Get 24/7 incident response assistance from our global team
- APAC: +65 3159 4398
- EU & NA: +31 20 890 55 59
- MEA: +971 4 540 6400
- LATAM: +56 2 275 473 79
Get 24/7 incident response assistance from our global team
Please review the following rules before submitting your application:
1. Our main objective is to foster a community of like-minded individuals dedicated to combatting cybercrime and who have never engaged in Blackhat activities.
2. All applications must include research or a research draft. You can find content criteria in the blog. Please provide a link to your research or research draft using the form below.
Regular open-group sessions run year-round on a published global schedule.
They can also be arranged for private groups on request.
These courses are designed for specialized audiences and are available only on request.
No two teams have the same gaps. We can build tailored Group-IB training programs after conducting skills assessments and operational interviews. Just like puzzle pieces, you can put modules together into a structured program that addresses what your team needs to improve on specifically.
Programs may run hours to months, depending on the request scope and complexity, and can be delivered on-site, remotely, or in a hybrid format, in any region where Group-IB operates a Digital Crime Resistance Center.
They are the best in their domain. Hard to access. Straight from the battlefield.
Our team can walk you through choosing the right course or scope a tailored
program for your organization.
Technical cybersecurity training develops hands-on operational skills in threat hunting, incident response, digital forensics, threat intelligence, cyber investigation, and fraud protection.
Group-IB training is designed for SOC analysts, incident response teams, threat hunters, threat intelligence analysts, digital forensics specialists, fraud analysts, and law enforcement investigators. It is suitable for enterprise security teams, MSSPs, financial institutions, telecom operators, government entities, and critical infrastructure organizations.
Group-IB offers the Threat Hunter, Threat Intelligence Analyst, SOC Analyst, Penetration Tester, Building Ultimate SOC, and Incident Responder courses on a published global schedule. The OSINT Specialist Course, the Cyber Investigator Course, and the Fraud Analyst Course are available for private groups, on request.
Yes. All the regular courses are delivered online. However, all the tailored courses and private groups are available both online and on-site.
Yes. Group-IB delivers tailored training on-site, remotely, or in a hybrid format in Europe, the Middle East, Asia-Pacific, Central Asia, Latin America, and other regions, through its Digital Crime Resistance Center network.
Yes. Training scenarios reflect the attack types that most often target regulated industries, including ransomware, fraud, APT activity, and business email compromise. Group-IB regularly trains teams from banks, fintech companies, insurance providers, and government agencies across EMEA, APAC, LATAM, and META.
For tailored training programs, Group-IB can provide capability assessment results and a structured capability development narrative to support internal budget discussions.
All training programs are built around real investigative methodology and practical exercises, so teams develop operational skills and gain direct exposure to threat intelligence, attacker behavior, and investigation workflows observed in real incidents.
These outcomes help organizations demonstrate improved incident response readiness, reduced dwell time, and documented team capability — all of which support board-level risk reporting, regulatory compliance, and cyber insurance underwriting conversations.
Tailored programs begin with a skills assessment that establishes a baseline. Outcomes are measured against defined capability objectives, and Group-IB provides a clear capability development report at the end of the tailored program. For regular courses, participant performance during practical cases provides a clear indicator of readiness gains.
For Incident Response, Threat Hunting, and Threat Intelligence courses, we also use a flag-based evaluation system that measures participants’ ability to complete practical tasks.
A tailored program is a custom training journey built specifically for your organization. It begins with a skills assessment and operational interviews, then combines content across the domains most relevant to your team into a structured program aligned to your gaps. Programs can be delivered on-site, remotely, or in a hybrid format.
Yes. Our tailored programs can be designed to support SOC capability development, detection engineering improvement, incident response maturity, and threat intelligence integration. They are often delivered alongside Group-IB SOC consulting or broader security transformation initiatives.
Yes. Technical cybersecurity training can be delivered as part of the Group-IB Services Retainer, which allows organizations to use pre-allocated hours for ongoing capability development without a separate procurement process.
Yes. Participants receive an official Group-IB course certificate upon successful completion of any training program.
For tailored programs, Group-IB conducts an initial consultation to assess team maturity, operational challenges, industry exposure, and capability objectives. Based on our conclusions, we recommend a custom program that reflects any gaps in your team’s knowledge and experience.
For on-request courses and open-group sessions, our AI-powered assistant helps to identify the most relevant training based on your needs.