On August 6, 2025, Cyware announced the release of the Cyware MCP Server, an open-source Model Context Protocol Server aimed at enhancing AI-driven cyber defense capabilities. The server is designed to facilitate generative AI-native workflows, enabling seamless integration between Cyware's threat intelligence and security automation platforms, as well as large language models (LLMs). Akshat Jain, Cyware's CTO, stated, "The MCP Server exposes our Agentic AI components to AI Assistants, enabling access to key tools and actions which empower security teams to retrieve insights, take action, and orchestrate complex workflows in a secure, fully contextual environment." This foundational capability is expected to improve the speed, precision, and scalability of threat detection, investigation, and response.
The launch of the MCP Server aligns with Cyware's vision of creating efficient solutions that facilitate smarter operationalization of AI-enabled threat intelligence. The server builds on the existing Cyware Quarterback AI layer, which powers intelligent workflows across the threat lifecycle. This includes automated processes that ingest, deduplicate, normalize, enrich, and score threat data to support automated threat investigations.
In a related discussion on the integration of AI in Security Operations Centers (SOCs), Kev Marriott, Senior Manager of Cyber at Immersive Labs, highlighted the challenges and opportunities posed by AI technologies. He noted that while AI can enhance productivity by automating manual tasks and reducing alert fatigue, it is vital to maintain human expertise for contextual analysis, incident response, and threat hunting. Marriott cautioned against over-reliance on AI, pointing out risks such as standardization and misconfigurations, and emphasized the need for a thoughtful, ROI-focused approach to AI implementation in cybersecurity.
The introduction of AI technologies in cybersecurity is seen as a transformative trend, but it requires careful management to balance the benefits against potential risks. Security leaders are urged to implement AI in a way that complements human expertise, ensuring effective incident response and threat mitigation.
As organizations increasingly adopt AI-driven solutions like the Cyware MCP Server, the cybersecurity landscape is evolving, necessitating a proactive approach to both technological advancement and risk management.
