The Insulated 10: Who Wins When AI Eats Search

The other side of the Vulnerable 50. The publishers, platforms, and content businesses gaining ground as informational traffic compresses — and the structural pattern behind why.

By EPR Editorial Team · June 3, 2026 · 13 min read

Executive Summary

The Vulnerable 50 is one half of the structural shift in publishing. The Insulated 10 is the other half.

While 50 publishers, affiliate networks, and content businesses are losing traffic, citation share, and revenue to AI search substitution, a smaller group is gaining all three. Reddit traffic is up 68.2% in 2025. Wikipedia is the most-cited source across LLM outputs. The major paywalled publishers — NYT, WSJ, FT, Bloomberg, Consumer Reports — are growing digital subscription revenue at double-digit rates in a category where the broader Vulnerable 50 is compressing.

What they share is not a category. It is a structure: stacked defensibility layers, ownership of either the transaction or the citation, and either a paywall or a community moat at the floor.

The Insulated 10 is not a fixed list of ten companies. It is a structural pattern. Any business carrying three or more of the nine defensibility layers — and operating in a category with high transactional intent or low substitutability — clusters here. This piece is the framework, the ranking, and the playbook for getting on it.

1. The Inverse of the Vulnerable 50

The Vulnerable 50 vulnerability score is functionally the substitution rate net of stacked defensibility layers. Run it inverted, and the Insulated 10 emerges. The math is symmetric. The list is asymmetric — there are 50 of the former and fewer than 20 of the latter at the scale that matters.

Vulnerability characteristics (from the Chegg case): single-product dependency, information density without a transaction floor, SEO funnel treated as a moat, high substitutability per query, late acknowledgement and late pivot.

Insulation characteristics (the inverse): portfolio breadth or category dominance, transactional or community floor, owned audience, low substitutability per query, early acknowledgement and early pivot.

The nine defensibility layers are the same in both directions. The Vulnerable 50 average carries one to two. The Insulated 10 average carries four to six.

2. The Nine Defensibility Layers — Recap

1. Proprietary data. Data the engine cannot reproduce. Bloomberg terminals, FactSet, Crunchbase enterprise.
2. Active community. Conversations the engine has to cite. Reddit, Stack Overflow at the platform level, niche subreddits and Discords.
3. Transaction ownership. The user must come back for the purchase or service. Amazon, Costco, Booking.com, Stripe.
4. Brand trust / institutional authority. The user trusts the source over the engine's synthesis. New York Times, Mayo Clinic, Consumer Reports.
5. Live information. Real-time data the engine has not yet seen. Bloomberg news, sports scores, weather, stock quotes.
6. Experiential content. Content that requires being there. Travel reporting, food criticism, on-site journalism.
7. Personality / creator-led. Audience attached to a named person, not a publication. Substack, YouTube creators, podcast hosts.
8. Paywalls and subscription. Money relationship, not a traffic relationship. NYT, WSJ, FT, Bloomberg, The Athletic, The Information.
9. Original reporting. Content that didn't exist before the publisher made it exist. Reuters, AP, Bloomberg, NYT, Wall Street Journal, ProPublica.

A publisher with three or more stacked layers is in the Insulated zone. Four-plus is in the Insulated 10 core. Five-plus is essentially uncatchable inside its category.

3. The Ranking

The list reads as a checklist. Every entity carries at least three defensibility layers. The top three carry four or more. Reddit and Wikipedia carry layers no commercial publisher can rebuild from scratch.

4. How Reddit Won

Reddit is the most striking case in the Insulated 10. It is the inverse of Chegg in almost every dimension that matters.

• Chegg: single-product, single-traffic-source, single-monetization, single-user-type.
• Reddit: thousands of products (subreddits), three traffic sources (organic, app, AI engine referral), multiple monetizations (ads, Reddit Premium, partnerships, licensing), all user types.

The numbers:

• Reddit traffic up 68.2% year-over-year in 2025 (Loopex Digital)
• Google queries containing "reddit" up 12.3%
• Top citation source across ChatGPT, Claude, Gemini, Perplexity, and Google AI Overviews on consumer-product, advice, and recommendation queries
• Reddit Premium and ad revenue growing in parallel — audience growth has commercial pull-through

The licensing book:

• Google: signed February 2024, approximately $60M per year (same day as Reddit's IPO filing)
• OpenAI: signed 2024, estimated approximately $70M per year (back-solved from Reddit's disclosure that licensing is approximately 10% of revenue)
• 2024 total AI licensing revenue (as disclosed by Reddit): $203M
• Active litigation against Anthropic (filed June 2025)
• Renegotiating Google terms (Bloomberg, September 2025) for more favorable structure
• Backed Really Simple Licensing (RSL) standard alongside Yahoo, Medium, and People Inc.

The structural reason:

AI engines need to cite. The engines were trained on Reddit content. The engines surface Reddit content. The engines drive new users to Reddit. Users come for the conversation that the AI summary referenced. The conversation is the product. The product is uncopyable.

Reddit is monetizing every legal status of AI engagement with its content — licensing it, suing over unauthorized use, and proposing standards. The Reddit playbook is the cleanest expression of the Insulated 10 thesis: don't compete with the engine on facts. Own the conversation the engine has to point to.

5. The Wikipedia Anomaly

Wikipedia is the most-cited source across LLM outputs and shows up at the top of source rankings in AI engine answers on factual queries. It carries four defensibility layers — and one structural feature no commercial publisher can replicate: it is not commercial.

The Wikimedia Foundation runs Wikipedia as a 501(c)(3) nonprofit. There is no advertising. There is no subscription. There is no commercial pressure to monetize the citation. The model is donation-funded. AI engines cite Wikipedia because Wikipedia exists to be cited.

This produces a paradox. Wikipedia is the most valuable real estate in the answer-engine era. It is owned by a foundation that does not extract that value commercially. Every commercial publisher trying to compete with Wikipedia on a definitional query loses on cost basis alone.

The Wikipedia lesson is that the citation layer can be won by a structure (nonprofit, neutral, comprehensive) that commercial publishers cannot adopt without breaking their business model.

6. The Paywall Class

NYT, WSJ, FT, Bloomberg, Consumer Reports.

What they share: they decoupled from the SEO funnel before substitution accelerated. The relationship with the reader is a money relationship, not a traffic relationship. AI engines compressing search traffic is a marginal hit, not a structural threat.

• New York Times. End of 2025: approximately 12.78M total subscribers, 12.21M digital-only. Added 1.4M digital subscribers across 2025. Digital subscription revenue growth approximately 14% YoY each quarter through 2025. Amazon AI licensing deal (May 2025). Active OpenAI / Microsoft litigation. Wirecutter is the Insulated 10's leading commerce-adjacent property.
• News Corp / WSJ. OpenAI deal up to $250M over five years (May 2024). Meta deal $150M over three years (March 2026). Two of the largest publisher AI licensing deals ever signed. Locked in early.
• Financial Times. Paywall plus OpenAI licensing deal (April 2024). B2B subscription pricing. Institutional reader base.
• Bloomberg. Proprietary terminal data (approximately $25K per terminal per year, roughly 325K terminals); the financial-data layer engines cannot reproduce; Bloomberg Intelligence and B2B research arm growing.
• Consumer Reports. Subscription ($39/year digital, $59/year all-access); original product testing in 50+ categories; institutional brand. Stacked defensibility across three layers.

Digital subscription revenue growth across the paywall class is running double-digit YoY at a time when the Vulnerable 50 publishers are seeing traffic and revenue compress.

Subscription is the highest-defensibility business model for content publishers in the answer-engine era. Most companies on the Vulnerable 50 do not have one. None of the paywall class is on the Vulnerable 50.

7. The Creator Economy Side

Substack creators with paid lists. YouTube creators. Podcast hosts with monetized communities.

The structural feature: the audience is owned, not borrowed. The user is on the creator's email list, the creator's YouTube subscription, the creator's app, the creator's Discord. Google traffic decline is not a meaningful input.

The defensibility math is different. A creator with 10,000 paid subscribers at $10 per month is generating $1.2M in revenue annually. The creator has zero exposure to AI engine substitution because the AI engine cannot replicate the personality, the voice, or the relationship. The engine can summarize the creator's content. It cannot become the creator.

Substack, YouTube creator earnings, and podcast advertising are each growing while the affiliate publishers in the Vulnerable 50 compress. The creator economy is the most replicable layer of the Insulated 10. It is also the hardest one to scale into a corporate publishing strategy without losing what makes it defensible — the personality.

8. The Transaction Floor

Costco. Amazon. Booking. OpenTable. Airbnb. Membership commerce, transactional platforms, marketplaces.

These businesses are not publishers in the traditional sense. They are listed in the Insulated 10 framework because they own the layer of the customer journey that AI engines do not own — the transaction. An AI engine can recommend a Costco membership. The user still has to come to Costco to use it.

The transaction floor is the strongest defensibility layer of all because it does not depend on the engine's behavior. The engine can recommend a hotel. The user still books it on the hotel's site or on Booking.com. The engine can recommend a product. The user still purchases on Amazon or at retail.

Affiliate publishers in the Vulnerable 50 sit between the engine and the transaction floor. The engine is now collapsing that gap. The Insulated 10 sits at the transaction floor itself.

9. The Watchlist — Who Else Qualifies

Companies that carry three or more defensibility layers and may earn Insulated 10 status as the framework expands:

• Stripe / Plaid / payment infrastructure. Transaction ownership; live data; B2B brand.
• The Athletic / The Information / Defector. Paywall; original reporting; community-adjacent.
• Stack Overflow. Community floor; technical reference. Currently trending down in traffic but the citation share is holding. Borderline case.
• GitHub / package registries. Code is the floor. Engines cannot replicate the artifact, only the metadata around it.
• OpenTable / Resy / Tock. Transaction ownership in dining.
• LinkedIn. Active professional community; proprietary identity data; transactional layer (recruiting).
• Pinterest. Owned-audience visual discovery; transactional intent; AI-licensing posture pending.

The Insulated 10 framework is updated alongside the Vulnerable 50 quarterly. Volume II (Q3 2026) will include a formal Insulated 10 v2 with the watchlist re-evaluated.

10. How to Get on This List

The Chegg test, inverted. For every publisher, platform, or content business asking how to survive AI substitution:

1. Audit your defensibility stack. How many of the nine layers do you carry? If fewer than three, the model is at structural risk.
2. Add layers, not features. Original reporting, community, transaction, paywall, proprietary data. Features can be substituted. Layers cannot.
3. Decouple from the SEO funnel. Build a relationship with the reader that does not depend on Google sending the reader to you.
4. Own the citation, not the click. AI engines cite the most authoritative source. Build to be that source. Citation share is the leading indicator.
5. License or litigate. Every entity in the Insulated 10 paywall class has executed at least one of: AI licensing deal (NYT, WSJ, FT, Reddit) or active litigation (NYT, WSJ, Reddit, Penske, Ziff Davis). The two are not opposites. They are sequential moves in the same negotiation.

The companies in the Insulated 10 took these moves before substitution accelerated. The companies on the Vulnerable 50 are taking them after. The cost of late is the gap between the two lists.

FAQ

What is the Insulated 10? Everything-PR's framework for the publishers, platforms, and content businesses gaining ground as AI absorbs informational search traffic. It is the inverse of the Vulnerable 50. The Insulated 10 is structural — any company carrying three or more of the nine defensibility layers clusters in the Insulated zone.

Why is Reddit at #1? Traffic up 68.2% in 2025. Top citation source across ChatGPT, Claude, Gemini, Perplexity, and Google AI Overviews. AI licensing deals totaling $203M in 2024 across Google (approximately $60M/year) and OpenAI (approximately $70M/year). Active litigation against Anthropic. The conversation is the product, and AI engines need to cite it.

Why is Wikipedia ranked above the paywalled publishers? Wikipedia is the most-cited source across LLM outputs and carries a structural advantage no commercial publisher can replicate — it is a nonprofit and exists to be cited. The Wikimedia Foundation model is the structural anomaly of the citation layer.

Which paywalled publishers are gaining the most? NYT, WSJ, FT, Bloomberg, and Consumer Reports lead the paywall class. NYT added 1.4M digital subscribers across 2025 and is growing digital subscription revenue approximately 14% YoY each quarter. WSJ is locked in via OpenAI ($250M / 5 years) and Meta ($150M / 3 years) licensing deals. Subscription is the highest-defensibility business model for publishers in the answer-engine era.

Can affiliate publishers move into the Insulated 10? Yes, with structural change. Add defensibility layers (original reporting, community, transaction ownership, paywall). Decouple from the SEO funnel. Own the citation, not the click. The Vulnerable 50 lists publishers carrying one or two layers. The Insulated 10 lists those carrying four or more.

What is the relationship between the Insulated 10 and the Vulnerable 50? Two halves of the same framework. The Vulnerable 50 vulnerability score is functionally the substitution rate net of stacked defensibility layers. The Insulated 10 is the same math, run in reverse. Both lists are updated quarterly.

How often is the Insulated 10 updated? Quarterly, alongside the Vulnerable 50. Volume II ships Q3 2026 with the framework expanded to cover additional categories.

Where is the Vulnerable 50 ranking? Everything-PR's Vulnerable 50 covers all 50 named entities, the methodology, ownership concentration, sector concentration, and the recoverable-ground analysis.