Digital CTI Analysts:
Agentic AI That Works Your Threat Intelligence
- Autonomous
- Interactive
- Agentic
Alex and Ethan are KELA’s digital CTI analysts: agentic AI that monitors, prioritizes and answers inside the same underground intelligence, always on and integrated with your tools.
Agentic AI Is Redefining How You Fight Cybercrime
Security teams are drowning in threat data, but skilled analysts are hard to find, train and retain. KELA’s Digital CTI Analysts solve this by giving you 24/7 access to Virtual Cyber Analysts trained on KELA’s vast threat intelligence lake and expert methodologies.
From surfacing leaked credentials to profiling adversaries, our digital analysts continuously deliver actionable insights tailored to your environment.
24/7, Always On
Continuously monitor threats and deliver intelligence, with no breaks and no blind spots
Interactive, Proactive
Ready to engage with your team and proactively surface relevant, emerging threats and recommendations
Fully Integrated
Embedded into your tools, workflows, and communications, acting as a true extension of your team.
Built for the Analysts You Don’t Have, Backed by Intelligence You Can’t Get Anywhere Else

Meet Alex
Alex is a dedicated AI-powered Virtual Cyber Analyst designed to support MSSPs and enterprise security teams by working 24/7 to monitor, prioritize, and respond to threats specific to your organization. With access to the intelligence modules you’ve deployed, your IDP and B2B Intelligence data platforms, Alex delivers only the most relevant, actionable insights, helping you reduce analyst workload, respond faster, and stay ahead of evolving threats. Integrated seamlessly into your existing tools and workflows, Alex enhances your team without expanding your headcount.

Meet Ethan
Ethan is a powerful AI-driven Virtual Cyber Analyst built for government agencies and law enforcement teams tasked with defending against the most advanced cyber threats.
With full access to KELA’s complete intelligence data lake, Ethan can investigate any query, from tactical indicators to complex adversary operations-across the dark web, threat actor networks, and global cyber ecosystems. Ethan delivers real-time, actionable intelligence at scale, helping teams uncover hidden risks, connect the dots faster, and respond decisively-without ever going offline.
Seamless Intelligence 24/7,
Fully Integrated for Operational Impact
See our digital analysts in action
Related Resources

Report
Qilin and Japan: Attackers Probing Japanese Networks
Japan is in an unusually intense run of cyber incidents, and Qilin is the ransomware group to watch.

Report
The Silent Ransom Group (SRG) Internal Chats Leak Analysis
KELA’s analysis of 5,692 messages from the alleged Silent Ransom Group leak: roles, a vishing script, a staged…

Press Release
KELA and Fujitsu Enter into Cybersecurity Collaboration Agreement
KELA K.K. has entered into a collaboration agreement with Fujitsu Limited to bring KELA Group’s cyber threat intelligence,…
FAQ
What are Digital Cyber Analysts?
Digital Cyber Analysts are AI-driven agents that leverage large language models and agentic workflows to automate cyber threat intelligence tasks. Trained on KELA’s structured intelligence and analyst methodologies, they continuously access and process threat data from KELA’s vast data lake to identify, prioritize, and report on risks relevant to your organization. These agents are designed to function as embedded components within your security operations, capable of responding to queries, generating RFIs, and surfacing actionable intelligence in real time.
What is the difference between Alex and Ethan?
Alex is built for enterprise security teams and MSSPs. He works with the intelligence modules and data platforms you have deployed to monitor, prioritize and respond to threats aimed at your organization. Ethan is built for government agencies and law enforcement. He has full access to KELA’s complete intelligence data lake and can investigate any query, from tactical indicators to complex adversary operations across the dark web and threat actor networks.
How do the Analysts integrate with my tools?
Through KELA’s RESTful API, MCP (Model Context Protocol), webhooks and a built-in SOAR with triggers and workflows. The analysts work inside the tools, workflows and communication channels your team already uses, so you ask questions and get findings where you work, not in another console.
What kind of intelligence can I get from the virtual cyber analysts?
Intelligence from KELA’s underground data lake, tailored to your environment: leaked and compromised credentials, threats aimed at your organization and threat actor profiles. With Ethan, you can also investigate any indicator or adversary operation.
Which tasks can the digital cyber analysts perform?
They monitor your threat landscape around the clock, prioritize what matters to your organization, answer your team’s questions, generate requests for information (RFIs), profile adversaries and proactively surface emerging threats with recommendations.
How is this different from traditional CTI tools?
Traditional CTI tools give you data and leave the analysis to your team. KELA’s digital analysts do that work: they are trained on KELA’s intelligence and analyst methods, run 24/7 and deliver prioritized, actionable findings inside your existing tools, so you get analyst capacity without adding headcount.

