Intezer adds native response automation without separate SOAR
Intezer launched Workflows, native response automation inside its AI SOC, letting teams automate remediation without a separate SOAR platform.
Intezer announced Workflows, a native automation and response builder inside its AI SOC platform that lets security teams run post-investigation actions such as closing alerts, isolating hosts, and updating tickets without a separate SOAR. Workflows are created through natural language via MCP, inherit full investigation context, and are logged for audit, with per-tenant routing and customer communications aimed at MSSPs. The announcement cites Intezer's AI SOC Report 2026 finding that nearly 1% of real incidents trace back to lowest-severity alerts.
- Workflows closes alerts, isolates hosts, updates tickets, and notifies analysts inside the Intezer platform without separate SOAR.
- Natural-language creation via MCP lets users describe, review, test, and activate generated workflows.
- Intezer's 2026 report: nearly 1% of real incidents came from lowest-severity alerts, about one real threat weekly at 450,000 alerts.
- Each workflow run carries investigation context and is logged for audit; MSSPs get per-tenant routing and customer communications.
- Vendors
- Intezer
- Products
- Intezer WorkflowsIntezer AI SOC
- Organizations
- Intezer
From the original article
2 min read at helpnetsecurity.comIntezer has announced Workflows, a native automation and response builder that enables security teams to create and customize response workflows directly inside the Intezer platform.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.