
Key points
- Criminal IP will exhibit at booth B20 during Security Days Fall 2026 Tokyo from 21–23 October 2026.
- The vendor will demonstrate how its AI-powered tools combine threat intelligence with exposure management.
- Demonstrations will cover investigating malicious infrastructure, finding exposed assets and assessing partner risks.
AI SPERA, the developer of Criminal IP, will present its security platforms at Security Days Fall 2026 Tokyo, according to a 13 October 2026 press release. The event takes place at the TakanAWA GATEWAY Convention Centre from 21 to 23 October 2026.
Visitors to booth B20 can view live demonstrations of Criminal IP Threat Intelligence and Criminal IP AITEM. These tools focus on threat investigation and exposure management, helping teams connect disparate security findings.
Combining intelligence with exposure data
The vendor states that cloud adoption and business partnerships expand risks beyond internally managed assets. Internet-exposed services, vulnerabilities and leaked information create a broader attack surface. Criminal IP aims to show how teams can link these elements to prioritise responses.
Demonstrations will cover investigating threat data for IP addresses, domains and URLs. Attendees can also see analyses of malicious infrastructure, threat actor details and internet-exposed IT assets.
Who benefits from these workflows
Security teams can use AI-assisted analysis to investigate and prioritise exposure risks, according to the announcement. The platform also helps identify leaked information on the dark web and assess risks involving business partners.
Byungtak Kang, CEO of AI SPERA, said teams need to understand how exposures relate to actual threats. He added that combining threat intelligence with AI-assisted exposure management helps organisations make informed response decisions.
What happens next
The demonstrations run throughout the three-day event in Tokyo. Visitors can discuss how these capabilities fit into existing investigation and risk management workflows. No new software releases or patches were announced in the material.
Background: Attack surface
The attack surface is the total sum of all points where an untrusted system interacts with your trusted environment. It includes network ports, application endpoints, user interfaces, and physical access points. Reducing it means removing unnecessary access paths, not just patching known flaws.
Read the full guide: Attack Surface Definition: How to Measure and Reduce Exposure
What to do and how to stay safe: Criminal IP
- Review your organisation’s external attack surface to identify internet-exposed services and assets.
- Evaluate whether your current threat intelligence feeds provide context for exposed vulnerabilities.
- Assess risks associated with business partners and affiliated companies in your supply chain.
- Monitor dark web sources for leaked credentials or sensitive information related to your domain.
Step-by-step guide: Advanced Persistent Threats: Definition, Mechanics and Detection
General security guidance from the Payload Report newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Where and when is Criminal IP exhibiting?
Criminal IP will be at booth B20 during Security Days Fall 2026 Tokyo from 21–23 October 2026.
What products will be demonstrated?
The vendor will showcase Criminal IP Threat Intelligence and Criminal IP AITEM through live demos.
Who operates Criminal IP?
Criminal IP is a cyber threat intelligence solution operated by AI SPERA, headquartered in Torrance, California.



