Intezer launches Workflows for native response automation

Intezer has introduced Workflows, a native automation and response builder that lets security teams create and customise response workflows directly in the Intezer platform. This brings response into the same environment where alerts are triaged and investigated, removing the need for a separate SOAR system.

Workflows automates post-investigation actions such as closing alerts, notifying analysts, isolating hosts, and updating tickets, with the full context of the investigation. The company’s AI SOC Report 2026 found that nearly 1% of real incidents trace back to alerts classified at the lowest severity levels, which for an enterprise generating 450,000 alerts annually means about 54 real threats per year that could go uninvestigated.

Intezer says that by investigating every alert at forensic depth, it can identify low-severity threats and trigger response actions once a verdict is reached. For MSSPs, Workflows can automate customer communications and per-tenant routing.