Obviam
120 day roadmap

What happens, in what order,
and why that order.

A companion to the search opportunity report. The findings there set the sequence here: measurement before spend, internal links before headings, profile before local content. Every item is something that can be checked as done or not done.

01Before the clock starts

Six things are needed before week one can begin. The 120 days are counted from the day these arrive, not from the date the quote is signed, because none of the work below is possible without them.

What we needWhy it blocks the workHeld by
WordPress admin, hosting, and a staging copyNo staging means no safe plugin work and no way to rehearse a change before it is live.Obviam
A confirmed, restorable backupVerified by file count and size, not just reported. If a backup cannot be confirmed, work stops.Shared
Google Ads: manage access and billingCampaigns are promised live in month one. Read only access cannot deliver that.Obviam
Google Business Profile ownershipThe profile is actively maintained by someone. We need admin rights, not a new listing.Obviam
Google Analytics adminWe currently hold view only. Conversions and custom parameters cannot be created without admin.Obviam
Written position on the current providerIf two agencies are changing the site at once, no measurement taken now can be trusted at month four.Obviam
Blocks everything
The last row is the one that matters most. If another party is still changing the site during these four months, the baseline stops being a baseline and nothing measured at month four can be attributed with confidence. This is not a comment on anyone's work. It is a measurement problem, and it only needs a clear answer.

02Why this order and not another

1
Baseline before changes

If the site changes before the baseline is frozen, there is nothing credible to measure against at month four.

2
Measurement before paid spend

Ads pointed at a site that cannot count a conversion is money spent blind. Tracking is proven with a real submission before budget scales.

3
Internal links before headings

The eight industry pages are orphaned. Adding headings to pages nothing links to would have produced no result and consumed a month.

4
Category and reviews before local content

Security service plus city searches are tiny here: cybersecurity cincinnati runs 110 a month and nobody holds it. The volume that does exist is managed IT phrasing, which is a positioning question for Obviam. Either way local visibility comes from the map pack first, so category and reviews come before any local page work.

03Month one

The heaviest month. Everything that follows depends on it, so it is split into what must happen, what follows inside the same month, and what waits on a decision.

Must not slip

the engagement depends on these
ItemDetailWhen
Freeze and date the baselineEverything in the accompanying report, captured and dated before a single change is made. This is what month four is measured against.Week 1
Make leads countableMark the real lead form as a conversion, add phone tap tracking, and register the form parameters that identify which form was used. Thirteen months of submissions were recorded and never counted.Week 1 to 2
Filter bot traffic out of reportingAround 5,100 sessions from China and Singapore, averaging under two seconds, currently sit inside every number the business looks at.Week 2
Link the eight orphaned industry pagesFinancial services, healthcare, higher education, insurance, K-12, law firms, manufacturing and retail. No link on the site points to any of them, even after JavaScript runs. Internal links come first; headings alone would not have worked.Week 2 to 3
Add headings to the pages missing themTwenty three pages have no H1, including every webinar page and the About page.Week 3
Correct the Google Business Profile categoryCurrently Business to business service. The seven businesses at the top of this pack are all filed under computer categories, and Cequence Security outranks Obviam from the same street on Computer security service with three reviews. This is the single cheapest ranking change available.Week 1
Complete the profile: services, categories, photos, descriptionObviam lists 0 services, 0 additional categories and 1 photo, against competitors listing up to 60 services and averaging 64 photos. Google draws the services list from the categories chosen, so the category fix comes first because the services vocabulary follows it. Its description runs 656 characters, uses the words "national reach" and names none of the places it serves.Week 1 to 2
Start the review program, on a cadenceObviam has zero. The target is a rhythm rather than a total: one review a fortnight. Intrust IT leads the pack on 113 reviews and has had 1 in a year, its most recent 271 days ago, so recency is winnable here even where volume is not.Week 2 onward
Ask Modern Office Methods to link and describe Obviammomnet.com holds 500 referring domains against Obviam's 59 and links to Obviam twice, both from blog posts. Its homepage, services and about pages carry no link and never use the word. A link plus a plain description of what Obviam sells, on the parent's structural pages, is the highest authority link available at no cost. Obviam's call, not ours.Week 2
Google Ads live on commercial termsNot the informational terms owned by Gartner and CrowdStrike. The vCISO, penetration testing and compliance set, where the buyer is already shopping.Week 3 to 4

Then, in the same month

valuable, not load bearing

Meta descriptions on the commercial pages

124 pages have none. The roughly twenty pages that sell come first; the rest follow in month two.

Duplicate paths and titles

A capitalised /Resources/ path runs alongside /resources/, and four pages share one title.

Bing Webmaster Tools and IndexNow

obviam.com is already in Bing's index, but it has never been registered in Bing Webmaster Tools, so nobody can see its Bing crawl data or push a changed page for immediate indexing. Copilot is built on that index and ChatGPT search draws on it. Included with the optional ads bundle; verification needs the site access in section 01 either way.

Landing pages three to five

Three ship with the campaigns. The remaining two follow once the first data arrives.

Directory listings that answer engines read

GoodFirms, Cloudtango, BuiltIn and Clutch hold more Cincinnati page one positions than most of the local firms do, and together with The Manifest and BBB they are the sources an AI assistant summarizes when someone asks who to hire. Across fifteen buying questions put to ChatGPT, Gemini and Perplexity, thirteen Cincinnati firms were recommended and Obviam was named in none of them, while all three named it correctly when asked about it directly. Obviam is absent from four of the six directories we checked, which is the most likely reason rather than a proven one. The BBB listing does exist but under the former name Optimized IT, so that one is a claim and update rather than a new submission. All free; the slowest part is waiting for approval.

Waiting on a decision

cannot be scheduled by us alone

Plugin reduction and the open CVE

Slider Revolution 6.7.34 carries a published vulnerability. Removing or updating plugins needs a written approval list and a staging rehearsal. We will issue a dated security note either way, so the decision is on record.

HubSpot form wiring

Needs HubSpot access. Forms keep working as they are until then.

Reporting panel

A live view of the numbers in this report, so nobody waits for a monthly document.

04Months two and three

Analytics and adjustments. The build is done; this is where it is steered using data that did not exist before month one.

Weekly search term review

Paid search wastes money in its first weeks by design. Weekly negative keyword work is how that stops.

Content on commercial intent

Compliance and vCISO terms where a specialist outranks an analyst firm. Not another explainer competing with Gartner.

Internal links from the blog into the service pages

Five posts carry roughly 78 percent of all impressions and point nowhere useful.

Review generation, continued

The lever that moves map rank, and the slowest to compound. Starting it in month one is why it can show by month four.

Schema and technical clean up

Correct business type markup, service markup, and the remaining title and heading work.

First month-on-month reporting

Two full cycles of real data, compared against the frozen baseline.

05Month four

Measurement, and a decision about what comes next.

Measured against the baseline

Same tools, same filters, same date ranges. Anything that missed is reported as a miss.

What the paid channel actually returned

Cost per lead by channel, and an honest read on whether it should continue.

A recommendation on locations

Refining whichever markets Obviam green lit in month one, based on four months of evidence rather than assumption. The decision itself starts in month one because a verified profile takes weeks; this is the evidence based revision of it. Columbus carries nearly three times Cincinnati's security search demand and no presence at all, so the cost of leaving it until month four is real. See the competitive strategy page.

What the next 120 days should be

Including whether the method is worth replicating on the other domains.

06What we will not do, and why

Chase the informational head terms

Page one for terms like penetration testing is held by Reddit, IBM, CISA, CrowdStrike and Gartner. That is not winnable in four months, and pretending otherwise would waste the engagement.

Build a page per town

Intrust IT publishes 224 of them. Security service plus city demand does not support that build, and it is the pattern Google's doorway guidance warns against. Localising the service pages Obviam already owns is a different thing and is in the plan; a page for every surrounding town is not.

Target penetration testing in the map pack

In both cities tested the pack is dominated by a business literally named Penetration Testing. An exact name match is close to immovable locally. That term is pursued through paid search instead.

Promise the three pack

Obviam can realistically move from position fifteen toward single figures in Cincinnati with category and review work. Whether that reaches the top three depends on proximity and competitors we do not control, so it is not promised.

Report on leads we cannot evidence

Form submissions were recorded but never identified. Until the tracking added in month one has run, no lead count from before this engagement will be presented as fact.

Touch the other domains

This engagement covers obviam.com only. The method is proved on one property first, and only then considered for the others.

07How progress is judged

Seven measures, agreed before the work starts, each checkable in tools Obviam already owns.

MeasureTodayAt month four
Commercial pages indexed and earning impressionsEight industry pages orphaned, 252 to 255 words each, no headingsAll eight linked, written and indexed
Leads countableNo conversion recorded in thirteen monthsEvery form and call counted
Non brand search footprint0 clicks from 424 non brand queries, across every day Search Console holdsA measured, dated increase
US visits a month424 over the last thirty days, 256 across the yearAbove the thirty day figure, not the annual one
Cincinnati map positionPosition 15 from the office, average 16 across the metroCategory corrected and position improved
Business Profile completeness1 photo, 0 extra categories, 0 reviews, description names no cityCategory fixed, photos added, reviews on a cadence
Service terms on the map0 of 49 points on 4 of five service searches, 36 of 49 on cybersecurity consulting firmMovement on the terms that return a pack at all
Written so it can fail
Each of these can fail, and that is deliberate. A measure that cannot fail is not a measure. If one is missed at month four it will be reported as missed, with what was learned.
Month four has a season
Demand for these services swings hard across the year. Measuring each buying intent term against its own yearly average, December is the weakest month at about 40% below normal and September the strongest at about 80% above. January, often assumed to be a fresh budget peak, sits about 30% below.

That matters at both ends. A September start takes the opening baseline near the high point of the year, and month four lands in December, the weakest month of the year, or January, which also runs about 30% below normal. So every figure above is reported twice: against the baseline taken on 28 August 2026, and against the same calendar month a year earlier, with the seasonal position of the month stated. Where a year earlier does not exist, and for Search Console it does not, that is said plainly rather than compared across seasons. A trough month should not be allowed to hide real progress, and a peak month should not be allowed to manufacture it.