Criminal IP ASM

AI SPERA is the company behind Criminal IP, a cyber threat intelligence search engine; its footer lists a Seoul address in South Korea. The Criminal IP line has three products: TI (threat intelligence and search), ASM (attack surface monitoring) and FDS (fraud detection).

Criminal IP ASM takes one representative domain or IP and registers related assets within about two to three days. It then monitors daily for changes, certificate expiry and new exposures, uses AI to verify vulnerabilities, adds OSINT and dark web leak detection, and correlates global exploits with the customer's assets. No installation is required.

• Asset discovery: automatic registration of related assets from one domain or IP, or manual registration of IP ranges.
• AI vulnerability verification: automated validation of detected issues.
• OSINT exposure detection: exposed documents and leaked API keys.
• Dark web monitoring: leaked credential detection.
• Risk visualization: threat-actor associations such as torrent, C2 and anonymous VPN.
• Alerts: real-time notices on inventory, vulnerabilities and certificates.

A Vietnamese bank can monitor forgotten subdomains and certificates across branches. A government agency can detect leaked credentials and exposed documents. A manufacturer can track internet-exposed remote access devices.

Starts from a single domain or IP, so initial setup is light. Daily monitoring of assets, certificates and exposures. Goes beyond CVEs by showing threat-actor links such as C2 and anonymous VPN activity. Pricing scales with asset count and a demo report can be requested instead of a trial.

Attack surface management is moving toward continuous threat exposure management, combining discovery with threat intelligence and automated validation. Vietnamese banks and public agencies face growing numbers of forgotten internet-facing assets.

Company AI SPERA, Seoul address in footer. Criminal IP ASM listed on Microsoft Azure Marketplace as noted in a 2024 notice, and the search engine earned PCI DSS v4.0 certification (2024 notice). Founding year not stated.