Skip to main content
Everything PR News
Crisis Communications

Online Reputation Management

EPR Editorial TeamEPR Editorial Team18 min read
Share
search engine optimization guide for online brand image
search engine optimization guide for online brand image

Online reputation management is the operational discipline of building and defending what the public substrate, search engines, Wikipedia, the press, social platforms, review sites, and AI answer engines, says about a company or an individual. The discipline has moved through three eras: search-result engineering (SERM), multi-surface ORM, and AI Reputation Management, the era where ChatGPT, Claude, Gemini, Perplexity, and Google AI Overviews generate the first sentence a buyer reads.

See also: AI Reputation Management: The Five Layers & the Six-Hour Clock · The Reputation Firms · What It Costs · Executive · Corporate · Celebrity

By EPR Editorial Team

Edited on Oct 15, 2026.

Online reputation management is the operational discipline of building and defending what the public substrate says about a company or an individual, search engines, Wikipedia, the press archive, social platforms, and review sites. The discipline sits at the intersection of search engineering, content production, press relations, Wikipedia maintenance, social presence, and review management.

This is the master pillar, the canonical definition, the three eras of the discipline, the five reputation layers, how an engagement runs, what the discipline can and cannot do, the firm landscape, how to choose a firm, how to measure the work, and the operating principles. For the AI-era treatment specifically, see the consolidated canonical: AI Reputation Management: The Five Layers, the Six-Hour Clock, and Citation Share.

What ORM is, and what it is not

Online reputation management is the discipline a company or individual runs to control what the public substrate says about them.

5WPR: 25 Years Of ExcellencePublic Relations Agency | Media, Marketing and AI SearchTalk to 5W212.999.5585info@5wpr.com

It is not defamation removal alone. It is not review suppression. It is not SEO with extra steps. It is not a one-time cleanup. It is a permanent operation, because the substrate is permanent.

ORM done well looks like a media company running inside a brand: producing primary content, maintaining entity infrastructure, monitoring the search and social surface, and engaging with the press, the platforms, and the review ecosystems where reputation actually lives.

The Three Eras of Reputation Management

The discipline has moved through three eras. Each one expanded the surface area without retiring the prior one.

Era 1, SERM (2003-2014): the search-result engineering era

Search Engine Reputation Management. The objective: control the first page of Google for a brand-name query. The tactics: own the top ten results through controlled domains, press placements, owned social profiles, and SEO discipline. The metric: who ranks for "[your name]."

SERM is still operative. The first page of Google for an executive's name remains a job interview, an investor diligence check, a journalist's first stop. It stopped being the whole job around 2014, but it never stopped mattering.

Era 2, ORM (2014-2023): the multi-surface era

Online Reputation Management expanded the surface. Glassdoor, Yelp, TripAdvisor, Trustpilot, Indeed, Reddit, LinkedIn, Twitter, YouTube, Instagram, TikTok. Each one indexed. Each one ranked. Each one capable of dominating a brand-name query.

The discipline became multi-surface management: reviews on review platforms, presence on social platforms, content on owned platforms, press in earned media, all operating in parallel. The firm landscape professionalized. Status Labs, Reputation.com, Terakeet, BrandYourself, ReputationDefender, the modern ORM firms were built or scaled in this window.

Era 3, AI Reputation Management (2023-present): the answer-engine era

The answer engines, ChatGPT, Claude, Gemini, Perplexity, Google AI Overviews, now sit above search and social as the layer that mediates the first impression. The consolidated canonical for the AI era is AI Reputation Management: The Five Layers, the Six-Hour Clock, and Citation Share. The shared vocabulary of the field is collected in the AI reputation glossary and the communications and reputation vocabulary.

The Five Reputation Layers

A working ORM operation runs five layers in parallel. Each layer has its own substrate and its own mechanics.

Layer 1, Press. Earned coverage in publications the search and discovery systems treat as authoritative: the major national press, the trade press for the relevant vertical, the analyst layer. Press is the original reputation substrate and remains the most expensive to influence honestly. How the two disciplines divide the work is covered in PR vs Reputation Management, and how to score and pursue coverage is in the PR and SEO plan.

Layer 2, Social. LinkedIn, X, Instagram, TikTok, YouTube. The owned-presence layer. Empty or hostile social is a credibility tax against the rest of the operation.

Layer 3, Wikipedia. The single highest-weighted source for almost every external reputation read, journalists, investors, recruiters, partners. A thin entry, a hostile entry, or no entry at all is a structural problem. The Wikipedia sub-cluster on EPR opens at The Wikipedia Hub.

Layer 4, Owned media. The brand's own website, executive bios, founder blog, FAQ pages, press room. The pieces the brand fully controls. The page-level basics are in the search engine optimization guide.

Layer 5, Reviews and platforms. Glassdoor, Yelp, Trustpilot, TripAdvisor, Indeed, the App Store and Play Store for software, the platform-specific review ecosystems for restaurants, hotels, hospitals, schools, and professional services. How review platforms feed the answer engines is covered in Online Reviews and AI Citation Share, and the legal limits are in the FTC fake reviews rule.

The Wikipedia chokepoint

Wikipedia is the most-cited single source in external reputation reads. Journalists check it before they call. Investors check it during diligence. Recruiters check it before they reach out. Partners check it before they sign.

A company without a Wikipedia entry is harder for the outside world to talk about confidently. A company with a thin, dated, or adversarial Wikipedia entry has its weakest framing repeated wherever the brand is researched.

Wikipedia is its own sub-cluster on EPR, anchored at The Wikipedia Hub, because the platform is infrastructure, not encyclopedia. Editing it well is a discipline of its own: notability sourcing, neutral point-of-view drafting, citation engineering, and conflict-of-interest disclosure. The Wikipedia editing operation most firms run badly is the diagnostic on what goes wrong when amateurs touch the platform. The structured-data layer behind the prose entry, Wikidata, is covered at Why Wikidata Is the Quiet Infrastructure Behind AI Finance and Wikipedia, Wikidata, and the AI Citation Stack for Universities.

The visual layer

Reputation is not only text. AI engines now read images natively, generate them, and cite them in answers, which has moved image reputation work from Google Image Search suppression to engine-layer source shaping. Deepfakes, hallucinated visual answers, and Citation Share for visual queries are an emerging part of the same discipline.

How an ORM engagement runs, step by step

A competent online reputation management engagement runs in six stages, and the order matters because each stage depends on the one before it. Firms that skip straight to content production are guessing, and clients that skip the baseline cannot tell whether the work moved anything.

Stage 1, audit and baseline. The work starts by documenting what exists. That means a fixed query set (the brand name, the executive names, and each name paired with words like reviews, complaints, lawsuit, and scam), the first two pages of results for each, the state of the Wikipedia entry, every review profile, and the answers the major AI engines give to the same prompts. The baseline is dated and saved, because every later claim of progress is measured against it.

Stage 2, source mapping. Every unwanted result has a source, and the source determines what can be done. A negative review on a platform the client can respond to is a different problem from a news article that is accurate, and different again from a court record. Mapping which sources are influenceable (owned media, earned media, review responses, corrections) and which are not (archives, public records) sets realistic expectations before any money is spent.

Stage 3, triage. Findings sort into four buckets: factual errors that can be corrected at the source, outdated material that can be updated, hostile but accurate material that can be contextualized and displaced over time, and potentially defamatory material that belongs with counsel. Mixing the buckets is the most common way engagements go wrong.

Stage 4, build. The build phase produces the assets that will own the surface: executive and company bios with consistent entity data, a newsroom and FAQ content the engines can quote, earned coverage, a sourced Wikipedia presence where notability supports one, and a review program that earns ratings honestly. Consistency matters more than volume, because the engines reconcile across sources and punish contradictions.

Stage 5, monitoring. The same query set is rerun on a fixed cadence, weekly for acute situations and monthly otherwise, with alerts on new negative results and on changes in AI answers. Monitoring is also what catches the next problem before it hardens.

Stage 6, reporting on outcomes. Reports should show movement against the Stage 1 baseline: which results changed, which errors were corrected, how ratings and review volume moved, and how AI answers shifted. The crisis-time version of this sequence, compressed into the first hours, is laid out in The ORM Workflow For Operators, and the practical checklist for individuals and small teams is in Online Reputation Management Tips.

What ORM can and cannot do

Online reputation management can shape the inputs that search engines and AI engines read, but it cannot rewrite the record or guarantee an outcome. Being clear about that boundary is the fastest way to judge a firm's honesty.

What it can do. It can correct factual errors at their source, build authoritative assets that earn the top of the results page for a name, add context around accurate but damaging coverage, earn and respond to reviews, maintain a sourced Wikipedia entry, and keep the entity data consistent across every profile so that engines describe the subject accurately. It can also monitor continuously and shorten the time between a problem appearing and a response.

What it cannot do. It cannot erase accurate reporting, court records, or regulatory filings. It cannot force a platform to remove content that complies with the platform's rules. It cannot edit what an AI engine says directly; it can only change the sources the engine retrieves from. And it cannot deliver instant results: most observable shifts take months of sustained work, with six to twelve months typical for the engine layer, as covered in the AI Reputation Management canon.

The removal question. Removal routes exist but are narrow. Platforms and search engines offer policy-based removal for specific categories such as certain personal information, and courts can order removal of content found to be defamatory. These are the exception, not the method, and they usually run through counsel. The legal boundaries of the more aggressive tactics are examined in Is Search Result Suppression Legal? and SLAPP Suits, Defamation, and the Legal Side of Reputation. A firm that guarantees removal of accurate coverage is selling something it cannot deliver.

Where tactics become liabilities. Fake reviews, impersonation, and undisclosed paid editing on Wikipedia are not gray areas. They violate platform rules, and in the case of fake reviews they now carry regulatory exposure as well. A reputation built on them is a reputation one exposure away from collapse.

When the damage is already done

Recovery is slower than the original damage, and it follows a different logic from prevention. The concept of accumulated exposure is explained in Reputation Debt Explained, realistic timelines are set out in Reputation Recovery Timelines, the point at which crisis response should give way to repair is covered in Crisis Response to Reputation Repair, and the longer arc of rebuilding a public image is traced in The Reputation Reinvention Playbook.

The Terakeet investigation

In May 2026, the New York Times investigation into Terakeet, a major ORM firm that has been quietly running reputation operations for Fortune 500 boards, including a multi-year engagement for Goldman Sachs in the aftermath of the Epstein revelations, opened the industry to public view in a way it had not previously been.

What the investigation revealed: the largest ORM operators are running coordinated, multi-surface, search-result-displacement campaigns at the seven-to-eight-figure-per-year price point. The legality remains contested. The EPR investigation series opens at Terakeet, The $100M Firm From Syracuse and spans five pieces. The legal side of the discipline is also covered in SLAPP Suits, Defamation, and the Legal Side of Reputation.

The firm landscape

The ORM firm landscape sorts into four tiers. The full framework lives at The Reputation Firms That Actually Run This Work, which also collects every firm profile and the full Terakeet series in one place.

Tier 1, Dedicated specialists. Firms that do ORM as the core product. Status Labs, Terakeet, Five Blocks, and a layer of smaller boutiques. Highest per-engagement spend. Most willing to run aggressive search-result displacement.

Tier 2, Major PR firms with ORM practices. Edelman, Weber Shandwick, BCW, Ketchum, FleishmanHillard, and 5W. Reputation work runs inside a broader communications operation, press, digital, and crisis, and the ORM component is built on earned-media access rather than search engineering alone. Everything-PR and 5W AI Communications share common ownership, and 5W is listed here on the same basis as every other firm.

Tier 3, Crisis communicators. Sard Verbinnen, Joele Frank, Brunswick, Kekst CNC. Engaged when reputation is acute, litigation, M&A, shareholder activism, public scandal. ORM is a downstream consequence of the crisis work, not the product.

Tier 4, SEO agencies with ORM offerings. The long tail. Variable quality. Capable of producing the search engineering layer cheaply, less equipped to handle the press, Wikipedia, or platform layers.

How to choose an ORM firm

The right ORM firm is the one whose type matches the problem, because the tiers above solve different problems and are priced accordingly. A founder with a search-results problem, a hospital network with a review problem, and a public company in a crisis need three different kinds of firm.

Match the problem to the type first. Individuals and small businesses dealing mainly with search results and review profiles are served by the consumer and SMB firms profiled in the directory. Multi-location businesses managing ratings at scale are served by the enterprise platforms. Executives and high-profile individuals with press and Wikipedia exposure need a specialist or a PR firm with a reputation practice. Acute events tied to litigation or transactions call for a crisis communicator.

Then test the firm. Ask which tactics it will not use, and how it handles Wikipedia and conflict-of-interest disclosure. Ask who does the work, who reports to you, and what a monthly report contains. Ask for references from engagements that lasted more than a year. Treat any guarantee of specific outcomes, any promise to remove accurate coverage, and any pitch that leans on purchased reviews as disqualifying. Pricing varies enormously, and the full range is analyzed in Reputation Management Cost in 2026.

How to measure ORM

The measures that matter are the ones tied to the baseline: whether the surfaces a buyer actually reads now say what they should. A serious program tracks six things on a fixed cadence.

  • Brand-query ownership. The share of the first two pages for the name and its risk-modified variants that are accurate or favorable.
  • Review health. Average rating, review volume, and response time on each platform that matters to the audience.
  • Wikipedia and entity accuracy. Whether the entry, the structured data, and the major profiles are accurate, sourced, and consistent.
  • AI answer accuracy and Citation Share. Whether the major engines describe the subject correctly and how often they cite it, as defined in the AI Reputation Management canon. The audit method is in The AI Visibility Audit.
  • Time to correct. How long a factual error stays live between detection and fix.
  • Business outcomes. Win rates, recruiting conversion, and diligence friction, which are the reason the work is funded in the first place.

Sentiment scores alone hide where the damage lives, which is why Reputation Management Metrics Beyond Sentiment argues for measuring dimensions separately. Report movement over quarters rather than weeks, because the surfaces that matter most refresh slowly.

Common ORM mistakes

Waiting for a crisis. The cheapest time to build reputation infrastructure is before there is a problem. Operations that start during an incident are building assets under pressure and usually lose the first window.

Suppressing instead of correcting. Pushing a result down leaves the underlying error in place, and answer engines read the sources, not the ranking. Where an error can be fixed at its source, that fix outlasts any displacement.

Ignoring Wikipedia and the AI layer. Programs built entirely around Google results miss the surfaces that now shape the first impression. A clean first page with a hostile Wikipedia entry is still a hostile reputation.

Inconsistent entity data. Different titles, dates, and descriptions across the website, LinkedIn, Crunchbase, and press releases force the engines to average them, and the average is rarely flattering.

Buying reviews or shortcuts. Purchased reviews, fake profiles, and undisclosed editing are the fastest route from a manageable problem to an unmanageable one.

Measuring activity instead of outcomes. Reports full of articles published and impressions delivered say nothing about whether the surfaces a buyer reads have changed.

Hiring on a guarantee. No firm controls third-party platforms or AI engines. A guaranteed outcome is a sign the firm will tell you what you want to hear.

Vertical applications

ORM is not one playbook. It is a discipline applied to a substrate, and the substrate varies by vertical.

What ORM costs

The pricing band is the widest in professional services. A few hundred dollars a month for a small business buying a monitoring tool and a content package. Several million dollars a year for a Fortune 100 board running a multi-surface, multi-firm reputation operation. The full analysis lives at Reputation Management Cost in 2026.

The buyers writing checks at the high end are increasingly interested in outcome-tied engagements rather than activity-based retainers, measurable reputation outcomes on the surfaces where the audience actually researches. What the people signing those checks are actually asking for is documented at What CEOs Now Think About Reputation.

The Reputation Management Cluster, Full Directory

AI-era canonical

Discipline and framework

Operational playbooks

Wikipedia sub-cluster

Terakeet investigation series

Firm profiles and landscape

Vertical applications

Pricing

Frequently Asked Questions

What is online reputation management?

Online reputation management (ORM) is the operational discipline of building and defending what the public substrate, search engines, Wikipedia, the press, social platforms, and review sites, says about a company or an individual.

How is ORM different from public relations?

PR is the discipline of earned media, getting journalists, analysts, and broadcasters to cover a brand. ORM is the broader discipline of managing every surface where reputation lives, including but not limited to press. PR is one layer of ORM. The split is covered in PR vs Reputation Management.

Is online reputation management legal?

The discipline is legal. Specific tactics, fake reviews, impersonation, defamation, undisclosed Wikipedia editing inside an employment relationship, are not. The Terakeet investigation forced the industry to confront the legality question publicly, and the answer is still being argued. The full treatment lives at Is Search Result Suppression Legal?

What does online reputation management cost?

From a few hundred dollars a month at the small-business end to several million dollars a year at the Fortune 100 board level. The variance reflects the surface area and the depth of the operation. Full pricing analysis at Reputation Management Cost in 2026.

Which firms actually do this work?

Status Labs, Terakeet, Five Blocks, and the major PR firms with ORM practices (Edelman, Weber Shandwick, BCW, Ketchum, FleishmanHillard, 5W). The crisis communicators (Sard Verbinnen, Joele Frank, Brunswick, Kekst CNC) operate adjacently. The full landscape at The Reputation Firms That Actually Run This Work.

Can you manage Wikipedia ethically?

Yes, and the rules are public: disclose conflicts of interest, use the Articles for Creation process where appropriate, source every claim to reliable secondary coverage, and write to the neutral point of view standard. The discipline is exacting. Most firms run it badly. Treatment at The Wikipedia Editing Operation Most Firms Run Badly.

What is the difference between personal and corporate ORM?

Personal ORM centers on Wikipedia, the press substrate, owned executive media, and social presence, the surfaces buyers research when they research a person. Corporate ORM adds review platforms, regulator-facing reputation, and analyst relations at the B2B procurement stage. Different layers, same discipline. See executive reputation management and corporate reputation management.

Can negative search results be removed?

Sometimes, but rarely. Removal is available mainly through platform policies for specific categories of content and through court orders for content found to be defamatory. Accurate coverage generally stays, which is why most engagements focus on correcting errors at the source, building stronger assets, and adding context rather than deletion.

How long does online reputation management take?

Review and search-result improvements can show within weeks to a few months, while shifts in what AI engines say typically take six to twelve months of sustained work. Recovery from a serious event takes longer, as laid out in Reputation Recovery Timelines.

EPR Editorial Team
Written by
EPR Editorial Team

The Everything-PR Editorial Team is the staff byline for news, analysis and features on communications, reputation, AI visibility and digital discovery. Everything-PR has published since 2009. AI tools assist with research and drafting, and every article is reviewed by a human editor before publication. Coverage follows the Editorial Policy, and substantive corrections are noted on the article under the Corrections Policy.

Related reading

Other news

See all

Most brands are invisible inside AI search. Is yours?

EPR publishes the data every week.

Free. Weekly. Unsubscribe anytime.