolutions), or $199/mo (Pro+).
Limitation: person-level identification is explicitly US-only by design, resolving only visitors matched to US home addresses via IP ringfencing. For non-US traffic, RB2B offers a separate global company-level product built with Demandbase, which doesn’t resolve to individuals.
Factors.ai
Factors.ai pairs company-level identification with intent scoring and account-based marketing workflows. Last publicly listed pricing showed a free plan (200 companies/mo), a Basic plan around $399/mo (3,000 companies), and a Growth plan around $999/mo (8,000 companies), with add-ons like Interest Groups ($750/mo) and LinkedIn AdPilot ($1,000/mo) priced separately. As of mid-2026, Factors.ai has moved to demo-gated, custom pricing for most tiers.
Limitation: Factors.ai claims to identify more than 75% of visiting companies — well above the 30-65% range that independent benchmarking finds typical for the category. Treat that figure as a vendor claim to verify against your own traffic during a trial, not a guaranteed number.
Albacross
Albacross is a European-rooted, company-level identification tool that matches visitor IPs against a B2B database and returns company name, size, industry, and page-level engagement data. Annual pricing runs Starter at €59/mo, Professional at €149/mo, and Organisation at €375/mo, with monthly billing running roughly 40% higher across all tiers.
Limitation: like Snitcher and Leadfeeder, Albacross stops at the company level by design — getting a verified contact at an identified company requires spending separate credits, so it’s the first step in a workflow, not the last.
Vector
Vector identifies individual visitors — name, title, company, LinkedIn — for an estimated 15-30% of US traffic, then syncs those contacts as paid-ad audiences across LinkedIn, Google, Meta, Reddit, TikTok, and X. It’s sold as two separate products: Reveal (identification), priced roughly $399-$999/mo on month-to-month billing, and Target (ad audience activation), starting at $3,000/mo on an annual commitment.
Limitation: the two-product structure means teams that want both identification and ad activation should budget $4,000-$5,000/mo minimum. Vector is also a young company — it closed a $10 million Series A in May 2026 — so evaluate it with the same due diligence you’d apply to any newer vendor with a shorter track record.
Visitor identification vs buyer intent data
Visitor identification and buyer intent data get bundled together in vendor pitches, but they answer different questions and belong in different places in a go-to-market motion.
Visitor identification tells you who’s already on your site. It’s reactive by definition — a company or person has to land on a page you own before any of the tools above can say anything about them. That’s valuable, but it only covers a company once they’ve found you, which means it says nothing about the much larger group of buyers researching your category who haven’t visited yet.
Buyer intent data works upstream of that. Instead of watching your own site, intent platforms track which companies are researching your market category — comparing products, reading reviews, visiting competitor pages — before they ever land on your domain. Review platforms are one of the biggest sources of this signal, because category and comparison pages are exactly where active buyers show up before they’ve picked a vendor. G2’s Buyer Intent product is the best-known example: it surfaces companies researching a given software category on G2’s own pages, even before they’ve contacted any vendor in that category.
Spotsaas Buyer Intel applies a version of the same technique to Spotsaas’s own category and comparison pages. One of its three signal modes — resolved company visits — identifies companies browsing relevant Spotsaas categories, alongside two other modes: content-download leads (companies that download buying guides or reports) and self-qualified buyer requests (companies that submit direct buying criteria through Spotsaas). As with any resolved-visit signal, this mode depends on the same IP-to-company matching described earlier in this article, with the same accuracy limits, and any company-level resolution used runs through the disclosures on the Spotsaas privacy policy. You can read more about the full product at spotsaas.com/buyer-intent.
The two data types compound well together: visitor identification catches the buyers who found you, intent data catches the ones who haven’t yet — and a full pipeline strategy generally needs both.
Is identifying website visitors legal? (GDPR + privacy)
Company-level identification and person-level identification sit in different legal categories, and the split lines up almost exactly with the company-vs-person distinction covered above.
Company-level IP matching is generally defensible under GDPR’s legitimate interest basis (Article 6(1)(f)). The reasoning, as explained by Leadinfo’s legal analysis, is that a business learning which other businesses are visiting its own business website is low-intrusion, and the resulting data is a corporate record, not a personal profile — provided the tool only surfaces the company name and doesn’t tie the visit to an identifiable individual. If the matching runs server-side, first-party, and without setting tracking cookies, most legal guidance treats it as exempt from cookie consent requirements entirely, since the ePrivacy rules only govern cookies, not server-side IP lookups.
Person-level identification is a different matter. The moment a tool ties a visit to a named individual — even a business contact — that’s personal data processing under GDPR, and the bar for a lawful basis rises accordingly: you generally need consent, or a much narrower legitimate-interest argument that’s harder to defend at scale. This is precisely why RB2B ring-fences its person-level product to US traffic and offers a separate, GDPR-compliant company-level-only product (built with Demandbase) for everyone else, and why Warmly’s individual-identification feature is concentrated on US visitors where the underlying identity graphs exist and the legal exposure is lower.
Practical guidance for most B2B sites: run company-level identification under legitimate interest and disclose it in your privacy policy, keep it cookieless if your vendor supports that mode, and treat any person-level identification of EU or UK visitors as a compliance question for counsel before you turn it on — not a feature to enable by default.
How to act on identified visitors
Identification only pays off if it changes what a rep or a campaign does next. Three plays cover most of the value.
Route to reps with page context. The moment a target account (or, in the US, a named individual) hits a high-intent page — pricing, a specific feature page, a comparison page — push an alert to the owning rep with the page and visit history attached. A rep who knows someone from a target account just spent four minutes on the pricing page can prioritize that account over a cold list entry, and can reference the actual pages viewed when they do reach out.
Build retargeting audiences. Company lists from visitor identification tools sync into ad platforms as custom audiences. This lets you keep a brand or product in front of a visiting company even if no individual converts on that visit — useful for companies that browse early in a buying cycle and don’t come back for months.
Feed ABM account lists. If a set of target accounts is visiting specific pages, that’s a signal to prioritize those accounts in an account-based marketing motion — personalized landing pages, direct mail, or targeted ad spend concentrated on the accounts already showing engagement, instead of spreading budget evenly across a full target list.
One warning worth taking seriously: don’t lead outreach with the fact that you tracked someone. “I saw you were on our pricing page” reads as surveillance to most recipients, even when the underlying data collection was entirely legitimate, and it reliably kills reply rates. A better script uses the same intelligence without naming the mechanism: reference the buyer’s likely problem based on the page they viewed, not the fact that they viewed it. Instead of “I noticed you checked out our pricing page,” try “Teams evaluating [category] usually get stuck on [specific pricing question] — happy to walk through how [feature] handles that if useful.” Same information advantage, none of the creepiness.
Frequently asked questions
Can you identify anonymous website visitors?
Yes, at the company level for most B2B traffic, using IP-to-company database matching. Person-level identification (an actual name) is possible too, but only reliably for US traffic, since the identity graphs that power it are built on US ad-tech and cookie data that doesn’t exist at the same depth in the EU.
How accurate is website visitor identification?
Company-level tools typically match 30-65% of traffic, depending on how much of that traffic comes from corporate office networks versus remote workers, VPNs, and mobile carriers. Person-level tools are lower — realistically 10-15% of US traffic. Any vendor claiming much higher numbers across all traffic is worth double-checking during a trial.
Is it legal to identify website visitors?
Company-level identification is generally lawful under GDPR’s legitimate interest basis, since it produces a business record instead of a personal one, and can often run without cookie consent if it’s server-side and cookieless. Person-level identification of individuals is personal data processing and needs a stronger legal basis — which is why most person-level products, including RB2B, restrict that capability to the US.
What is the best free website visitor identification tool?
RB2B’s free plan (150 credits/mo, company-level identification) and Leadfeeder’s free plan (100 identified companies/mo, 7-day retention) are the two most usable no-cost options in 2026. Neither includes named person-level contacts on the free tier — RB2B removed that from its free plan in January 2026.
What’s the difference between visitor identification and intent data?
Visitor identification tells you who’s already on your website. Intent data (like G2 Buyer Intent, or Spotsaas Buyer Intel’s resolved-visit signals) tells you which companies are researching your product category elsewhere — on review sites and comparison pages — before they’ve ever landed on your domain. Most GTM teams that use one eventually add the other, since they cover different stages of the buying process.
Keep reading
- Buyer intent data: the complete guide
- 10 best buyer intent data providers
- How Spotsaas Buyer Intel works
Sources
- Leadfeeder: Dealfront rebranding FAQ (March 2026)
- RB2B GDPR policy page
- Warmly: Website Visitor Identification Match Rates
- MarketBetter: 12 Best B2B Website Visitor Identification Tools 2026
- Snitcher pricing
- Factors.ai: Website Deanonymization guide
- Leadinfo: Visitor identification and GDPR
- G2: Snitcher reviews
Last updated: July 17, 2026
Related Articles

SaaS Insights
10 Best TrustRadius Alternatives in 2026 (For Buyers and Vendors)
Continue reading →

SaaS Insights
Online Review Statistics 2026: Trust, Fake Reviews & How Reviews Drive B2B Software Buying
Continue reading →

SaaS Insights
First-Party vs Third-Party Intent Data: Which Should You Buy? (2026)
Continue reading →

SaaS Insights
12 Best ZoomInfo Alternatives in 2026 (By Use Case and Budget)
Continue reading →