What Intezer does

Intezer is a cybersecurity company that has built an AI-powered Security Operations Center platform branded as Forensic AI SOC, designed to autonomously triage, investigate, and respond to security alerts at forensic depth. The platform combines multiple AI models (both proprietary and commercial) with deterministic forensic methods including endpoint forensics, memory scanning, reverse engineering, network artifact inspection, and sandboxing. Founded in 2015 and incorporated in Israel with a Tel Aviv headquarters and New York presence, the company serves over 150 enterprise customers including Fortune 500 logos such as NVIDIA, MGM Resorts, Salesforce, Equifax, Wyndham Hotels & Resorts, dp d, Friedhelm LOH Group, and Alnylam Pharmaceuticals, as well as managed security service providers via its Intezer Amplify Partner Program.

The core technology reports 98% verdict accuracy with less than 2% of alerts requiring human escalation, processing over 25 million security alerts in 2025 with sub-minute median investigation times. The platform integrates natively with more than 100 security tools — including Microsoft Defender, Sentinel and Entra ID, SentinelOne, CrowdStrike, Splunk, Palo Alto Networks, Zscaler, Fortinet, and AWS — and exposes a Model Context Protocol (MCP) server with 66 tools covering the full case lifecycle, enabling integration with AI agents such as Anthropic Claude, OpenAI Codex, and Cursor. This positions Intezer as both an autonomous SOC operating layer and a system of record that accumulates security investigation context.

Intezer generates revenue through subscription-based SaaS contracts priced per endpoint rather than per alert, sold primarily via direct enterprise field sales targeting CISOs and SOC leaders, with a growing channel layer for MSSPs, resellers, and service providers. The company raised $33 million in Series C funding in September 2024 led by Norwest Venture Partners with Intel Capital participation, bringing reported total funding to $60 million. Founder Itai Tevet serves as CEO alongside a leadership team including CFO Mirit Barak, CTO and co-founder Roy Halevi, Field CISO Mitchem Boles, Chief Growth Officer Justin Bradley, and COO Nadia Malinoff-Kan; net revenue retention is reported at 126%.

Name

Intezer

Legal name

Intezer Labs Ltd. and Intezer Labs Inc.

Website

https://intezer.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

101–250 employees

Short description

Intezer provides an AI-powered Forensic SOC platform that autonomously triages, investigates, and responds to security alerts at 98% accuracy. Serving over 150 enterprises and MSSPs, it combines AI models with deterministic forensic methods to deliver 100% alert investigation coverage and sub-minute triage.

Ownership category

akta.pro rank

Product category

Autonomous Security Operations (AI SOC)

NAICS

Security Systems Services (56162), Computer Systems Design Services (541512), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Integrated Systems Design (7373), Services-Prepackaged Software (7372)

akta.pro primary industry

AI Observability, Monitoring & Evaluation Platforms (Drift, Quality, Safety) (HDAEANAF)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Model Monitoring, Accountability & Incident Management (HDAAAMAF)

Keywords

• Autonomous SOC platform
• AI alert triage
• Endpoint forensics
• Managed detection response
• Security operations automation

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Forensic AI SOC Platform Subscription: Subscription-based SaaS platform for security operations centers. Enterprise customers pay for access to the AI SOC platform with endpoint-based pricing. Includes features for alert triage, investigation, detection engineering, and automated response.
2. MSSP Partner Program Revenue: MSSPs and service providers build managed services around the AI SOC platform, creating revenue through capacity-based margin expansion, onboarding and detection engineering services, and co-selling support. The partner program creates three revenue levers for partners.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels9 records

Core offering

Intezer sells an AI-powered Forensic AI SOC platform that autonomously triages, investigates, and responds to 100% of security alerts at forensic depth for enterprise security operations centers. The platform combines proprietary and commercial AI models with deterministic forensic methods including endpoint memory scanning, reverse engineering, sandboxing, and network artifact inspection to deliver 98% verdict accuracy with less than 2% of alerts requiring human escalation. It is sold as a SaaS subscription priced per endpoint monitored, with specialized variants for Microsoft environments and MSSP delivery.

Product overview

Intezer offers a unified Forensic AI SOC platform that provides autonomous alert triage, investigation, and response for enterprise security operations. The core product combines multiple AI models (both proprietary and commercial) with deterministic forensic methods including endpoint forensics, memory scanning, reverse engineering, network artifact inspection, and sandboxing. The platform is offered as a standalone solution with specialized modules for Microsoft environments (Forensic AI SOC for Microsoft), MSSP delivery (AI SOC for MSSPs), and channel partners (Intezer Amplify Partner Program). Specialized triage modules address specific security domains including endpoint, SIEM, cloud, identity, phishing, and detection engineering use cases. The platform processes 100% of alerts with 98% accuracy and less than 2% human escalation rate, positioning as an MDR alternative that addresses the 60% alert coverage gap in traditional managed detection and response services.

Differentiator

Problem solved

Functional benefit

Brands

• ForensicAI: The proprietary AI technology platform powering Intezer's autonomous SOC capabilities, combining AI agents with forensic analysis including endpoint memory scanners, reverse engineering, and threat intelligence.
• Intezer Amplify

Products and services

• Intezer Forensic AI SOC Core AI SOC SaaS platform that autonomously triages, investigates, and responds to 100% of security alerts at forensic depth by combining proprietary and commercial AI models with deterministic forensic methods (endpoint memory scanning, reverse engineering, sandboxing, network artifact inspection, threat intelligence). Achieves 98% verdict accuracy with less than 2% of alerts escalated for human review and a median triage time under one minute. Sold as an annual subscription priced per endpoint monitored, targeting CISOs and security operations leaders at large enterprises as an MDR alternative.
• Forensic AI SOC for Microsoft Specialized variant of the Forensic AI SOC platform optimized for the Microsoft security stack, integrating with Defender for Endpoint, Defender for Identity (Entra ID), Defender 365, Microsoft Sentinel, and Defender for Cloud Apps. Provides AI-powered forensic triage and investigation with escalation rates under 4% for Microsoft environments, querying Sentinel via KQL and combining endpoint, identity, email, and cloud signals.
• AI SOC for MSSPs Dedicated AI SOC platform variant for Managed Security Service Providers that enables MSSPs to deliver AI-driven security operations to enterprise end customers with automated Tier 1 triage, integrated alert investigation, and cohesive multi-vendor security ecosystem delivery. Includes partner portal access, deal registration, sales collateral, and incentive programs.

Quantifiable outcome

• 98% alert investigation accuracy in under two minutes
• +5 more outcomes

Named customers18 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

AI capability9 records

Feature6 records

Partnerships

Six partnerships are on record, tiered flagship, core and minor.

• MicrosoftflagshipTechnology or Integration · 17 December 2025Intezer was designated a top-tier Solutions Partner in the Microsoft AI Cloud Partner Program (MAICPP) following a successful technical audit. The certification recognizes the Intezer Forensic AI SOC platform for meeting high standards for security, architecture, and integration within Microsoft's ecosystem, enhancing security outcomes for Microsoft security users. The company offers dedicated integration with Microsoft security tools including Defender for Endpoint, Defender for Identity, Defender 365, Microsoft Sentinel, and Defender for Cloud Apps.
• SentinelOnecoreTechnology or IntegrationPartnership to simplify reverse engineering of Rust malware. Integration enables automated analysis of files and running processes in memory to quickly validate suspicious activity and expose fileless malware, sophisticated loaders, and other in-memory threats using SentinelOne's endpoint protection data.
• CarbonHelixcoreStrategic or Co-development PartnerStrategic partnership combining CarbonHelix's technology and human intelligence with Intezer's cutting-edge AI solution. The 24x7 SOC team combined with Intezer's AI platform offers an unmatched level of security for organizations of all sizes.
• MSSPs and Resellers (Amplify Partner Program)coreChannel Partner/ Reseller/ DistributorIntezer Amplify Partner Program is a global channel initiative designed to help MSSPs, resellers, and service providers build managed services around the AI SOC platform. Program includes partner portal, deal registration, sales collateral, and incentive programs. Creates three revenue levers: onboarding and detection engineering services, capacity-based margin expansion, and co-selling support. Led by Mark Daggett, a 25-year channel veteran formerly from Axonius.
• Upwind SecurityminorGTM or Marketing PartnerCo-sponsor of AI SOC Live event at Nasdaq in April 2026, bringing together CISOs and senior security operations leaders for peer-led discussions on deploying AI in modern SOCs.
• Realm SecurityminorGTM or Marketing PartnerCo-sponsor of AI SOC Live event at Nasdaq in April 2026, bringing together CISOs and senior security operations leaders for peer-led discussions on deploying AI in modern SOCs.

Scale indicators9 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Prophet Security: AI-native SOC analyst that automates alert triage and investigation for enterprise SOC teams. Direct competitor in the autonomous AI SOC analyst category.
• Radiant Security: AI-driven SOC automation platform providing autonomous alert triage and incident response. Competes head-to-head with Intezer for MSSP and enterprise SOC modernization budgets.
• Dropzone AI: AI SOC analyst platform that autonomously investigates security alerts end-to-end. Most directly comparable AI-native competitor, targeting the same autonomous tier-1/tier-2 triage use case at enterprises.
• Tines: No-code workflow automation and SOAR platform used by SOC teams. Intezer is a Tines customer for workflow automation, but Tines also overlaps with Intezer's SOAR playbook and autonomous-response use cases.
• Swimlane: Low-code security automation platform with AI-augmented SOC capabilities targeting enterprise and MSSP customers. Direct overlap with Intezer's SOAR playbooks and MSSP distribution motion.

Broad incumbents

• Microsoft Security Copilot: Microsoft's AI assistant embedded across Defender, Sentinel, Entra, and Intune. Broad incumbent with bundled distribution that competes with Intezer's Microsoft-stack integrations.
• CrowdStrike (Charlotte AI): Endpoint and cloud security leader with Charlotte AI for autonomous SOC triage. Large installed Falcon base gives incumbency advantage in EDR customers that overlap Intezer's endpoint-triage use case.
• SentinelOne: AI-powered endpoint security platform with Purple AI for SOC analysts. Already an Intezer technology integration partner but also a potential competitor as SentinelOne expands its AI SOC capabilities.
• Palo Alto Networks (Cortex XSIAM): Cortex XSIAM is Palo Alto's AI-driven SOC platform consolidating SIEM, XDR, and SOAR. A major incumbent with broad enterprise reach that competes for the same SOC modernization budget.

Emerging players

• Torq (Hyperautomation): Security hyperautomation platform combining SOAR, AI agents, and no-code workflows for SOC automation. Adjacent competitor for AI-driven SOC workflows and a comparable target buyer.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/intezerlabs
• YouTubeyoutube.com/@Intezer
• LinkedInlinkedin.com/company/intezer-labs
• Facebookfacebook.com/IntezerLabs

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds4 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Intezer