Group-IB vs Overwatch

About Overwatch

Overwatch sells a system that runs cyber, fraud, brand and merchant risk, with AI agents handling collection and the first pass of every investigation. Overwatch sells AI-native threat intelligence and risk operations for cyber, fraud and risk teams. Overwatch says threats arrive from every direction, including compromised accounts, fraud patterns and fake merchant applications.^[1][2][3]

Overwatch collects continuously across the criminal underground, markets, leak sites, forums and channels where fraudsters and threat actors stage. Overwatch uses classifiers and anomaly detection to turn a constant stream of raw activity into candidate signal. Overwatch collection runs continuously across underground forums, marketplaces, leak sites and messaging channels, including non-English communities. Overwatch agents follow the actor, resolve connected infrastructure, pair exposed data with breach records and check what has been seen before. Overwatch attaches sources consulted, evidence found, connected entities and a verdict to every finding.^[1][3][5][6]

Overwatch analysts work the hard cases by hand, including leads found through human collection where stolen data and access are sold. Overwatch analysts take the hard cases and teach the agents what to look for next. Overwatch delivers validated findings into SIEM, SOAR, case management and executive briefings. Overwatch findings can be assigned to individuals, given a status and commented on for each case from first signal to close. Overwatch delivers email and SMS alerts, Slack, API, and SIEM and case management integrations. Overwatch offers monitoring mapped to a customer's assets, vendors and business units, with automated alerts tuned to priorities.^{[1][2][3][4][5][6]}

Overwatch cyber threat intelligence covers dark web markets, ransomware leak sites and vulnerability chatter. Overwatch offers automated merchant review and KYB, including fraud review and card network compliance checks. Overwatch brand protection addresses impersonation, lookalike domains and spoofed storefronts aimed at a brand, with takedown signals routed to the right team. Overwatch addresses threats against executives and VIPs that cross into the physical world, including risks tied to events and facilities. Overwatch offers continuous monitoring for vendor and supply chain compromise.^[4]

Overwatch collects the tools, methods and stolen data circulating in fraud channels and works out which of it points at the customer. Overwatch fraud collection includes image-based material such as receipts, balance screenshots and phishing kits. Overwatch agents verify listings against issuer records, map seller aliases across channels and pair compromised data with the customer base. Overwatch routes fraud findings to fraud operations with the evidence attached, including card reissue lists and prioritized actions. Overwatch brand protection watches newly registered domains, app stores, social platforms and the channels where scam kits are traded. Overwatch agents confirm the impersonation, trace hosting and registration, capture evidence and assess reach. Overwatch assembles the evidence package and routes it to a takedown provider where a customer uses one. Overwatch monitors for threats against executives, board members and public figures, including exposed personal data, coordinated harassment and threats tied to an event, a facility or a trip. Overwatch routes executive escalations with evidence attached to corporate security, the protective detail or law enforcement. Overwatch collection covers channels it has legitimate access to, including invite-based fraud and harassment channels.^[4][7][8]

Overwatch describes card networks and acquirers as facing portfolios of merchant descriptors to vet for transaction laundering, prohibited content and shell storefronts. Overwatch merchant agents inspect the merchant and its policy pages, examine hosting and registration signals, trace the checkout and payment flow, pull external reputation, and output a risk verdict. Overwatch merchant risk returns a written verdict with risk indicators and confidence into the review queue or via API. Overwatch merchant reviews map to a customer's categories and MCC structure.^[10]

Overwatch is the system Arjun Bisen and Zara Perumal wanted after careers at Stripe, Google and Twitter. Overwatch has raised a $15 million Series A, led by Mouro Capital with Visa Ventures and Capital One Ventures. Overwatch says the funding lets it extend its agents across more of the risk lifecycle, from monitoring and investigations in the criminal underground to merchant onboarding and due diligence. Overwatch names Visa among its customers, alongside 40+ others in finance, fintech and media.^{[2][3][4][5][6]}