Securonix partners with AI SPERA to bring Criminal IP intelligence to ThreatQ

Cybersecurity company Securonix Inc. today announced a new partnership with cyberthreat intelligence company AI SPERA Inc. to deliver integrated threat intelligence enrichment through its ThreatQ Platform.

The partnership sees the integration of Securonix’s ThreatQ data-driven orchestration and investigation capabilities with AI SPERA’s Criminal IP’s real-time IP threat intelligence to give security teams more in-depth context to prioritize threats and respond faster.

The partnership and integration seek to address the issue whereby, as organizations continue to face growing alert volume and increasingly fragmented threat data, security teams need integrated intelligence that helps them move faster with more confidence. Analysts can now reduce manual lookups, improve triage and make more informed decisions from a single workspace.

Securonix says the integration strengthens the ThreatQ open and extensible threat intelligence ecosystem by enabling organizations to automatically enrich IP address indicators with Criminal IP data, including maliciousness scores, virtual private network detection, remote access exposure, open port data and associated vulnerability context. The result is a richer, more actionable view of indicator risk inside the workflows analysts already use every day.

Using the ThreatQ data-driven orchestration engine, customers can now configure automated enrichment workflows that continuously evaluate incoming IP indicators against Criminal IP’s threat database. Doing so allows teams to keep indicator context current without adding manual analyst effort and supports more consistent prioritization across investigations.

“This partnership gives security teams stronger IP intelligence at the point of investigation and decision-making,” said Scott Sampson, chief revenue officer at Securonix. “By combining ThreatQ’s orchestration and prioritization capabilities with Criminal IP’s real-time threat data, we are helping customers enrich indicators faster, reduce manual effort and focus on the threats most relevant to their environment.”

In addition to automated enrichment, the integration also allows analysts to perform on-demand Criminal IP lookups directly from an indicator details page or investigation board within ThreatQ. The one-click operations give teams access to Criminal IP’s Malicious Info and Extended Data endpoints to make it easier to add relevant context to active investigations without leaving the platform.

Securonix claims its partnership with AI SPERA makes it easier for security teams to operationalize threat intelligence through integrated enrichment, automated workflows and more precise prioritization inside the ThreatQ Platform.

Image: SiliconANGLE/Ideogram