AI SPERA presents AITEM: the revolution in surface threat management

AI SPERA, developer of the Criminal IP threat intelligence platform, will introduce AITEM (AI-Powered Threat Exposure Management) at GovWare 2026. This innovation represents an evolutionary leap in Attack Surface Management (ASM), shifting the focus from mere visibility to concrete threat response.

Quick Response

What is AITEM and why is it important?

AITEM expands traditional ASM by integrating external threat intelligence, OSINT, dark web, internal infrastructure, Shadow AI, and emerging vulnerabilities. Its importance lies in the ability to connect discovery, investigation, prioritization, and response in a unified approach.

The critical problem of response speed

Byungtak Kang, CEO of AI SPERA, emphasizes that "seeing a threat and responding to it are completely different challenges." Today's challenge for companies is no longer just visibility, but response speed. Automated attacks and AI-assisted tools allow attackers to identify and exploit vulnerabilities faster than ever.

The four phases of exposure managed by AITEM

AITEM applies artificial intelligence through four key phases:

  • Detection: connects emerging threats and vulnerabilities to corporate assets
  • Investigation: enables analysis of assets and vulnerabilities through natural language
  • Prioritization: assesses exposure based on organization-defined risk criteria and attacker activity
  • Automation: transforms prioritized results into concrete actions for security teams

Threat intelligence at the heart of the system

AITEM relies on Criminal IP's intelligence, which aggregates and contextualizes threat signals from IPs, domains, URLs, and attack infrastructures. The platform provides information on open ports, exposed services, vulnerabilities, connected infrastructure, abuse history, scanning activity, threat attribution, and malicious infrastructures.

The evolution of ASM and the future of security

Kang states that "the competition in ASM is no longer about who finds the most assets, but who can operate faster, respond more effectively, and mobilize the organization." Integration with technologies like agentic AI, AI SOC, and Shadow AI is transforming the cybersecurity landscape towards more integrated and reactive operations.

The technical deep dive at GovWare 2026

During the GovWare 2026 conference, Byungtak Kang will present a case study titled "From Visibility to Threat Hunting: A Case Study of AI-Driven Attack Surface Management." The session will explore how threat intelligence and attack surface visibility can support faster and more effective security operations.

Impact on the security industry

The direction taken by Criminal IP with AITEM reflects a broader trend in the security sector. At RSAC 2026, themes such as agentic AI, AI SOC, and Shadow AI emerged as central, while major security vendors continue to shift towards more integrated tools and AI-driven security operations.

The mission of Criminal IP

Criminal IP aims to provide organizations with real visibility into their cyber landscape, accelerating threat detection and response. The platform continuously scans the global internet to aggregate and contextualize threat signals from IPs, domains, URLs, and attack infrastructures.

The global ASM market and opportunities for companies

The Attack Surface Management market is rapidly expanding, with forecasts predicting it will reach $2.5 billion by 2028, with a CAGR of 15.3%. AI SPERA's AITEM positions itself in a growing segment where integration with threat intelligence represents a key differentiator. Companies adopting solutions like AITEM can reduce response times by 40% and decrease security operating costs by 25%, as demonstrated by recent studies.

Implications for security professionals

For CISOs and security teams, AITEM introduces a new operational methodology. The ability to query the system with natural language and receive contextualized responses allows for reduced time spent on data collection and increased time spent on strategic analysis. This approach aligns security operations with business needs, facilitating the adoption of a zero trust architecture and improving compliance with standards such as the NIS2 directive.

Integration with other security technologies

AITEM does not operate in isolation: its architecture is designed to seamlessly integrate with SIEM systems, Data Loss Prevention (DLP) solutions, and Managed Detection and Response (MDR) platforms. This integration enables the creation of a cohesive security ecosystem where threat intelligence fuels both monitoring operations and incident response, reducing information silos that often hinder security operations.

The role of compliance and regulation

With the enforcement of the DORA regulation and alignment with the NIS2 directive, companies operating in critical sectors must demonstrate proactive threat management. AITEM provides a framework for documenting threat discovery, analysis, and response, facilitating security audits and ISO 27001 certification. The ability to prioritize threats based on organization-defined criteria is particularly relevant for companies that must comply with stringent compliance requirements.

The future of ASM and its impact on the cyber ecosystem

The introduction of AITEM marks a turning point in the evolution of ASM, shifting the focus from mere data collection to operational threat management. This change aligns with the trend towards the automation of security operations and the adoption of technologies like agentic AI, which reduce manual workload and increase the efficiency of security teams. Companies adopting solutions like AITEM will be better prepared to face future challenges, including the rise of ransomware attacks and the increasing complexity of hybrid environments.

Forecasts and emerging trends

According to analysts, the ASM market will see further specialization in the coming years, with solutions increasingly focused on specific sectors such as finance, healthcare, and energy. Integration with emerging technologies like generative AI and SOC as a Service systems will enable the provision of more customized and adaptable services to the needs of individual organizations. Companies investing today in advanced solutions like AITEM will be in a privileged position to leverage these future innovations.

Frequently Asked Questions

What are the main advantages of AITEM over traditional ASM solutions?

AITEM introduces a unified approach to threat management, combining detection, investigation, prioritization, and automation in a single platform. This allows for reduced response times and increased operational efficiency, thanks to the integration of threat intelligence and the use of advanced AI technologies.

How does AITEM integrate with existing security solutions?

What are the system requirements for adopting AITEM?

Specific requirements depend on the organization's infrastructure, but generally, AITEM is designed to operate in cloud, on-premise, and hybrid environments. The platform supports integration with major cloud service providers and can be configured to operate with different security architectures.

What are the costs associated with adopting AITEM?

Costs vary depending on the specific needs of the organization and the level of customization required. It is advisable to contact AI SPERA directly to obtain a detailed quote and evaluate the available options for cyber insurance and technical support.

Which sectors can benefit the most from adopting AITEM?

Sectors such as finance, healthcare, and energy, which must comply with stringent compliance requirements and are exposed to advanced threats, can particularly benefit from adopting AITEM. The platform is designed to support organizations of different sizes and complexities.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not perform real-time information activities.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all liability for the improper use of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.