Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Anomali Lens was a browser extension announced in September 2019 that scanned the web page a user was viewing and highlighted threat-related details such as malware names, threat actors, IP addresses and CVE identifiers. It was designed to turn open-web security research into intelligence users could investigate in Anomali’s platform—not to search the web independently. The launch-era capabilities below reflect what Anomali and contemporaneous coverage described in 2019.
What Anomali Lens scanned
Anomali introduced Lens as part of its Altitude security platform, alongside ThreatStream and Match. The extension analyzed the current web page and marked entities that could be relevant to threat intelligence. Examples included threat actor names, malware, IP addresses and CVE identifiers. SecurityWeek’s September 30, 2019 coverage described the interface and these entity types; Anomali’s launch announcement described Lens as part of Altitude.
The reported material was broader than news stories. It included blogs, security bulletins, security research, incident-response reports, logs and social media. Lens worked on content a user opened; the sources do not describe it as a crawler that continuously searched or indexed those sources on its own.
How findings could be used
- Review a page. Open relevant web content in a supported browser and use Lens to identify highlighted threat-related entities.
- Turn useful findings into intelligence. Anomali said users could create threat bulletins or investigations from collected data. Its announcement said Lens-created bulletins were added to ThreatStream, its threat-intelligence product.
- Relate intelligence to internal activity. SecurityWeek reported that findings could also be matched against internal network events using Anomali Match. That is a separate workflow from highlighting entities on a web page: the value was in relating external intelligence to an organization’s own event data.
These were vendor-described capabilities, not independently measured results. The cited launch coverage and announcements do not establish Lens’s detection accuracy, coverage across all web content, or how much analyst time it saved.
#1 Best Overall
What was available at launch
SecurityWeek reported that Lens was available as a Chrome and Firefox extension in September 2019. The report described native Windows and macOS support and mobile support as plans, not features available at launch. Those plans should not be treated as evidence that the capabilities were subsequently delivered.
How Lens relates to Anomali Copilot
Later Anomali materials use the Copilot name for a browser extension that scans page text and highlights threat entities. Anomali’s documentation says “Anomali Copilot Extension and Office 365 Add-Ins” is a new name for Anomali Lens+. Anomali’s 2024 Copilot article describes browser-based entity highlighting, while its Security Analytics documentation describes Copilot functionality and integration with Security Analytics.
This establishes a naming lineage from Lens+ to Copilot, but it does not establish the exact present-day availability or transition status of the original Lens or Lens+ offering. The release history gives Lens+ an end-of-life date of “June 31, 2026,” which is not a valid calendar date; it cannot be relied on as a valid lifecycle deadline. Check Anomali’s current product documentation or contact the vendor for present availability.
Why the launch mattered to security teams
Lens addressed a practical gap between reading open-web threat reporting and operationalizing details in a security program. Analysts could encounter indicators and context in articles or reports, then move selected information into ThreatStream and, through Match, compare it with internal events. That connection—not simply highlighting text—was the product’s central enterprise use case.
Anomali’s November 2019 announcement also framed Lens as a way to help technical security staff explain business implications to leaders. Niall MacLeod, then Director of Solutions Architecture EMEA, said: “Anomali’s recently released Lens technology can help those who are involved in the deepest technical positions to open meaningful dialogue with executive leaders who need to understand how security impacts business risk.”
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
