Dubai, UAE — 1 September 2026 — Criminal IP appoints Reconn as Distributor for threat intelligence and attack surface management solutions across the Middle East and Africa region. Developed by AI SPERA, Criminal IP provides decision-ready threat intelligence, and AI-powered attack surface management solutions to security teams worldwide with integrations across leading SIEM, SOAR, and XDR platforms.
MSSPs, SOC teams, threat analysts, and security operations centers across the Middle East, North Africa, and Sub-Saharan Africa will gain access to Criminal IP’s threat intelligence and attack surface management capabilities—including real-time IP intelligence, domain scanning, OSINT data, and dark web monitoring.
Regional security teams face unique challenges: advanced threat actors targeting their infrastructure, complex cloud and hybrid deployments that are difficult to monitor, and regulatory mandates from central banks requiring visibility into external threats. Criminal IP’s continuous global IP scanning across 4.29 billion addresses helps teams detect threats targeting their assets earlier. The platform tracks threat actors, identifies C2 servers, and surfaces leaked credentials before attacks happen, reducing the time between threat detection and response.
continuously scanned
Criminal IP operates
integrations
mandates in scope
Criminal IP already operates in over 150 countries and has integrated with more than 40 cybersecurity platforms including PaloAlto, Fortinet, OpenCTI, Wazuh, and more. The Reconn partnership extends into the Middle East and Africa region, where demand for threat intelligence and attack surface management is accelerating.
Every SOC and MSSP we talk to in the region faces the same problem: they need to see threats coming at them from outside their network. Criminal IP’s continuous IP and domain scanning cover gaps that traditional security tools miss. This partnership lets us bring that capability to our customers, helping them detect threats before attacks happen, respond faster, and actually know what they’re defending.
The regional threat landscape is specific. Criminal IP delivers both the global scale and regional relevance our teams need. Combined with our implementation support and compliance training, we can accelerate threat intelligence adoption across MEA.
We see the Middle East and Africa as a strategically important region where organizations are increasingly looking for greater visibility into external threats and their expanding attack surfaces. Our partnership with Reconn combines Criminal IP’s global threat intelligence and attack surface management capabilities with Reconn’s strong regional expertise and customer network.
Together, we aim to make actionable threat intelligence more accessible to security teams across the region and help them identify exposure, understand threats in context, and respond before those threats become incidents.
The regional footprint Reconn operates in positions Criminal IP to serve customers in markets where central banks now require visibility into external threats and attack surface exposure as part of cyber governance mandates (CBUAE, SAMA, DFSA, CBN, BRSA, NCA-ECC).
What reconn Will Provide
Reconn will provide end-to-end support for Criminal IP deployments, including:
- Platform integration with existing SIEM, SOAR, and XDR platforms
- Sales engineering for proof-of-concepts
- Training on threat intelligence
- Ongoing technical support across the region
Criminal IP Threat Intelligence and Attack Surface Management
Decision-ready threat intelligence
Criminal IP’s Threat Intelligence (TI) equips security teams with the decision-ready threat intelligence needed to proactively identify, analyze, and respond to emerging threats. Powered by AI and OSINT, it delivers threat scoring, reputation data, and real-time detection of a wide array of malicious indicators, ranging from C2 servers and IOCs to masking services like VPNs, proxies, and anonymous VPNs, across IPs, domains, and URLs. Its API-first architecture ensures seamless integration into security workflows to boost visibility, automation, and response.
Continuous asset discovery with threat context
Criminal IP’s Attack Surface Management (ASM) platform delivers a threat intelligence-powered approach to attack surface management by combining continuous asset discovery with deep threat analysis across IPs, domains, OSINT, and associated infrastructure. Built on Criminal IP’s advanced scanning and enrichment capabilities, it brings threat intelligence context such as vulnerability intelligence, C2 detections, malicious IP/domain correlations, and dark web exposure into every layer of asset discovery — an integrated approach that empowers security teams to proactively identify, prioritize, and mitigate threats before they are exploited.
Organizations in the Middle East and Africa interested in evaluating Criminal IP can access the free threat intelligence search engine at search.criminalip.io or contact Reconn for a demonstration, attack surface assessment, and regional implementation planning.
