Thought leadership for IT companies: the trust-earning channel MSPs keep underinvesting in

TL;DR

• Edelman-LinkedIn 2024: 86% of decision-makers are more likely to include thought leadership publishers in an RFP process. 60% will pay a price premium.
• Sophos Cybersecurity Trust Reality Report 2026: 95% of organizations do not fully trust their cybersecurity vendors. 79% cannot reliably evaluate vendor trustworthiness.
• Seer Interactive September 2025: Organic CTR on informational queries dropped 61% when Google AI Overviews appeared. Pages cited in AI Overviews received 35% more organic clicks and 91% more paid clicks.
• ConnectWise 2026 MSP Marketing Report: 51% of MSPs spend under $10,000 a year on all marketing. Best-in-class firms spend 1.8% of revenue.
• Cybersecurity HQ 2025: IT buyers complete 57 to 70% of their purchase research before contacting a vendor, across 10 channels and 13 or more content assets.

IT companies have an unusual problem. They sell trust in environments where trust is structurally hard to earn. A buyer evaluating a managed service provider cannot observe the service until they are already dependent on it. A compliance-focused firm cannot prove its HIPAA depth in a 30-minute discovery call. A cybersecurity company cannot demonstrate its incident response capability until there is an incident.

Every other marketing channel (paid search, cold outbound, referral programs) tries to generate a conversation. Thought leadership is the only channel that pre-builds the trust required to win that conversation before it starts. That difference is not philosophical. It is the operational explanation for why Edelman-LinkedIn 2024 found that 75% of decision-makers say thought leadership led them to research a vendor they had not previously considered. The content did not close the deal. It opened the door before anyone knocked.

This page covers what IT company thought leadership actually requires, why most MSPs are underinvesting in it at exactly the wrong moment, and what a working system looks like in practice.

Why thought leadership matters more for IT companies than for almost any other services category

The short answer: IT buyers face a structural trust problem: they cannot evaluate the service until they are already dependent on the provider. Thought leadership is the primary mechanism for closing that gap pre-sale, and AI search is making it the dominant one.

Start with the trust deficit. The Sophos 2026 Cybersecurity Trust Reality Report found that 95% of organizations do not fully trust their cybersecurity vendors, and 79% say they struggle to evaluate the trustworthiness of new vendors. That is not a PR problem. That is the operating condition of the entire IT services category. Buyers want to trust their providers. They do not have a reliable mechanism for doing so.

The IT services market is crowded with firms making near-identical claims about responsiveness, certifications, and “proactive” support. No buyer has enough time to verify those claims through sales conversations alone. They are looking for signal that predates the pitch.

That signal, for most buyers, is published expertise. Not marketing copy. Published expertise: a writeup of a real incident handled correctly, a compliance analysis that reflects actual framework depth, a vendor evaluation written from operator experience rather than reseller incentives. These are the artifacts that a skeptical buyer can examine before they ever agree to a call.

The acquisition context makes this more urgent. The Kaseya 2026 State of the MSP Report found that 71% of MSPs cite customer acquisition as their single biggest challenge. The ConnectWise 2026 MSP Marketing Report shows that 51% of MSPs spend under $10,000 per year on all marketing combined, while best-in-class firms spend 1.8% of revenue. A $5M MSP at best-in-class spending commits $90,000 per year to marketing. Half the market is spending less than $10,000. The acquisition problem and the marketing underinvestment are the same problem.

Seer Interactive’s September 2025 analysis found that organic click-through rates on informational queries dropped 61% when Google AI Overviews appeared in results. Buyers are now getting answers directly from the AI layer, without clicking through. The firms that appear in those answers built citation eligibility through published, named-expert content. The firms that did not publish are invisible in the answer layer that is replacing search rankings.

Paid search and cold outbound are not substitutes here. Paid search captures demand that already exists for your firm or your category. It does not build the trust that IT buyers require before they convert. Cold outbound generates conversations, but it puts an uninvested prospect across from a salesperson in an environment where trust needs to be the first agenda item. Thought leadership is the only channel that arrives at the conversation with trust already partially established.

The compounding effect is real and measurable. Edelman-LinkedIn 2024 found that 60% of decision-makers are willing to pay a price premium to firms that produce consistent thought leadership. The mechanism is not complicated: when a buyer has been reading your firm’s content for four months before they need a vendor, you are not competing on price at proposal time. You are confirming what they already believe. The cheaper acquisition tactics erode. Thought leadership compounds.

What thought leadership actually looks like for IT companies (not vendor whitepapers)

The short answer: IT company thought leadership has a specific substance threshold: it must contain claims that only someone running IT environments could make. Vendor whitepapers, republished threat reports, and generic security tips do not meet that threshold. Four content types do.

Most IT companies are publishing the wrong content. Republished vendor threat intelligence, generic “5 tips for cybersecurity” posts, and case studies written by a marketing agency with no operator input are not thought leadership. They will not build trust, earn AI citations, or generate price premium.

Thought leadership for IT companies has a specific substance threshold: the content must contain claims that a marketing agency could not have written without operator input. If someone who has never run an IT environment could have produced the piece from publicly available information, it does not meet the threshold.

Four content types consistently meet that threshold for MSPs and IT services firms.

Pattern 1: Incident writeups (anonymized). A real incident, handled correctly, with the timeline, the decision points, and the specific technical actions taken. Identifying details are anonymized. The value is in the specificity: what the initial alert looked like, what the team ruled out first, what the actual root cause turned out to be, how long containment took. Buyers who manage IT risk internally read these for calibration. Buyers evaluating MSPs read them as proof of competency under pressure.

Pattern 2: Compliance framework interpretations for specific verticals. Not “here is what HIPAA requires.” That is a search result. Rather: “here is how HIPAA’s minimum necessary standard applies to the clinical workflow patterns we see in 12-person dental practices, and here is where those practices consistently fail audits.” The specificity of the vertical and the specificity of the workflow are what make it thought leadership rather than compliance paraphrasing.

Pattern 3: Vendor evaluations based on operator experience. Not review aggregation, not reseller talking points. A named technical leader at your firm explaining what they observed when your team deployed and managed a specific vendor’s product across multiple client environments. Mean time to resolution differences between vendor A and vendor B on actual incidents. False positive rates in practice. Support response quality under real escalation pressure. These evaluations are extremely high value because they are impossible to produce without operating experience.

Pattern 4: Proprietary operational data. The data your firm generates by running client environments: average patch cycle times in your client base, mean time to detect in the environments you monitor, dwell time distribution on incidents you have responded to. Benchmarks built from your own operational history are unique by definition. No competitor has your data. This is the highest-trust content type and the most underused.

The common failure across all four types is hedging out the specificity. “Not wanting to call out competitors” and “protecting client confidentiality” are real concerns. Both are addressable: anonymize the client, describe the class of vendor rather than the specific brand if necessary, and frame benchmarks as your own operational data rather than a market claim. The specificity is the asset. Removing it produces generic content that earns nothing.

Content does not need to be long to meet the substance threshold. A 400-word LinkedIn post from your CTO describing a specific observation during an EDR deployment is thought leadership. A 3,000-word “comprehensive guide to ransomware protection” written by a marketing agency is not. Length is not the measure. Asymmetric information is.

Who should be the named voice: technical founder, CTO, or service delivery lead?

The short answer: One named human with verifiable operator credentials, publishing consistently under their own name. Company pages and “the 100Signals team” bylines earn almost nothing. Personal profiles reach 561% more people on LinkedIn and build the trust that converts buyers.

LinkedIn’s own data is unambiguous: personal profiles reach 561% more people than company pages. That reflects how professional trust works. Buyers engage with humans. They vet humans. They follow humans. They buy from firms whose people they know and whose perspective they have read for months.

The pattern we see in IT services site audits is near-universal. Insights pages bylined to “The [Firm] Team” or left unattributed. Long-form content produced monthly, but LinkedIn cadence from the technical founder running every other month if at all. Author entities missing from the page’s structured data. None of those sites earn AI citations. The citation mechanism requires a specific human to attach the claim to, and most firms have not nominated one.

For IT companies, the named voice has an additional constraint: operator credibility. A CMO who writes about cybersecurity trends is not a thought leader in the eyes of a CTO evaluating an MSP. The named voice must be someone whose credentials are verifiable: they ran the incident response, they hold the certifications, they managed the specific compliance environment they are writing about.

In practice, this is usually the technical founder, the CTO, or the head of service delivery. It is almost never the person who is most comfortable on camera or most willing to post on LinkedIn. Those attributes are useful for distribution. They are not the qualification for the voice.

“Our founder is technically brilliant but hates writing and has no interest in social media.” That is a workflow problem, not a disqualification. The production model that works at most IT companies is interview-based: a writer interviews the technical leader for 45 to 60 minutes, extracts the specific claims and observations that meet the substance threshold, and drafts the content for the technical leader to review and approve.

The technical leader’s job in that model is to provide the raw material: the incident timeline, the vendor observation, the compliance interpretation, the benchmark. The writer’s job is to structure it for the audience and optimize it for AI citation. The technical leader does not need to enjoy writing. They need to be willing to talk about their work for an hour once a month.

One named voice is better than three diluted ones. When a firm splits its thought leadership across the founder, the CTO, and the marketing director, none of them build sufficient signal to earn AI citations, none of them develop enough LinkedIn authority to drive meaningful reach, and the content looks like a committee product rather than a perspective. Consolidate to one voice. Add a second after the first has built a foundation, typically 12 to 18 months in.

The named voice also needs entity consistency across platforms: the same name, same headshot, same title on LinkedIn, on the firm’s About page, on any third-party publications, and in the structured data markup of any content published on the firm’s website. That consistency is one of the three conditions for AI citation, covered in the section below.

The three platforms IT company thought leadership has to live on in 2026

The short answer: LinkedIn is where IT buyers scroll during the consideration phase. The firm website optimized for AI Overviews is where they research before contact. Third-party platforms add entity breadth and citation surface area. All three are required. Choosing just one undercuts the others.

LinkedIn: where buyers are, in a channel they trust. LinkedIn is the primary distribution channel for IT company thought leadership because it is where the buyers are during the consideration phase of a purchase. The head of IT at a 200-person professional services firm is not reading MSP blogs. They are scrolling LinkedIn, reading what people in their network engage with, and occasionally following someone who consistently says things they find useful.

The LinkedIn strategy for IT company thought leadership is straightforward: the named technical voice posts two to three times per week, each post drawing on the same operator-derived insights that form the long-form content. A specific observation from an incident. A counterintuitive finding from a compliance engagement. A concise vendor evaluation from a recent deployment. The posts are short, specific, and written in the technical leader’s natural voice, not in marketing language.

The firm’s company page serves as an amplification layer for the named voice’s content, not as a content source in its own right.

Firm website optimized for AI Overviews: where buyers research before contact. Cybersecurity HQ’s 2025 research found that IT buyers complete 57 to 70% of their purchase research before ever contacting a vendor, across an average of 10 channels and 13 or more content assets. Much of that research now runs through AI assistants rather than direct Google searches. The firm website is the anchor for that research channel: long-form content structured with named expert attribution, answer capsules after each heading, and schema markup that makes the author’s entity verifiable.

The SEO strategy for IT companies that supports thought leadership is not traditional keyword optimization. It is citation structure: content organized so that an AI assistant can extract a clean, citable answer to a specific question, attribute it to a named expert, and include it in a response to a buyer’s research query.

Third-party platforms: entity breadth and inbound credibility. Podcast appearances, trade publication articles (Channel Futures, MSSP Alert, Channelnomics), and niche community participation (Reddit’s r/msp, MSP-focused Slack communities) serve two functions. They add external citations that corroborate the named voice’s entity, which strengthens AI citation eligibility. They also generate inbound interest from buyers who encounter the named voice outside the firm’s own channels, which is how thought leadership builds pipeline from audiences that were never going to find the firm’s website.

The Seer Interactive September 2025 numbers explain why the firm website is not optional in this stack. Pages cited in AI Overviews receive 35% more organic clicks and 91% more paid clicks than uncited pages. The website content is the citation source. LinkedIn and third-party platforms are the entity corroboration that makes the citation credible. They work together.

How thought leadership earns AI citations for IT companies

The short answer: AI assistants cite IT companies when three conditions are met: named expert attribution verifiable across platforms, answer-structured content that an AI can extract cleanly, and entity consistency from LinkedIn to bylines to About pages to schema markup. Miss any one of these and the citation machinery does not engage.

Forrester’s 2024 research found that 89% of B2B buyers used generative AI tools in their purchase process. TrustRadius 2025 found that 72% of B2B buyers encountered Google AI Overviews during research. Cybersecurity HQ 2025 found that IT buyers complete 57 to 70% of their research before vendor contact, across 10 channels and 13 or more content assets. Much of that research now runs through AI assistants: “What MSPs specialize in healthcare compliance in the mid-Atlantic?” “What are the real differences between Sentinel One and CrowdStrike for a 200-person firm?” The firms that appear in those answers built citation eligibility deliberately.

The Semrush 2025 analysis found that Google AI Mode produces zero-click results 92 to 94% of the time. That is the operating context: most buyers researching IT services are getting answers from the AI layer without ever clicking through to a firm’s website. The firms that appear in those answers have won a consideration slot with a buyer who has no idea they exist yet. The firms that do not appear are invisible to a growing share of the market.

Three conditions determine AI citation eligibility for IT companies.

Condition 1: Named expert attribution with verifiable entity. AI assistants cite named humans with verifiable credentials, not company brands. The named voice’s content must carry a byline, the byline must link to an About page or LinkedIn profile that corroborates the credentials, and the author entity should be marked up with Person schema including a sameAs property pointing to the LinkedIn profile URL. An article bylined “the 100Signals team” will not earn citations. An article bylined “Sarah Chen, CTO at [Firm], 12 years managing HIPAA-regulated environments” with schema markup corroborating that attribution will.

Condition 2: Answer-structured content with extractable answer capsules. AI Overviews and AI Mode extract clean, quotable answers from content. The structural requirement is a direct answer to the section’s implied question, placed immediately after the heading, in 40 to 60 words. This is the same pattern used throughout this page. The AI can find the heading, extract the answer capsule, and cite the named author. Content that buries the point in three paragraphs of context does not get extracted cleanly.

Condition 3: Entity consistency across all surfaces. The named voice’s name, title, firm affiliation, and headshot must be consistent across the firm website, LinkedIn profile, trade publication bylines, podcast show notes, and any third-party mentions. Inconsistencies (different title on LinkedIn versus the website, different name format on a trade publication byline) reduce the AI’s confidence in the entity match and reduce citation frequency. This is administrative work, but it is the difference between building a citable entity and building noise.

The AI visibility strategy applies the same structural requirements across technical services categories. What differs for IT companies is the competitive opportunity: most MSPs are not building citation eligibility. The firms that move first in their specific vertical and geo combination will own AI citation real estate that is difficult for later entrants to displace.

The 90-day IT company thought leadership system

The short answer: Three sequential phases: foundation (days 1-30), rhythm (days 31-60), and calibration (days 61-90). Each phase has one primary output. The goal at day 90 is not finished thought leadership. It is a system that will compound for the next 18 months.

The 90-day framing is useful because it separates what can be built quickly from what takes time to compound. The foundation and rhythm phases take 90 days to establish. The compounding effects take 12 to 18 months to produce measurable pipeline impact. Starting sooner is the only way to get to 18 months faster.

The 90-day output is not thought leadership. It is the infrastructure for thought leadership: a named entity, a documented framework, two anchor articles, a LinkedIn rhythm, two external citation sources, and a measurement baseline. The compounding starts from that foundation.

How to measure thought leadership ROI for an IT company

The short answer: Three measurement tiers: leading indicators appear in 60 to 90 days and tell you the system is working. Mid-term indicators appear in 4 to 8 months and tell you it is reaching buyers. Lagging indicators appear in 12 to 18 months and tell you it is affecting revenue.

The most common reason IT companies abandon thought leadership before it works is measuring the wrong thing at the wrong time. Pipeline and revenue are lagging indicators with a 12 to 18 month horizon. Measuring them at month three and concluding “thought leadership doesn’t work” is like measuring a tree’s fruit production three months after planting the seed.

The correct measurement framework has three tiers.

The measurement discipline matters for a second reason beyond knowing if it is working: it forces a topic selection process. If certain posts consistently generate DMs from target accounts and others generate only likes from peers, that is calibration data. Adjust toward what generates buyer signal, not toward what performs well by vanity metrics.

Edelman-LinkedIn 2024 found that 60% of decision-makers are willing to pay a premium to firms producing consistent thought leadership. That premium effect is a lagging indicator. The firms that do not measure leading and mid-term signals abandon before they get there. The firms that do measure them stay in the system long enough to compound.

The four failure modes that kill IT company thought leadership

The short answer: Four specific patterns cause IT company thought leadership to fail: vendor talking points without operator input, anonymous team bylines, episodic publishing, and generic cybersecurity commentary without any claim only your firm could make. Each has a concrete fix.

Most IT company thought leadership programs fail on one of four specific failure modes that are easy to identify and fix.

Failure Mode A: Vendor talking points masquerading as expertise. The content reads like a Microsoft or SentinelOne press release dressed in the MSP’s branding. It was either directly sourced from vendor materials or written by someone who had no source other than vendor materials. Buyers recognize this instantly. It does not build trust. It signals that the firm does not have independent judgment.

The fix: every piece of content must contain at least one claim that only an operator with your firm’s specific experience could make. If the piece passes the “could a marketing agency have written this without talking to our team” test, rewrite it until it fails that test.

Failure Mode B: Anonymous “team” content with no named voice. “The 100Signals Security Team” is not a thought leader. It is a byline that allows everyone to take credit and no one to take accountability. Buyers do not build trust with teams. They build trust with people. Anonymous content earns no LinkedIn reach differential, no AI citation, and no price premium.

The fix: name the author on every piece. If the named voice is not comfortable with full attribution yet, start with LinkedIn posts before moving to long-form articles. The discomfort fades faster than most technical leaders expect.

Failure Mode C: Episodic publishing that does not compound. Three articles published in January, nothing in February through June, two articles in July when there is a slow week. The LinkedIn algorithm treats this as a new account every time it restarts. AI indexers do not build entity confidence from irregular signals. Buyers who found one good article in January and look for more in March find nothing.

The fix: commit to a cadence that is sustainable at minimum, not aspirational at maximum. Two LinkedIn posts per week from the named voice and one long-form article per month is a system. Eight articles in a burst and then silence is not. Underpromise the cadence internally, then meet it.

Failure Mode D: Generic cybersecurity takes with no operator specificity. “Ransomware is on the rise and organizations need a defense-in-depth strategy.” True. Also true for every article published on this topic since 2018. This content produces no differentiation, no trust, and no citations. It is the intellectual equivalent of a firm website that says “we provide proactive, responsive IT support.”

The fix: apply the specificity test before publishing anything. Does this piece contain a specific claim about a specific vertical, a specific vendor, a specific incident type, or a specific operational benchmark? If not, either add the specificity or do not publish it. Generic content is worse than no content because it signals that the firm has nothing specific to say.

IT companies that avoid these four failure modes and maintain consistent cadence are operating in a small competitive segment. Most MSPs are making at least two of these errors simultaneously. The bar to clear to be meaningfully better than the field is not high. It requires deciding to clear it.

Key terms

Thought leadership: Content produced by a named expert that contains claims only that expert’s operational experience could generate, distributed consistently enough to build cumulative trust with a target audience. The threshold distinguishing thought leadership from content marketing is asymmetric information: the piece must contain observations or data that a marketing agency without operator input could not have produced. For IT companies, this means incident-derived insights, compliance interpretations for specific verticals, vendor evaluations based on managed deployment experience, or proprietary operational benchmarks from client environments.

Named expert authority: The reputation equity built by a specific individual over time through consistent publication of operator-derived insights, verified credentials, and external citations. Named expert authority is distinct from firm brand authority: it is attached to the human, not the logo, and it compounds through LinkedIn reach differential (561% more than company pages, per LinkedIn’s own data), AI citation attribution, and buyer trust transfer. It is not transferable between individuals. If the named voice leaves the firm, the authority they built goes with them.

AI citation eligibility: The set of structural and content conditions that make a piece of writing likely to be cited by an AI assistant (ChatGPT, Perplexity, Google AI Overview) when answering a buyer’s research query. The three conditions for IT companies are: named expert attribution with sameAs schema markup, answer-structured content with extractable 40 to 60 word answer capsules after headings, and entity consistency across the named voice’s LinkedIn profile, firm About page, and any third-party publication bylines. Eligibility is binary in the sense that missing any one condition substantially reduces citation frequency.

Operator-derived insight: A claim, observation, or data point that can only be produced by someone with hands-on operational experience in the relevant environment, as opposed to synthesized from publicly available sources. For MSPs, operator-derived insights include specific incident timelines with decision-point analysis, compliance interpretations applied to specific client workflow patterns, vendor performance observations from real multi-client deployments, and aggregate benchmarks (patch rates, MTTR, dwell time) generated from the firm’s own client environments. Operator-derived insight is the raw material that distinguishes genuine thought leadership from content marketing with a thought leadership label.

How 100Signals approaches thought leadership for IT companies

The standard consulting engagement produces a content strategy document. What it does not produce is the named expert, the entity schema, the AI citation structure, the LinkedIn rhythm, or the measurement system. Those are the parts that actually compound.

100Signals starts with a scan: we look at where a firm’s existing published expertise sits relative to the AI citation surfaces in their specific vertical and geo combination. Most IT companies have more operator-derived insight available than they have published. The scan identifies what exists, what is structured for citation eligibility, and what the gap is between current publishing and the firms appearing in AI answers for the target buyer’s research queries.

The Authority tier ($3,000/mo) is for IT companies that have identified their named voice and have operator-derived content to produce. It covers the anchor article production system (interview-based, bylined by the named voice), LinkedIn rhythm support, AI citation structure optimization, and measurement dashboard setup. It does not cover demand generation tactics or broad content marketing programs. Those are separate programs with different compounding timelines.

The System tier ($7,000/mo) is for IT companies building a full marketing infrastructure for IT companies simultaneously: thought leadership as the trust layer, SEO as the discoverability layer, and demand generation as the pipeline acceleration layer. The three programs are designed to reinforce each other: thought leadership content feeds SEO anchor pages, SEO pages feed AI citation eligibility, and cited content feeds demand generation conversion.

If you are evaluating dedicated thought leadership providers, the best thought leadership agencies for software development companies page covers the selection criteria that apply across technical services categories.

The IT services market is going to get harder for undifferentiated firms over the next three years. AI search is reducing the value of generic content. Buyers are getting better at evaluating vendors before a first call. The firms that build named expert authority now are compounding into a position that is difficult for later entrants to displace. The firms that wait are not avoiding the investment. They are making it later, at higher cost, against competitors who started earlier.

If you want to see where your firm’s current published expertise sits relative to the firms winning AI citations in your segment, the scan is the starting point.