SANDS Lab launches AI-powered intelligence service in the GPT Store
Expected to support CTX’s entry into global markets Combining generative AI, LLMs and CTI for security practitioners Developing practical threat response business models to stimulate market growth
SANDS Lab launches AI-powered intelligence service in the GPT Store
- Expected to support CTX’s entry into global markets
- Combining generative AI, LLMs and CTI for security practitioners
- Developing practical threat response business models to stimulate market growth

Figure 1. Main screen of SANDS Lab’s CTX intelligence service launched in the GPT Store
Cyber threat intelligence specialist SANDS Lab (CEO Kim Ki-hong) announced on the 17th that its CTX service had officially joined OpenAI’s GPTs, referred to as the GPT Store.
SANDS Lab’s automated malware analysis platform malwares.com collects and analyzes 37.6 billion proprietary data records, including 2.2 billion malware records, and generates approximately KRW 6 billion in annual revenue. The company completely rebuilt this successful service and formally launched it last October as CTX, a next-generation AI intelligence brand.
CTX stands for Cyber Threat X, combining CT for cyber threats with X representing concepts such as eXpert, eXchange and conteXt and other threat variables. Its concept is affordable CTI that uses AI to aggregate reliable data from multiple intelligence sources. It seeks to broaden the market through subscriptions and, as a first in cybersecurity, sales of datasets usable for AI development and related work.
GPTs is a store where users can buy and sell AI applications built on OpenAI’s LLMs. More downloads and usage can create revenue opportunities, so the CTX launch is expected to help establish SANDS Lab’s global revenue model.
Listed as CTX for GPT, the service uses an AI engine for file analysis and hash lookups (MD5, SHA1 and SHA256), explaining maliciousness, related groups, target countries and industries, and MITRE ATT&CK techniques in detail. It advances beyond IoC-focused intelligence by combining attack groups and methods into a unified context.

Figure 2. Information analyzed and provided by AI-based CTX
The service also analyzes IP addresses and domains and supports further analysis of related indicators of compromise (IoCs) and campaigns, delivering intelligence optimized for GPT. This integration of generative AI, LLMs and CTI can help practitioners and encourage business models that provide practical threat responses, stimulating CTI market growth.

Figure 3. CTX performs additional analysis and explains answers to user questions
CEO Kim Ki-hong said, “Starting with the GPT Store launch, this year will strengthen the foundation for domestic and global expansion. We will continually enhance CTX so it becomes a leading CTI service in the store.”
CTX for GPT is available at https://gpt.ctx.io.