CTI HORIZON™: asvin’s cyber situation report turns threat intelligence into clear priorities for action
asvin’s new CTI HORIZON™ situational awareness software combines infrastructure data and threat intelligence to deliver actionable recommendations. Take action instead of waiting
Stuttgart, 12 November 2026 – If there was ever a time for an accurate picture of the cyber threat landscape, it is now. With CTI HORIZON™, asvin is launching a SaaS solution that shows security professionals, without unnecessary complexity, which current cyber threats their company or public authority is exposed to.
One cyber situation report, tailored to every role
The key advantage: users gain a well-founded overview of their current cybersecurity status without extensive preparatory work. To achieve this, CTI HORIZON™ draws on publicly available data and combines it with databases documenting known vulnerabilities and threats.
The asvin software presents the resulting situational picture through a dashboard and personalised reports. A distinctive feature is that the information is tailored to preconfigured user profiles.
Cybersecurity specialists receive detailed analyses and comprehensive cyber situation reports. Senior management and decision-makers see only the most important risks and areas requiring action at a glance.
Prioritising what matters most despite the skills shortage
Given the persistent shortage of skilled professionals and resources, a major advantage of the asvin software is its ability to prioritise critical measures according to urgency and relevance.
CTI HORIZON™ therefore eases the burden on companies and public authorities in three key areas: first, they obtain an up-to-date picture of their cyber situation at the touch of a button; second, they immediately identify the most urgent action required; and third, they significantly reduce the effort involved in identifying, assessing and mitigating critical risks.
Particularly as the use of agentic AI in cyberspace and hybrid threats accelerates developments, CTI HORIZON™ provides a robust basis for efficient security decisions. Companies and public authorities can identify threats early, prepare targeted responses and remain operational when an incident occurs.
Last but not least, the solution offers an attractive cost-benefit ratio—especially compared with the potentially substantial financial and operational consequences of a successful cyberattack.
Frank Hocke, senior automotive expert and former Volkswagen CIO, comments:
“An accurate and up-to-date picture of the cyber threat landscape is more important than ever. With CTI HORIZON™, asvin offers a solution that clearly shows security professionals which current cyber threats their company or public authority is exposed to.”
TECHNICAL FACT BOX
Getting started with CTI HORIZON™ takes just minutes
Once a licence has been obtained, users can launch the software themselves on the CTI HORIZON™ portal or get started in an online session supported by asvin.
During this process, the platform automatically creates a complete CTI environment. This Includes:
- A fully configured organisational workspace
- Preconfigured role models for different user roles
- Live connections to threat intelligence and vulnerability sources, e.g. CVE databases
- Continuous ingestion and normalisation of relevant security feeds
- Automated, OSINT-based discovery of the user organisation’s context
- Real-time correlation of threats with the company’s attack surface
- A prioritised overview report with actionable recommendations
Technical information for the IT trade press
The architecture of CTI HORIZON™ is modular, scalable and designed to integrate seamlessly into existing cybersecurity workflows and infrastructures. It is built on a microservices backend that enables the independent deployment, scaling and maintenance of core components such as threat intelligence ingestion, semantic search and role-based reporting.
At its core, the system uses a combination of NoSQL databases for high-throughput storage of structured data and vector databases to support semantic search and the retrieval of threat intelligence using large language models.
These models enable the contextualisation, summarisation and dynamic adaptation of CTI reports to different user roles. The platform also provides a web-based interface for intuitive visualisations, dashboards, and the management of reports and intelligence data, enabling both technical and non-technical stakeholders to work effectively with intelligence products.
Thanks to its loosely coupled architecture, the solution can be easily integrated with SIEM and SOAR platforms, threat feeds, ticketing systems and internal APIs, making it highly flexible and suitable for enterprise use.
RAG and MCP: from information retrieval to action
Distinctive features of CTI HORIZON™ include RAG and MCP. Retrieval-Augmented Generation (RAG) is a hybrid approach that combines an LLM’s language generation capabilities with the precision of information retrieval systems. Rather than relying solely on the knowledge of pretrained models, RAG augments LLMs with up-to-date, contextually relevant information retrieved from a structured or unstructured knowledge base during AI inference.
Conventional language models frequently hallucinate or provide only general answers because of limitations in their training data. CTI, by contrast, requires up-to-date threat context, precise indicators of compromise (IOCs), organisational relevance and role-based interpretation.
The Model Context Protocol (MCP) is an open standard that enables AI models and applications to connect securely to external data sources, tools and services through a unified interface. MCP uses JSON-RPC 2.0 as its underlying communication protocol, providing a lightweight, stateless and language-independent method for remote procedure calls (RPC).
Conventional RAG systems are limited to static knowledge bases. MCP transforms RAG into dynamic, agent-based systems by enabling capabilities such as real-time data access and the integration of knowledge from multiple sources.
MCP enables RAG systems to go beyond information retrieval and take action. This allows CTI HORIZON™ users to update databases based on retrieved information, execute business processes through API calls and complete complex workflows across multiple systems.
In addition, the asvin software enables dynamic knowledge updates. Knowledge bases can therefore be automatically updated with new information; in future, the software will learn from user interactions and system feedback; and regular synchronisation ensures that data remains current.
About asvin
asvin GmbH is a Stuttgart-based cybersecurity company specialising in cyber threat and risk intelligence for connected products, industrial infrastructures and complex supply chains. Through AI-powered analysis, context-based risk assessment and automated CTI reports, asvin helps organisations identify threats early, prioritise risks and meet regulatory requirements efficiently. https://asvin.io/
Konrad Buck
Head of Press and Media Relations
Background & Expert Access for Media
- Detailed insights into asvin’s products and technologies
- Assessments of current cyber incidents and explanations of the security landscape
- Expert commentary and background briefings — our CEO, Mirko Ross, is a recognised expert and experienced media source on the cyber threat landscape, hacktivism, regulation and the use of AI.
I speak openly, fact-based, and without PR spin. I am a former IT journalist with decades of experience in the IT and cybersecurity space, familiar with the highs and lows of the industry. Off-the-record discussions are possible upon request.
