Infoblox Introduces Infoblox IQ for Agentic Operations and MCP Integration

Infoblox introduced Infoblox IQ as an agentic operations layer intended to help teams investigate network and security conditions more quickly and execute related actions. The company linked the capability to continuous analysis of operational data that flows through the Infoblox Platform.

Infoblox IQ draws on DNS, DHCP, IP address assignments, device activity, and security events for issue identification, investigation automation, and action support. The company positioned its approach around trusted infrastructure data and continuous updates for agentic operations and autonomous IT operations.

The product combines an agentic AI assistant with agentic AI actions and a natural language interface. It also adds an Infoblox Model Context Protocol (MCP) Server that makes Infoblox network, security, and asset intelligence available to third-party AI assistants, agents, and applications through a standard interface.

Infoblox IQ was described as including capabilities for Threat Defense and DDI. In one deployment described by the company, Infoblox IQ reduced more than 504,000 operational events to 24 prioritized actions through agentic triage. “Infoblox IQ started with a simple belief: that the data Infoblox already holds, provides one of the clearest views of what’s happening on an enterprise network,” said Mukesh Gupta, chief product officer, Infoblox.

For Threat Defense, Infoblox IQ agentically investigates DNS security alerts to collect evidence, analyze activity, and determine root cause before presenting SOC analysts with confirmed threats, affected users and devices, and recommended remediation actions. For DDI, it was described as proactively surfacing configuration and operational issues across Infoblox Universal DDI™ and Infoblox NIOS, providing root cause analysis and guided remediation actions with a full audit trail. “For decades, DDI has served as the foundation of enterprise networks. As AI becomes the next operating layer for the enterprise, that foundation is becoming even more critical,” said Scott Harrell, president and CEO, Infoblox. Infoblox IQ for Threat Defense will be generally available by the end of the month, while Infoblox IQ for DDI, Infoblox IQ assistant, and Infoblox MCP Server integration are available to early access customers and will be generally available in fall 2026.