Founder, Kryston

Ilija Stoev

I help IT services and software development firms get found by the buyers who need them, in search results and in AI answers. In practice, that means SEO and AI search work: technical visibility, service pages buyers can actually find, and content that gets a firm described accurately when someone asks an AI assistant.

Ilija Stoev, founder of Kryston

How I got here

I started out in web development, taking on whatever projects came my way. More and more of those projects turned out to be marketing work, and by 2022 marketing had become my career. Of all the kinds of clients I've worked with since, IT companies have been the most challenging and the most rewarding.

For several years my work centred on LinkedIn: ghostwriting and profile management for IT and security professionals trying to win clients. Over time, platform changes made that work less effective for the people I was helping, and those changes were made in LinkedIn's interest, not theirs.

That taught me something that outlasts any single update: when your visibility lives on someone else's platform, someone else decides who sees it.

Why IT and software firms

IT and software firms are where my experience concentrates: web development was my starting point, and IT and security professionals were the people I wrote and managed LinkedIn presence for. They sell expertise that is hard to judge from the outside, to buyers who check before they trust, which makes clear, verifiable visibility especially valuable.

Cybersecurity is part of that world. Security has been a long-running interest. I'm privacy-conscious, and I experimented with Kali Linux as a teenager, although hands-on security was never where my strengths lay. A recent move to Linux, mostly for privacy reasons, brought that interest back.

What Kryston is

Kryston brings those threads together, mapped roughly like this: marketing background shapes the strategy and positioning; web development background shapes the technical side, because whether a site can be crawled, indexed and understood comes down to how it is built; a long-running interest in IT and security keeps me close enough to the field to translate it accurately.

Instead of renting visibility on someone else's platform, Kryston builds it on ground the firm owns: a site that search engines and AI assistants can find, understand and trust. The difference is timing. A feed puts you in front of people when they aren't looking. Search puts you in front of them when they have the problem and ask for help.

I'm not a security practitioner, and I don't pretend to be. IT, software and security experts are often excellent at the work and far less visible than they should be. My job is to help their buyers find them, understand what they do, and trust what they see.

01 Education and credentials

Education and credentials

Education

Bachelor of Arts, Digital BusinessIU International University of Applied Sciences

I studied Digital Business at IU International University of Applied Sciences, a state-recognised and accredited programme sitting at the intersection of business and technology.

Read more

My coursework built a working understanding of data protection and IT security from a business perspective, along with the legal frameworks that govern digital operations. I also worked through requirements engineering, learning how technical needs get gathered and validated before anything is built.

A strong thread of statistics, data analytics and data science runs through my training. This is where I picked up the habit of treating findings as evidence with clear limits, not just numbers that sound convincing.

On the business side, I studied digital business model design, e-commerce strategy and online marketing. I paired this with agile project management, process management and design thinking, along with business psychology, organizational development, managerial economics and corporate finance. That combination shaped how I approach client work: grounded in both the creative and the operational sides of running a marketing engagement.

Finance and Financial Management ServicesFaculty of Economics, Ss. Cyril and Methodius University in Skopje

Before IU, I studied finance and financial management at the Faculty of Economics in Skopje, part of the Ss. Cyril and Methodius University and the largest institution in North Macedonia for economics and business education.

Read more

I covered the foundations of economics, quantitative methods, financial accounting, statistics and commercial law, along with the fundamentals of e-business. This is where I built the habit of reasoning from numbers rather than assumptions, and of understanding how resources get allocated and how commercial decisions actually get made. That discipline still shapes how I evaluate a client's search performance before I recommend anything.

Search, content and search visibility

SEO SpecializationUniversity of California, Davis

I completed UC Davis's SEO Specialization, working through on-page and off-page optimization, keyword research, competitive and gap analysis, and search-focused website audits, before finishing with a capstone built around a real client consulting report rather than a theoretical exercise.

Read more

This is the direct foundation of how I run a Kryston Review. When I audit an MSP, a cloud consultancy or a development agency, I'm applying the same audit structure and client-reporting discipline I built here, just aimed at a market that has its own vocabulary and its own buyers. Search visibility for an IT or software firm isn't generic SEO wearing a different label. It requires understanding the specific way managed IT buyers or cloud migration buyers search and compare, and this specialization is where I learned to build an audit around actual search behavior rather than a generic checklist.

Content Strategy for Professionals SpecializationNorthwestern University

Northwestern's Medill School trained me in content strategy built on credibility, trust and transparency, covering audience engagement, content governance across platforms, and measuring whether content actually lands rather than assuming it does.

Read more

This is where my content architecture work comes from. Technical buyers are unusually skeptical readers. They've seen enough vague marketing content to distrust it on sight, so every piece I plan for a client has to earn its place: one clear reader, one clear job, evidence behind any claim. That governance discipline is what keeps an IT or software firm's content from reading like every other IT firm's content, and it's the backbone of how I structure a client's publication library so nothing gets published just to fill a slot.

Digital Marketing and E-commerce Professional CertificateGoogle

Google's certificate took me through the full acquisition and conversion funnel: customer attraction, email marketing, marketing analytics, e-commerce operations and customer retention.

Read more

For an IT or software firm, visibility without conversion is a wasted budget. This training is why I don't stop at “more people found your site.” I look at what happens after that: whether the right buyers are actually reaching a service page built to convert them, and whether an AI-driven visit behaves any differently from an organic one. Search work that ignores the funnel is only half the job.

Buyer intelligence and measurement

Digital Marketing Analyst Professional CertificateUnilever

Unilever's certificate trained me in customer understanding, persona development, journey mapping and marketing analytics, including how to measure a campaign honestly rather than cherry-pick the numbers that flatter it.

Read more

This is the direct source of my buyer intelligence work. Before I write anything for an MSP or a development agency, I need to understand their buyer: what triggers a company to start looking for a provider, how they evaluate options, what questions they need answered before they'll pick up the phone. Persona and journey mapping is exactly that discipline, just pointed upstream at the buyer behind my client's buyer. It's what stops my content from being generic advice with an industry label slapped on top.

Digital Marketing NanodegreeUdacity

Udacity's programme was built around seven graded, expert-reviewed projects: SEO audits, ad campaign evaluation, and email programmes tested through A/B testing, alongside training in Google Analytics and attribution.

Read more

This is where I learned that a rise in traffic isn't automatically a rise in business, and I carry that distinction into every engagement. An MSP or a development agency can get plenty of visits from people who aren't buyers. This training is why I track qualified inquiries and attribution separately from raw visibility, instead of reporting a vanity number and calling it a win.

Strategy and delivery

Digital Marketing Strategy and Planning SpecializationDigital Marketing Institute

DMI trained me in digital strategy formulation, channel planning and e-commerce strategy, and how digital leadership actually gets executed inside a business, not just theorized about.

Read more

This channel discipline is what lets me tell a client the truth when SEO isn't their answer. Some IT and software firms, especially in narrow specialist niches, don't have enough search demand to justify a search-first strategy, and referrals or account-based outreach may serve them better. DMI is where I learned to make that judgment honestly instead of selling search regardless of fit.

Project Management Professional CertificateGoogle

Google's certificate covered project initiation, planning, execution and stakeholder management, along with agile and scrum delivery, finished with a real-world capstone.

Read more

Managed Kryston is not a one-time push. It's an ongoing engagement with milestones, reporting cadences and shifting priorities, and this training is why I can run that kind of engagement in a structured way instead of an improvised one. Technical clients in particular expect process and accountability, and a chaotic engagement undermines the same credibility I'm trying to build for them.

02 Books

Books

Why Cybersecurity Marketing Doesn't WorkWhat Changes When Trust Is Part of the Product

Cybersecurity is different from most industries. The buyer isn't just purchasing software or services, they're trusting a company with their infrastructure, sensitive information and potentially their organization's future. No amount of advertising or cold outreach can manufacture that confidence on its own.

Why Cybersecurity Marketing Doesn't Work draws on industry research, academic studies and an examination of how cybersecurity buyers evaluate vendors to explain why conventional marketing and sales strategies often fall short in this market, and why pushing harder can sometimes make the problem worse. It covers why cybersecurity is fundamentally a trust-dependent purchase, why advertising can create awareness without creating credibility, how aggressive cold outreach can undermine the reputation a security company depends on, and why buyer confidence matters as much as lead generation.

It isn't an argument against advertising, outbound sales or marketing agencies. It's an examination of what happens when strategies built to generate attention are applied to a market where credibility is part of the product.

Buy on Amazon

Now in its 2nd edition. Amazon's Kindle listing page doesn't display an edition number, so this won't be visible on the page itself, but this link points to the current, most recently updated edition.

03 Writing

Writing on Kryston

Publications · 21 October 2026Why Your MSP Website Ranks for “IT Support” but Gets No Qualified InquiriesPublications · 21 October 2026Why AI Assistants Recommend Directories Instead of Your Managed IT FirmPublications · 21 October 2026Why Your Cloud Migration Consultancy Disappears Behind Hyperscaler ContentPublications · 21 October 2026Why Your DevOps Case Studies Don’t Answer What Buyers AskPublications · 21 October 2026Why Your Software Agency Is Lost Among “Best Software Company” ListsPublications · 21 October 2026Why Buyers Can’t Tell What Your Development Agency Is Actually Good AtPublications · 21 October 2026Why Your IT Consultancy Sounds Like Every Other Digital Transformation FirmPublications · 21 October 2026Why Your ERP Implementation Firm Is Found by License Buyers, Not Project BuyersPublications · 21 October 2026Why AI Consultancies Get Described as Chatbot VendorsPublications · 21 October 2026Why Your Data Engineering Content Attracts Job Seekers Instead of BuyersBuyer intelligence · 21 October 2026What Makes a Growing Company Look for a Managed IT Provider?Buyer intelligence · 21 October 2026What Makes a Company Start Looking for a Cloud Migration Partner?Buyer intelligence · 21 October 2026Why Startups and Scale-Ups Hire an External Development TeamBuyer intelligence · 21 October 2026What Triggers a Company to Replace Its ERP and Hire an Implementation Partner?Buyer intelligence · 21 October 2026What Makes a Company Start Looking for an AI Implementation Partner?Publications · 16 September 2026Why Your vCISO Website Attracts Job Seekers Instead of Companies Seeking Security LeadershipPublications · 16 September 2026Why Your Security Consultancy Is Hard to Find for Anything SpecificPublications · 16 September 2026Why Your Pentesting Firm Is Invisible for the Assessments You Actually SellPublications · 16 September 2026Why Your Pentesting Content Attracts Students and Practitioners Instead of BuyersPublications · 16 September 2026Why Your OT Security Website Doesn't Convince Industrial Buyers You Understand Their EnvironmentPublications · 16 September 2026Why Your MSSP Website Gets Traffic but No Qualified InquiriesPublications · 16 September 2026Why Your Managed SOC Sounds Just Like Every Other ProviderPublications · 16 September 2026Why Your Industrial Incident Response Service Is Hard to Find When It's NeededPublications · 16 September 2026Why Your Compliance Guides Get Read but Your Consulting Services Get IgnoredPublications · 16 September 2026Why Your Cloud Security Consultancy Disappears Behind Software VendorsPublications · 16 September 2026Why Your AppSec Blog Attracts Developers but Not Companies Buying AssessmentsPublications · 16 September 2026Why Prospects Leave Your Pentesting Website Without Requesting a QuotePublications · 16 September 2026Why Manufacturers Can't Find Your OT Security ConsultancyBuyer intelligence · 16 September 2026Why HealthTech Companies Seek Application Security Assessments Before Enterprise DealsBuyer intelligence · 16 September 2026Why Enterprise Security Reviews Create Demand for AppSec and Pentesting FirmsPublications · 16 September 2026Why Compliance Software Appears in Search When Buyers Need a GRC ConsultantPublications · 16 September 2026Why Buyers Keep Mistaking Your MDR Service for Security SoftwarePublications · 16 September 2026Why Buyers Can't Tell Which Application Security Assessment You ProvideBuyer intelligence · 16 September 2026What Triggers a FinTech Company to Commission a Penetration Test?Buyer intelligence · 16 September 2026What Makes an Online Retailer Start Looking for an Incident Response Partner?Buyer intelligence · 16 September 2026What Makes an E-commerce Business Seek a Web Application Penetration Test?Buyer intelligence · 16 September 2026What Makes a SaaS Company Look for a Cloud Security Consultant?Buyer intelligence · 16 September 2026What Makes a Manufacturer Seek External OT Cybersecurity Expertise?Buyer intelligence · 16 September 2026What Makes a Hospital Start Looking for a Cybersecurity Partner?Buyer intelligence · 16 September 2026What Makes a Financial Institution Trust an External Cybersecurity Provider?Publications · 16 September 2026Technical Credibility Is Not the Same as Commercial RelevancePublications · 16 September 2026The Problem With Marketing Cybersecurity Like Every Other B2B ProductBuyer intelligence · 16 September 2026How SaaS Companies Choose Between Compliance Software and a GRC ConsultancyBuyer intelligence · 16 September 2026How Payment Security Requirements Influence the Search for PCI Compliance ConsultantsBuyer intelligence · 16 September 2026How Industrial Buyers Evaluate OT Security Providers: What Their Websites Need to ProveBuyer intelligence · 16 September 2026How Healthcare Organizations Evaluate Cybersecurity Consultants Before Making ContactBuyer intelligence · 16 September 2026How DORA Creates Search Opportunities for Cybersecurity Consultancies Serving Financial FirmsBuyer intelligence · 16 September 2026Factory Modernization and Cybersecurity: When Do Manufacturers Start Looking for Security Partners?Publications · 16 September 2026Cybersecurity Companies Are Building Authority in Front of the Wrong People

Want to talk about your firm's visibility?

Email directly and tell me what kind of IT or software work you sell and where new clients come from today. That is what shapes whether a review or ongoing work makes more sense.

  • A baseline across ChatGPT, Perplexity, Gemini, AI Overviews and Google
  • Where competitors are named and you are not
  • A prioritized plan and a walkthrough call

Prefer email? contact@kryston.net

Used only to reply to this request. See the privacy policy.