Infoblox has launched Infoblox IQ and introduced a Model Context Protocol server for its networking and security products to bring network, security and asset data into AI-driven operational workflows.
The launch adds an AI assistant, automated AI actions and a standard interface that lets third-party AI tools connect to Infoblox data. The products use information from DNS queries, DHCP leases, IP address assignments, device activity and security events gathered across its platform.
Infoblox is positioning the offering around operational work in network and security teams, where large volumes of alerts and infrastructure changes can make manual investigation slow and repetitive. Users can query conditions in natural language, investigate incidents, receive recommended steps and make configuration changes without moving between multiple management consoles, according to the company.
The Model Context Protocol server is aimed at organisations using external AI assistants, agents and applications. Rather than relying on custom integrations, customers can connect those systems to Infoblox through the protocol, giving them access to the company's network, security and asset intelligence through a standard interface.
Infoblox said the system draws on more than 25 years of work in DNS, DHCP and IP address management, often referred to as DDI. It also said the underlying models reflect operational knowledge built across thousands of customer deployments.
One example cited by Infoblox involved a customer deployment in which more than 504,000 operational events were reduced to 24 prioritised actions through automated triage. Investigations that had previously taken 45 to 90 minutes of manual analysis were surfaced immediately with supporting context, the company said.
Security focus
For security operations teams, Infoblox said the software links threats, assets, users, devices and network activity into a single investigation path. The aim is to reduce alert fatigue by cutting the number of issues analysts need to inspect manually and by presenting confirmed threats with recommended remediation actions.
For network operations teams, the product identifies configuration, performance and capacity issues across Universal DDI and NIOS. It then collects and analyses the relevant operational data and returns a root-cause analysis with suggested remediation steps and an audit trail, according to Infoblox.
Infoblox said the approach is intended to support organisations moving from AI pilots to more automated operational models. In that setting, infrastructure data becomes more important because AI systems need current information on the relationships between users, devices, applications, IP addresses and network services.
Mukesh Gupta, Chief Product Officer at Infoblox, outlined how the company views its existing data stores.
"Infoblox IQ started with a simple belief: that the data Infoblox already holds provides one of the clearest views of what's happening on an enterprise network," Gupta said.
"As organisations move from AI pilots to real-world agentic operations, the infrastructure data those systems rely on must be trusted and up to date. The pace of change across DNS, DHCP and IPAM now exceeds what teams can manage manually, and generic AI tools lack the operational visibility needed for reliable autonomous action. Infoblox provides that visibility, and Infoblox IQ turns it into agentic operations teams can trust," he said.
Data layer
Infoblox is presenting its DDI position as central to the case for the new products. DNS, DHCP and IP address management systems sit close to the basic functions of enterprise networks, which means they can offer a current view of what devices are active, how they are connected and where traffic is being directed.
That role gives vendors in the segment a potentially important place in AI-based IT operations, particularly if customers want automation based on infrastructure records rather than application logs alone. Infoblox said its platform acts as an authoritative source for DDI and network asset intelligence, which it believes makes the data better suited to automated decision-making.
The company has split the initial rollout into two product areas: Infoblox IQ for Threat Defense and Infoblox IQ for DDI. Threat Defense is aimed at DNS security investigations, while the DDI version focuses on operational issues in network services and infrastructure management.
Scott Harrell, President and Chief Executive Officer of Infoblox, linked the launch to a broader shift in enterprise technology.
"For decades, DDI has served as the foundation of enterprise networks. As AI becomes the next operating layer for the enterprise, that foundation is becoming even more critical," Harrell said.
"Infoblox IQ transforms infrastructure data from a system of record into a system of action, enabling organisations to move faster, respond more effectively and unlock the full potential of AI-driven operations. The companies that succeed with AI will be those that can ground automation in trusted data, and that is precisely where Infoblox is positioned to lead," he said.