Tool Reviews

The Best Website Visitor Identification Tools for Recruitment Agencies (2026)

An honest roundup of website visitor identification tools for recruitment agencies in 2026: Leadfeeder, Snitcher, Albacross, Leadinfo, HubSpot Buyer Intent, RB2B and Warmly. Real pricing, GDPR limits for UK and DACH, and how to turn a visit into a BD signal.

TB Team Boilr

· November 11, 2026 · 14 min read

Abstract dark liquid-metal ripples spreading outward with emerald highlights in onyx and racing green

TL;DR

Website visitor identification tools match the IP address behind a visit to the company that owns it, and some US tools go further and name the person [2]. For a recruitment agency this can surface a hiring manager quietly reading your "Executive Search" page before they ever fill in a form. But there are three catches most roundups skip. First, most traffic on an agency website is candidates, so a visit from a bank is often an employee job hunting, not a client buying. Second, in the UK and the EU you are on firmer ground with company-level identification than person-level, and even company-level needs a lawful basis and often consent [2] [10] [11]. Third, a visit on its own is a weak signal. The practical stack is a company-level tool (Leadfeeder, Snitcher, Albacross, Leadinfo or HubSpot Buyer Intent) filtered to client-facing pages, combined with real hiring signals and ICP scoring. boilr is not a visitor identification tool; it is the layer that tells you whether the company that visited is actually hiring and fits your ICP [12].

Why Visitor Identification Is Different for a Recruitment Agency

Visitor identification was built for SaaS vendors whose website traffic is almost entirely buyers. An agency website has two audiences, and they look identical in an IP log.

Candidates dominate traffic - your jobs board, "apply" pages and candidate blog pull far more visitors than your "hire talent" pages. A company match on /jobs/senior-data-engineer usually means someone at that company is looking to leave.
A candidate visit is not a BD lead - calling their employer because "someone from your company was on our site" risks exposing a candidate who trusted you. That is a reputational and data protection problem, not a sales opportunity.
Client intent lives on a few pages - "Our services", "Submit a vacancy", "Fees", case studies, sector pages and salary guides. These are the only paths worth alerting on.
Hybrid work reduces matches - IP-to-company matching works best on office networks. Vendors are candid about coverage; RB2B, for example, states 15-20% coverage on its standard plans and 35-45% on its top tier [7].
The UK and DACH are not the US - person-level identification is US-only even at the vendors who sell it [7], and EU guidance treats tracking that reaches into a visitor's device as needing consent [10].

Company-level vs person-level identification

	Company-level	Person-level
What it returns	Company name, firmographics, pages viewed	Name, work email, LinkedIn profile
How it works	Matches the visitor IP to the company that owns it [2]	Matches a browser signal to a database of named people [2]
Geography	Global	Mostly US-only [7]
UK / DACH risk	Lower, but still within GDPR [2]	High; legitimate interest is hard to justify
Agency use	Account-level BD prioritisation	US desks only, with legal sign-off

The Tools, Honestly Compared

Prices below are taken from each vendor's public pricing page in November 2026, not from quotes we obtained. Most tiers scale with the number of companies identified per month, so confirm the exact figure for your traffic.

1. Leadfeeder (Dealfront)

What it is - the best-known company-level tool, now run by Dealfront Group GmbH. It describes itself as "B2B website analytics built around companies, not sessions" [1].
Pricing - a free Lite plan (last 100 identified companies, 7-day visitor history); Discover from €79 a month billed annually; Activate from €369 a month billed annually; Scale from €599 a month; plus a 14-day trial [1].
Where it fits an agency - a European-headquartered option with a free tier, so a UK or German agency can test whether its client-facing pages get meaningful company traffic before paying anything.
Watch out for - paid tiers can reveal verified emails and phone numbers with credits [1], which moves you from company data to personal data.

2. Snitcher

What it is - a company-level tool priced purely on unique companies identified, with unlimited team members [3].
Pricing - from $49 a month for up to 50 companies, rising in bands to $529 a month for 4,001-5,000 companies; 14-day trial, no card [3].
GDPR stance - says it relies on legitimate interest under Art. 6(1)(f) GDPR and focuses on company-level intelligence; contact details are revealed only when you choose [3].
Where it fits - boutiques with modest client-page traffic that want a low, predictable bill.

3. Albacross

What it is - a Swedish (Albacross Nordic AB) company identification tool that bundles a small number of verified email and phone credits [4].
Pricing - Starter from €59 a month billed yearly (€84 monthly); Professional from €149 a month billed yearly; Organisation on request [4].
Where it fits - Nordic and EU agencies that want euro billing and a European vendor.
Watch out for - contact credits and "individual lead level" signals push you back towards personal data, so decide your policy before switching them on.

4. Leadinfo

What it is - a company identification tool billed in euros, with CRM integrations, automation rules and contact data for decision-makers at identified companies [5].
Pricing - Starter from €69 a month, Scale from €159, Pro from €359, tiered by identified companies; 14-day free trial [5]. The page's price calculator shows slightly different figures, so confirm before you buy.
Where it fits - mid-sized agencies that want visits routed into their CRM with rules rather than read in a dashboard.

5. HubSpot Buyer Intent (Breeze Intelligence, formerly Clearbit Reveal)

What it is - HubSpot's built-in feature that "connects anonymous web visitors to known companies' IP addresses" and stores company-level website activity [6].
Pricing - available on Starter, Professional and Enterprise hubs. Viewing more than 20 companies per view requires HubSpot Credits, and adding and tracking companies both consume credits [6].
Where it fits - agencies already running HubSpot as their CRM. No extra vendor, no extra script beyond the HubSpot tracking code.
Watch out for - credit consumption is easy to underestimate if you auto-add every visiting company. Filter by page path first [6].

6. RB2B

What it is - the best-known person-level tool. It is explicit that "Contact-level (person) ID is US only", whilst company-level ID is global on every plan [7].
Pricing - Free ($0, 150 resolutions, company-level only); Starter $79 a month (300 resolutions, adds US person-level); Pro from $149; Pro+ from $199 with higher stated coverage [7].
Where it fits - UK or DACH agencies with a genuine US desk and US client-page traffic, after legal review.
Where it does not - person-level identification of UK and EU visitors. It is not offered, and you should not want it.

7. Warmly

What it is - a broader inbound platform: visitor de-anonymisation (contacts and companies), AI chat, routing and outbound follow-up [8].
Pricing - AI Web-Deanonymization from $10,000 a year; Inbound Chat from $20,000; AI Inbound Autopilot from $30,000; a GTM Signals add-on at $10,000 a year [8].
Recruitment proof - Warmly publishes a case study with a recruiting and headhunting firm that used company visits and org charts to reach decision makers proactively; it reports no measured results [9].
Where it fits - large US-facing staffing groups with real inbound volume and a team to run it. For most UK and DACH agencies it is more platform than needed.

8. boilr (not a visitor tool, the layer on top)

What it is - an AI sales employee for recruitment agencies. It does not place a pixel or identify website visitors. Its Signals module tracks funding rounds, new hires, executive moves, tech migrations and custom signals from public sources [12].
Where it fits - after a visitor tool names a company, boilr answers the question the visit cannot: is this company actually hiring, and does it match your ICP? Companies are enriched and given an ICP match score, and Tasks give the consultant drafted outreach to verify and send.
Context that survives churn - the Company Brain keeps the agency's winning messages and ICP patterns, "owned by the firm", so the next consultant knows what worked with that sector [13].
Honest limits - boilr will not tell you who visited your site. Its HubSpot integration is live, and Bullhorn is on the roadmap [14]. boilr's claim that signals often arrive 48-72 hours before a role is posted is its own and not independently verified [12].

Side-by-side

Tool	ID level	Entry price (Nov 2026)	Free option	Best agency use
Leadfeeder	Company (+ contact credits)	€79/mo annual	Lite plan	Free UK/EU pilot
Snitcher	Company	$49/mo	14-day trial	Low-traffic boutiques
Albacross	Company (+ contact credits)	€59/mo annual	No	Nordic and EU agencies
Leadinfo	Company (+ contacts)	€69/mo	14-day trial	CRM routing rules
HubSpot Buyer Intent	Company	Hub subscription + credits	20 companies per view	HubSpot-native agencies
RB2B	Company; person (US only)	$79/mo	Free, company only	US desks
Warmly	Company + contact	$10,000/yr	No	Large US staffing groups
boilr	None (hiring signals + ICP)	See boilr pricing	Sign-up	Qualifying the visit

GDPR and ePrivacy: What UK and DACH Agencies Can Actually Do

This is not legal advice, and the vendors themselves disagree with some consent-management providers. These are the points the primary guidance makes.

EU: tracking pixels and IP collection fall under ePrivacy - the EDPB's final guidelines on Article 5(3) (version 2.0, adopted October 2024) treat tracking pixels and instructing a device to send information, including its IP address, as within scope, which means consent unless an exemption applies [10].
Germany: § 25 TDDDG - the German implementation of the same rule requires consent for storing or reading information on a visitor's device, with narrow exceptions for message transmission and strictly necessary services [15]. Treat a visitor tool's script like a marketing cookie in your consent banner.
IP addresses can be personal data - under the CJEU's Breyer ruling, a dynamic IP address is personal data for a site operator who has a lawful means to identify the person behind it, so company-level ID is "lower risk but not outside GDPR" [2].
UK: the new analytics exception does not cover identification - the ICO's final storage and access guidance (April 2026) adds a statistical-purposes exception, but it covers how a service is used, not who uses it [11]. Identifying visiting companies for sales is a different purpose.
Legitimate interest is not automatic - a vendor's own legitimate-interest assessment covers the vendor; your agency needs its own balancing test and a clear privacy notice [2].
Person-level in Europe - you cannot use legitimate interest to cover a consent you never asked for [2]. In practice: do not do it.

A sensible compliance baseline

Consent banner - load the visitor tool only after marketing consent in the UK and EU.
Company-level only - switch off contact reveal features for UK and EU traffic.
Exclude candidate paths - never act on visits to jobs, apply or candidate pages.
Privacy notice - name the tool and the purpose; most vendors publish sample wording.
Retention - keep visit data no longer than your BD cycle needs.
Sign-off - get your DPO or data protection adviser to approve the set-up once, in writing.

From Visit to BD Signal: A Scoring Framework

A company-level visit tells you someone at a company read a page. On its own that is curiosity. Combined with what the company is doing in the market, it becomes a reason to call.

What you see	Strength	Action
Visit to jobs or apply pages only	Ignore (likely a candidate)	No BD action; never contact the employer
Homepage only, one visit	Weak	Log it, do nothing
Services or sector page, outside your ICP	Weak	Log it, do nothing
Services page, ICP fit, no hiring signal	Medium	Add to nurture, check again in 2 weeks
Fees or "submit a vacancy" page, ICP fit	Strong	Consultant research and call this week
Any client page + funding, exec hire or job-posting spike	Very strong	Call within 24 hours with the signal as the reason
Existing client, repeat visits to a new sector page	Strong	Account manager asks about the new team

Eight recruitment examples

Fintech scale-up - reads your "Engineering Recruitment" page three times in a week, two days after a Series B announcement. Call the CTO with the funding as context.
Manufacturer - visits your fees page; a new Operations Director started last month. New leaders often rebuild teams in their first 90 days.
Law firm - only visits /jobs/legal-secretary. That is a candidate. Do nothing on the BD side.
Existing client - a logistics client starts reading your new "Data & Analytics" sector page. Ask your account manager to open the conversation.
German Mittelstand firm - visits your "Interim Management" page after posting several senior roles in a fortnight. Strong fit for an interim pitch.
Lapsed client - returns to your case studies page for the first time in a year. A good moment for a "what has changed" call.
Competitor agency - an IP match to a rival recruiter. Exclude agencies from alerts entirely.
US prospect on a US desk - person-level ID names a VP of Talent. Only act if your legal review approved US person-level use.

How boilr Fits Alongside a Visitor Tool

The visitor tool answers "who looked". boilr answers "should we care, and what do we say". Here is how the pieces map to boilr's real modules.

Signals - funding, new hires, executive moves, multi-turn signals and tech migrations at the visiting company [12].
Companies - target clients enriched and scored against your ICP, so a visit from a poor-fit company is easy to ignore.
Candidates - a shortlist sourced for the role you expect, so the first call can include real profiles.
Tasks - drafted outreach the consultant verifies and sends, in roughly 20 minutes a day.
Company Brain - the agency's winning messages and ICP patterns, kept when consultants leave [13].
Analytics - which ICP segments convert, so you know whether visits from a sector are worth acting on.
Integrations - live HubSpot, Recruiterflow, Gmail and Outlook connections [14], so a HubSpot Buyer Intent account and boilr's output can sit in the same CRM.

What stays human

Judgement on candidate traffic - only a consultant can tell a job seeker from a buyer when the page is ambiguous.
The first call - never open with "we saw you on our website". Lead with the hiring signal and a relevant shortlist.
Compliance sign-off - your DPO decides which tool runs and on which traffic.
Relationship and fee negotiation - no tool wins a PSL place for you.

Manual vs combined workflow

Step	Visitor tool only	Visitor tool + boilr
Who visited	Company list	Company list
Is it a client or a candidate?	Manual page check	Manual page check (path filters help)
Is it hiring?	Manual LinkedIn and news search	Signals already tracked
Does it fit our ICP?	Gut feel	ICP match score
What do we say?	Blank email	Drafted Task, informed by the Company Brain

Common Mistakes

Alerting on every visit - candidate traffic floods the feed and consultants stop reading it within weeks.
Telling prospects you tracked them - "someone from your company was on our site" feels like surveillance to many UK and German buyers.
Contacting a candidate's employer - the fastest way to lose candidate trust and invite a complaint.
Turning on person-level for EU traffic - even where a tool allows it, the legal basis is weak.
Skipping the consent banner - visitor scripts are tracking technology, not strictly necessary cookies.
Buying the platform before the traffic - if your client pages get a handful of company visits a month, a free tier is enough.

A 30-Day Rollout Plan

Week 1 - list your client-facing URLs, agree path exclusions for jobs and candidate pages, get DPO sign-off and update the consent banner and privacy notice.
Week 2 - install a free or trial company-level tool (Leadfeeder Lite, a Snitcher or Leadinfo trial, or HubSpot Buyer Intent if you already run HubSpot).
Week 3 - review matches once a day against the scoring table; cross-check each strong visit for hiring signals and ICP fit in boilr.
Week 4 - count how many visits became qualified conversations. If fewer than a handful, stay on the free tier; if more, pick the paid plan that matches your volume.

KPIs to track

KPI	Why it matters
Client-page company visits per month	Tells you whether a paid tier is worth it
Share of visits that are ICP fit	Measures whether your content attracts the right buyers
Visits with a concurrent hiring signal	The real lead pool
Visit-to-meeting rate	Whether the workflow produces BD, not dashboards
Cost per qualified conversation	Tool cost divided by meetings it sourced

Already know which companies visit your site but not which of them are hiring? Book a demo or try boilr and see the hiring signals behind the visit.

Frequently Asked Questions

What is a website visitor identification tool?

It is software that matches anonymous website traffic to the company behind it, usually by mapping the visitor's IP address to the organisation that owns it. Some tools, mostly in the US, go further and match visits to named people. You get a list of companies, pages viewed and timings. For an agency it is a hint of interest, not a qualified lead.

Which visitor identification tool is best for a UK recruitment agency?

Start with a company-level tool that has a free tier or trial, such as Leadfeeder Lite, Snitcher or Leadinfo, or HubSpot Buyer Intent if you already run HubSpot. Keep contact reveal features off for UK traffic. Only move to a paid plan once you know how many client-page visits you actually get.

Is website visitor identification legal under GDPR?

Company-level identification can be run lawfully with the right set-up, but it is not outside GDPR because IP addresses can be personal data. EU guidance treats tracking pixels and IP collection as needing consent under ePrivacy unless an exemption applies, and the UK's new analytics exception covers how a site is used, not who uses it. Load the tool after consent, document your legal basis and get your DPO to sign off.

Can I identify individual visitors in the UK or Germany?

Not in practice. RB2B, the best-known person-level tool, states that contact-level identification is US only. Leadfeeder's own guidance says legitimate interest cannot cover a consent you never asked for. For European traffic, stay at company level.

How do I stop candidate traffic polluting my BD alerts?

Filter by page path. Exclude jobs, apply, candidate registration and candidate advice pages, and only alert on services, sector, fees, "submit a vacancy" and case study pages. Also exclude other recruitment agencies. Review any ambiguous visit manually before acting.

Should I tell a prospect I saw them on my website?

Usually not. Many UK and DACH buyers find it intrusive, and it may expose a colleague who was job hunting. Open with a genuine reason: a funding round, a new leader, a hiring spike or a relevant candidate. The visit just tells you the timing may be right.

Does boilr identify website visitors?

No. boilr does not place a pixel or de-anonymise visitors. It tracks hiring and buying signals from public sources, scores companies against your ICP and drafts outreach for consultants to verify. It works best alongside a company-level visitor tool: the tool names the company, boilr tells you whether it is worth calling and what to say.

How much should a recruitment agency spend on visitor identification?

Most agencies can start at zero with a free tier or trial. Entry paid plans run from about $49 to €79 a month for company-level tools, whilst platforms like Warmly start at $10,000 a year. Judge the spend on cost per qualified conversation, not on the number of companies identified.

Sources

Information sourced from public vendor pages, regulator guidance and legal commentary as of November 2026.

Back to all articles