Intezer

From code analysis to the security operations center

Intezer was founded in 2015 by Itai Tevet, Roy Halevi and Alon Cohen, according to CTech, which described it as a cybersecurity company from Tel Aviv. Tevet and Halevi met during their service in the IDF, and Cohen was one of the founders of CyberArk. The original idea was to examine the code itself in order to understand where it came from and how it relates to earlier malware. Tevet explained that the company looks for similarities between pieces of code, inspired by genetic relationships. Later the company expanded the product to automated triage and investigation of alerts in organizations' security systems.

What the models do today

According to the current product description, Intezer combines endpoint analysis, memory scanning, reverse engineering and threat intelligence with artificial intelligence models. The system collects the information relevant to an alert, analyzes it and links it to the broader context of the incident. It is designed to check low- and medium-severity signals too, not only those already rated critical. The output is a verdict with findings about what happened. The website describes a shift from manual work on every alert to the analyst supervising the results of the automated investigation, with the option to review the findings.

Connecting to tools, and feedback from the analyst

In its 2024 funding announcement, the company described investigating endpoint alerts, alerts from a security monitoring system and phishing reports from users. The CEO's announcement said the product connects to existing tools, closes false positives and passes cases that need handling to the team, with findings and response recommendations. The current website shows an option to dispute a verdict directly in the platform. The feedback and the investigation results are used to tune triage and detection rules. Response can stay under human control or run automatically, depending on the chosen mode of operation. The investigation tools and the feedback are in the same workflow.

Capital for development and expansion

On 17 September 2024 Intezer announced that it had raised $33 million in a Series C round led by Norwest Venture Partners. The official announcement said total capital raised had reached $60 million. Existing investors took part, including Intel Capital, OpenView, Magma and Alon Cohen. The company said the money was meant for expanding its product and marketing teams and for continued development of the models that emulate the analyst's work. The announcement described the system as an addition to a security team dealing with alert overload, integrated with the organization's existing systems instead of setting up a separate detection environment.

Customers and security service providers

In a post the CEO published with the funding round, the customers listed included Equifax, MGM Resorts International and DPD. He also mentioned RSM, CarbonHelix and Legato Security as security service providers that use the technology. The current website shows testimonials from people at MGM, DPD and RSM about alert triage, integration into daily work and passing on enriched findings. These are usage descriptions that the company publishes. In some cases the technology is integrated into the organization's own team, and in others it is used by a provider that runs a security service for its customers. The product is described as an investigation and response system, alongside the professional responsibility of the team that operates it.