Kaspersky Threat Intelligence Portal Gets AI-Powered Features to Accelerate Security Operations

Kaspersky Embeds AI-Powered Features Into Threat Intelligence Portal

Kaspersky has rolled out significant updates to its Threat Intelligence Portal, introducing AI-powered features designed to accelerate threat intelligence workflows for Security Operations Centers and threat analysts1

1

2

2

. The enhancements address a critical challenge in cybersecurity: while modern SOCs struggle with thousands of daily alerts and understaffing, attacker breakout times continue to decrease dramatically. Security teams often lack the time and expertise to manually classify complex technical logs or build custom API integrations as the cyber race accelerates with AI adoption.

AI Summarization Transforms How Analysts Process Threat Data

The new AI summarization capability condenses massive volumes of human-readable threat data into clear, actionable summaries with a single click1

1

. During active investigations, threat hunting, and tracking of threat actors or campaigns, analysts typically review hundreds of Indicators of Compromise (IoCs) and lengthy, complex reports. This feature significantly reduces the information requiring human review for each indicator, helping analysts decide within minutes which items need deeper investigation. The tool automatically processes available information so analysts can identify useful content, including IoCs and rules, making threat detection and response more efficient.

Kaspersky deliberately selected specific source datasets to feed each summary, reducing review time while preserving the context analysts need to assess presented information2

2

. Shorter summaries make threat data easier to work with for less-experienced analysts and reduce workload for highly skilled staff. AI summarization and search capabilities extend to IoCs identified via open-source intelligence (OSINT) searches, allowing analysts to examine all data related to a requested entity, prioritize it, and receive an overview surfacing relevant information.

Model Context Protocol Enables Third-Party AI Tools Integration

Integration via the Model Context Protocol (MCP) allows organizations to connect their own or third-party AI tools directly to the Kaspersky Threat Intelligence Portal1

1

. Unlike rigid traditional APIs, the MCP connection specifically enables AI models to make flexible, dynamic queries and access external threat data exactly when and how they need it. This standardized integration gives corporate AI applications real-time access to Kaspersky's global intelligence, built on over 25 petabytes of proprietary threat context, enabling smarter automated workflows and highly adaptable threat analysis.

Built on Nearly 30 Years of Machine Learning Expertise

Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky, emphasized that the company's Threat Intelligence portfolio has long been recognized for exceptional quality and coverage of data2

2

. "For nearly 30 years, we have built a robust foundation of elite intelligence, extensively leveraging AI and machine learning to collect and classify threat data," Mazikin stated. He noted that the primary opportunity these new AI features bring is reducing the time between receiving information and understanding how to act on it, ultimately maximizing the efficiency of threat intelligence investments and saving teams hours of complex analysis while significantly enhancing the accuracy of security workflows.

Immediate Availability for Existing Customers

Customers can immediately leverage the new AI-functionality features using their regular Kaspersky Threat Lookup license, which includes a standard quota of requests1

1

. For organizations requiring higher volumes, additional requests can be scaled and purchased on demand. This update positions Kaspersky to address alert overload challenges while helping security teams maintain pace with AI-accelerated cyber threats through enhanced automation and intelligence accessibility.