
Cyber Security
Intezer Launches Workflows To Complete The AI SOC Lifecycle
Customers can now build custom automation and response workflows directly inside the Intezer AI SOC platform
NEW YORK, Aug. 19, 2026 (GLOBE NEWSWIRE) -- Intezer, the AI SOC platform for enterprise powered by ForensicAITM, today announced Workflows, a native automation and response builder that enables security teams to create and customize response workflows directly inside the Intezer platform. Workflows brings response into the same platform where alerts are triaged and investigated, allowing organizations to automate post-investigation actions without maintaining a separate Security Orchestration, Automation, and Response (SOAR) system.
Security teams can investigate alerts faster than ever, but response often still sits in a separate system. After a verdict is reached, teams may need to rely on standalone SOAR platforms, custom integrations, or manual processes to close alerts, notify analysts, isolate hosts, update tickets, or take other remediation steps. Workflows closes that gap by bringing customizable response automation directly into the Intezer AI SOC, so actions can run immediately with the full context of the investigation behind them.
“As attackers scale with AI, security teams need security operations that can operate at machine scale,” said Itai Tevet, CEO and co-founder of Intezer. “By combining forensic-depth investigation with custom, automated response, teams can execute remediation and close the loop faster. Workflows brings response into the same environment where investigation already happens, helping organizations extend AI-driven security operations across the full SOC lifecycle.”
Intezer’s AI SOC Report 2026, revealed nearly 1% of real incidents traced back to alerts classified at the lowest severity levels. For an enterprise generating 450,000 alerts annually, that represents roughly 54 real threats per year, or about one per week, that could go uninvestigated. The findings show why full-alert coverage matters. SOAR vendors that offer automation built on partial alert coverage and shallow investigation, inherit the same blind spots. By investigating every alert at forensic depth, Intezer can identify low-severity threats and trigger response actions once a verdict is reached.
Intezer Workflows
Intezer Workflows gives security teams control over what happens after an investigation reaches a verdict. Key capabilities include:
- Custom response built into the AI SOC: Teams can build response logic directly in Intezer without maintaining a separate SOAR. Workflows can close alerts, isolate hosts, update tickets, notify analysts, and trigger other actions across the security stack based on investigation outcomes, with no additional API glue or polling required.
- Natural-language workflow creation: Users can describe what they want in plain language through Intezer’s MCP and then review, refine, test, and activate the generated workflow in the platform.
- Investigation context carried into response: Workflows starts with the evidence, data, and organizational context already gathered during the investigation. Actions are reflected back in the relevant alert or case, with each run logged for audit and troubleshooting.
For MSSPs, Intezer Workflows can automate customer communications and per-tenant routing that would otherwise require manual processes.
Workflows is available today in early access to selected Intezer customers, with general availability planned for later this quarter. Intezer’s customer success team will also help teams migrate existing SOAR playbooks. Read more about Workflows on the blog or watch the Containment Workflows, Escalation Workflows and Natural Language for SOC Workflows demos on YouTube.
ABOUT INTEZER
Intezer AI SOC delivers 24/7, forensic-grade cyber alert triage across 100% of alerts, with less than 2% escalated for human review, dramatically accelerating incident response. Powered by ForensicAITM, Intezer specializes in deep forensic investigation to deliver unmatched accuracy and speed, significantly reducing cyber risk and enabling security teams to operate effectively without reliance on outsourced services. Intezer is trusted by global enterprises including NVIDIA, MGM Resorts, Equifax, Salesforce, and Ferguson Learn more at www.intezer.com
MEDIA CONTACT
Geena Pickering
Look Left Marketing
intezer@lookleftmarketing.com
Frequently Asked Questions
What is Intezer Workflows?
Intezer Workflows is a new native automation and response builder integrated directly into the Intezer AI SOC platform. It allows security teams to create and customize workflows for post-investigation actions without needing a separate SOAR system.
How does Workflows enhance security operations?
Workflows streamlines security operations by bringing response automation into the same platform where alerts are triaged and investigated. This accelerates incident response by enabling immediate remediation actions with full investigation context, reducing manual efforts and reliance on separate systems.
What are the key capabilities of Intezer Workflows?
Key capabilities include custom response logic built directly into the AI SOC, natural-language workflow creation, and the ability to carry investigation context directly into response actions, ensuring that actions are informed by the gathered evidence and organizational data.
First published on Wed, Aug 26, 2026
Enjoyed what you read? Great news – there’s a lot more to explore!
Dive into our content repository of the latest tech news, a diverse range of articles spanning introductory guides, product reviews, trends and more, along with engaging interviews, up-to-date AI blogs and hilarious tech memes!
Also explore our collection of branded insights via informative white papers, enlightening case studies, in-depth reports, educational videos and exciting events and webinars from leading global brands.
Head to the TechDogs homepage to Know Your World of technology today!
Disclaimer - Reference to any specific product, software or entity does not constitute an endorsement or recommendation by TechDogs nor should any data or content published be relied upon. The views expressed by TechDogs' members and guests are their own and their appearance on our site does not imply an endorsement of them or any entity they represent. Views and opinions expressed by TechDogs' Authors are those of the Authors and do not necessarily reflect the view of TechDogs or any of its officials. While we aim to provide valuable and helpful information, some content on TechDogs' site may not have been thoroughly reviewed for every detail or aspect. We encourage users to verify any information independently where necessary.
Loading comments...
