Group-IB Threat Intelligence logo

    Group-IB Threat Intelligence

    Sold by
    Group-IB Threat Intelligence is an enterprise cyber threat intelligence platform that reveals the adversaries targeting you: their infrastructure, tooling, and tactics. It combines proprietary closed-source intelligence with AI-driven analysis through Prevyn AI, delivering dark web monitoring, compromised credential detection, threat actor attribution, and real-time IOC feeds with native SIEM, SOAR, and TIP integrations.

    Ratings and reviews

    4.7
    30 ratings
    3 star
    2 star
    1 star
    77%
    23%
    0%
    0%
    0%
    0 AWS reviews
    |
    30 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (30)
    Financial Services

    Absolutely Perfect Experience

    Reviewed on Dec 14, 2025
    Review provided by G2
    What do you like best about the product?
    The solutions offer strong local partners and provide support in the Croatian language, which is very helpful. Additional it's easy to use solutons and have lots of fetures.
    What do you dislike about the product?
    There is nothing I dislike about this solution. In my experience, it is flawless.
    What problems is the product solving and how is that benefiting you?
    The solution provides us with information from the dark web, as well as rapid updates about new vulnerabilities and security gaps that may affect my company.
    Jhoan Stiven P.

    Great real-time visibility on threat actors

    Reviewed on Jul 23, 2025
    Review provided by G2
    What do you like best about the product?
    Excellent tool, it provides valuable real-time information that allows us to strengthen our security perimeter.
    What do you dislike about the product?
    We haven't had any problems with the tool, it has worked very well for us.
    What problems is the product solving and how is that benefiting you?
    It gives us detailed visibility on which threat actors are most interested in our sector.
    Lawrence T.

    GIB The Leading TI Platform in Malaysia

    Reviewed on Feb 21, 2025
    Review provided by G2
    What do you like best about the product?
    GIB TI is unlike others, they provide filtered and related threat intelligence information to the customer, for example: banking customers who subscribe to GIB TI will only receive banking related threat intelligence information and this enable customer's threat analyst to be able to analyse the information faster and more effective.
    What do you dislike about the product?
    Every good product comes with a price, GIB being one of the leading TI platform, the subscription price will be slight higher compare to the other vendors. But of course if you know you are actually getting more from the platform, the extra price you're paying for can be negligence as it's actually value for investment.
    What problems is the product solving and how is that benefiting you?
    GIB Threat Intelligence able to give insights of specific industry and user able to setup the security perimeter before the threat hits them.
    sirapop s.

    Great Product with details information gathering from various sources

    Reviewed on Sep 20, 2024
    Review provided by G2
    What do you like best about the product?
    capability to early detect compromised account related to orgainization with details of compromised hosted
    What do you dislike about the product?
    need service desk for support changing some configuration
    What problems is the product solving and how is that benefiting you?
    help early detect of leak information even in use case of employees account leak from other organization
    Government Relations

    Great experience with Group-IB team members and Threat Intelligence solution itself.

    Reviewed on Aug 28, 2024
    Review provided by G2
    What do you like best about the product?
    Receiving information on compromised accounts and services.
    What do you dislike about the product?
    Sometimes information might be outdated.
    What problems is the product solving and how is that benefiting you?
    As a National CERT we share information on compromised accounts and services.
    Prayfa C.

    Best TI Solution

    Reviewed on Aug 21, 2024
    Review provided by G2
    What do you like best about the product?
    There is a lot of threat information and informed about risk, vulnerabilities, data leaks, etc. that make us aware and prepare our team to prevent future threat incidents
    What do you dislike about the product?
    there is nothing i dislike since i using until now
    What problems is the product solving and how is that benefiting you?
    data leaks
    Banking

    Powerful threat intelligence product for banks

    Reviewed on Aug 02, 2024
    Review provided by G2
    What do you like best about the product?
    Group-IB Threat Intelligence is the best TI product we have ever seen, offering deep expertise and high-quality, precise information. We can use their service to hunt and proactively prevent all our threats.
    What do you dislike about the product?
    We need more threat intelligence information about cybersecurity in Vietnam and require a dedicated expert based in Ho Chi Minh City.
    What problems is the product solving and how is that benefiting you?
    Malicious IP searching, APT activities tracking, Malware detonation, Breached credential,... All Threat Intelligence works
    Banking

    Group-IB Threat Intelligence

    Reviewed on Aug 02, 2024
    Review provided by G2
    What do you like best about the product?
    Useful threat intel, especially in the cybercrime sphere. Timely and proactive RFI service with detailed investigation and analysis.
    What do you dislike about the product?
    Some functions of platform can be further improved. Will be good to have more customized and detailed report for customers.
    What problems is the product solving and how is that benefiting you?
    Useful threat intel, especially in the cybercrime sphere. Good for investigations on cybercrime incidents targeting the organization.
    Banking

    Overall strong in delivering analysis of dark web threats

    Reviewed on Aug 02, 2024
    Review provided by G2
    What do you like best about the product?
    RFI service is one of the better ones out there, where you can ask more questions, and they have a relatively quicker turnaround time with initial assessments
    What do you dislike about the product?
    The UI can be further improved with the information sometimes over the place.
    What problems is the product solving and how is that benefiting you?
    The product is helping to fulfill the gap of providing analysis of the raw source, which then allows us to provide a better analysis on a particular threat.
    ALEX LOGINOV

    Completely satisfied with the way the report is prepared and easy to setup

    Reviewed on May 10, 2024
    Review provided by PeerSpot

    What is our primary use case?

    I used it to build the strategic threat forecast. The annual forecast for clients.

    How has it helped my organization?

    We did use it for threat detection, but not directly. I analyze multiple reports, including this one, and assess my client's infrastructure. I identify threats outlined in the reports that may be relevant to the client's infrastructure, and then I help them build detection use cases.

    There's no automation. We don't do anything automatically at this point. It's all manual and based on analysis. I can't integrate it into automatic feeds because the report outlines threats that may not be relevant to the client's infrastructure. So, I do the analysis and integrate it manually.

    I'm completely satisfied with the way the report is prepared. It's a good report.

    What is most valuable?

    The totality of the recordings is quite important. The networks, the new threat actors, the new methods, tactics, techniques, and procedures. The most important is the forecast. It's how the reports depict what's coming.

    What needs improvement?

    As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework. Even though it is done in the report, it could be done better.

    For how long have I used the solution?

    I used it for four years, since 2020. But recently, I stopped using it.

    What do I think about the stability of the solution?

    I would rate the stability a nine out of ten. Ten means outstanding, so I don't give ten for anything.

    There is always some room for improvement, but I have had no big issues or troubles with stability.

    What do I think about the scalability of the solution?

    I would rate the scalability a nine out of ten. It is quite good. I would recommend it for medium and large-sized companies.

    I wouldn't recommend it for small companies because their infrastructure is not large enough.

    How are customer service and support?

    I never needed it.

    Which solution did I use previously and why did I switch?

    I find it more relevant than others. Some reports are vague or irrelevant with too much information.

    For example, I use CrowdStrike and some other vendors, but I think Group-IB's report is more specific. I am happy with the report.

    How was the initial setup?

    The initial setup is straightforward. I had no issues with that.

    What's my experience with pricing, setup cost, and licensing?

    The pricing is alright. It's right on the mark. It costs money, but it's not too high. It's reasonable.

    For me, it's a reasonable price for the quality of the product.

    What other advice do I have?

    Overall, I would rate the solution a nine out of ten.

    I would recommend using it.