Intezer

Intezer is an AI SOC platform that triages, investigates and responds to security alerts for enterprises and managed security providers. It connects to the security products a team already runs and investigates each alert at forensic depth, combining endpoint analysis, memory scanning, reverse engineering and built in threat intelligence with multiple AI models. The vendor states that it investigates every alert, including low severity ones, and resolves false positives automatically while escalating real threats for human review or automated remediation. It is aimed at security operations teams, in house or through an MDR provider, that want to offload tier one and tier two investigation work. Alert sources include endpoint tools such as SentinelOne, CrowdStrike, Microsoft Defender and Palo Alto Cortex XDR, user reported phishing, SIEM, identity, cloud and network alerts, with more than 100 integrations. Investigation results feed back into detection rule tuning, tracked against the MITRE ATT&CK framework. Security experts are available on demand, and an AI chat agent supports investigations. There are two packages. Starter covers one alert source, either endpoint or user reported phishing. Complete covers all alert sources, adds custom response workflows, and offers managed SIEM as an add on. Both are priced by endpoints, with no volume fees, and the amounts are not published. Pricing is by demo request or contact.