What do Group-IB and Keepnet Labs sell?

Group-IB sells Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more. Keepnet Labs sells Phishing Simulator and Vishing assessment.

Are Group-IB and Keepnet Labs in the same category?

They share Threat intelligence. Group-IB's primary category is Threat intelligence and Keepnet Labs's is Human risk management.

Where are Group-IB and Keepnet Labs headquartered?

Keepnet Labs is headquartered in London, United Kingdom.

When were Group-IB and Keepnet Labs founded?

Keepnet Labs was founded in 2017.

Who are Group-IB and Keepnet Labs sold to?

Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most.

What have Group-IB and Keepnet Labs announced recently?

October 29, 2026: Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.

Vendor comparison · 2 companies

Group-IB vs Keepnet Labs

Group-IB is a Prediction-First cybersecurity company built on collective defense. Keepnet Labs sells security awareness training and multi-channel phishing simulations. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Group-IB
Keepnet Labs

Add a company

Group-IB vs Keepnet Labs: Products, Customers and Funding Compared
What it sells
	Group-IBGroup-IB is a Prediction-First cybersecurity company built on collective defense.group-ib.com	Keepnet LabsKeepnet Labs sells security awareness training and multi-channel phishing simulations.keepnetlabs.com
What it sells	Threat Intelligence^[1][3][5]Group-IB Threat Intelligence Platform has a graph interface for investigating cyber threats. Attack Surface Management^[1][5]Group-IB delivers external attack surface management that automatically maps every asset and provides continuous attack surface monitoring and analysis. Fraud Protection^[1][4]Group-IB's online fraud protection platform uses global fraud intelligence, device fingerprinting and behavioral analysis to detect fraud. Digital Risk Protection^[1][6][11]Group-IB's digital risk protection solution continuously monitors and detects threats across the open, deep and dark web. Managed XDR^[7]Group-IB Managed XDR solution secures an email gateway using intelligence-driven behavioral analysis technology. Business Email Protection^[1][7]Group-IB offers Business Email Protection against phishing and scam attacks.	Phishing Simulator^[1][2][7][9]Runs email phishing simulations. Vishing assessment^[15]Live calls from experienced social engineers to test verification.
Categories
Categories	Threat intelligence (primary category) External attack surface management Digital risk protection Fraud prevention	Human risk management (primary category) Security awareness training Threat intelligence Incident response and forensics
Headquarters
Headquarters	Not stated on its pages	London, United Kingdom
Founded
Founded	Not stated on its pages	2017^[1]
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	October 29, 2026Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.^[11] January 27, 2026Group-IB launches a Cloud Security Posture Management solution as part of its Unified Risk Platform.^[10]	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[12] Gartner Peer Insights: Not stated on its pages	G2: listed, seen October 26, 2026^[13] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most. Keepnet Labs organises published customer numbers by sector. Keepnet Labs prices its plans per employee per month, billed annually, and customers can buy through a Keepnet partner. Keepnet Labs lists hosting regions of the UK, EU, US, Canada, the UAE and Türkiye.
Last verified
Last verified	November 4, 2026	September 27, 2026

Where they overlap

Group-IB and Keepnet Labs are both filed under Threat intelligence.

Where they differ, field by field

Group-IB's primary category is Threat intelligence; Keepnet Labs's is Human risk management.
Group-IB is also filed under External attack surface management, Digital risk protection and Fraud prevention. Keepnet Labs is also filed under Security awareness training and Incident response and forensics.
Group-IB lists Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more. Keepnet Labs lists Phishing Simulator and Vishing assessment.
Keepnet Labs is headquartered in London, United Kingdom.
Keepnet Labs was founded in 2017.

What it sells: Group-IB

What Threat Intelligence does^[1][3][5]: Group-IB's digital threat intelligence solution, powered by the Unified Risk Platform, integrates with SIEM, SOAR and TIP solutions, or via API and STIIX/TAXII data transfer. Group-IB threat intelligence lets users uncover illicit activities and monitor the dark web to determine if their organization is mentioned there. Group-IB's Threat Intelligence solution is available in AWS Marketplace.
What Attack Surface Management does^[1][5]: Group-IB's platform enriches findings with threat intelligence to assess risk and prioritize issues. The Assets tab lists Internet-facing assets that are part of an organization's infrastructure, which can be confirmed or ignored. The Issues tab lists identified issues among confirmed assets, which can be marked as Under Review, Solved, Ignored or False Positive. Group-IB's attack surface platform checks confirmed assets for common vulnerabilities and assigns each one a risk score.
What Fraud Protection does^[1][4]: Group-IB device fingerprinting technology is powered by the patented Global ID innovation. Group-IB device fingerprinting identifies devices, generates unique fingerprints, tracks fraudulent activities and uncovers hidden multi-accounting, anti-detection browsers and account farming. Group-IB Fraud Protection's AI uses a combination of signature analysis and User Behavior Analysis (UBA).
What Digital Risk Protection does^[1][6][11]: Group-IB Digital Risk Protection solution implements a three-stage takedown process for violations such as scam and phishing. Group-IB Digital Risk Protection uses machine learning to detect scams, phishing and other violations. Group-IB analysts research scam groups, actors and popular schemes, creating new assets for monitoring and public reports.

What it sells: Keepnet Labs

What Phishing Simulator does^[1][2][7][9]: Phishing Simulator runs email phishing simulations. Phishing Simulator provides templates across languages and difficulty levels.
What Vishing assessment does^[15]: A Keepnet vishing assessment is a set of live calls from experienced social engineers to employees, using pretexts the customer approves. Senior Keepnet social engineers hold the calls themselves, with no AI voices.

Questions about Group-IB and Keepnet Labs

What do Group-IB and Keepnet Labs sell?: Group-IB sells Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more. Keepnet Labs sells Phishing Simulator and Vishing assessment.
Are Group-IB and Keepnet Labs in the same category?: They share Threat intelligence. Group-IB's primary category is Threat intelligence and Keepnet Labs's is Human risk management.
Where are Group-IB and Keepnet Labs headquartered?: Keepnet Labs is headquartered in London, United Kingdom.
When were Group-IB and Keepnet Labs founded?: Keepnet Labs was founded in 2017.
Who are Group-IB and Keepnet Labs sold to?: Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most.
What have Group-IB and Keepnet Labs announced recently?: October 29, 2026: Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.

About Group-IB

Group-IB is a Prediction-First cybersecurity company built on collective defense. Group-IB has products, intelligence and expertise that work together on a shared data lake. Group-IB offers real-time threat detection and response for endpoints, network, infrastructure and email. Group-IB offers real-time fraud prevention and client-side digital identity protection. Group-IB offers AI-powered digital risk identification and remediation for securing digital assets.^[2][4]

Group-IB's Threat Intelligence solution is available in AWS Marketplace. Group-IB's digital threat intelligence solution, powered by the Unified Risk Platform, integrates with SIEM, SOAR and TIP solutions, or via API and STIIX/TAXII data transfer. Prevyn AI orchestrates 12 Specialist Agents, each expert in one domain of threat intelligence. Group-IB names three agents Compromise Detection, Malicious Infrastructure Detection and Attack Activity, built to anticipate attacks before they happen. Group-IB Threat Intelligence Platform has a graph interface for investigating cyber threats. Group-IB's graph lets users explore the relationship between threat actors, their infrastructure and the tools they use. Group-IB threat intelligence lets users uncover illicit activities and monitor the dark web to determine if their organization is mentioned there. Group-IB's platform gives insight into threat actor activity in the MITRE ATT&CK format. Group-IB Threat Intelligence Platform can be configured with the Unified Risk Platform to automatically detect and take down malicious sites to protect a brand and its customers.^[3]

Group-IB's online fraud protection platform uses global fraud intelligence, device fingerprinting and behavioral analysis to detect fraud. Group-IB device fingerprinting technology is powered by the patented Global ID innovation. Group-IB device fingerprinting identifies devices, generates unique fingerprints, tracks fraudulent activities and uncovers hidden multi-accounting, anti-detection browsers and account farming. Group-IB Fraud Protection's AI uses a combination of signature analysis and User Behavior Analysis (UBA). Group-IB's user behavior analysis covers Typing Dynamics, Touchscreen Interactions, Device Motion, App Usage Patterns and Geoprofiling.^[4]

Group-IB delivers external attack surface management that automatically maps every asset and provides continuous attack surface monitoring and analysis. Group-IB's platform enriches findings with threat intelligence to assess risk and prioritize issues. The Graph tab in Group-IB's attack surface platform visualizes external IT assets and their connections. The Assets tab lists Internet-facing assets that are part of an organization's infrastructure, which can be confirmed or ignored. The Issues tab lists identified issues among confirmed assets, which can be marked as Under Review, Solved, Ignored or False Positive. Group-IB's attack surface platform checks confirmed assets for common vulnerabilities and assigns each one a risk score.^[5]

Group-IB's digital risk protection solution continuously monitors and detects threats across the open, deep and dark web. Group-IB Digital Risk Protection solution implements a three-stage takedown process for violations such as scam and phishing. Group-IB Digital Risk Protection uses machine learning to detect scams, phishing and other violations. Group-IB analysts research scam groups, actors and popular schemes, creating new assets for monitoring and public reports. Group-IB puts 70+ internationally distributed cybersecurity and brand protection professionals at its customers' disposal.

Group-IB delivers anti-phishing solutions and phishing takedown services. Group-IB offers Business Email Protection against phishing and scam attacks. Group-IB Trebuchet is an automated security assessment tool for determining email security posture. Group-IB Managed XDR solution secures an email gateway using intelligence-driven behavioral analysis technology. Group-IB has Anti-Scam and Anti-Phishing modules that keep users informed about violations and brand risks. Group-IB Cybersecurity Courses educate employees about scammers, their behavior, tools and techniques.^[7]

Group-IB offers automated and manual testing of the blockchain network, website and application. Group-IB's crypto security experts provide due diligence against wallets and practices such as encryption, audits and secure storage for hot, cold and hardware wallets.^[5][7][8][9]

Group-IB on the record

About Keepnet Labs

Keepnet Labs sells security awareness training and multi-channel phishing simulations. Keepnet sells a plan that adds incident response for the emails, SMS and calls employees report, and before and after behaviour measurement. Signals from the security stack a customer already runs become named behaviours in Keepnet.^[4][7][9]

Keepnet sends a nudge in the moment, then training for the same behaviour. Keepnet nudges are short reminders by email, SMS and Teams, timed to each employee's behaviour. Keepnet security awareness training is matched to role, risk and behaviour, with nudges. Compliance 360 is role-based compliance training and readiness tracking. Secure Behaviour Dashboard shows before and after behaviour change, and risky behaviour from security tools drives nudges, training and simulations. Keepnet executive and advanced reports are ready-made reports with before and after behaviour data.^[7][9]

Phishing Simulator runs email phishing simulations, with templates across languages and difficulty levels. Keepnet voice phishing simulations use pre-recorded, text-to-speech or two-way AI calls. Keepnet runs voice phishing simulations from numbers it owns, not spoofed. Keepnet places the call and records what each employee does. Keepnet voice campaign setup starts when a customer adds phone numbers and then creates a voice campaign. Keepnet SMS phishing simulations use numbers that Keepnet provides. Keepnet callback phishing is an email that asks the employee to call a number. Keepnet email threat simulator tests how email defences handle realistic threats. Keepnet customers can run voice, SMS, email, QR code and callback simulations themselves from the Keepnet console.^{[2][7][9][14][15]}

Incident Responder provides analysis and response for reported emails, SMS and calls. Keepnet threat sharing lets customers share and receive phishing intelligence with peers. Keepnet says AI agents run the loop and, by default, nothing goes out until the customer approves it. Keepnet states that customer data is not used to train AI models.^[3][7][9]

Senior Keepnet social engineers hold the calls themselves, with no AI voices. Keepnet vishing assessments are requested most for the help desk, and any team that takes calls can be included. Password and MFA resets, account changes and callbacks to the number on file are the most common scopes of a Keepnet vishing assessment. Keepnet vishing assessment callers are UK, Europe and US callers, in English and Spanish. Card, health, government ID and other high-sensitivity data are never requested or recorded in a Keepnet vishing assessment. Keepnet vishing assessment findings point to the verification steps and policies to strengthen, not to individual employees. Keepnet vishing assessment recordings are encrypted and deleted within five business days of report acceptance, under EU and UK GDPR and the published DPA. In a Keepnet vishing simulation, a platform the customer's team controls runs AI-agent, text-to-speech or recorded calls.^[15]

Keepnet offers hosting in the region the customer chooses: the UK, EU, US, Canada, the UAE or Türkiye. Microsoft Azure hosts every Keepnet region except Türkiye, which AWS hosts. Keepnet lists certified security of ISO/IEC 27001, with data in the region the customer chooses. Keepnet states four current certifications, independently audited. Keepnet lists AES-256 at rest and TLS 1.2 or 1.3 in transit.^[9][15]

Keepnet prices its plans per employee per month, billed annually, on a 3-year agreement, excluding tax, and 1-year agreements are quoted. Customers buying through a Keepnet partner have the partner quote, bill and support them. Keepnet names Whitbread and Koton among the teams it describes with the numbers they moved.^{[5][6][7][8][9][10][11][14][15]}

Keepnet Labs on the record

Sources

Group-IB full record

[1]group-ib.comGroup-IB · group-ib.com · undated page, accessed November 4, 2026 · Tier A
[2]Group-IB | Prediction-First Cybersecurity and Anti-FraudGroup-IB · undated page, accessed November 10, 2026 · Tier A
[3]Threat Intelligence Platform | Cyber Threat Intelligence Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[4]Fraud Protection Service with Online Fraud Protection Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[5]Attack Surface Management & Monitoring Solutions Platform | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[6]Digital Risk Protection & Digital Brand Protection Services | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[7]Solutions for Anti-Phishing and Scam Protection | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[8]Blockchain Security: Safeguard Your Crypto Business | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
[9]OT ICS Cybersecurity Threats: Tactics, Paths, DefensesGroup-IB · undated page, accessed November 10, 2026 · Tier A
[10]Group-IB launches Cloud Security Posture Management with advanced misconfiguration detection and cloud compliance monitoring | Group-IBGroup-IB · published January 27, 2026 · Tier A
[11]Group-IB launches Digital Risk Protection availability in AWS Marketplace | Group-IBGroup-IB · published October 29, 2026 · Tier A
[12]Group-IB Threat Intelligence Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Keepnet Labs full record

[1]About usKeepnet Labs · keepnetlabs.com · published July 23, 2024 · Tier A
[2]Phishing simulatorKeepnet Labs · keepnetlabs.com · published September 24, 2026 · Tier A
[3]Threat intelligenceKeepnet Labs · keepnetlabs.com · published March 19, 2025 · Tier A
[4]Phishing incident responseKeepnet Labs · keepnetlabs.com · published August 25, 2026 · Tier A
[5]Privacy policyKeepnet Labs · doc.keepnetlabs.com · undated page, accessed September 27, 2026 · Tier A
[6]About Us | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[7]Human Risk Management Platform for Cybersecurity | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[8]Vishing as a Service: Managed Live-Human Calls - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[9]Security Awareness Training Pricing & Plans | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[10]Customer Case Studies: Phishing Simulation Results | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[11]Cybersecurity Platform Features & Benefits: User Management & Automation | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[12]Integrations - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[13]Keepnet Labs Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
[14]Voice delivery Integration - KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A
[15]Vishing Assessment: Social Engineering by Phone | KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.