Kaspersky has updated its Threat Intelligence Portal with AI-powered capabilities designed to help Security Operations Center (SOC) teams and threat analysts process threat data faster and streamline daily security operations.
The update introduces AI summarization, Model Context Protocol (MCP) connectivity for third-party AI applications, and automated smart searches across open-source intelligence (OSINT). The features are built on Kaspersky’s threat intelligence repository, which contains more than 25 petabytes of proprietary threat context.
The new capabilities address the growing volume of security alerts and the increasing complexity of cyber threats. By automating parts of the analysis process, Kaspersky aims to help security teams reduce the time required to review technical information and identify potential risks.
AI summarizes complex threat data
The new AI summarization feature condenses large volumes of human-readable threat intelligence into shorter summaries with a single click.
During threat investigations and hunting activities, analysts may need to review hundreds of Indicators of Compromise (IoCs), along with lengthy reports and technical information. The summarization tool processes available data to surface relevant information, including IoCs and security rules.
This can help analysts quickly determine which indicators require deeper investigation while reducing the amount of information that needs to be manually reviewed.
Kaspersky said the summaries are generated using selected source datasets to retain the context analysts need when evaluating threat information.
AI summarization and search are also available for IoCs discovered through OSINT searches. Analysts can examine information associated with a requested entity and receive an overview designed to highlight relevant findings.
MCP connects AI applications to threat intelligence
The update also adds Model Context Protocol (MCP) support, allowing organizations to connect their own or third-party AI applications directly to the Kaspersky Threat Intelligence Portal.
Unlike conventional APIs that rely on predefined integrations, MCP enables AI applications to make more flexible queries and retrieve external threat intelligence based on their requirements.
This gives corporate AI tools access to Kaspersky’s threat intelligence and can support automated security workflows and more adaptable threat analysis.
“Kaspersky’s Threat Intelligence portfolio has long been recognized for the exceptional quality and coverage of its data,” said Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky.
He said the new AI capabilities are designed to reduce the time between receiving threat information and determining how to respond, while helping organizations maximize their threat intelligence investments.
Customers can access the new AI features through their existing Kaspersky Threat Lookup license, which includes a standard request quota. Organizations requiring additional capacity can purchase extra requests on demand.
