AI SPERA’s Criminal IP enters European cybersecurity market amid rising ransomware risks

Criminal IP, the AI-driven cybersecurity platform developed by AI SPERA, has officially entered the European market through a strategic partnership with DotForce, a leading Italian cybersecurity distributor. The move marks a significant expansion of its Security-as-a-Service (SECaaS) offerings across Southern Europe and comes as institutional demand grows for proactive threat intelligence solutions.

Announced on September 1, 2025, the partnership enables Criminal IP to distribute its attack surface management (ASM) and credential leak detection solutions in Italy, Spain, and Portugal. DotForce will onboard the platform into its established channel of system integrators, targeting enterprises, public institutions, and regulated sector clients with a need for automated, AI-powered cyber defense.

The move also reflects a broader trend in the European cybersecurity landscape, where ransomware attacks, credential stuffing, and illicit access trading have surged in complexity and frequency. Criminal IP’s entry comes at a time when regional infrastructure security and enterprise asset monitoring have become core focus areas for digital resilience planning.

Why is the Southern Europe cybersecurity market attracting AI-powered threat intelligence players in 2025?

Southern Europe is rapidly becoming a frontline for sophisticated cyber threats. Italy in particular has been ranked among the top three European countries for illicit network access trading, driven by an underground market for stolen credentials, misconfigured cloud infrastructure, and poorly protected IoT networks. One high-profile ransomware attack in 2021 impacted 76 companies across sectors ranging from logistics to finance, revealing systemic vulnerabilities in the region’s cybersecurity posture.

This backdrop has accelerated public and private investment in next-generation cyber defense tools, especially those that can be deployed quickly and operate autonomously. With the Digital Operational Resilience Act (DORA) and GDPR-compliant security requirements tightening, regional CISOs are increasingly turning to platforms like Criminal IP that combine threat detection, credential analysis, and infrastructure visibility into a single pane of glass.

AI SPERA’s decision to launch Criminal IP through a channel partner rather than directly reflects a localization strategy that prioritizes regional trust, procurement familiarity, and regulatory fit. DotForce has an established reputation for delivering critical IT and security solutions to government agencies and enterprise clients, making it an ideal bridge into these complex European markets.

What capabilities make Criminal IP’s platform distinct in the Security-as-a-Service space?

Criminal IP operates as a cloud-based SECaaS solution, offering real-time, non-invasive vulnerability scanning and threat visibility. At the core of its platform is a 44-petabyte threat intelligence infrastructure backed by over 1,000 global servers, enabling continuous monitoring of 4.3 billion IP addresses worldwide. The platform identifies vulnerabilities before attackers can exploit them, prioritizing safe discovery and automated mitigation workflows.

Among its key modules are Criminal IP ASM, which offers full-spectrum attack surface visibility, and Criminal IP FDS, which prevents credential stuffing by monitoring leaked passwords and account access patterns. Together, these tools deliver an end-to-end solution for organizations looking to improve external asset awareness, identify shadow IT risks, and monitor for malicious activity linked to exposed credentials.

Criminal IP’s platform is already trusted in more than 150 countries and is integrated with over 40 leading global cybersecurity vendors, including Cisco, Fortinet, VirusTotal, and Palo Alto Networks. Its availability through cloud marketplaces such as AWS, Microsoft Azure, and Snowflake allows for rapid procurement and deployment, reducing friction for IT buyers operating within enterprise procurement cycles.

Crucially, the platform is designed for always-on scanning, making it particularly effective for industries with dynamic IP infrastructures and strict uptime requirements. This functionality has resonated with organizations facing alert fatigue and resource constraints—common pain points in today’s threat landscape.

What is the strategic significance of the DotForce partnership for Criminal IP’s global expansion?

From a strategic standpoint, the DotForce partnership represents a critical validation of Criminal IP’s platform in one of the most sophisticated cybersecurity markets in the world. By aligning with a local leader in IT distribution, AI SPERA is leveraging DotForce’s regional trust and procurement channels to build a scalable go-to-market model tailored for Europe.

DotForce CEO Fabrizio Bressani said the platform’s seamless automation, real-time analytics, and compatibility with existing partner ecosystems would offer immediate value to European security teams. He emphasized that the integration of Criminal IP expands DotForce’s ability to serve partners with proactive and intelligent security solutions that address real-time external risk.

AI SPERA CEO Byungtak Kang described the deal as a “pivotal milestone,” noting that it validated the company’s product-market fit and accelerated its integration into regional security ecosystems. Kang reiterated the company’s goal to reach 50 global partnerships, including emerging markets such as Southeast Asia and Africa, thereby turning Criminal IP into a globally recognized security platform.

This alliance also positions Criminal IP to capture increasing demand from governments and enterprises for localizable, GDPR-compliant, and cloud-native security tools. Its inclusion in DotForce’s channel partner ecosystem could open opportunities for integration with national infrastructure programs, public sector procurements, and private-sector modernization initiatives.

How are institutions responding to Criminal IP’s entry into Europe, and what’s the future growth outlook?

Institutional sentiment appears broadly positive, particularly among IT decision-makers seeking to modernize their threat detection and asset monitoring workflows. Analysts suggest that the Criminal IP–DotForce alliance arrives at a time when cybersecurity teams are under pressure to do more with less. By offering continuous scanning, credential leak detection, and attack surface visibility in a modular, cloud-native package, the platform helps reduce operational overhead while improving security posture.

The Southern Europe launch also serves as a pilot for future regional expansions. AI SPERA has signaled that similar partnerships will be pursued across Southeast Asia and Africa—regions where cyber threats are escalating but security infrastructure remains fragmented. This multipolar strategy allows Criminal IP to balance growth across developed and developing markets, while fine-tuning product offerings to suit local compliance and usage environments.

Analysts further note that Criminal IP’s integration with major cloud marketplaces is a long-term advantage. This makes the platform accessible to managed service providers, government agencies, and small businesses without dedicated cybersecurity personnel. In an era of increasing cloud adoption and regulatory scrutiny, Criminal IP’s positioning aligns with enterprise and national security priorities alike.

Given that many security vendors are still anchored to traditional, hardware-heavy deployment models, Criminal IP’s light, API-first architecture stands out. It reduces the need for intrusive network agents and offers real-time insights without interrupting operations—a core requirement for businesses operating in regulated sectors or managing sensitive data environments.