What Intrusion does

Intrusion Inc. is a Plano, Texas-based, NASDAQ-listed (INTZ) cybersecurity company that sells the Shield platform, a prevention-first network security product that blocks malicious connections bi-directionally based on reputation lookups against a proprietary Global Threat Engine containing 8.5 billion IP and DNS combinations accumulated since 2001. The platform spans four deployment modes: Shield OnPremise (10 Gbps in-line hardware appliance), Shield Stratus (cloud-native packet filtering for AWS and Azure, generally available on both hyperscaler marketplaces since December 2025), Shield Endpoint (reputation filtering and ZTNA for Windows and Android), and Shield Sentinel (100 Gbps monitor-only visibility), all managed through Shield Command Hub.

The company generates the substantial majority of its revenue from U.S. government customers — 94.6% of FY2025 revenue of $7.1 million came from federal and state government entities — and goes to market through direct field sales for large public-sector accounts, a growing channel partner program (distributors, resellers, MSSPs), and cloud marketplace listings. Pricing is quote-based and not publicly disclosed, with revenue recognized on a subscription/contract basis. Recent reported financial performance includes a 22.9% revenue increase in FY2025, a 75.9% gross margin, a net loss of $9.1 million, $3.6 million in cash at year-end 2025, and a Q1 2026 revenue decline of 50% year-over-year driven by delays on a key Department of War contract, prompting a $3 million secured financing and an auditor going-concern warning. The leadership team, led by CEO Tony Scott, has been refreshed in early 2026 with senior public-sector, channel, and marketing hires to support diversification beyond a single federal account.

Name

Intrusion

Legal name

Intrusion Inc.

Website

https://intrusion.com

Company type

Public

Founded year

2001

Operating status

Operating

Headcount range

51–100 employees

Short description

Intrusion Inc. is a Plano, Texas-based, NASDAQ-listed cybersecurity company that sells the Shield platform — a prevention-first network security product that blocks malicious connections in-line using a proprietary Global Threat Engine with 8.5 billion IP and DNS combinations, primarily serving U.S. federal and state government customers.

Ownership category

akta.pro rank

Product category

Network Security Software

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Intrusion Prevention/Detection Systems (IPS/IDS) (HDADABAH)

akta.pro secondary industries

Intrusion Detection & Prevention Systems (IDS/IPS) (HDAFAFAD), Vulnerability Intelligence & Exploit Prediction (HDADAHAI), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

Keywords

• Network threat prevention
• Threat intelligence platform
• Cybersecurity software
• Cloud network security
• Endpoint protection

Headquarters

HQ city

Plano

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Product/Subscription Licenses: The company generates revenue from licensing its Shield cybersecurity platform products including OnPremise appliances, cloud subscriptions, and endpoint protection. Revenue declined 50% YoY to $0.9M in Q1 2026 due to timing delays on government contracts.
2. Government Contracts: Sales to U.S. government entities accounted for 94.6% of 2025 revenue, up from 83.8% in 2024. The company experienced delays on a key Department of War contract due to federal funding and procurement delays. New contracts include a $4 million state government agency contract announced in Q1 2026.
3. Professional Services/Consulting: The company offers threat hunting and consulting services including in-depth network analysis, threat intelligence reporting, and strategic guidance.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels7 records

Core offering

Intrusion is a prevention-first cybersecurity company that sells the Shield platform, powered by the proprietary Global Threat Engine containing 8.5 billion IP and DNS reputation combinations built since 2001. The platform blocks malicious network connections bi-directionally and in-line through on-premise hardware appliances (Shield OnPremise), cloud-native deployments for AWS and Azure (Shield Stratus), endpoint reputation filtering (Shield Endpoint), and monitor-only visibility (Shield Sentinel), with centralized management via Shield Command Hub.

Product overview

Intrusion offers the Shield platform, a prevention-first cybersecurity solution combining threat intelligence, identification, and automated response. The platform comprises multiple deployment options: Shield OnPremise (hardware appliance), Shield Stratus (cloud-native for AWS/Azure), Shield Endpoint (device-level reputation filtering), and Shield Sentinel (monitor-only visibility). The Global Threat Engine and TraceCop threat intelligence database power all Shield products with 8.5 billion IP and DNS combinations built since 2001. Shield Command Hub provides centralized management across enforcement platforms. The company specializes in blocking outbound malicious connections to prevent data exfiltration and C2 communications.

Differentiator

Problem solved

Functional benefit

Brands

• Shield Platform: Prevention-first cybersecurity platform combining threat intelligence, identification, and automated response. Includes Shield OnPremise, Shield Stratus, Shield Endpoint, Shield Sentinel, and Shield Command Hub.
• Shield OnPremise
• Shield Stratus
• Shield Endpoint
• Shield Sentinel
• Shield Command Hub
• TraceCop
• Global Threat Engine

Products and services

• Shield OnPremise Shield OnPremise is a 10 Gbps hardware appliance that provides bi-directional, in-line enforcement at the connection layer with an Observe Mode option, designed to be deployed behind firewalls in enterprise and government networks for prevention-first network protection.
• Shield Stratus Shield Stratus is a cloud-native packet filtering solution for AWS and Azure environments that inspects 100% of network traffic and blocks known threats using reputation-based enforcement; it is generally available on AWS and Azure Marketplaces and targets security teams, MSSPs, and DevOps professionals needing egress filtering.
• Shield Endpoint Shield Endpoint provides reputation-based filtering on Windows and Android devices with zero-trust network access (ZTNA) on Android, browser isolation inside and outside the perimeter, and installs in under five minutes.
• Shield Sentinel Shield Sentinel is a 100 Gbps bi-directional monitor-only platform providing line-rate visibility with DNS, flow records, and PCAP capture for organizations that need high-throughput network monitoring without inline enforcement.
• Shield Command Hub Shield Command Hub is the centralized management console for the Shield enforcement platforms, providing roles-based access control and CSV/Excel export capabilities for unified administration.
• Threat Hunting & Consulting Threat Hunting & Consulting is a professional services offering that delivers in-depth network analysis, threat intelligence reporting, and strategic guidance to government and enterprise security teams.

Quantifiable outcome

• 75.9% gross profit margin reported in FY2025
• +3 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability3 records

Feature7 records

Partnerships

Three partnerships are on record, tiered core.

• AWS (Amazon Web Services)coreTechnology or IntegrationShield Stratus is generally available on AWS Marketplace. The cloud-native packet filtering solution integrates with AWS Gateway Load Balancer and deploys via AWS CloudFormation templates. This partnership enables enterprise customers to deploy Shield protection directly within their AWS cloud environments.
• AzurecoreTechnology or IntegrationShield Stratus is generally available on Azure Marketplace. This cloud-native security solution provides full-fidelity traffic inspection and reputation-based enforcement for Azure cloud workloads.
• Distributors, Resellers, and MSSPscoreChannel Partner/ Reseller/ DistributorThe company partners with distributors, resellers, and managed security service providers (MSSPs) to expand deployment of Shield technology. The partner program includes finding authorized partners to implement Intrusion into security architectures.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Check Point Software Technologies: Check Point is a long-established network security vendor offering firewalls, IPS, and CloudGuard for cloud workloads - one of the explicit competitors Intrusion positions Shield against. It serves similar government and enterprise customers with overlapping perimeter and cloud security functionality.
• Cloudflare: Cloudflare's network security and Magic Transit offerings overlap with Shield's bi-directional traffic enforcement positioning, and Cloudflare is listed by Intrusion as an explicit comparison point. Both target protection of inbound and outbound traffic for enterprise and public sector customers.
• Fortinet: Fortinet's FortiGate appliances provide firewall and IPS/IPS capabilities comparable to Shield OnPremise, with broad deployment across enterprise and government. It is a relevant incumbent competitor in the on-premise network security appliance category where Intrusion competes.
• Cisco: Cisco's Firepower and Talos threat intelligence offerings provide IDS/IPS and threat intelligence directly comparable to the Shield Platform and Global Threat Engine. Cisco is a major network security incumbent with deep government and enterprise penetration.
• Palo Alto Networks: Palo Alto Networks is a multi-billion-dollar cybersecurity platform that Intrusion explicitly benchmarks Shield against (VM-Series). It offers network firewalls, IPS/IDS, and cloud security across on-prem and cloud, making it the closest broad incumbent with overlapping network security capabilities.
• Zscaler: Zscaler is a cloud-native security platform that Intrusion explicitly benchmarks Shield Stratus against in its product datasheets. Both target cloud egress filtering and zero-trust access for enterprise and government workloads.
• CrowdStrike: CrowdStrike's Falcon platform combines endpoint protection with threat intelligence and is increasingly expanding into network and cloud security. It competes with Shield Endpoint and the underlying Global Threat Engine in enterprise and government security budgets.

Direct peers

• Vectra AI: Vectra AI delivers AI-driven network threat detection and response, comparable to Shield Sentinel and the threat-hunting/consulting services Intrusion offers. It focuses on enterprise SOC use cases with behavioral detection across network traffic.
• Corelight: Corelight provides network detection and response (NDR) built on Zeek, offering deep packet inspection and threat hunting similar to Shield Sentinel's monitoring capabilities. It targets enterprise and government SOC teams with comparable threat-intelligence-driven network analytics.
• IronNet Cybersecurity: IronNet provides collective defense and network threat detection for enterprises and government agencies, with a similar threat-intelligence-centric positioning. It is a smaller-scale, government-focused network security peer with comparable buyer profile.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/IntrusionShield
• LinkedInlinkedin.com/company/intrusionshield

Revenue estimate

Valuation estimate

Number of profiles

Profiles12 records

Funding overview

Funding rounds5 records

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Intrusion