Hunt.io Launches Hunt v3 with Expanded Threat-Infrastructure Intelligence
Summary
Hunt.io's Hunt v3 rebuild adds threat-hunting features including passive DNS history, netblock browsing, vulnerability workflows, AttackCapture analysis, persistent alerts, more than 60 API endpoints, and an OAuth-enabled MCP server.
Key points
- Hunt v3 adds infrastructure-enrichment features such as passive DNS history, visual netblock browsing, and registrar intelligence to help investigators pivot from indicators to related infrastructure.
- Its vulnerability-intelligence workflow links daily signals and threat rankings to CVE details, exploit information, and external evidence sources.
- AttackCapture adds filters and AI-based file categorization, plus queues for exposed files classified as exploits and structured reports tied to observed infrastructure.
- The platform adds persistent monitors for SQL, threat-actor, and AttackCapture searches, along with configurable notifications.
- The rebuilt API includes more than 60 endpoints for areas including C2 infrastructure, IOC hunting, vulnerability intelligence, and DNS enrichment.
- A remote MCP server supports OAuth, dedicated scoped API keys, and 18 tools for connecting AI clients to Hunt data.
Article Details
- Event Type
- Security platform release
- Impact
- Hunt 3.0 adds infrastructure investigation, vulnerability intelligence, search, alerting, and API capabilities. No security incident or victim impact is reported.
Vendors
Products
AttackCaptureVulnerability Intelligence workflow (CVE drilldowns, cross-CVE navigation, enriched daily digest), AttackCapture Code Search (AI categorization, negative facets, keyword highlighting), Attack Reports, ExploitHunt 3.0One IP. One domain. One hash. In the hands of a good hunter, that's enough to unravel an entire campaign. But most tools stop at the lookup. Hunt 3.0 doesn't.