Can you see who visits your website, what is possible and what is not

It is one of the most common questions website owners ask, and the honest answer is "partly". You can see a great deal about how people use your site, you can often see which companies visit, and you can see exactly who a person is once they choose to tell you. What you cannot do, legitimately and reliably, is put a name on every anonymous visitor. This article walks through each layer of visibility, explains where the line sits and why, and shows how B2B teams use the part that is possible without crossing into territory that creates legal and trust problems.

The short answer in plain terms

If you run a website, here is what you can and cannot know about the people who visit it.

• You can see aggregate behavior: how many visits, which pages, how long, which sources and campaigns brought people in.
• You can often see which organization a visit comes from, when the visitor browses from a business network that can be matched to a company.
• You can see the identity of people who identify themselves: they fill in a form, log in, reply to an email or start a conversation.
• You cannot reliably see the name of an anonymous individual just because they loaded your page.
• You cannot see anything about visitors who block scripts, and you will see less about people on home, mobile or VPN connections.

The rest of this article explains each of these points, because the details decide which tools are useful for your team and which ones promise more than they can deliver.

What standard analytics shows you

Every common analytics package gives you traffic data: sessions, pageviews, entry pages, exit pages, referrers, campaign tags, device type, browser, approximate country and city. Used well, this data answers important questions. Which channels bring visitors who read past the homepage? Which pages lose people? Did the new campaign drive anyone to the pricing page?

What analytics does not do is tell you who the visitors are. That is intentional. Analytics vendors aggregate and often anonymize data so they can be used broadly without turning into a surveillance tool. Even approximate location data is usually derived from the network and can be off by a large distance, especially for mobile users. If your question is "how is my site performing", analytics is the right tool. If your question is "which accounts are researching us right now", it is the wrong one.

Seeing which companies visit

Between anonymous analytics and named individuals sits a middle layer: company-level identification. When someone visits your site from an office network, the request comes from an IP address. Many business networks use address ranges that can be associated with the organization, either because the company registered the range itself or because the range is assigned to it by a provider in a way that is publicly or commercially documented. Matching the address against a business IP-to-company data set lets a tool say "this visit came from a 500-person manufacturing company headquartered in Michigan".

That is what VisitorDetector does. A lightweight script records the visit, the network address is matched to a company using a licensed B2B data set, and you get a company profile with name, website, industry, employee range and HQ location, plus the pages that company read. You never get a person. If you want the step-by-step version of that process, read how to identify anonymous website visitors, and for the network side, identify company by IP address.

• What you see: the company, its profile, the pages it viewed, time on page, sessions, entry source, first and last visit.
• What you do not see: which employee it was, their name, their email or their personal profile.
• What stays anonymous: home broadband, mobile carrier and known VPN traffic, which is excluded instead of guessed.

Seeing individuals who choose to identify

The only clean way to know a person is for that person to tell you. When a visitor fills in a form, signs up, logs into your product, replies to an email or books a call through your own process, you have their identity with their knowledge. From that point on, your marketing automation or CRM can link their later visits to their record, subject to your consent setup.

This is still the strongest signal you will get, and nothing in this article suggests replacing it. Company identification works alongside forms. It covers the large group of visitors who never convert on the website, and it helps you notice accounts early, before anyone at that company is ready to raise their hand.

Why naming anonymous individuals is a different matter

Some tools in the market promise to reveal named individuals who visit your site without filling anything in. These products generally rely on cookie syncing across networks of partner sites, device graphs, or matching hashed email addresses collected elsewhere. The results can include names and contact details.

There are several reasons to be cautious. Accuracy is hard to verify because you rarely know the ground truth. Coverage varies widely by region and audience. Most importantly, identifying individuals without their knowledge touches privacy laws in many jurisdictions and can damage trust if visitors find out how they were identified. Whether a given tool is lawful in your situation depends on its data sources, your notices and consent, and where your visitors are. That is a question for your counsel, and this article is not legal advice. We compare the two approaches in more depth, neutrally, in b2b website visitor identification at company level vs person level.

VisitorDetector stays at the company level by design. That keeps the output useful for sales and marketing while keeping individuals out of the picture.

Why part of your traffic will always stay anonymous

Even at the company level, nobody sees everyone. Understanding why helps you set realistic expectations and judge vendor claims.

• Remote and hybrid work means many business visits come from home broadband, which identifies an internet provider, not an employer.
• Phones on mobile data use carrier networks that are shared by millions of subscribers.
• VPNs and privacy relays replace the original network address with one belonging to the relay operator.
• Small businesses often have no network range of their own and share a provider connection with many unrelated customers.
• Some visitors block scripts or use browsers that limit tracking, so no visit is recorded at all.
• Coworking spaces and shared offices put many companies behind one address.

A tool that claims to identify every visitor is either guessing or doing something other than network matching. VisitorDetector reports the matched share of your traffic, the portion of visits that produced a company, so you can judge the result against your own audience. We do not quote a universal match rate, because it genuinely depends on who visits you and from where.

How to use visitor visibility responsibly

Being able to see which companies visit is a responsibility as well as an advantage. A few habits keep you on the right side of your visitors and your legal team.

• Say what you do in your privacy notice, in clear language, including that you use company-level identification.
• Offer an opt-out. VisitorDetector provides an /opt-out page you can link from your notice.
• Keep data only as long as you need it. The default retention setting is 13 months and you can shorten it.
• Respect consent signals your site already collects. VisitorDetector supports consent mode for the cookie manager you use and can respect Do Not Track and Global Privacy Control when you turn that on.
• Exclude your own offices, so your team does not pollute the data.
• Reach out to accounts with relevance, not with "we saw you on our pricing page".

For a broader overview of how rules differ between the EU, the UK and US states, see website visitor tracking privacy law and our privacy-first page.

Turning visibility into action for B2B teams

Seeing companies is only worth something if it changes what your team does. The practical setup is short. Define your ideal customer profile, weight the pages that signal buying intent, and send the result to where your team already works.

An interest score from 0 to 100 combines page weights, recency, return visits and session count, so a company that read pricing twice this week ranks above one that read a single blog post last month. Alerts arrive as an email digest or, on Growth and higher plans, in real time and in Slack. Identified companies and their visits sync to HubSpot, Salesforce or Pipedrive on Growth and higher plans. Read more on lead scoring and integrations, or see how sales teams run a daily routine on the sales teams use case.