Not every detection deserves the same operational attention. This update was designed to improve a very practical part of day-to-day work: seeing what matters sooner, receiving less noise and turning analysis into action faster.
AI-assisted prioritization for critical detections
The platform now includes an additional AI-assisted criticality layer to help teams identify the findings that require immediate attention. This makes it easier to distinguish truly relevant detections from lower-priority noise, both inside the analyst experience and across notification workflows.
New notification options in Zero Scam SSL
SSL alerts now support more flexible keyword-level notification settings. Users can choose not to receive notifications, to receive every detection, or to receive only those considered critical. It is a practical improvement designed to adapt alert volume to each team's operational profile.
AI customization by keyword
Within rule configuration, teams can now customize the AI context for each keyword using positive and negative examples. This allows the platform to better adapt what should be considered relevant for each customer, sector or use case.
Important: this customization affects notification behavior and how the platform prioritizes what should be communicated, but it does not change the global classification shown in platform tables.
AI-assisted reporting across more modules
Draft generation capabilities have been extended across Threat Intel, Workspace, Domain Monitoring, Dark Web and Defacement. The goal is straightforward: reduce the time analysts spend writing from scratch and accelerate the path from detection to communication and action.
- Client-facing report drafts
- Abuse / takedown communication drafts
- Automatic summaries and AI-assisted triage
- Assisted translation in Threat Intel
Campaign correlation in Threat Intel
Threat Intel strengthens campaign identification and analysis with a new AI-assisted correlation layer. This enhancement helps determine whether different publications or mentions are part of the same operational wave or a coordinated campaign, providing a much more useful view for intelligence and response teams.
Monitoring and day-to-day workflow improvements
Usability improvements have also been added to monitoring, including bulk actions to add or remove domains more efficiently and better integration with analysis and reporting workflows. These changes are built for teams handling volume and needing less operational friction.