Kaspersky Accelerates Threat Intelligence Workflows with New AI

Kaspersky has introduced new AI capabilities to its Threat Intelligence portfolio to help security teams address growing alert volumes, understaffing and increasingly rapid cyberattacks. The update enables analysts to use AI to quickly summarize large volumes of human-readable threat intelligence, including complex reports and Indicators of Compromise (IoCs), into concise summaries with a single click. This helps analysts identify relevant IoCs, rules and other useful information, prioritize investigations and reduce manual review time. AI summarization and search are also available for IoCs identified through open-source intelligence (OSINT) searches, providing a consolidated view of relevant data.

Kaspersky has also added Model Context Protocol (MCP) support, allowing organizations to connect their own or third-party AI applications directly to the Kaspersky Threat Intelligence Portal. Unlike traditional APIs, MCP enables AI applications to make flexible, dynamic queries and access real-time threat intelligence as needed. Together, these capabilities are designed to accelerate threat analysis, reduce manual workloads and help security teams make faster, more informed decisions.

“Kaspersky's Threat Intelligence portfolio has long been recognized for the exceptional quality and coverage of its data. For nearly 30 years, we have built a robust foundation of elite intelligence, extensively leveraging AI and machine learning to collect and classify threat data. Today, our focus is on unlocking its full potential for all our customers. The primary opportunity we bring with new AI features is to reduce the time between receiving information and understanding how to act on it. Ultimately, these capabilities will maximize the efficiency of corporate threat intelligence investments, saving teams hours of complex analysis and significantly enhancing the accuracy of security workflows,” says Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky.

Customers can immediately leverage new AI-functionality features using their regular Kaspersky Threat Lookup license, which includes a standard quota of requests. For organizations requiring higher volumes, additional requests can be scaled and purchased on demand.