CISO Tribune

Vendor comparison · 2 companies

Group-IB vs runZero

Group-IB is a Prediction-First cybersecurity company built on collective defense. runZero is a security company that sells the runZero Platform, which provides security visibility across IT, OT, IoT, cloud, mobile and remote assets. CISO Tribune files both under External attack surface management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Group-IB
  • runZero
Group-IB vs runZero: Products, Customers and Funding Compared
Group-IBGroup-IB is a Prediction-First cybersecurity company built on collective defense.group-ib.comrunZerorunZero is a security company that sells the runZero Platform, which provides security visibility across IT, OT, IoT, cloud, mobile and remote assets.runzero.com
What it sells
  • Threat Intelligence[1][3][5]Group-IB Threat Intelligence Platform has a graph interface for investigating cyber threats.
  • Attack Surface Management[1][5]Group-IB delivers external attack surface management that automatically maps every asset and provides continuous attack surface monitoring and analysis.
  • Fraud Protection[1][4]Group-IB's online fraud protection platform uses global fraud intelligence, device fingerprinting and behavioral analysis to detect fraud.
  • Digital Risk Protection[1][6][11]Group-IB's digital risk protection solution continuously monitors and detects threats across the open, deep and dark web.
  • Managed XDR[7]Group-IB Managed XDR solution secures an email gateway using intelligence-driven behavioral analysis technology.
  • Business Email Protection[1][7]Group-IB offers Business Email Protection against phishing and scam attacks.
  • runZero Platform[3][4][6]An exposure management platform that combines active scanning, passive discovery and integrations with advanced fingerprinting.
  • runZero 5.1[3]A runZero release that adds AI workflows.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesOwned by Dragos since 2026[2][3][5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 29, 2026Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.[11]
  • January 27, 2026Group-IB launches a Cloud Security Posture Management solution as part of its Unified Risk Platform.[10]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[12]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 5, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetNot written yet
Last verified
November 4, 2026November 2, 2026

Where they overlap

  • Group-IB and runZero are both filed under External attack surface management.

Where they differ, field by field

  • Group-IB's primary category is Threat intelligence; runZero's is Cyber asset inventory (CAASM).
  • Group-IB is also filed under Digital risk protection and Fraud prevention.
  • Group-IB lists Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more. runZero lists runZero Platform and runZero 5.1.
  • runZero is owned by Dragos, since 2026.

What it sells: Group-IB

What Threat Intelligence does[1][3][5]
Group-IB's digital threat intelligence solution, powered by the Unified Risk Platform, integrates with SIEM, SOAR and TIP solutions, or via API and STIIX/TAXII data transfer. Group-IB threat intelligence lets users uncover illicit activities and monitor the dark web to determine if their organization is mentioned there. Group-IB's Threat Intelligence solution is available in AWS Marketplace.
What Attack Surface Management does[1][5]
Group-IB's platform enriches findings with threat intelligence to assess risk and prioritize issues. The Assets tab lists Internet-facing assets that are part of an organization's infrastructure, which can be confirmed or ignored. The Issues tab lists identified issues among confirmed assets, which can be marked as Under Review, Solved, Ignored or False Positive. Group-IB's attack surface platform checks confirmed assets for common vulnerabilities and assigns each one a risk score.
What Fraud Protection does[1][4]
Group-IB device fingerprinting technology is powered by the patented Global ID innovation. Group-IB device fingerprinting identifies devices, generates unique fingerprints, tracks fraudulent activities and uncovers hidden multi-accounting, anti-detection browsers and account farming. Group-IB Fraud Protection's AI uses a combination of signature analysis and User Behavior Analysis (UBA).
What Digital Risk Protection does[1][6][11]
Group-IB Digital Risk Protection solution implements a three-stage takedown process for violations such as scam and phishing. Group-IB Digital Risk Protection uses machine learning to detect scams, phishing and other violations. Group-IB analysts research scam groups, actors and popular schemes, creating new assets for monitoring and public reports.

What it sells: runZero

What runZero 5.1 does[3]
runZero 5.1 introduces AI workflows, including natural language searches, dashboard and report creation, autonomous discovery and AI-assisted custom integrations. It also adds a native Dragos integration that brings deep OT context into the platform.

Questions about Group-IB and runZero

What do Group-IB and runZero sell?
Group-IB sells Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more. runZero sells runZero Platform and runZero 5.1.
Are Group-IB and runZero in the same category?
They share External attack surface management. Group-IB's primary category is Threat intelligence and runZero's is Cyber asset inventory (CAASM).
Who owns Group-IB and runZero?
runZero is owned by Dragos, since 2026.
What have Group-IB and runZero announced recently?
October 29, 2026: Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.

About Group-IB

Group-IB is a Prediction-First cybersecurity company built on collective defense. Group-IB has products, intelligence and expertise that work together on a shared data lake. Group-IB offers real-time threat detection and response for endpoints, network, infrastructure and email. Group-IB offers real-time fraud prevention and client-side digital identity protection. Group-IB offers AI-powered digital risk identification and remediation for securing digital assets.[2][4]

Group-IB's Threat Intelligence solution is available in AWS Marketplace. Group-IB's digital threat intelligence solution, powered by the Unified Risk Platform, integrates with SIEM, SOAR and TIP solutions, or via API and STIIX/TAXII data transfer. Prevyn AI orchestrates 12 Specialist Agents, each expert in one domain of threat intelligence. Group-IB names three agents Compromise Detection, Malicious Infrastructure Detection and Attack Activity, built to anticipate attacks before they happen. Group-IB Threat Intelligence Platform has a graph interface for investigating cyber threats. Group-IB's graph lets users explore the relationship between threat actors, their infrastructure and the tools they use. Group-IB threat intelligence lets users uncover illicit activities and monitor the dark web to determine if their organization is mentioned there. Group-IB's platform gives insight into threat actor activity in the MITRE ATT&CK format. Group-IB Threat Intelligence Platform can be configured with the Unified Risk Platform to automatically detect and take down malicious sites to protect a brand and its customers.[3]

Group-IB's online fraud protection platform uses global fraud intelligence, device fingerprinting and behavioral analysis to detect fraud. Group-IB device fingerprinting technology is powered by the patented Global ID innovation. Group-IB device fingerprinting identifies devices, generates unique fingerprints, tracks fraudulent activities and uncovers hidden multi-accounting, anti-detection browsers and account farming. Group-IB Fraud Protection's AI uses a combination of signature analysis and User Behavior Analysis (UBA). Group-IB's user behavior analysis covers Typing Dynamics, Touchscreen Interactions, Device Motion, App Usage Patterns and Geoprofiling.[4]

Group-IB delivers external attack surface management that automatically maps every asset and provides continuous attack surface monitoring and analysis. Group-IB's platform enriches findings with threat intelligence to assess risk and prioritize issues. The Graph tab in Group-IB's attack surface platform visualizes external IT assets and their connections. The Assets tab lists Internet-facing assets that are part of an organization's infrastructure, which can be confirmed or ignored. The Issues tab lists identified issues among confirmed assets, which can be marked as Under Review, Solved, Ignored or False Positive. Group-IB's attack surface platform checks confirmed assets for common vulnerabilities and assigns each one a risk score.[5]

Group-IB's digital risk protection solution continuously monitors and detects threats across the open, deep and dark web. Group-IB Digital Risk Protection solution implements a three-stage takedown process for violations such as scam and phishing. Group-IB Digital Risk Protection uses machine learning to detect scams, phishing and other violations. Group-IB analysts research scam groups, actors and popular schemes, creating new assets for monitoring and public reports. Group-IB puts 70+ internationally distributed cybersecurity and brand protection professionals at its customers' disposal.

Group-IB delivers anti-phishing solutions and phishing takedown services. Group-IB offers Business Email Protection against phishing and scam attacks. Group-IB Trebuchet is an automated security assessment tool for determining email security posture. Group-IB Managed XDR solution secures an email gateway using intelligence-driven behavioral analysis technology. Group-IB has Anti-Scam and Anti-Phishing modules that keep users informed about violations and brand risks. Group-IB Cybersecurity Courses educate employees about scammers, their behavior, tools and techniques.[7]

Group-IB offers automated and manual testing of the blockchain network, website and application. Group-IB's crypto security experts provide due diligence against wallets and practices such as encryption, audits and secure storage for hot, cold and hardware wallets.[5][7][8][9]

Group-IB on the record

Sources

Group-IB full record

  1. [1]group-ib.comGroup-IB · group-ib.com · undated page, accessed November 4, 2026 · Tier A
  2. [2]Group-IB | Prediction-First Cybersecurity and Anti-FraudGroup-IB · undated page, accessed November 10, 2026 · Tier A
  3. [3]Threat Intelligence Platform | Cyber Threat Intelligence Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fraud Protection Service with Online Fraud Protection Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  5. [5]Attack Surface Management & Monitoring Solutions Platform | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  6. [6]Digital Risk Protection & Digital Brand Protection Services | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  7. [7]Solutions for Anti-Phishing and Scam Protection | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  8. [8]Blockchain Security: Safeguard Your Crypto Business | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  9. [9]OT ICS Cybersecurity Threats: Tactics, Paths, DefensesGroup-IB · undated page, accessed November 10, 2026 · Tier A
  10. [10]Group-IB launches Cloud Security Posture Management with advanced misconfiguration detection and cloud compliance monitoring | Group-IBGroup-IB · published January 27, 2026 · Tier A
  11. [11]Group-IB launches Digital Risk Protection availability in AWS Marketplace | Group-IBGroup-IB · published October 29, 2026 · Tier A
  12. [12]Group-IB Threat Intelligence Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

runZero full record

  1. [1]AboutrunZero · runzero.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Dragos completes netrise and runzero acquisitions following accenture dealSecurityWeek · securityweek.com · published September 21, 2026 · Tier B
  3. [3]runZero: Exposure Management for the AI-attack erarunZero · undated page, accessed October 28, 2026 · Tier A
  4. [4]Community Edition - runZerorunZero · undated page, accessed October 28, 2026 · Tier A
  5. [5]runZero Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
  6. [6]Exposure Management Platform - runZerorunZero · undated page, accessed November 5, 2026 · Tier A
  7. [7]Integrations - runZerorunZero · undated page, accessed November 5, 2026 · Tier A
  8. [8]Inbound integrationsrunZero · undated page, accessed November 5, 2026 · Tier A
  9. [9]runZero Pricing - Get Started in Minutes with a Free TrialrunZero · undated page, accessed November 5, 2026 · Tier A
  10. [10]About Us - runZerorunZero · undated page, accessed November 5, 2026 · Tier A
  11. [11]Careers - Join the team! - runZerorunZero · undated page, accessed November 5, 2026 · Tier A

Spot a factual error? Request a correction.