Group-IB
Threat intelligence and fraud prevention firm tracking cybercrime via dark web data and law enforcement ties.
On the record
Checkpoint: Independent benchmarks testing Prevyn AI against Pathfinder and Charlotte AI
The call
Group-IB holds real data and law-enforcement access but trails bigger AI-armed rivals in scale, speed, and clean financial proof.
Group-IB finds and stops cybercrimes by selling threat intelligence to banks, governments, and security teams, using data from crime forums and partnerships with police agencies like INTERPOL. The company is hard to copy in some ways, it has trusted relationships with law enforcement and speaks Russian, which helps it access certain criminals that American firms miss, but the bigger threat is that CrowdStrike, Google, and Recorded Future are much larger and already shipping AI assistants that do many of the same tasks automatically and cheaply. The one thing that could save Group-IB is if it can prove its new AI tool called Prevyn works better than the competitors' versions, or if the big companies decide to ignore emerging markets and law enforcement clients that Group-IB serves, but neither seems likely right now.
Why
01
AI pressure: Agentic AI assistants from rivals (CrowdStrike Charlotte AI, Mandiant Gemini, Recorded Future Pathfinder). Rivals' AI agents already automate triage, IoC enrichment and report drafting, shrinking the manual analyst edge Group-IB sells. Could AI do the core job? Only partly.
02
Bigger players: CrowdStrike, Google/Mandiant, Recorded Future. These firms dominate enterprise threat-intel budgets and shipped AI assistants months before Group-IB's Prevyn AI arrived. Could a giant copy it? Probably.
03
What protects it. Proprietary access to Russian-speaking cybercrime forums plus formal INTERPOL, Europol and AFRIPOL partnerships that data alone can't replicate.
What would change this call
CrowdStrike or Recorded Future launch a discounted emerging-markets or law-enforcement-partnered threat-intel product within 12-18 months. Would show a giant directly targeting Group-IB's regional and law-enforcement niche.
An independent lab or analyst publishes a head-to-head benchmark of Prevyn AI against Charlotte AI or Pathfinder. Would show whether Group-IB's AI assistant has closed the capability gap or still trails.
Group-IB releases an audited revenue figure or announces an institutional VC round or acquisition talks. Would resolve the $8M-$115M opacity and show whether real scale or liquidity exists.
An independent lab or analyst publishes a head-to-head benchmark of Prevyn AI against Charlotte AI or Pathfinder. Would show whether Group-IB's AI assistant has closed the capability gap or still trails.
Group-IB releases an audited revenue figure or announces an institutional VC round or acquisition talks. Would resolve the $8M-$115M opacity and show whether real scale or liquidity exists.
Key numbers
- Named Leader in Gartner's first CTI Magic Quadrant
- Revenue estimates range $8.2M to $115.5M, unaudited
- Headcount hit 981, up 24.4% year over year
Named risks
- Unverifiable financials, with third-party revenue estimates spanning $8M to $115M and no audited disclosure.
- Ownership ambiguity over Sachkov's 37.5% stake, conflicting between 2023 sale reports and 2026 Wikipedia listing.
- Reputational damage from 2025 Tencent/FreeWeChat censorship-assistance controversy.
- Co-founder Ilya Sachkov's 14-year treason sentence continues to attract press scrutiny of the brand.
- AI-driven commoditization of alert triage, IoC enrichment, and dark-web monitoring erodes pricing power.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| CrowdStrike | losing to | Charlotte AI agentic assistant shipped before Group-IB's Prevyn AI (April 2026 vs May 12, 2026) |
| Google/Mandiant | losing to | Gemini-powered natural-language TI queries live by April 2026, ahead of Group-IB's AI launch |
| Recorded Future | losing to | Pathfinder AI assistant and higher reviewer mindshare cited in 2026 PeerSpot comparisons |
| WhiteIntel | contesting | Undercuts on price in commodity dark-web credential monitoring as of May 20, 2026 |
Questions people ask
- Is Group-IB profitable in 2026?
- No audited financials are public. Third-party revenue estimates conflict wildly and are unverified, so profitability cannot be confirmed. Group-IB relies on Gartner recognition (Leader, May 5, 2026) rather than disclosed financials to signal traction.
- Who owns Group-IB?
- Group-IB is privately held through Singapore-based Group-IB Global Private Limited. Co-founder Ilya Sachkov reportedly sold his 37.5% stake to management in April 2023, but Wikipedia as of July 19, 2026 still lists him as holding that stake, leaving ownership unresolved.
- Could AI replace Group-IB's threat intelligence business?
- AI can automate commodity work like alert triage and IoC enrichment, and rivals shipped AI assistants (Charlotte AI, Gemini, Pathfinder) before Group-IB's Prevyn AI launched May 12, 2026. But Gartner cited Group-IB's proprietary dark-web access and law-enforcement ties as AI-resistant differentiators on May 5, 2026.
- Who is Group-IB's biggest competitor?
- CrowdStrike, Google/Mandiant, and Recorded Future are the main rivals; all three shipped agentic AI threat-intel tools (Charlotte AI, Gemini, Pathfinder) by April 2026, a month before Group-IB's own Prevyn AI launched on May 12, 2026.
- What awards has Group-IB won recently?
- Group-IB was named a Leader in Gartner's first-ever Magic Quadrant for Cyberthreat Intelligence Technologies on May 5, 2026, one of five leaders among 18 vendors evaluated, and it also won Frost & Sullivan's 2025 Global Technology Innovation Leadership Award on April 2, 2025.
- What happened to Group-IB co-founder Ilya Sachkov?
- Ilya Sachkov, Group-IB's co-founder, was sentenced to 14 years in a Russian prison on treason charges on July 26, 2023. The case continues to generate press coverage tied to the Group-IB brand as of mid-2026.
Timeline
- 2026-06-19Group-IB supports INTERPOL operation targeting human trafficking
- 2026-06-08Group-IB showcases Cyber Fusion model at CAISEC '26 in Cairo
- 2026-05-19Gartner names Group-IB Representative Vendor in IR Retainer Services guide
- 2026-05-18Group-IB supports INTERPOL's Operation Ramz in MENA region
- 2026-05-12Group-IB launches Prevyn AI, free for TI and Managed XDR customers
- 2026-05-05Group-IB named Leader in Gartner's inaugural CTI Magic Quadrant
- 2025-07Group-IB reportedly acts as Tencent's legal agent against FreeWeChat.com
- 2023-07-26Co-founder Ilya Sachkov sentenced to 14 years for treason in Russia
- 2023-04-20Group-IB exits Russia; Volkov and Sachkov sell their respective stakes
- 2019Group-IB relocates international headquarters to Singapore
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Group-IB named a Leader in the inaugural Gartner MQ for Cyberthreat Intelligence Technologies (2026-05-05)
- Group-IB Threat Intelligence vs Mandiant Advantage (2026)
- $8.2M Est. ARR, $938K Raised (2024-12-22)
- Group-IB Global Number of Employees 2026 (2026-06-29)
- Russia Sentences Leading Cybersecurity Entrepreneur to 14 Years for Treason (2023-07-26)
- Group-IB (2026-07-19)
- Group-IB launches Prevyn AI (2026-05-12)
- Recorded Future vs Mandiant vs CrowdStrike (2026-06-08)
- Group-IB supports INTERPOL operation targeting human trafficking (2026-06-19)
- Top Recorded Future Alternatives and Competitors in 2026 (2026-05-20)