Recognition comes as the ERMM market consolidates around platforms combining threat intelligence, attack surface management, digital risk protection and native remediation
Dubai, United Arab Emirates; October 2026 — Group-IB, a leading creator of predictive cybersecurity technologies to investigate, prevent, and fight digital crime, has been named a Visionary Leader in the Frost Radar™: Enterprise Risk Mitigation and Management Platforms, 2026, as the cybersecurity market shifts away from fragmented point solutions toward integrated platforms providing broader visibility and remediation capabilities.
Frost & Sullivan assessed more than 30 vendors identifying themselves as Enterprise Risk Mitigation and Management (ERMM) providers, with 15 meeting the criteria for inclusion in the 2026 Frost Radar™. To qualify, vendors were required to provide Attack Surface Management (ASM), Cyber Threat Intelligence (CTI), and Digital Risk Protection (DRP) natively within their offering; deliver native remediation capabilities; and provide both outside-in and inside-out visibility into enterprise risk.
The increasingly demanding criteria reflect a wider shift in the ERMM market. Since Frost & Sullivan began tracking the category in 2022, the market has evolved from a field dominated largely by specialist providers to one increasingly populated by major cybersecurity platforms, while a number of earlier specialists have been acquired.
Against this backdrop, Group-IB was recognized as a Visionary Leader, with Frost & Sullivan crediting the company’s shift from fragmented threat visibility toward a unified, prediction-driven approach spanning threat intelligence, attack surface management, digital risk protection, cloud security posture management, and fraud intelligence. Group-IB placed second on the Growth Index among the 15 vendors benchmarked and positioned furthest on the Innovation Index.
Breaking down the barriers between cyber risk and fraud
Frost & Sullivan identified Cyber Fraud Fusion as an exceptional area of innovation for Group-IB and one that remains highly differentiated within the ERMM market.
Group-IB’s approach connects cyber indicators — including malicious infrastructure, IP addresses, domains, and malware — with fraud indicators such as mule accounts, compromised payment cards, scam networks, and payment abuse. This enables organizations to build a more complete picture of malicious activity that might otherwise remain divided between cybersecurity and fraud teams.
This approach builds on Group-IB’s wider strategy of integrating threat and fraud intelligence at the data layer. The same principle underpins Group-IB’s Cyber Fraud Fusion model, which addresses blind spots created when cyber and fraud teams operate independently — a strategic need Group-IB has also highlighted in its work around the MITRE Fight Fraud Framework™.
Intelligence generated at the source
A further differentiator highlighted in Frost & Sullivan’s assessment is Group-IB’s intelligence origination model.
Group-IB states that approximately 99.99% of its threat intelligence is generated internally, drawing on sources including undercover access to cybercriminal communities, regional human intelligence, DFIR, CERT and CTI teams, malware analysis, fraud telemetry, investigations, and a global sensor network.
Rather than relying primarily on third-party intelligence aggregation, this model is designed to give Group-IB direct visibility into adversary behavior, infrastructure, tactics, and emerging campaigns. It builds on more than two decades of adversary-focused research and investigation — an approach also reflected across Group-IB’s broader threat intelligence portfolio.
That visibility is grounded in more than 1,600 high-tech cybercrime investigations conducted since 2003 and a network of 11 Digital Crime Resistance Centers, through which Group-IB’s regional analysts validate global intelligence against country- and region-specific threat and fraud patterns.
From fragmented visibility to Prediction-First defense:
Frost & Sullivan also highlights Group-IB’s roadmap toward preemptive cybersecurity, including work to combine external threat intelligence with internal telemetry to generate augmented alerts, prediction kill chains, and short-term attack forecasts.
The direction reflects Group-IB’s broader Prediction-First
Recognition comes as the ERMM market consolidates around platforms combining threat intelligence, attack surface management, digital risk protection and native remediation
Dubai, United Arab Emirates; October 2026 — Group-IB, a leading creator of predictive cybersecurity technologies to investigate, prevent, and fight digital crime, has been named a Visionary Leader in the Frost Radar™: Enterprise Risk Mitigation and Management Platforms, 2026, as the cybersecurity market shifts away from fragmented point solutions toward integrated platforms providing broader visibility and remediation capabilities.
Frost & Sullivan assessed more than 30 vendors identifying themselves as Enterprise Risk Mitigation and Management (ERMM) providers, with 15 meeting the criteria for inclusion in the 2026 Frost Radar™. To qualify, vendors were required to provide Attack Surface Management (ASM), Cyber Threat Intelligence (CTI), and Digital Risk Protection (DRP) natively within their offering; deliver native remediation capabilities; and provide both outside-in and inside-out visibility into enterprise risk.
The increasingly demanding criteria reflect a wider shift in the ERMM market. Since Frost & Sullivan began tracking the category in 2022, the market has evolved from a field dominated largely by specialist providers to one increasingly populated by major cybersecurity platforms, while a number of earlier specialists have been acquired.
Against this backdrop, Group-IB was recognized as a Visionary Leader, with Frost & Sullivan crediting the company’s shift from fragmented threat visibility toward a unified, prediction-driven approach spanning threat intelligence, attack surface management, digital risk protection, cloud security posture management, and fraud intelligence. Group-IB placed second on the Growth Index among the 15 vendors benchmarked and positioned furthest on the Innovation Index.
Breaking down the barriers between cyber risk and fraud
Frost & Sullivan identified Cyber Fraud Fusion as an exceptional area of innovation for Group-IB and one that remains highly differentiated within the ERMM market.
Group-IB’s approach connects cyber indicators — including malicious infrastructure, IP addresses, domains, and malware — with fraud indicators such as mule accounts, compromised payment cards, scam networks, and payment abuse. This enables organizations to build a more complete picture of malicious activity that might otherwise remain divided between cybersecurity and fraud teams.
This approach builds on Group-IB’s wider strategy of integrating threat and fraud intelligence at the data layer. The same principle underpins Group-IB’s Cyber Fraud Fusion model, which addresses blind spots created when cyber and fraud teams operate independently — a strategic need Group-IB has also highlighted in its work around the MITRE Fight Fraud Framework™.
Intelligence generated at the source
A further differentiator highlighted in Frost & Sullivan’s assessment is Group-IB’s intelligence origination model.
Group-IB states that approximately 99.99% of its threat intelligence is generated internally, drawing on sources including undercover access to cybercriminal communities, regional human intelligence, DFIR, CERT and CTI teams, malware analysis, fraud telemetry, investigations, and a global sensor network.
Rather than relying primarily on third-party intelligence aggregation, this model is designed to give Group-IB direct visibility into adversary behavior, infrastructure, tactics, and emerging campaigns. It builds on more than two decades of adversary-focused research and investigation — an approach also reflected across Group-IB’s broader threat intelligence portfolio.
That visibility is grounded in more than 1,600 high-tech cybercrime investigations conducted since 2003 and a network of 11 Digital Crime Resistance Centers, through which Group-IB’s regional analysts validate global intelligence against country- and region-specific threat and fraud patterns.
From fragmented visibility to Prediction-First defense
Frost & Sullivan also highlights Group-IB’s roadmap toward preemptive cybersecurity, including work to combine external threat intelligence with internal telemetry to generate augmented alerts, prediction kill chains, and short-term attack forecasts.
The direction reflects Group-IB’s broader Prediction-First strategy: connecting signals across adversaries, infrastructure, exposed assets, fraud activity, and an organization’s own environment to identify emerging risk earlier and give defenders more time to act.
“Group-IB earned its Visionary Leader position by moving beyond fragmented threat visibility toward a unified, prediction-driven approach to enterprise risk. Its sustained R&D investment and proprietary intelligence origination continue to differentiate it in a market that is consolidating quickly,” said Danielle VanZandt, Associate Director, Frost & Sullivan.
“Security teams have spent years adding individual tools to solve individual problems, but every additional silo creates another place where context can be lost. Our approach is to make the same proprietary intelligence work across those different areas, so organizations can identify risk earlier and move from reacting to incidents toward anticipating them,” said Raymon van der Velde, Chief Product Officer, Group-IB.
The 2026 Frost Radar™ expands what Frost & Sullivan previously called External Risk Mitigation and Management into Enterprise Risk Mitigation and Management, reflecting the category’s broader scope and the growing need to connect external threat visibility with internal enterprise risk.
Source: Frost & Sullivan, Frost Radar™: Enterprise Risk Mitigation and Management Platforms, 2026, KC3B-74, Danielle VanZandt, July 2026.
Disclaimer: Frost & Sullivan does not endorse any vendor, product or service depicted in its research publications. Frost Radar™ is a trademark of Frost & Sullivan and is used herein with permission.
