Infoblox has launched a product called Infoblox IQ and added a Model Context Protocol server to its networking and security platform. The two offerings are aimed at bringing the company's DNS, DHCP, and IP address management data into AI-driven IT operations, both through a native assistant and through a standard interface that external AI tools can connect to.
The products address a long-standing problem in network and security operations: the volume of alerts, configuration changes, and infrastructure events that teams are expected to monitor and respond to has grown faster than the staff available to handle it.
AI tools have entered this space with the promise of automating triage and investigation, but most require structured, current, and authoritative data to act reliably. That requirement has put a premium on data sources that sit close to the basic functions of a network.
DNS, DHCP, and IP address management systems occupy that position. Because they handle device identification, address assignment, and traffic routing, they can provide a near-real-time record of what devices are active, how they are connected, and where network traffic is directed.
Infoblox has operated in this segment for more than 25 years, and its pitch with Infoblox IQ is that the data it has accumulated across thousands of customer deployments is better suited to automated decision-making than application logs or generic monitoring feeds.
The native assistant allows network and security teams to query infrastructure conditions in plain language, investigate incidents, receive recommended steps, and make configuration changes without switching between multiple management consoles.
The MCP server extends that data to organizations that are already using third-party AI tools. Rather than requiring custom integrations, customers can connect external AI assistants and agents to Infoblox through the protocol, giving those systems access to the company's network and security intelligence through a standard interface.
That approach reflects a broader shift in enterprise AI tooling, where interoperability between platforms has become a practical requirement as organizations run multiple AI systems across different functions.
Infoblox has split the initial rollout into two product areas. Infoblox IQ for Threat Defense is aimed at DNS security investigations, while Infoblox IQ for DDI focuses on operational issues in network services and infrastructure management.
The division maps to the two primary use cases the company is targeting: security operations teams dealing with alert fatigue, and network operations teams managing configuration, performance, and capacity issues.
The underlying commercial logic is that as enterprise AI systems move from pilots toward automated operations, the infrastructure data those systems rely on becomes a more consequential asset.
Organizations that lack trusted, current network records will face limits on how far they can extend automation. Infoblox's position in DDI gives it a potential role as a data provider to AI systems beyond its own, which the MCP server is designed to enable.





