By
Austin Coker
Last updated: October 2026
A 40-person office with a dying file server doesn’t call three providers and compare quotes. Someone at the company searches, opens two or three pages, asks ChatGPT or Google AI Mode who’s good in their area, and calls one.
SEO for MSPs in 2026 is the work of being that one. In practice, it requires:
Some context on the market you’re selling into. GTIA’s SMB Technology and Buying Trends 2025 research (720 respondents) found that about half of SMBs use an MSP for ongoing, contracted IT, with larger SMBs more likely to. On buying behavior more broadly, Gartner’s March 2026 survey of 646 B2B buyers found that 67% prefer to buy without involving a sales rep, and 45% used AI in a recent purchase.
Neither figure is specific to MSPs, so don’t treat them as proof about your market. What they show is the direction things are moving: much of the evaluation happens before anyone contacts you, and increasingly AI is part of it.
This guide covers what changed in 2026, how to organize keyword targeting into four tiers, and how to get named in AI search. It also explains how to set up a service-area Google Business Profile correctly, where city pages cross Google’s spam rules, and which links MSPs can realistically earn. It ends with where paid search fits and how to measure all of it.
Three Google updates this year are worth knowing by date, because they change what you should audit first. All three are listed on the Google Search Status Dashboard:
Google didn’t publish specific targets for these updates. It describes core updates as regular updates designed to better surface relevant, satisfying content, and that’s the only official statement worth planning around. Anyone telling you a core update specifically targeted MSP city pages is guessing.
What this means for MSP SEO is narrower than most commentary suggests. Two kinds of page are especially common on MSP websites:
Both are exactly the kind of content core updates sort through. In our client work, the sites that hold steady through core updates are the ones where each page could only have been written by a provider that actually does that work in that place.
Two other changes matter as much as the ranking updates.
AI search breaks a question into many searches. Google’s AI features, including AI Overviews and AI Mode, use a technique Google calls “query fan-out”. Before writing a response, they run related searches across subtopics and data sources. For an MSP, a single search like “managed IT services in [your metro]” can trigger behind-the-scenes searches about response times, pricing models, compliance support, and industry experience. You’re being judged on subtopics you never targeted.
GA4 now tracks AI traffic separately. On May 13, 2026, Google Analytics 4 added an AI Assistant default channel. It groups traffic from recognized AI assistants under the medium “ai-assistant.” Before this, that traffic was scattered across the referral and direct channels. You now have a minimum figure for AI search traffic, which settles the question of whether AI search sends you anything at all.
MSP keyword targeting works best when it’s organized by tier rather than by search volume. Each of the four tiers below maps to a different kind of page and a different moment in the buying process. Mixing tiers on one page is a common structural mistake on MSP sites.
Three rules make this structure work.
One page per search intent. Someone searching “co-managed IT” is in a different situation from someone searching “managed IT services.” They already have internal IT staff, they’re probably protecting someone’s job, and they need to hear that you work alongside an IT director rather than replacing one. That can’t be a paragraph buried in a general services page.
Don’t create pages for cities you don’t actually serve. It’s tempting to build a page for every town within 90 miles. But if you can’t get a technician there, or you have no clients there, the page has nothing true to say and becomes a liability. There’s more on this below.
Don’t neglect problem-tier content. This is where MSPs underinvest most, and it’s the tier AI assistants pull from most readily. People constantly ask about pricing, co-managed IT, and cyber insurance requirements, yet most MSP sites won’t answer those questions publicly.
If you want this mapped against your actual service lines and territory rather than a generic list, that’s the work we do in B2B search marketing engagements.
AI search isn’t a separate discipline added on top of SEO. It uses the same indexed pages, with a different selection process applied to them. The practical difference is that you’re being chosen as a named business rather than ranked as a link, and the AI needs other sources to confirm what you say about yourself.
Because Google’s AI features break a question into subtopics before answering, a request for IT providers in a region gets split apart. The underlying searches look for providers tied to that area, to specific services, and to specific industries, plus evidence that the business exists and operates.
Two things carry most of the weight.
Your own pages, stated plainly. Pages that clearly say what you do, where you do it, which industries you serve, how you price, and how fast you respond. Vague positioning copy gives an AI assistant nothing to attach to your name.
Confirmation from other sources. For example:
An AI assistant building a shortlist is effectively checking whether anyone besides you says you exist and do this work.
The pages that get quoted are the ones that fully answer a question somewhere an AI assistant can read it. For an MSP, the highest-value details are also the ones most providers hold back until a discovery call:
You don’t have to publish a rate card. You do have to publish enough that when a prospect reads an AI-generated summary, they see a specific answer from you rather than a vague one from a competitor. The providers getting named in these answers are the ones who wrote down what they charge for, and why.
Build a fixed set of questions and run it on a schedule. Keep the wording the same so results are comparable from month to month. A workable starting set for an MSP:
Run each question in ChatGPT, Google AI Mode, Perplexity, Claude, and Gemini. Record which providers are named, in what order, and which pages are cited as sources.
The list of cited sources is the most useful part, because it shows which sites these tools trust for your market. Often it’s a directory, a local news story, or a review profile rather than any provider’s homepage.
Repeat the check monthly. Answers vary from one run to the next, so look for patterns across several runs rather than reacting to a single result.
Before you spend money on content, confirm two things.
ChatGPT. OpenAI says that any publicly available site can appear in ChatGPT search as long as it doesn’t block OAI-SearchBot, OpenAI’s search crawler. Check your robots.txt file and your web application firewall rules. Security-focused sites often block AI crawlers through aggressive bot protection. That’s an understandable instinct in this industry, and an expensive one.
Google. For Google’s AI features, your pages need to be indexable and eligible to appear as search snippets. If you have nosnippet or restrictive max-snippet settings in place, you’ve opted out of the very places you’re trying to appear.
We cover the full approach in our AI search work.
We’ll run the questions your buyers ask across ChatGPT, Google AI Mode, Perplexity, Claude, and Gemini, and show you which providers get named and which sources they rely on.
Getting traffic and converting it are different problems. MSP sites tend to fail at conversion in specific, fixable ways.
Give each service its own page, not a grid of icons. Managed IT, co-managed IT, managed security, cloud and Microsoft 365 management, backup and disaster recovery, and compliance support each deserve a page. Each page should cover the scope, what’s included and not included, and who it suits. A buyer evaluating co-managed support won’t assume you offer it from a nine-icon grid.
State your service area in text, not only on a map. Name the counties, metros, and towns where you have technicians who can be on site. If your remote coverage area is different, say so. This is the single most-read fact on an MSP site, and it’s often missing.
Be open about your pricing model. If you price per user, say so and explain what each user seat includes. If projects are quoted separately, say that too. Buyers who can’t find any pricing logic assume either that you’re too expensive or that you’re hiding something. Then they ask an AI assistant, which will happily estimate a number for your market without you.
Put proof where buyers look for it. That means:
Logos without context do less work than one paragraph describing what you took over, from whom, and what you stabilized.
Replace the generic contact form with a specific first step. For example, an IT assessment, a network and security review, or a 20-minute scoping call. The call to action should tell buyers what happens next and how long it takes. An MSP selling a multi-year relationship with a long onboarding can’t use the same call to action as an online store.
Show your own security practices. You’re asking a business to hand you administrative control of its systems. Your certifications, insurance, internal security practices, security operations coverage, and incident response process belong on the site. Don’t save them for a PDF you send after the second call. In this category, those trust signals are among the strongest drivers of conversion.
Most MSP leads from search are local, and the map results are often the only providers a buyer considers. Getting your profile right is high-leverage, and mostly a matter of following Google’s published rules rather than finding tricks.
Google says local results are based mainly on relevance, distance, and prominence, and that review count and rating factor into local ranking.
For an MSP, this is a useful reality check. Distance is the one factor you can’t change. You won’t appear in the map results for a city 60 miles away just because you published a page about it. What you can influence is:
Many MSPs have no public office, or a small one clients never visit. Google addresses this case directly in its guidelines for representing your business:
The guidelines cover eligibility and setup. They don’t publish a maximum service radius or a ranking formula, so be wary of specific radius advice you read elsewhere.
Reviews feed local prominence, and they’re also one of the strongest confirming signals for AI assistants building a shortlist. They’re also regulated, and MSP marketing advice has been slow to catch up.
The FTC’s Consumer Reviews and Testimonials Rule took effect on October 21, 2024. It prohibits:
Knowing violations can carry civil penalties of up to $51,744 per violation.
A compliant review process for an MSP is simple, and it produces better reviews anyway:
This whole layer, from profile setup through to the review process, is part of how we run SEO engagements.
See how we set up service-area profiles, review programs, and location pages that hold up through core updates.
Nearly every MSP has been sold a package of city pages at some point. Having city pages isn’t against Google’s policies in itself, but the usual approach is, and it’s worth understanding exactly why.
Google’s spam policies define two relevant problems:
How a page was made doesn’t matter: templated pages written by hand fall under the same definition as automatically generated ones.
So the risk isn’t having a page for a city. The risk is twenty pages where only the city name changes, all pushing visitors to the same contact form.
A location page that holds up contains details that would become false if you swapped in a different city:
Our rule of thumb with clients: if you can’t write three paragraphs that are true and specific to a city, don’t publish a page for it. Five genuine location pages beat twenty-five templated ones, and you won’t have to defend them after a core update.
This matches Google’s guidance on people-first content, which asks whether content is created mainly for people or mainly to attract search engine visits. Templated city pages fail that test in a way that’s obvious to anyone, including the buyer who lands on one.
MSPs have better link opportunities than most local service businesses, and use almost none of them. These are worth pursuing, and they double as the outside confirmation AI assistants look for.
Vendor partner directories. Microsoft, your security vendors, your backup and disaster recovery vendors, and your distributors all maintain partner directories. Claim and complete every listing where you genuinely hold partner status. These pages are trusted and relevant to your industry, and AI assistants often cite them when building provider lists.
Peer groups and industry associations. GTIA membership and similar industry bodies come with member listings. If you belong, make sure your listing is complete, accurate, and links to your site.
Local chambers and business associations. Unglamorous, but still one of the clearest ways to tie your business to a specific area in a way others can verify.
Commentary in local media. When a data breach or cyberattack hits businesses in your region, local business journals and news outlets need someone who can explain it in plain language. Being the MSP owner who picks up the phone earns coverage no outreach campaign can match, and the requests keep coming.
Case studies your clients also publish. A case study your client posts on their own site, links to, and mentions on LinkedIn is worth more than a dozen you publish alone. Build the permission conversation into your quarterly business reviews rather than treating it as a one-off request.
Sponsorships with a real community presence. Youth sports teams, tech support for local nonprofits, chamber events. The link matters less than your name appearing alongside the area you say you serve.
Don’t buy links. Besides the policy risk, the directories selling links to MSPs tend to sell to every MSP in your market. That makes them useless for setting you apart, even when they don’t hurt you.
Organic visibility for an MSP takes months. Paid search covers the gap, and it gives you data on what buyers search for that you can feed back into your content.
Bid on high-intent city and service combinations. For example, “managed IT services [city],” “IT support [city],” and “co-managed IT [city].” Skip broad terms like “IT services,” which drain your budget on research traffic and job seekers.
Build a thorough negative keyword list from day one. For MSPs, wasted spend comes mostly from searches containing:
Without these exclusions, a large share of your spend goes to people who want to work in IT rather than buy IT services.
Send each service to its own landing page. A co-managed IT ad that points to your homepage converts poorly, because visitors can’t confirm within five seconds that you offer the specific thing they searched for.
We run paid search alongside organic for B2B and tech services firms.
Ranking reports are the wrong yardstick for a business selling multi-year contracts. Measure the things that show up in your financials.
GA4 AI Assistant channel. Since May 13, 2026, traffic from recognized AI assistants is grouped under the medium “ai-assistant.” Treat that number as a minimum rather than a total. Many AI-influenced visits arrive as direct traffic, because people read a recommendation and then type your name into the browser.
Search Console data, split by tier. Report service, city, industry, and problem searches separately. A single site-wide impressions figure hides a common situation: problem-tier content growing while city pages stay flat.
Google Business Profile performance. Track calls, direction requests, and website clicks from your profile every month. For local MSPs, the profile often produces more qualified contact than the rest of the site.
Lead source fields in your CRM that include AI options. Add ChatGPT, Google AI Mode, Perplexity, and “other AI assistant” as options alongside Google search and referral, and have whoever takes the call ask. Asking leads where they found you is imperfect, but it’s the only way to see AI-driven leads that never clicked a trackable link.
Business outcomes, not activity. Track booked assessments, signed MRR, and client lifetime value by lead source. An MSP that signs two 50-person clients a year from search needs a measurement model built around those two deals, not around average keyword positions.
We’ll review how your MSP performs across organic search, AI search, and paid, and show you what to fix first. No pitch deck required.
Austin Coker is the CEO and founder of 95 Projects. He has worked in SEO since 2020, when he built and sold an ecommerce brand that grew mainly through search. He founded 95 Projects in 2022 to help SaaS, ecommerce, and B2B service companies show up wherever their buyers search, from Google to ChatGPT and AI Overviews.
Have questions about working with us? Book a 30-minute strategy call to discuss your goals and see if we’re a good fit.
No-pressure conversation
Clear next steps (if we’re a fit)
Talk directly to an expert
Plan in months, not weeks. The timeline depends on how competitive your metro is, how much authority your current site has, and whether your Google Business Profile is set up correctly. Fixing your profile tends to improve local visibility faster than new content does. A market with a handful of established MSPs behaves very differently from a metro with fifty.
Yes, as long as each page covers an area you actually serve and contains facts that are only true for that area. The risk comes from templated pages that differ only by city name. Those match Google’s definitions of doorway pages and scaled content abuse. If you can’t write something true and specific about a city, don’t publish a page for it.
Yes, they name providers when asked. They build those answers by searching across subtopics rather than reading a single page. Whether you get named depends on your site clearly stating your services, service areas, industries, and pricing logic, and on outside sources confirming you exist and do that work, such as partner directories, association listings, and reviews. Run a fixed set of questions monthly to see where you stand.
They meet different needs. Ads bring in qualified calls quickly, but you pay for every click. SEO and AI search visibility take months to build, then keep producing leads without per-click costs. Most B2B services firms we work with run paid ads on high-intent city and service terms while building organic and AI visibility, then shift budget as organic lead flow becomes reliable.
Yes. Google’s guidelines tell businesses that don’t serve customers at their address to hide it and set service areas instead. The catch is that distance is one of the main local ranking factors, so a service-area business still competes from where it’s actually located. Virtual offices aren’t eligible unless they’re staffed during business hours.
Start with GA4’s AI Assistant channel, which groups traffic from recognized AI assistants under the medium “ai-assistant.” Add AI options to the lead source field in your CRM, and have your team ask on intake calls, because a lot of this traffic shows up as direct visits after someone reads a recommendation. Treat the combined picture as a guide to trends, compare it month over month, and don’t expect precise attribution.
