Criminal IP has teamed up with Securonix to embed its threat intelligence directly into the ThreatQ platform. This collaboration lets organizations seamlessly weave external IP intelligence into their current security processes, empowering analysts to investigate and respond to threats faster with richer, more actionable insights.
Going beyond conventional threat feeds, Criminal IP offers deep visibility into how an organization’s digital assets and infrastructure are exposed on the public internet. Integrating this capability into ThreatQ means teams gain real-world context during investigations—without having to alter their established workflows.
ThreatQ acts as a central hub for aggregating and ranking threat data from diverse sources. With Criminal IP now part of the mix, organizations can enhance this data with continuously refreshed, exposure-focused intelligence—bolstering both investigation and response efforts without introducing unnecessary complexity.
Scalable, Automated Enrichment of Threat Data
Within the integrated setup, Criminal IP’s APIs automatically augment incoming IP indicators in ThreatQ with detailed context—including risk scores, detection of VPNs and proxies, signs of remote access exposure, open ports, and known vulnerabilities.
Leveraging ThreatQ’s powerful orchestration engine, security teams can build automated workflows that constantly cross-reference new indicators against Criminal IP’s up-to-date threat database.
This keeps threat intelligence current without manual input from analysts, enabling quicker triage and more consistent prioritization across the board.
Bring Criminal IP’s exposure-driven threat intelligence into ThreatQ to automatically enrich IP indicators with live context.
Streamline investigations using automated risk scoring, VPN/proxy identification, and infrastructure insights—all within a single, unified workflow.
Explore Criminal IP Integration
Seamless Real-Time Investigations in One Place
enabling unified visibility into enriched indicators and risk context
Thanks to the integration, analysts can pull up Criminal IP intelligence right inside the ThreatQ interface—no need to switch between tools. By merging exposure data with infrastructure-level details, teams can evaluate risks more accurately using their existing processes.
They can also run instant Criminal IP lookups directly from indicator profiles or investigation boards, giving them immediate access to deeper context during live threat hunts.
Additionally, Criminal IP enhances ThreatQ’s investigation graph by mapping connections between IP addresses, related infrastructure, and malicious activity—helping analysts spot patterns and relationships across threats more clearly.
Smarter Prioritization and Faster Response Through Intelligence
enabling automated ingestion and filtering of exposure-based IP intelligence directly into analysis workflows
By feeding Criminal IP’s intelligence into ThreatQ’s scoring system, organizations can tailor risk assessments to match their unique operational environment. This leads to sharper prioritization and better-informed decisions during active investigations.
Enriched data can also be displayed via intuitive dashboards, offering clear views into trends like malicious IP activity, VPN usage patterns, and overall risk distribution across indicators.
Broadening Threat Visibility with Exposure Intelligence
This integration underscores the rising value of exposure-based intelligence in today’s threat landscape. By constantly scanning internet-facing assets and IP infrastructure, Criminal IP delivers unique insights that go far beyond traditional indicator-only methods.
“This partnership allows organizations to inject IP reputation and exposure intelligence straight into the ThreatQ platform, accelerating analysis and improving response effectiveness across the entire investigation lifecycle,” said Byungtak Kang, CEO of Criminal IP. “By embedding our intelligence into familiar workflows, security teams gain better visibility and make smarter choices—without adding operational overhead.”
“This collaboration elevates the role of IP intelligence at key moments in the investigation and decision-making process,” said Scott Sampson, Chief Revenue Officer at Securonix. “Combining ThreatQ’s orchestration and prioritization strengths with Criminal IP’s real-time threat data lets organizations speed up enrichment, cut down on manual tasks, and zero in on the most critical threats in their environment.”
Together, Criminal IP and Securonix empower security teams to operationalize threat intelligence more effectively—by unifying automated enrichment, workflow orchestration, and precise prioritization within the ThreatQ platform.
About Criminal IP
Criminal IP, powered by AI SPERA, is a global cyber threat intelligence platform that delivers actionable reputation data for IP addresses and domains to security teams around the world.
Through continuous scanning of the entire internet, Criminal IP collects and contextualizes threat signals spanning IPs, domains, URLs, and attacker infrastructure—covering malicious indicators, known vulnerabilities, exposed assets, and adversary tactics.
Its mission is to give organizations clear, real-time visibility into their cyber environment and help them detect and respond to threats faster—by providing the intelligence needed to stay ahead of attackers. Learn more at www.criminalip.io.
About Securonix
Securonix is redefining security operations with the industry’s first Unified Defense SIEM enhanced by Agentic AI. Built on a human-in-the-loop approach, its cloud-native platform unifies detection, investigation, and response—while introducing Sam, the AI SOC Analyst, and a productivity-focused AI operating model that lets organizations measure AI’s impact by the analyst work it enables. Securonix helps enterprises achieve both Breach Ready and Board Ready status through accountable, outcome-driven security at scale. Recognized as a Leader in the Gartner® Magic Quadrant™ for SIEM and a Customers’ Choice by Gartner Peer Insights™, Securonix delivers trusted security operations for leading global organizations. Discover more at www.securonix.com.
Sponsored and written by Criminal IP.
