Intezer Expands AI SOC Platform to Replace Traditional MDR Capacity Limits

New updates have been reported about Intezer.

Intezer has upgraded its AI-powered security operations center (SOC) platform to help enterprises that have outgrown traditional managed detection and response services overcome alert overload and investigation bottlenecks. The company now offers autonomous triage and full forensic-level investigations for all security alerts, continuous tuning of SIEM and EDR detection rules, and on-demand expert support, allowing internal SOC teams to supervise outcomes rather than manually process every event.

Intezer’s research across large enterprise environments shows that about 60% of alerts typically go unreviewed and that nearly 1% of genuine threats originate from low-severity alerts that are often ignored, equating to roughly 54 true threat alerts per year for a large organization. By applying its ForensicAI engine at scale, Intezer reports that its platform can investigate 100% of alerts with less than 2% requiring human escalation, improving coverage, strengthening security posture, and enabling organizations to reduce or eliminate reliance on outsourced MDR providers.

The company positions these expanded capabilities as a structural shift in security operations, arguing that human-led MDR models cannot keep pace with the volume and variability of modern alert streams. CEO and co-founder Itai Tevet emphasized that AI-driven, forensic-grade investigations across every alert not only surface hidden threats in low-priority signals but also continuously refine detection logic based on real outcomes, closing a major gap in detection engineering.

Intezer will showcase its enhanced AI SOC platform at the RSA Conference in San Francisco, targeting large enterprises that are seeking to modernize their SOC models and rebalance budgets away from labor-intensive MDR contracts. With customers already including global enterprises in technology, hospitality, financial services, and distribution, the company is positioning the expanded platform as a way for CISOs to achieve 24/7 coverage, higher-quality investigations, and faster incident response without proportionally increasing headcount or service spending.