Intezer, the AI SOC platform for enterprise powered by ForensicAI™, today announced Custom Agents, a new capability that lets security teams build their own AI agents directly inside the Intezer platform. The launch builds on Intezer's core approach, that lets autonomous agents do the security work and humans supervise it. Security teams can no longer rely on manual alert handling or one-off automation to keep up with the volume and complexity of modern threats.
Intezer launches Custom Agents for security teams to build their own AI agents.
Core platform already investigates 100% of alerts, escalates fewer than 2% for human review.
Custom Agents automate custom incident reports, tuning rules, and proactive threat hunting.
Agents created using natural language with scheduling options.
Works across stack with CrowdStrike, SentinelOne, Splunk, Microsoft Sentinel, and Entra ID.
Available in beta now, free during beta period.
Every SOC has its own set of daily routines, from writing custom incident reports and sharing shift handoff notes to tuning detection rules and documenting investigation outcomes. After analyzing how teams used Intezer's AI chat for these workflows, Intezer found that more than a third of conversations involved the same repetitive tasks being requested again and again. Custom Agents turn those tasks into agents that run on their own. Existing Intezer customers use agents in production for writing custom incident reports, recommendations on tuning rules based on triage verdicts, and proactive threat hunting.
Itai Tevet, CEO and co-founder of Intezer, stated: "With Custom Agents, security teams can automate their unique individual and team processes, by building their own AI agents, which run on the same engine that operates their SOC to ensure seamless integration and performance. Our autonomous agents have long handled the fundamental work of the SOC. With Custom Agents, we are giving customers the power to automate their own unique workflows, running them precisely how they choose."
Custom Agents are easily created using natural language. SOC teams describe what they want done, choose when it runs (i.e. on a schedule, on an event such as a closed case, or on demand), and pick the tools it can use. Agents work across the stack, combining Intezer's built-in toolset with connected SIEM, EDR, and identity tools including CrowdStrike, SentinelOne, Splunk, Microsoft Sentinel, and Entra ID. They take action by updating, commenting on, and closing cases and emailing finished reports.
Intezer AI SOC delivers 24/7, forensic-grade cyber alert triage across 100% of alerts, with less than 2% escalated for human review. Powered by ForensicAI™, Intezer specializes in deep forensic investigation to deliver unmatched accuracy and speed. Intezer is trusted by global enterprises including NVIDIA, MGM Resorts, Equifax, Salesforce, and Ferguson.
About Intezer
Intezer AI SOC delivers 24/7, forensic-grade cyber alert triage across 100% of alerts, with less than 2% escalated for human review, dramatically accelerating incident response. Powered by ForensicAI™, Intezer specializes in deep forensic investigation to deliver unmatched accuracy and speed, significantly reducing cyber risk and enabling security teams to operate effectively without reliance on outsourced services. Intezer is trusted by global enterprises including NVIDIA, MGM Resorts, Equifax, Salesforce, and Ferguson.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones, and thrive on the tech pulse.
