New cognitive core orchestrates agentic research and assistive response to outpace machine-speed threats.
Group-IB, has announced the launch of Prevyn AI. As the cognitive core of the Group-IB Unified Risk Platform, Prevyn AI turns the company’s data lake into fast threat intelligence insights and decisive actions within Managed XDR.
Designed to close the “execution gap” faced by modern security teams, Prevyn AI goes beyond traditional chatbots by offering a core reasoning engine built for adversary-focused analysis.
It is powered by Group-IB’s intelligence data lake, built from decades of cybercrime investigations, insights from its Digital Crime Resistance Centers worldwide, and collaboration with international law enforcement.
By relying on proprietary adversary intelligence rather than open-source data, Prevyn AI delivers deeper, more operationally relevant analysis.

From Agentic Research to Assistive Response
Within Group-IB Threat Intelligence, Prevyn AI functions in an agentic mode, coordinating 11 specialised agents to carry out complex, adversary-focused intelligence and research.
These agents—including experts in malware, threat actors, and dark web monitoring—are modelled on real High-Tech Crime investigative logic.
This adversary-centric approach allows the platform to identify attacker intent and infrastructure staging before attacks launch, moving security from a reactive to a predictive posture.
Internal evaluations show that this system improves research quality by more than 20% across accuracy and analytical depth.

In Managed XDR, the system operates in assistive mode to reduce the operational burden of SOC work. Prevyn AI analyses alerts, generates incident reports, and prepares structured remediation workflows.
This allows analysts to execute complex responses with a single click, ensuring that defenders can respond at the pace required to fight weaponised, machine-speed attacks.
Human-in-the-Loop Governance
Designed for high-stakes and regulated environments, Prevyn AI features a structural analyst-in-the-loop architecture.
Every AI recommendation requires human approval before execution, ensuring that business-critical decisions remain under human control and align with emerging global AI governance expectations such as DORA and the EU AI Act.
| FIGHT AGAINST CYBERCRIME | WWW.GROUP-IB.COM |
“Threat Actors are already operating at machine speed, and defenders cannot respond at the pace required when investigations remain manual said.” Dmitry Volkov, CEO of Group-IB.
“The name Prevyn comes from ‘pre vision’. Our goal is to move security from reactive to predictive, helping teams identify Threat Actor intent and infrastructure before an attack even launches.”
“Group-IB Prevyn AI is now available to all existing Group-IB Threat Intelligence and Managed XDR customers at no additional cost.” he said.
