Portal ERP
BackSecondary Hero

Criminal IP and Torq integrate Threat Intel Into AI SOC

The integration automatically enriches IP addresses, domains and internet-exposed assets with Criminal IP intelligence inside Torq's AI SOC Platform, removing the need for analysts to manually pivot between platforms during alert triage.

Redação Portal ERP
Jul 13, 2026
T|Fonte:18px
3 min read
Criminal IP and Torq integrate Threat Intel Into AI SOC

Criminal IP, a cyber threat intelligence search engine and attack surface management platform operated by AI SPERA that continuously scans the global internet to aggregate threat signals across IPs, domains, URLs and attack infrastructure, has integrated with Torq, an agentic security operations platform whose customer base includes Procter and Gamble, Siemens, Telefónica, Virgin Atlantic and Wiz, among other multinational enterprises.

The problem the integration addresses is familiar to anyone running a security operations center at scale: alert volume routinely overwhelms the number of analysts available to work it, and enriching an indicator often requires leaving the primary workflow to pull data from one or more external intelligence sources. When an indicator arrives in the Torq AI SOC Platform, it now routes to the appropriate Criminal IP intelligence service and receives a verdict and supporting context before reaching an analyst. That context covers whether an IP carries malicious or suspicious activity, whether it resolves through a VPN, hosting service or privacy tool, what DNS server safety assessments reveal about a domain, what is exposed on a scanned asset and whether known exploits are tied to any exposed services.

Byungtak Kang, CEO of Criminal IP, described what the partnership changes about how intelligence moves through a response workflow: "Our platform was built to make internet-scale threat intelligence searchable and actionable in real time. Partnering with Torq means that intelligence doesn't just inform a decision, but it executes one. Every IP, domain, and exposed asset Criminal IP analyzes can now drive automated responses the moment it's identified."

Once enriched, the Torq platform reasons over the intelligence to determine severity and route the event to the appropriate response path. Confirmed-malicious indicators trigger automated blocking and containment across the security stack. Analysts who open a case find it pre-populated with exposure data, service banners and exploit context for every asset in scope, rather than starting from an unenriched alert.

Eldad Livni, CINO and Co-Founder of Torq, described the fit between the two companies: "Torq partners include some of the most prestigious cybersecurity companies in the world and we are excited to welcome Criminal IP to the fold. Criminal IP is an example of an innovative vendor that delivers solutions with maximum impact as we realize the potential of the AI SOC, together. And that means joint offerings that combine cutting edge threat intelligence drawing from the deepest data pools with blazing fast AI-driven response, remediation, and mitigation. Together, Torq and Criminal IP will protect organizations from the ever-expanding spectrum of threats they're confronted with every second of every day."

The Criminal IP and Torq integration is available now for the Torq AI SOC Platform.

Share:

Redação Portal ERP

Editorial Team

Portal ERP's editorial team brings the latest news and analysis on technology and business management.