Daniel Ravner, Brinker | The Cyber Security Review | Narrative Intelligence Solution of the yearDaniel Ravner, CEO & Co-founder
As enterprises expand across cloud platforms, third-party ecosystems, and global digital channels, disinformation has emerged as a fast-growing and poorly governed attack vector. Industry estimates link fake news to roughly $39 billion in stock market losses and more than $78 billion in annual global enterprise costs. Yet narrative-driven risk is still frequently treated as a communications issue rather than a security exposure—often addressed only after damage has already occurred.

Security leaders increasingly recognize that disinformation poses a threat that can escalate into financial and physical calamities. Coordinated narrative campaigns are now used to manipulate markets, target executives, mobilize protests, and introduce real-world physical risk. In Brinker’s experience, the most effective defense is early, intent-based detection that identifies malicious coordination before reputational, legal, or operational consequences emerge. This shift reframes narrative intelligence as a preventative security control, not a passive monitoring function. Narrative risk has become a core security responsibility for today’s CISOs.

Benny Schnaider, Chairman and Co Founder and Oded Breiner, CTO and Co Founder
Brinker was built to support this model. Founded by a leadership team with intelligence-grade experience operating in hostile information environments, the company applies methodologies shaped by real-world threat operations to governmental and enterprise risk management. Its GenAI-native platform enables CISOs to take direct ownership of narrative risk, detect harmful campaigns early, and neutralize them before escalation through automated tools ranging from automated take-downs to counter-narratives.

“The Marketing mindset is about projecting values and achievements. Disinformation demands a security mindset that identifies threats early and acts decisively,” says Daniel Ravner, CEO.

The Imperative Of Narrative Intelligence

At the core of Brinker’s platform is proprietary AI-first, multi-LLMs, narrative intelligence that unearths intent-networks from the chaos of the online world. The system analyzes content across AI tools’ answers, news outlets, and social platforms, examining text, audio, and video to identify malicious narratives, bias, and cultural context. This allows organizations to distinguish organic criticism from coordinated influence operations and trace narratives to their sources across languages, platforms, and speed of spread.

According to Gartner, more than 60 percent of organizations will embed narrative intelligence into their cybersecurity and risk strategies by 2030, up from less than five percent today—reinforcing what Brinker observes in active threat environments: enterprise defenses have not yet caught up to the scale of narrative-driven risk, which is probably the easiest way for a malicious actor to seriously hurt their enterprise.

Bridging this gap requires more than detection. Early insight must translate into action before escalation. Tools like The Brinker Antidote™ connect detected narratives with legal frameworks, platform policies, and regulatory requirements. Security teams can initiate takedown requests, generate legal documentation, prepare consistent stakeholder messaging, and receive counter-narrative recommendations informed by behavioral psychology rather than reactive fact correction.

  • The Marketing mindset is about projecting values and achievements. Disinformation demands a security mindset that identifies threats early and acts decisively.


The platform is engineered to balance analytical accuracy with cost efficiency. It is language-agnostic and platform-agnostic, allowing multinational organizations to monitor complex digital footprints without excessive compute overhead. Rather than processing every mention through a single large language model, Brinker uses multi-LLM automated OSINT investigations and intelligent model orchestration, which delivers insights at a cost that makes sense.

In one high-impact case observed by the Brinker team, the platform identified more than 180 YouTube videos presented as automotive reviews that were spreading coordinated anti-U.S. manufacturing narratives. Narrative analysis revealed what appeared to be a state-sponsored campaign targeting enterprises tied to national trust. Early detection enabled rapid mitigation, limiting broader market and reputational impact. According to analysts working on such cases, many such campaigns are designed to generate instability and uncertainty rather than advance a specific ideological position.

Rewriting The Story Of Narrative Risk

As users increasingly rely on generative AI platforms such as ChatGPT and Gemini for information, poisoned narratives can be amplified automatically and at machine speed. In response, Brinker expanded its capabilities to include deepfake detection grounded in intent analysis. Rather than focusing solely on forensic indicators, the platform evaluates whether synthetic media poses a material risk to an organization.

With offices in San Francisco and led by its three co-founders: Daniel Ravner, Benny Schnaider, and Oded Breiner, Brinker combines intelligence-sector experience with enterprise security execution. By prioritizing early intent detection, speed, and operational alignment, the platform enables enterprises, governments, and NGOs to manage disinformation risk as a core security discipline.