Group-IB puts Threat Intelligence on AWS Marketplace

Group-IB has made its Threat Intelligence product available on AWS Marketplace, allowing customers to buy the service through existing AWS procurement and billing arrangements.

The listing gives security teams a way to acquire the product without a separate purchasing process, while combining the cost into a single AWS invoice. Customers can also count the purchase against committed AWS cloud spending, which may reduce the need for separate budget approval.

The announcement reflects a broader shift in cybersecurity procurement, with vendors placing software in cloud marketplaces to shorten buying cycles. For corporate security teams, that can matter when threat monitoring tools are needed quickly but internal purchasing reviews take longer than technical deployment.

Group-IB's Threat Intelligence product is designed to identify early signs of malicious activity, including compromised credentials, dark web discussions, activity linked to advanced persistent threat groups, fraud trends, and indicators of large-scale attacks. According to Group-IB, the service draws on research from its Digital Crime Resistance Centres and a large internal cybersecurity data set.

The product is delivered through Group-IB's Unified Risk Platform and uses what it calls Incident Management Centre to control data flows centrally. Group-IB added that the intelligence is processed with support from Prevyn AI, which it described as a system that coordinates specialist research agents to run multi-step investigations and return structured findings.

That focus on earlier warning comes as corporate defenders face shorter response times. Attackers are increasingly automating parts of reconnaissance, social engineering, and infrastructure changes, putting more pressure on defenders to spot intent and preparation before an attack is fully launched.

Group-IB has sought to position its threat intelligence around adversary tracking rather than solely alerting on technical indicators after a compromise. It says the service is intended to give security teams verified, attributable intelligence they can act on quickly.

Availability on AWS Marketplace follows another AWS-related recognition for the company. Group-IB said it has received the AWS Financial Software Competency designation, which is awarded to providers that meet AWS standards on security, quality, and operations for the financial services sector.

The company has also been recognised by Gartner in the cyber threat intelligence market. Group-IB said it was named a Leader in Gartner's inaugural Magic Quadrant for Cyberthreat Intelligence Technologies and was one of five vendors placed in that category.

Buying route

Cloud marketplaces have become a more important sales channel for software suppliers selling into large enterprises, particularly where technology budgets are tied to committed spending agreements with hyperscale cloud providers. In those cases, a marketplace listing can shift a purchase from a fresh procurement exercise to an extension of an existing commercial relationship.

For security leaders, that may help resolve a longstanding tension between urgency and governance. Threat intelligence products are often bought in response to changing risk conditions, but procurement teams typically require contract review, supplier onboarding, and separate invoicing processes before a deal can close.

By placing the service in AWS Marketplace, Group-IB is aiming to remove some of that friction. The company already sells other products through the marketplace, and the threat intelligence listing expands its presence in AWS's software catalogue.

Market backdrop

Group-IB, headquartered in Singapore, was established in 2003 and works across government, financial services, retail, healthcare, and gaming, among other sectors. It says it collaborates with international law enforcement agencies including INTERPOL, Europol, and AFRIPOL, and that its intelligence work has contributed to more than 1,600 investigations globally.

The company's wider product portfolio includes fraud protection, digital risk protection, managed extended detection and response, business email protection, and external attack surface management. The Threat Intelligence product sits within that broader strategy of supplying externally sourced intelligence and risk monitoring to organisations facing increasingly varied forms of cybercrime.

Dmitry Volkov, Chief Executive Officer of Group-IB, set out the company's case for the marketplace listing.

"Attackers are now using AI to speed up reconnaissance, craft convincing lures, and adapt their infrastructure in real time, which compresses the window defenders have to respond. Waiting for an alert is no longer a viable defense; security teams need intelligence that reaches them fast enough to act before real damage is done. Bringing our Threat Intelligence to AWS Marketplace removes a barrier to getting that intelligence into the hands of teams that need to shift from reactive to proactive defense," said Dmitry Volkov, Chief Executive Officer of Group-IB.