Who typically needs ORM — startups, established firms, or both?

Both. Startups need ORM (Online Reputation Management) to build early trust and legitimacy, while established firms require it to protect scale, manage risk, and maintain authority across multiple markets.