Arrangements for an intelligent monitoring platform using a cybersecurity mesh and graph neural networks (GNNs) are provided. A platform may train multiple machine learning models (e.g., a GNN model, a cybersecurity engine, and a monitoring model). The platform may generate, using a GNN model, a suspicion score for a received event processing request. Based on determining the suspicion score satisfies a threshold, the platform may generate a threat score using a cybersecurity engine. The platform may generate an anomaly record for the event processing request based on the threat score and using a monitoring model. The platform may determine a preferred node of a cybersecurity mesh for routing the event processing request based on the anomaly record. The platform may determine a threat prevention response based on the preferred node. The platform may initiate one or more security actions based on the threat prevention response.