Running a threat intelligence program today means operating across more tools, more workflows, and more organizational complexity than most platforms were originally designed to handle. The intelligence is there. The question is whether the platform is keeping up with how your team actually needs to use it.
EclecticIQ Intelligence Center 3.8 is built to answer that. This release connects your Intelligence Center to the AI agents and workflows your team is already running, introduces Keyword lists for managing organizational context, expands your choice of AI provider without compromising on security or compliance, and delivers a set of improvements that make the platform more stable, secure, and reliable as production infrastructure.
What's new in 3.8
MCP Server: bringing your TIP into the agentic AI era
Security teams are increasingly running AI-assisted workflows for enrichment, triage, and initial investigation, but most of those workflows hit the same wall: the TIP is not reachable. Context has to be pulled manually, which puts a human in the middle of every step the AI was supposed to handle.
The EclecticIQ MCP Server removes that bottleneck. Built on the Model Context Protocol, the open standard gaining adoption across the AI tools ecosystem, it gives any compatible AI agent direct, permissioned access to the Intelligence Center. Agents can search for entities, enrich records with web intelligence, create STIX entities and relationships, and contribute findings to shared workspaces, all within your existing access controls and audit log. The intelligence your team has built up becomes actionable inside the AI workflows they are already running.
Learn more about the MCP Server
Keyword lists: organizational context, centralized and always current
Every mature threat intelligence program runs into the same problem eventually: organizational context ends up scattered across monitoring rules, search configurations, and intelligence requirements that were built out at different times by different people. As environments evolve, coverage drifts, and teams often only find out when something gets missed.
Keyword lists give your program a single place to define what matters to your organization and apply that context consistently across all supported workflows. When a list changes, every workflow using it updates automatically, so your monitoring coverage stays accurate without the overhead of maintaining it rule by rule.
For security leaders, this also brings something that has historically been difficult to produce: a clear and auditable picture of how your monitoring program maps to the organizational context it is designed to protect.
Learn more about keyword lists
Amazon Bedrock support: a faster path to AI adoption for AWS-first organizations
The AI provider powering your threat intelligence platform is a strategic decision, not a default. Version 3.8 adds Amazon Bedrock to the Intelligence Center's growing list of supported AI providers, giving teams the flexibility to choose the infrastructure that best fits their security posture, compliance requirements, and existing cloud strategy. For organizations already operating within an AWS environment, this means accessing AI-powered capabilities through infrastructure they have already approved, without moving data outside existing governance controls.
Custom entities and attributes: your intelligence model, fully operational
Organizations that have built custom entity types inside the Intelligence Center have done the hard work of modeling their specific threat landscape. Version 3.8 makes that investment pay off more broadly. Custom entities and attributes now work fully across AI-powered capabilities, search and investigation workflows, automation rules, and data retention policies, treating the intelligence model your team has built as a first-class part of the platform throughout the entire intelligence lifecycle.
Platform improvements
Version 3.8 includes a series of improvements to platform stability, security, usability, and operational efficiency across the Intelligence Center, including a refreshed navigation menu that makes the platform easier to administer as teams and usage grow. These are the kinds of changes that do not make headlines but matter considerably to any organization running the platform as production infrastructure.
Why it matters
For security and intelligence leaders evaluating where to invest, the question is rarely whether threat intelligence matters. It is whether the platform they are running can keep up with how their program actually needs to operate. EclecticIQ Intelligence Center 3.8 is built around that question. Teams that upgrade to 3.8 can expect to:
- Reduce manual overhead across intelligence workflows by connecting AI agents directly to the TIP, so enrichment, entity creation, and investigation tasks happen without human handoffs at every step.
- Maintain more consistent monitoring coverage through centralized keyword lists that keep organizational context accurate across all workflows, without rule-by-rule maintenance.
- Accelerate AI adoption without adding vendor complexity, for organizations already operating within an AWS environment.
- Get more value from existing intelligence investments, with custom entities and attributes now fully supported across AI, automation, and investigation workflows.
- Run on a more stable and secure platform, with reliability and security improvements that reduce operational risk for teams where the Intelligence Center is production infrastructure.
See it in action
The best way to understand what 3.8 means for your program is to see it against your own use cases. Book a demo and let us show you.
