your funnel is someone else's pipeline review

A lead from a security vendor’s marketing gets its real verdict weeks later, in someone else’s pipeline review: the vendor’s account executive going through the forecast with a manager, a partner’s seller deciding which accounts to call this month, a distributor’s channel team sorting registrations. If the funnel was built to hit an number, most of what it produces dies in those meetings, quietly. Build the funnel backwards from the review instead: find out what each reviewer needs to keep a lead alive, produce leads that carry it, and measure only what a reviewer accepted.

where a lead actually gets judged

Follow one form fill through a typical European security vendor. Marketing scores it and passes it on. A sales development rep tries to reach the person. If the account sits with a partner, the lead is handed to the partner, and often onwards through a distributor first. The decision that matters comes last, when someone with a number to hit decides whether this name deserves a slot in the forecast or an hour of their week.

In security that last reviewer often works for another company. Omdia, as reported by IT Channel Oxygen in March 2026, expects 91.7% of cybersecurity product sales to go through the channel in 2026, with 64.6% of that through . A vendor lead in that market usually has to survive a partner’s review before it can become anyone’s pipeline.

Who reviews a security lead before it becomes pipeline

marketingScores the form fill and counts it as an MQL.
SDR or inside salesTries to reach one person, logs the outcome.
distributorRoutes the lead to a partner, or holds it.
partner sellerDecides whether the account is worth a call this month.
pipeline reviewA manager asks: why is this in the forecast?

The funnel's output is judged at the end of the chain, by people outside marketing and often outside the vendor. Steps vary by vendor and country.

why MQL volume breaks in security

An MQL target rewards one thing: more individuals crossing a score threshold. Security buying punishes that in four ways.

The is large. Forrester’s State of Business Buying 2026 puts a typical purchase at 13 internal stakeholders and nine external influencers. A score built on one person’s downloads tells a seller almost nothing about the other 21. Forrester’s Simon Daniels made the point in 2023: several leads feed one opportunity, so tying a deal to a single MQL “makes no sense”. He also wrote that Forrester’s research showed fewer than 1% of leads convert to closed deals. The post gives no method for that figure, so read it as a direction.

The shortlist exists before the form. By the time a buyer downloads your report, the vendors they will seriously consider are usually picked, as the guide on the day-one shortlist shows. Volume content pulls in researchers, students, competitors and buyers who are filling out a comparison they have already decided.

The account already has an owner. A target account in a channel-heavy market often has a reseller, an integrator or an with history there. A vendor lead that ignores that relationship either gets passed to the wrong partner or starts a conflict with the right one.

The buyer avoids risk. A security buyer asked to change tools carries the blame if it fails. Forrester’s 2026 release says vendor claims need to be validated through trusted external voices. A nurture sequence of vendor emails rarely gives a sceptical buyer that.

The visible symptom is a definitions fight. In Gartner’s survey of 243 chief sales officers and senior sales leaders, run in late 2024 and published in May 2025, said their sales organisation’s definition of a qualified lead differs greatly from marketing’s. When half the reviewers reject the definition, the MQL count measures marketing’s opinion of its own work.

what the people in the review need

Sit in on a pipeline review and the questions are always about the account and the deal. A lead that answers them stays. A lead that only answers “did someone download something” gets moved to nurture, which in practice means nobody touches it again.

What the reviewer asks	What the lead has to carry	Why it matters in security
Is this an account we want?	Company, size, sector, country, current tooling if known	Fit decides whether a seller or partner spends a week on it
Why now?	A trigger: a regulation deadline, an incident, a renewal, a new security lead, a tender	Without one, the deal sits in “no decision” for quarters
Who do I talk to?	A named contact with a role, and ideally a second person from the same account	One contact is one point of failure in a committee of 13
Can my partner open with this?	Context a partner can use in its own name: what the person read, asked or attended	Partners protect their relationship and will not cold-call on a vendor’s hunch
What has the buyer already seen?	The proof they consumed: a test result, a reference call, a technical session	It tells the seller where the buyer stands and what not to repeat
Who owns it?	Partner of record and whether a registration exists	It decides who works the deal and whose margin is protected

Five of those six questions have nothing to do with lead score. The buying committee guide covers how to map the people behind the second contact; here the point is that marketing can collect much of it before the hand-off, at almost no extra cost.

design the funnel backwards from the review

Start at the last meeting in the chain and work back to the first touch.

List the reviewers. For your own sellers, for your two or three largest partners and for the distributor, name the meeting where leads are judged and the person who runs it.
Ask each one what makes them keep a lead. Write the answers down in their words. Partners usually say territory, trigger and a real name. Your account executives usually say account fit and a second contact.
Change what the funnel collects. Forms, event registrations and content gates ask for what the review needs: company, role, a short “what are you working on” field. Ask for less elsewhere.
Change what the funnel offers. Content that a sceptical security buyer would want to forward internally, technical sessions, test results with their method shown. And content a partner would put its name on, as covered in content partners will actually send.
Agree the hand-off rules before the campaign. Who gets which lead, within what time, with which fields filled, and what happens if it is rejected.

MQL-volume funnel

built to hit a lead count

Scores one person's activity
Gates everything to grow the list
Hands off a name and a score
Ignores who owns the account
Reports MQLs and cost per lead

review-first funnel

built to survive the pipeline review

Tracks accounts and the people in them
Asks only for what the reviewer needs
Hands off fit, trigger, contact and context
Routes by partner of record and registration
Reports accepted leads, meetings and pipeline

The same budget, aimed at two different finish lines. The right side produces fewer leads and more that someone downstream agrees to work.

what to count instead

Measure the funnel at the points where somebody outside marketing says yes.

Sales-accepted leads. The account executive or SDR agrees the lead is worth working, with a reason recorded for every rejection.
Partner-accepted leads. The partner confirms it will work the lead, within an agreed time. A lead sitting unopened in a portal counts as rejected.
First meetings held with a target account, counted per account so three people from one company count as one meeting with a stronger committee.
Registered deals that started from a marketing touch. A registration is the partner’s own statement that the opportunity is real, which makes it a cleaner signal than any score. How to make registration work is in the deal registration guide.
Pipeline from content and programmes: the value of opportunities where marketing material or an event was involved, reported next to sourced pipeline and never added to it, the same rule as in channel metrics.

Forrester moved its own B2B Revenue Waterfall to this logic in 2021, building it on opportunities and buying groups and adding renewal, cross-sell and upsell as opportunity types. In the 2023 post, Daniels wrote that Forrester clients told it they saw a 50% increase in conversion from meetings to closed-won when they delivered three or more buying group members to sales. That is client-reported, without a method, but the direction is what the review-first funnel is built for.

Keep raw lead counts. They are a useful diagnostic for whether a campaign reached anyone. They just stop being the target.

the hand-off between marketing, sales and partners

Most good leads die between teams, at the moment of transfer. Write the hand-off as a short agreement and review it every quarter.

Marketing to sales: the fields that must be filled, the response time, and a rejection reason picked from a short list. Rejection reasons are the most useful feedback marketing will get all year.
Marketing to partner: leads go only to the partner of record for that account, or to an agreed partner by territory and specialisation. Each lead travels with the context a partner can use in its own name. Every lead has a deadline: if the partner has not accepted it in, say, five working days, it comes back.
Partner to vendor: the partner registers the opportunity so it is protected and visible, and the lead’s origin is recorded once and locked.
Speed: a demo request skips the queue and goes straight to a person, as in the first hour after a demo request.

the next quarterly plan

When the next marketing plan asks for a lead target, replace it with one sentence the reviewers can check: how many leads your sales team and your partners will accept, and how many meetings and registered deals those should become. If nobody in sales or the channel will sign that sentence, the plan is still built for the wrong meeting.

questions

Why do MQL targets work badly for security vendors?

Security purchases involve large buying groups, shortlists formed before the first form fill, and accounts that partners already own. A score built on one person's downloads says little about any of that. Forrester wrote in 2023 that its research showed fewer than 1% of leads convert to closed deals, and that tying a deal to a single MQL makes no sense because several leads feed one opportunity.

What should a security marketing team measure instead of MQLs?

Outcomes that someone downstream has accepted: leads accepted by sales, leads accepted by a partner, first meetings held with the right account, deals registered by partners, and pipeline value on opportunities where marketing content or programmes were involved. Keep raw lead counts as a diagnostic, never as the target.

What does a partner need from a vendor lead before it will act on it?

An account in its territory that it is allowed to work, a reason to call now, a named person, enough context to open the conversation in its own name, and a clear path to register the deal so its margin is protected. Without those, the lead usually stays untouched in a partner portal.

search the site