Intent & Signals
B

Bullseye

Bullseye identifies the people behind anonymous US website traffic. A script on the customer's site matches visits against a B2B contact database using IP signals, cookie data and behavioral patterns, returning a visitor's name, work email, job title and company for up to 40 percent of visitors, and up to 70 percent at the company level. Identified visitors flow in real time to HubSpot, Salesforce, Pipedrive, Marketo, Slack, Twilio and Google Sheets, with webhooks, Zapier and an API for anything else.

The same platform searches a B2B contact database for lookalike buyers who have not visited, reveals direct dial phone numbers on demand, and turns named visitors and lists into audiences for Meta Custom Audiences, Google Customer Match and ChatGPT Ads. A ChatGPT app lets a connected account ask about its own visitors and contacts, and agencies get per client workspaces while platforms can resell the service under their own brand on enterprise terms.

Pricing runs on monthly credit allotments, where one credit identifies a visitor, a phone reveal costs five credits only when a number is found and contact database unlocks cost one after about 100 free each cycle. Lite costs $99 a month with 200 credits and two seats, Starter $179 with 400, Growth $399 with 1,000, Scale $699 with 2,500 and Expansion $999 with 5,000 credits and 20 seats, with yearly billing at ten times the monthly price, falling overage rates and a 14 day trial without a card.

Bullseye processes US traffic only and stores data in the United States on AWS and Supabase, with OpenAI's GPT-4 used for data matching and enrichment. RB2B, another person level identification tool, is its most direct competitor.

Last VerifiedOctober 18, 2026
Compare Bullseye with other vendors
Founded
—
Headquarters
—
Website
www.bullseye.so
Categories
intent-and-signals, data-and-enrichment
Assessment

Capability Axes

Capability grades

17 of 17 axes rated · 7 graded A or B

AI Capability
AI CentralityAI CentralityWhether AI is the product or a feature veneer. The removal test: peel the AI label off, and does anything sellable remain?
CC on AI CentralityAI features on a conventional platform. Peel the AI label off and the product still works roughly as before.
Vendor Published

OpenAI's GPT-4 assists with data matching and enrichment, and a ChatGPT app answers questions about an account's own records. Identification itself rests on matching IP, cookie and behavioral signals to a contact database, and the automations, audiences and phone reveals around it work as conventional data features.

Autonomy and Oversight ModelAutonomy and Oversight ModelWhat the system does without a human. Draft for review, auto send, or fully agentic, and what contains a bad run.
CC on Autonomy and Oversight ModelAutonomy is claimed or implied with the oversight model asserted rather than documented. Buyers cannot tell from public sources what runs unsupervised.
Vendor Published

Automations route identified visitors and their phone numbers into CRMs, Slack, Twilio, Sheets and ad audiences as visits happen, and visitors can be enriched automatically. Filters and fit labels decide what moves, while approval steps, limits or ways to pause a running automation are not set out.

AI Disclosure and Model TransparencyAI Disclosure and Model TransparencyWhat models power the product, whether AI generated outreach discloses itself, and whether scoring and routing logic is explainable.
BB on AI Disclosure and Model TransparencyMeaningful disclosure of the model stack or the disclosure posture, with one real gap, commonly silence on whether AI authored outreach identifies itself.
Vendor Published

OpenAI's GPT-4 handles data matching and enrichment, and the ChatGPT app returns a defined set of fields while its activity trains no model. How matches are scored, and what the review label on a weaker match means, goes unexplained.

Operational and Outcome EvidenceOperational and Outcome EvidenceMeasured outcomes with a stated basis: replies, meetings, pipeline, win rates. Logos are not evidence and prestige is not measurement.
CC on Operational and Outcome EvidenceOutcome claims are headline percentages with no stated basis, or customer logos standing in for results.
Vendor Published

Person level identification reaches up to 40 percent of visitors and company level up to 70 percent, with the highest rates on sites above 10,000 monthly visitors and no measurement behind either figure. No customer is named and no customer result is reported.

Compliance and Risk
Outreach Compliance PostureOutreach Compliance PostureHow the product handles regulated outreach: consent, DNC scrubbing, opt out mechanics, caller ID conduct, and the public enforcement record.
CC on Outreach Compliance PostureCompliance is mentioned as the customer’s responsibility, with little or no product enforcement described. The tool can be run lawfully, and nothing about it helps.
Vendor Published

Only US traffic is processed, a public form lets anyone opt out of being identified, and Bullseye holds that every contact it surfaces gave opt in permission, without explaining how that permission was gathered. Notices and consents are left to the customer, and phones routed to Twilio carry no word on call consent or Do Not Call rules.

Data Privacy PostureData Privacy PostureGDPR and CCPA posture: lawful basis, data subject rights handling, DPA availability, subprocessor disclosure.
BB on Data Privacy PostureA real privacy program is visible (DPA available, policy substantive) with a gap on the hard question, commonly lawful basis for enriched or tracked individuals.
Vendor Published

The DPA lists subprocessors with purpose and location, gives customers audit rights and returns or deletes data at termination, and identified visitors can make rights requests or opt out. No legal basis for identifying individual visitors is stated, no legal entity is named, and breach notice has no set deadline.

Data Licensing and ProvenanceData Licensing and ProvenanceWhere the data comes from and on what legal footing: licensed, contributed, public record, or scraped, and who stands behind the answer.
CC on Data Licensing and ProvenanceData is described by its size and coverage with its origin unstated. The provenance question is answerable only by asking the vendor.
Vendor Published

Visits are matched to a large B2B contact database through IP signals, cookie data and behavioral patterns, while the supplier of that database and of the identity data behind each match goes unnamed. Records include work emails, phones and professional profile URLs, each with no stated source.

Platform Terms ExposurePlatform Terms ExposureWhether the product operates inside the terms of the platforms it touches, and the restriction risk a buyer inherits when it does not.
BB on Platform Terms ExposureThe method is described and mostly conformant, with one real ambiguity the vendor does not resolve, or conformance asserted without the partnership evidence that would settle it.
Vendor Published

Audiences reach Meta and Google through their own advertising platforms, and ChatGPT Ads gets an upload file. The tracking script runs on the customer's own site, while the professional profile URLs attached to identified people come with no stated method of collection.

AI Safety and Data StewardshipAI Safety and Data StewardshipThe cross client boundary: whether customer data trains models that serve competitors, plus retention and deletion posture.
CC on AI Safety and Data StewardshipSecurity language exists but the training question, the one this axis turns on, is unanswered: a buyer cannot tell whether their pipeline data improves a competitor’s instance.
Vendor Published

ChatGPT app activity does not train models and its logs are deleted after 30 days. For the main product, the terms grant rights to provide, operate and improve the service and OpenAI processes data for matching, with no statement on whether customer data trains any model.

Recipient Disclosure and AuthenticityRecipient Disclosure and AuthenticityHow the product presents itself to the people it targets: whether automated outreach and AI agents disclose themselves, whether sender personas are real, and whether personalization is grounded in verifiable fact. Measured as known compliance with Article 50 of the EU AI Act, in force since August 2, 2026, which requires AI systems that interact with individuals to disclose that fact.
CC on Recipient Disclosure and AuthenticityNothing published on whether recipients are told they are dealing with software. For a product whose AI talks to prospects, silence here is now a regulatory posture, not a style choice.
Vendor Published

People are identified while browsing a customer's site, and an opt out form exists for those who find out. Nothing addresses telling visitors at the time they are identified, and no position under Article 50 of the EU AI Act has been taken.

Integration and Deployment
Ecosystem and Integration DepthEcosystem and Integration DepthDocumented depth of CRM and stack integration: objects, sync direction, API surface, marketplace presence that matches the claims.
BB on Ecosystem and Integration DepthSolid primary CRM integration documented, with depth unstated at the edges (sync direction, custom objects, failure behavior).
Vendor Published

Native automations connect Salesforce, HubSpot, Pipedrive, Marketo, Slack, Twilio and Google Sheets, with Meta and Google ad audiences, Zapier, webhooks and an account API on every paid plan. A ChatGPT app reads account records, and a separate partner API supports white label resale, while field mapping and sync direction for the CRMs are not specified.

Deployment Model and Data ResidencyDeployment Model and Data ResidencyWhere the product runs and where customer data lives, including residency options for EU buyers.
BB on Deployment Model and Data ResidencyThe deployment model is clear and residency options are partially specified.
Vendor Published

All personal data is stored and handled in the United States, on AWS and on Supabase in the AWS us-east-1 region, with Cloudflare for delivery. No other region is offered, and the service only processes US traffic.

Security Certifications and Trust CenterSecurity Certifications and Trust CenterVerifiable security posture: enumerated current certifications and a trust center an outsider can actually read.
CC on Security Certifications and Trust CenterSecurity is claimed in general terms. Asserting certifications without enumerating them is weaker than it looks, and this band is where that lands.
Vendor Published

Security rests on general measures including encryption, access controls and regular review, with no certification or trust center. Security evidence packs and procurement reviews are reserved for Enterprise, on a service that holds CRM connections and person level visitor records.

Commercial and Operational
Commercial TransparencyCommercial TransparencyWhether a buyer can budget without a sales call. Published pricing graded on completeness, not on the price itself.
AA on Commercial TransparencyReal prices published: plans, seat or usage economics, and the shape of enterprise pricing, sufficient for a buyer to budget without a call.
Vendor Published

Lite costs $99 a month with 200 credits, Starter $179 with 400, Growth $399 with 1,000, Scale $699 with 2,500 and Expansion $999 with 5,000, with seats rising from two to 20 and overage falling from $0.60 to $0.24 a credit. Yearly billing costs ten times the monthly price, one credit identifies a visitor, a phone reveal costs five only when found, unused credits lapse each month, and Enterprise is quoted.

Exit and Data PortabilityExit and Data PortabilityWhat happens when a customer leaves: completeness of data export, rights to enriched or licensed data after termination, deletion commitments, and auto renewal mechanics, graded from published terms and documentation.
BB on Exit and Data PortabilityReal export capability documented, with a material exit question unstated in public terms, commonly post termination rights to licensed or enriched records.
Vendor Published

Customers can stop using the service at any time, fees are billed in advance and not refunded, and unused credits do not roll over. On termination the DPA returns or deletes personal data at the customer's choice, and identified visitors leave continuously through CRM syncs, webhooks and the API, while renewal terms and a deletion timeline are not given.

Deliverability and Sending DisciplineDeliverability and Sending DisciplineThe operational craft of sending: warmup, rotation, volume governance, spam rate monitoring, and what happens when reputation degrades.
CC on Deliverability and Sending DisciplineDeliverability is invoked as a benefit with no documented mechanism. For senders this is the axis where marketing most outruns evidence.
Vendor Published

No outreach is sent from Bullseye, which passes identified people to CRMs, Twilio and ad platforms. Work emails are offered without a stated verification method or bounce rate.

Segment and Market CoverageSegment and Market CoverageWho the product actually serves, evidenced: segments, geographies, languages, and customers that match the claim.
CC on Segment and Market CoveragePositioning language covers everyone from startup to enterprise, which specifies no one.
Vendor Published

Plans run from solo founders and seed stage SaaS through Series A teams and mid market sales organizations to RevOps teams, large agencies and platforms reselling the service. Identification covers US traffic only, and no customers are named.

Alternatives

Alternatives to Bullseye

Vendors in the same categories as Bullseye whose graded profiles look most alike, with a line on what each product does.

Similar is not the same, so check that each one does the job you need. No vendor pays for placement.

Salespanel is a first party data layer for B2B website visitors, known leads and accounts.

OutX is a social listening tool for sales that watches LinkedIn and Reddit for buying signals.

What's Trending is a social listening and content intelligence product for lean marketing teams, agencies and founders.

Buyer intelligence platform that collects signals from across a company's own systems and the public web, resolves them to a single person, and activates them through agents.

Highperformr is a GTM platform that brings buyer signals, a contact database, enrichment and social tools into one workspace.

Vector is an account based marketing platform built on contact level identification.

Ordered by how closely the graded profiles match across the seventeen axes, inside the same categories. See how each axis is graded in the methodology.

Commercial

Pricing

What this vendor charges, what it commits to in writing, and where the bill can move. Figures the vendor publishes itself are labeled Vendor Published. Figures labeled Estimated come from other sources and the vendor has not confirmed them.

What it costs
Vendor Published
Lite $99/month
$99 lowest published figure
In short
  • ›Bullseye sells monthly credit plans from Lite at $99 with 200 credits to Expansion at $999 with 5,000, where one credit identifies one website visitor. Yearly billing costs ten times the monthly price, and a 14 day trial needs no card.

How the price works

What you are charged for, and what makes the bill go up.

Monthly credit plans with seat counts (Lite $99 for 200 credits, Starter $179 for 400, Growth $399 for 1,000, Scale $699 for 2,500, Expansion $999 for 5,000), yearly at ten times the monthly price; one credit per identified visitor; Enterprise and white label quoted

What the contract says about your data

What the vendor commits to in writing once your data is in the product.

No BAA tier listed; a DPA is published.

Getting started

What it costs and what is included before the product is running.

No implementation fee is listed.

What to watch for

Where this pricing can surprise a buyer who has not read it closely.

Overage runs $0.60 a credit on Lite, $0.55 on Starter, $0.48 on Growth, $0.34 on Scale and $0.24 on Expansion. A visitor phone reveal costs five credits only when a number is found, contact database unlocks cost one credit after about 100 free each cycle, and unused credits do not roll over. Security evidence packs and procurement reviews require Enterprise. Fees are billed in advance and not refunded.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.