Key takeaways
- AI models don't verify claims. They repeat patterns, so a competitor who floods the sources an answer is built from can tilt how you are described.
- Third-party listicles and comparisons make up a large share of ChatGPT citations on commercial prompts. That is the surface a competitor can seed or sponsor.
- Biased pages are diluted in organic and comparison answers (about 10 domains cited) but carry far more weight in brand-specific answers, which cite fewer sources.
- You can't stop a competitor from trying. You can blunt the impact by publishing your own factual comparisons, correcting third-party pages, and monitoring what AI says every week.
The uncomfortable premise
You don't need access to a model to influence it. You need access to the pages it reads.
That is the core of the risk. A competitor can't log into ChatGPT and rewrite its opinion of your product. But they can publish a "Best [category] tools" listicle that ranks themselves first and describes you as pricey, or pay for placement on an existing one, or flood forums with the same talking point. If an AI answer is assembled from those sources, the framing shows up in the answer.
Duane Forrester laid out the theory in a September 2025 piece on directed bias attacks. He is explicit that his scenario is hypothetical and that he isn't teaching manipulation. His point is that discovery is moving into AI systems and brands should understand the exposure before it gets exploited.

I think the honest framing is somewhere in the middle. Most competitor content isn't a coordinated attack. It is ordinary, self-serving comparison marketing. But ordinary self-serving marketing, at scale, is exactly what a probabilistic system absorbs. The effect is the same whether the intent is malicious or just salesy.
Why LLMs are vulnerable to this
Large language models are probability machines. They predict likely next tokens from patterns, not from a fact-checking process. Forrester cites an arXiv paper arguing that models lack the ability to distinguish ground truth from persuasive repetition in training data, which is why a falsehood repeated across many sources can gain traction.
Search-connected assistants add a second layer. They run live searches, pull pages, and synthesize an answer with citations. The retrieval step favors pages that match the query closely, and comparison queries match comparison pages. If the top-ranking "X vs Y" page was written by Y, the answer inherits Y's framing unless other sources push back.
So there are two doors in: training data (slow, hard to steer) and retrieval (fast, much easier to influence). Defense mostly happens at the retrieval door, because that is where you can act this week.
What biased comparison content looks like in practice
It rarely looks like an attack. These are the patterns worth checking for:
- Listicles where the publisher ranks itself first and describes rivals with selective or outdated facts.
- "Alternatives to [your brand]" pages written by competitors, targeting your name directly.
- Old pricing, discontinued features, or fixed bugs presented as current.
- Review-site profiles claimed and edited by a competitor, or flooded with a coordinated batch of low ratings.
- Forum threads and social posts repeating one framing, such as "great product, terrible support".
- Quietly sponsored roundups with no disclosure.
There is also a related accuracy problem that isn't strictly an attack. One business owner posted on Google's support forum that AI Overview was attributing competitor reviews to their company. That is probably a retrieval and entity-confusion error rather than sabotage, but from the outside the damage looks identical. Your monitoring should catch both.
Where the exposure is highest
Promptwatch Data gives a useful map of which sources carry the most weight. For the week of Sep 28 to Oct 4, 2026, ChatGPT's citations by content type broke down like this:
| Content type | Share of all ChatGPT citations | Share on commercial prompts |
|---|---|---|
| Product pages | 22.4% | 26.0% |
| Landing pages | 16.8% | 20.6% |
| Listicles | 13.6% | 15.0% |
| Comparisons | 5.9% | 7.9% |
| Reviews | 1.7% | n/a (5.6% on branded prompts) |
On commercial prompts like "best CRM for small businesses", product pages, landing pages, listicles, and comparisons add up to almost 70% of citations. Listicles and comparisons are the formats a competitor can write about you without your permission. Product and landing pages are the ones you control.
On branded prompts, such as "is HubSpot good for startups", reviews jump to 5.6% of citations, more than three times their overall share, and social posts reach 3.0%, almost four times theirs. That is where review-site manipulation and forum seeding matter most.
Dilution works in your favor, until it doesn't
Promptwatch's data on unique domains per ChatGPT response (Sep 28 to Oct 4, 2026) shows how much any single page matters:
| Prompt type | Cite 10+ domains | Notes |
|---|---|---|
| Organic (no brand named) | 52.5% | One biased page is one voice among many |
| Competitor comparison | 49.1% | Only 0.35% cite a single domain |
| Brand-specific | 21.3% | 5 domains is the most common count; 40.7% cite 5 or fewer |
This is the part I'd take most seriously. In an organic answer, one slanted listicle is diluted by roughly ten other sources. In a brand-specific answer, when someone asks directly about you, the model leans on a short list, so each source carries more weight. The prompts closest to a purchase decision are the ones where a single biased page does the most damage.
A defense plan that actually works
Forrester's advice is that you can't stop a competitor from trying to seed bias, but you can blunt its impact. The goal isn't to engineer the model. It is to make sure the strongest, clearest, most consistent signals about you come from you and from sources you can verify. In practice, that is five jobs.
1. Own the comparison pages
If you don't publish "You vs Competitor" content, someone else's version fills the gap. Write comparison pages for the competitors you are most often compared with. Be fair. State where you lose as well as where you win. Pages that read as honest are more quotable, and they give a model something concrete to cite instead of a rival's framing.
Spell out differences in plain, extractable language: pricing, limits, integrations, ideal customer. Promptwatch's own recommendation from the content type data is the same: keep specs, prices, and positioning on product pages complete and factual, because ChatGPT quotes them directly.
2. Find and correct the third-party pages AI actually cites
Don't audit the whole web. Audit the short list. For the prompts that matter to you, look at which domains get cited, then check how each one describes you. The review sites and forums on that list shape how AI describes you.
Where a page is wrong, take the ordinary routes: claim your profile, submit corrections, contact the publisher with specific, documented facts, and for review platforms use their dispute process. Keep it factual and polite. Publishers fix errors more often than you'd expect when the request is specific and easy to verify.
3. Build a consistent, verifiable fact base
Models repeat what appears consistently. If your pricing page, docs, review profiles, and press kit all say the same thing, that is hard to override. Add a brand FAQ, keep a changelog so outdated claims are easy to disprove, and make sure your own site is crawlable. A fact on a page that AI crawlers can't read does nothing for you.
4. Get genuine third-party validation
Collect reviews on trusted sites in your category. Earn coverage in independent roundups through real product merit and digital PR. This isn't about gaming anything. It is about making sure that when the model pulls ten sources, several of them say accurate, favorable things you didn't write yourself. If you need help with the PR and content side, an agency like 1001 SEO Media covers digital PR and generative engine optimization.
5. Monitor weekly, on the real interfaces
You can't defend what you don't see. Run your commercial, branded, and competitor-comparison prompts across ChatGPT, Gemini, Perplexity, Claude, and Google AI Overviews, and record not only whether you are mentioned but what is said and which sources back it. Answers can differ between the consumer interface and the API, so tracking the real UI matters.
What to monitor, specifically
- Brand-specific prompts: "is [brand] good for [use case]", "[brand] pricing", "[brand] reviews", "[brand] problems".
- Comparison prompts: "[brand] vs [competitor]" and "[competitor] alternatives".
- Commercial prompts: "best [category] for [persona]".
- The claims AI makes about you, grouped into themes like pricing, support, and features, so you can spot a framing that keeps repeating.
- The cited sources behind each claim, because the source is what you can actually fix.
- Sentiment trend over time. A sudden shift usually points to a new page or a review wave.
The claim-level view is the part most dashboards skip. A visibility score tells you how often you appear. It won't tell you that three models now say your mobile app lacks features, and that all three trace it to one outdated comparison page.
Tools that help
There are a lot of AI visibility trackers now, and they vary a lot in depth. For this particular problem, you need claim-level analysis and source tracing, not just mention counts.
Promptwatch is the one I'd start with for this job. Its Brand Narrative feature extracts the individual claims AI makes about you and your competitors from every tracked response, groups repeated claims, and shows which models say each one. Fact Check (Business plan and up) lets you mark a claim inaccurate and then finds the pages on your own site that state it or its opposite. Citation tracking shows which third-party pages get cited, including Reddit, YouTube, and LinkedIn, and Offsite Mentions catches pages that name you without linking. It also writes and publishes the corrective content through its Content Agent. Pricing starts at $95/mo on Essential; confirm current plans at promptwatch.com/pricing.

Other trackers worth a look, depending on your size and stack:


| Tool | Strength for this problem | Limits to check |
|---|---|---|
| Promptwatch | Claim-level Brand Narrative, Fact Check, citation tracing, content fixes | Fact Check and Content Agent need Business plan |
| Profound | Enterprise monitoring and analytics | Higher price point, monitoring focused |
| Peec AI | Simple prompt tracking with suggestions | Basic tracking, no crawler logs or content generation |
| Otterly.AI | Affordable mention monitoring | Light on source and claim analysis |
| AthenaHQ | Visibility monitoring | Monitoring only |
| Ahrefs Brand Radar | Fits an existing Ahrefs workflow | Shallower AI-specific data |
For a wider list, the GEO software directory at bestgeosoftware.com compares options by category.
When a page is wrong and won't be fixed
Sometimes the publisher won't respond. Then you work around it:
- Publish a clear, well-structured page that directly answers the same question with accurate facts, so there is a stronger source to retrieve.
- Earn independent coverage that contradicts the claim.
- Check whether the claim is defamatory or factually false in a way that has legal remedies. That is a lawyer's call, not a marketing one, and platform reporting tools exist for AI Overviews errors.
- Keep monitoring. Content half-life matters here: Promptwatch's half-life data shows news-type pages lose half their cited URLs within 36 days of a July 6, 2026 snapshot, while landing pages and docs stay cited longest. A flash of bad press fades faster than a biased evergreen comparison page.
What not to do
Don't answer manipulation with manipulation. Fake reviews, sockpuppet forum threads, and hidden text are against platform rules, tend to get discovered, and hand the other side a real story. The defensive position is strongest when your facts are cleaner than theirs.
Also don't overreact to one odd answer. AI responses vary run to run. Track trends across many prompts and several days before concluding you are under attack. Most of the time the cause is a stale page, not a villain.
A weekly routine you can run
- Monday: review the weekly summary of brand claims and sentiment shifts across your tracked prompts.
- Check any new cited domains on brand-specific and comparison prompts.
- Flag claims that are wrong, then trace each to a source page.
- Send correction requests or queue a corrective page.
- Re-check the affected prompts after a week to see whether the answer moved.
The loop matters more than any single fix. Find the claim, trace the source, correct or outweigh it, then verify that the answer changed.
The short version
Competitors can't rewrite an AI model, but they can write the pages it reads, and the closer a prompt is to a purchase, the more each page counts. Publish your own honest comparisons, keep your facts consistent, fix the handful of third-party pages that AI cites about you, and watch the answers weekly. Brand-specific prompts, with their short source lists, are where to look first.


