CRIMINAL IP, supplied by AI SPERA, announced at GovWare 2026 in Singapore that it is evolving attack surface management with a new approach called AITEM (AI-Powered Threat Exposure Management). The company positions AITEM as a shift from mere visibility of internet-facing assets to an action-oriented workflow that connects exposure findings with real-world threat context, prioritisation, and automated response.
The release emphasises that traditional ASM focused on asset discovery, but attackers’ increasing use of automation and AI necessitates faster, more integrated protection that can prioritise exposures and drive timely action.
AITEM is described as expanding beyond external asset inventory to include open-source intelligence, dark web data, internal infrastructure, Shadow AI, leaked data, and emerging vulnerabilities, all linked by Criminal IP’s threat intelligence.
The product suite purportedly applies AI across four stages—Detect, Investigate, Prioritise, and Automate—enabling security teams to map threats to actual assets, investigate with natural-language queries, rank risks using organisation-specific criteria and real-world exploitability, and automate workflows such as alerts and tickets. The article notes involvement of AI SPERA’s leadership, with Byungtak Kang discussing the need to move from visibility to rapid, evidence-based action.
The broader industry trend cited includes AI-driven security operations and the shift from siloed tools to integrated threat exposure management, with GovWare 2026 framed as a showcase for these capabilities.