AhnLab XDR: Expand Visibility, Understand Threats Faster, Operate Smarter with AI

From Exposure Management to AI-Powered Threat Analysis: How AI Insight and AI Workspace Strengthen XDR

Expanded Visibility into External Attack Surfaces

An enterprise's attack surface isn't limited to internally managed assets. External risk factors the organization hasn't yet identified — internet-exposed systems and domains, leaked account credentials — can just as easily be exploited in an attack. That's why it's essential to continuously track not only the exposure status of internal assets, but also the attack surface as seen from an external attacker's perspective.

AhnLab XDR already provides visibility into the exposure status of internally identified assets — open ports from firewall logs, CVEs affecting internal assets, and end-of-support OS versions all help reveal security status and potential risk.

This update adds a separate capability: Exposure Management, a new add-on service that manages the attack surface and related risks identified outside the organization.

Exposure Management delivers External Attack Surface Management (EASM), discovering internet-exposed assets from an attacker's point of view, while also surfacing account and domain risks — including account leaks/takeovers and lookalike domains.

This lets security teams go beyond internal asset exposure and extend their management scope to externally exposed assets and account/domain risk.

Combining internal exposure data with externally observed attack surface and risk information makes it possible to catch potential risks that internal-only visibility would miss — enabling more proactive security management.

Exposure Management is available as an AhnLab XDR add-on service, requiring separate purchase and license registration.

AI Insight: Understand Threats and Supporting Evidence Faster

In security operations, detecting a threat is only half the job — teams also need to quickly understand why a given risk is dangerous and what it's based on.

AI Insight in AhnLab XDR uses AI to comprehensively analyze a detected risk and its related information, then summarizes and explains the threat's core details and supporting evidence in natural language.

Drawing on the risk's Factors, Evidence, and related Entities, AI Insight organizes the details security teams need to check first — attack type, key threat indicators, and expected impact scope — while surfacing the underlying Evidence so teams can review the AI's summary alongside the actual detection data.

This reduces the burden of manually reviewing detection data and evidence, helping security teams grasp what a threat means faster and decide which risks warrant further analysis or response.

AI Workspace: A Dedicated Space for AI PLUS Chat

AhnLab XDR offers AI Workspace to make AI easier to use throughout the security operations process.

With this update, AI Workspace is reconfigured as a dedicated space for using AI PLUS Chat, letting security teams ask AI questions directly on a separate screen and review the answers.

Beyond general queries, Reasoning mode lets AI handle complex questions that require weighing multiple pieces of information together. Multiple conversation sessions can run at once, and past conversation history is always available, so teams can keep conversations organized by purpose and pick up where they left off.

Where AI Insight helps teams quickly understand “what this threat is and why it matters” by having AI analyze risks detected in XDR, AI Workspace is a dedicated space where teams can ask their own questions directly via AI PLUS Chat and get answers.

Together, this lets security teams match the tool to the task — AI Insight for understanding detected threats, and AI PLUS Chat for any additional information or security-related questions.

Connect Threat Intelligence to Assets for Smarter Prioritization

With new vulnerabilities and threats constantly emerging, treating every one with equal urgency isn't realistic. Beyond simply tracking new threats, it's essential to know whether they actually affect your organization.

AhnLab XDR lets teams check vulnerability-related threat intelligence (TI) alongside internal asset information.

Teams can review major security issues and vulnerabilities and see exactly which internal assets they could affect. This goes beyond simply keeping tabs on new vulnerabilities or threats — it gives security teams the context they need to determine relevance to the organization and prioritize which risks require a response.

Connect More Security Data with User-Defined Parser

For XDR to analyze a wider range of threats, it needs to draw on data from across the various security solutions and systems an organization runs.

This update introduces User-defined parser to AhnLab XDR.

User-defined parser lets administrators write, validate, and apply log parsers directly within the XDR portal UI — even for devices XDR didn't previously support officially, or logs that need to be newly onboarded.

This gives customers more flexibility to integrate the products and logs their environment requires. Connecting a wider range of security data to XDR also means organizations can build out a more comprehensive, integrated threat analysis foundation tailored to their environment.

See More, Understand Faster, Focus on What Matters

With this update, AhnLab XDR strengthens its security operations capabilities around two pillars: Exposure Management and AI.

AhnLab Exposure Management extends visibility beyond internal assets to externally exposed attack surfaces and account/domain risk, while briefing content on major vulnerabilities and security issues links existing threat intelligence with asset information — helping teams identify the risks that genuinely matter to their organization.

AI Insight helps teams quickly understand the core and rationale behind a detected threat, while AI Workspace lets users ask direct questions and get answers through AI PLUS Chat. User-defined parser broadens the data available for analysis to fit diverse customer environments.

What matters most in this update isn't the features themselves, but what they enable: security teams gaining broader visibility from internal to external risk, identifying the threats that matter to their organization, and using AI to work through and judge threats more efficiently.

AhnLab XDR continues to evolve beyond threat detection and response — toward comprehensive visibility into an organization's internal and external security exposure, clearer understanding of a threat's real impact, and greater efficiency across security operations through AI.