Infoblox Expands Threat Defense With New Anti-Ai DNS Capabilities

Infoblox has introduced expanded capabilities to its Threat Defense platform, strengthening its Protective DNS solution in response to increasing use of Ai by cybercriminals. The company says the enhancements are aimed at helping organisations stop threats before they reach users, devices or infrastructure.

As cybercrime becomes more targeted and adaptive, Infoblox’s update includes detection tools, visualisation dashboards, flexible licensing and integration with Google Cloud services.

Focus On Prevention, Not Reaction

Infoblox Threat Defense combines predictive intelligence with algorithmic threat detection, using DNS-level telemetry to block suspicious or malicious domains. According to the company, its platform stops threats an average of 68 days earlier than traditional tools, while maintaining a false positive rate of 0.0002 per cent.

Mukesh Gupta, Chief Product Officer at Infoblox, compared the approach to dismantling larger infrastructure behind cybercrime, rather than reacting to individual incidents.

“The difference between most DNS security tools and our approach is like the difference between law enforcement chasing street-level drug dealers versus taking down the cartel,” Gupta said. “We target the suppliers behind the cyberattackers, so threats can be blocked before they ever reach the network.”

New Capabilities For Greater Visibility

Infoblox’s latest release includes a number of additions designed to improve visibility and simplify security operations:

• Protection Before Impact: Reports quantifiable metrics on blocked threats before damage occurs, aimed at demonstrating value to leadership.
  
  
• Security Workspace: Provides a central interface for threat visualisation, investigation and incident response.
  
  
• Detection Mode: Offers passive DNS threat detection without altering current DNS configurations, reducing deployment risk.
  
  
• Asset Data Integration: Helps security teams link blocked domains to affected devices or systems.
  
  
• Token-Based Licensing: Allows organisations to scale protection based on assets rather than fixed tiers, supporting flexible procurement.

Infoblox’s Protective DNS tools will also underpin Google Cloud’s DNS Armor, offering native cloud workload security, with public preview expected later in 2025.

Shift Toward Preemptive Security

Infoblox said its goal is to support a transition away from reactive cybersecurity models. The platform focuses on disrupting threat actor infrastructure during the preparation phase, rather than waiting for signs of compromise.

Scott Harrell, President and CEO at Infoblox, said traditional approaches can leave organisations exposed if they are targeted first.

“When you’re patient zero, the only thing being ‘killed’ is your business,” Harrell said. “The future of cybersecurity must be preemptive. Stop threats before they ever reach your organisation.”

Harrell added that Ai-driven attackers are customising malware to target specific sectors, rendering generalised detection-based solutions less effective.

The company cited a recent shift in industry thinking, including Gartner’s forecast that 40 per cent of traditional security tools will be replaced by preemptive alternatives by 2028. The latest NIST SP 800-81 guidance also reinforces the potential for DNS-layer controls to prevent attacks earlier in the cyber kill chain.

Regional Threat Trends

Paul Wilcox (pictured), Vice President of Regional Sales, APJ, said cyberattacks across Asia-Pacific are becoming more calculated and disruptive.

“From exploiting third-party access points to targeting critical systems, attackers are finding the cracks in our digital foundations and using Ai to strike faster and smarter than ever,” Wilcox said. “Stopping an attack before it begins is far less costly than dealing with the aftermath.”

He pointed to Singapore as an example of a market where the digital economy’s integration into daily life makes downtime or breaches particularly impactful.

Research And Further Information

Infoblox recently published its 2025 DNS Threat Landscape Report, which claims DNS-layer tools can block up to 82 per cent of cyberattacks before they impact production systems. The company has also released a blog post outlining its latest security capabilities.

Further information is available at https://www.infoblox.com.

Last Updated on August 5, 2025 by Nick Ross