The Expel Pattern.
Brand search for the three leading MDR pure-plays is draining away, quarter over quarter. The engines, meanwhile, recite the same three names without fail — every time they're asked. The purest specimen is a vendor almost no one searches for and every engine already names. The only question left is which signal now leads the other.
Brand search is contracting across the MDR top tier.
Three pure-plays, all bleeding brand search. Expel down 31% — on 490 searches against an inventory where Arctic Wolf has 60× the volume. Now look at who the engines cite.
Google US, last 12 months vs. prior 12 months. Source: MyTelescope. Disambiguated to strip brand collisions — raw "arctic wolf" pulls 600,000+ animal-related searches.
Four engines, one canonical set.
Expel — at 490 brand searches — gets cited every time the engines are asked. That is the pattern. Cited before the search box catches up.
Query: "best MDR vendor for mid-market companies." Fanned across Perplexity, OpenAI, Grok, Gemini. Tally is mention-count, not ranking.
The finding has a name.
Cyber GTM's measurement layer is repricing. Brand search is becoming the lagging indicator — what buyers were curious about a year ago. AI citation is becoming the leading one — what AI engines will recommend to buyers this quarter.
The three top MDR pure-plays are all bleeding brand search year-over-year. Arctic Wolf down 10%. eSentire down 20%. Expel down 31%. Categories don't usually contract this fast at the named-vendor level — at minimum, you'd expect the leaders to hold while the long tail shed share. They aren't.
Now ask the four AI engines who the best MDR vendors are. ChatGPT, Perplexity, Grok, and Gemini all cite the same canonical four: Arctic Wolf, Expel, eSentire, CrowdStrike Falcon Complete. Universal — every engine names every one of them. After that there is a sharp drop to the two-of-four tier (Sophos, Huntress, SentinelOne Vigilance), then a long single-citation tail.
Expel is the cleanest case. 490 brand searches over twelve months. Down 31% YoY. And universal AI citation. They're winning the citation graph without winning the search box.
Vendors with both: stable. Vendors with AI citation but no brand search: early, possibly winning. Vendors with brand search but eroding AI citation: late, structurally exposed.
Why this becomes the seventh GTM dimension.
The GTM Exposure Index that the Kumite runs on has six diagnostic dimensions — positioning, demand engine, category authorship, motion durability, channel fit, consolidation resilience. All read from the outside. All observable.
AI Citation Visibility is now the seventh. It satisfies the same constraints: outside-in, observable, methodologically defensible, and — uniquely — leading rather than lagging. The other six describe where a vendor stands. The seventh describes where the buyer is being told to look next.
The next two pieces in this series — CNAPP, then AI Security — show the same pattern across different categories and a sharper version of the same lesson. The frame holds.