Cybersecurity provider Securonix has announced a new partnership with AI SPERA, the company behind Criminal IP, to deliver integrated threat intelligence enrichment through the ThreatQ Platform.
The integration combines ThreatQ data-driven orchestration and investigation capabilities with Criminal IP’s real-time IP threat intelligence, providing security teams with deeper context to prioritize and respond to threats faster.
Faster enrichment improves threat prioritization
According to Securonix, the partnership strengthens the ThreatQ open and extensible threat intelligence ecosystem by enabling organizations to automatically enrich IP address indicators with Criminal IP data.
This includes maliciousness scores, VPN detection, remote-access exposure, open-port data, associated vulnerability context, and more. This results in a richer, more actionable view of indicator risk inside the workflows analysts already use every day.
“This partnership gives security teams stronger IP intelligence at the point of investigation and decision-making,” said Scott Sampson, chief revenue officer at Securonix.
“By combining ThreatQ’s orchestration and prioritization capabilities with Criminal IP’s real-time threat data, we are helping customers enrich indicators faster, reduce manual effort, and focus on the threats most relevant to their environment,” Sampson added.
Both companies see the collaboration as a way to help analysts act faster and with greater confidence, especially as security teams face growing alert volumes and increasingly fragmented threat data.
Automation reduces manual analyst workload
Through the ThreatQ data-driven orchestration engine, customers can also configure automated enrichment workflows that continuously evaluate incoming IP indicators against Criminal IP’s threat database.
Securonix says this allows teams to keep indicator context up to date without adding manual analyst effort and supports more consistent prioritization across investigations.
On-demand lookups and customizable scoring
Furthermore, analysts can perform on-demand Criminal IP lookups directly from an indicator details page or investigation board within ThreatQ. Criminal IP enrichment attributes also feed directly into ThreatQ’s custom scoring engine, enabling organizations to weight Criminal IP data based on their unique risk profile.
Enriched indicators can then power custom dashboards that visualize trends in maliciousness, VPN breakdowns, and score distributions, giving teams clearer visibility into the threats that matter most.
“This integration enables organizations to bring IP reputation and exposure intelligence directly into the ThreatQ platform, supporting faster analysis and more effective response throughout the investigation lifecycle,” said Byungtak Kang, chief executive officer at Criminal IP.
“By integrating our intelligence into existing workflows, security teams can improve visibility and make more informed decisions without adding operational complexity.”
Earlier this week, we covered the top stories from Google Cloud Next 2026. Read more about how companies are doubling down on AI guardrails, cyber resilience, and agent security, with updates from Netskope, Rubrik, Commvault, and Exabeam.