G2

Verified User in Security and Investigations

Mid-Market (51-1000 emp.)

11/5/2026

"Flexible Human in the loop AI SOC with Strong Support and Seamless Onboarding"

5/5

What do you like best about Intezer?

The AI SOC offering from Intezer offers so much more than the ability to ingest all of your alerts. It opens up possibilities from SOAR to using the MCP to hook into other internal agents.

The product’s flexibility with our current security technology stack means we can pivot quickly when the technology we work with changes direction or adds new features. The feedback loop in the Intezer tooling is extremely valuable; it helps us train the model and ensures our analysts’ verdicts are heard.

Support from Intezer is also great, with regular meetings with our CSM and Engineering CSM to discuss the product, our plans, and the developments Intezer is regularly working on.

The Onboarding process was straightforward; the documentation is robust and allowed us to create the necessary change controls to ensure the deployment worked first time.

Intezer offer several methods of interacting with the product, through the GUI, API, MCP and other future methods. Each has its positives and negatives but the fact that each is available makes our process development easy. Review collected by and hosted on G2.com.

What do you dislike about Intezer?

The only issue with the product is that the portal feels very flat, it doesn't auto-refresh and each time I want to see the latest data I need to refresh the page. The portal is improving but it does feel like the weakest part of the product. Review collected by and hosted on G2.com.

What problems is Intezer solving and how is that benefiting you?

Intezer has enabled us to completely refresh our approach to alerts. We can now review every alert our tooling surfaces and feel confident that the model’s verdict is accurate.

It has also let us integrate the output directly into our ITSM, instead of relying on a complicated, multi-step process.

Intezer is improving our analysts’ understanding of the data because initial triage time has been reduced. That gives the team more time to properly dig into alerts, especially with the ability to converse with the LLM and ask follow-up questions about a specific alert.

It’s also helping us get more value out of the security technology stack we already operate, from assisting with KQL rules to turning those rules into custom detections.

Intezer gives us the ability to scan files, URLs, email, endpoints, and memory dumps using its memory scan. While other products can do parts of this, it’s very useful to have access to these capabilities within a trusted environment.

Finally, Intezer strengthens our email analysis by ingesting raw emails that users report. We can benefit from both our existing security stack and Intezer’s verdict to be more certain whether an email is malicious or not. Review collected by and hosted on G2.com.

Current UserValidated ReviewerSource: Organic