Skip to content

Intezer

Malware analysis vendor using 'genetic' code-reuse comparison to classify threats and link samples to known families based on shared code fragments.

Visit Website ↗
58/100Incremental Innovator

Overview

Intezer was founded in Israel in 2015 by Itai Tevet, Alon Cohen (also a founder of CyberArk), and Roy Halevi, and operates with U.S. commercial headquarters in New York alongside its Israeli engineering base. The company’s core premise is that essentially all software, malicious or legitimate, is built from previously written code, and that detecting reused code fragments is a more durable signal than matching full-file hashes or signatures that attackers can trivially alter.

Its “genetic malware analysis” technology decomposes binaries into code fragments (referred to internally as “genes”) and compares them against a large database of known-good and known-malicious code, even when only small fragments match. This allows classification of previously unseen samples by their code lineage — attributing a new sample to a known malware family or threat actor’s toolkit based on shared code ancestry, similar in concept to (though independently developed from) other genomic-style malware analysis approaches in the category.

Intezer raised a $15 million Series B round from investors including OpenView, Intel Capital, and Samsung Next, with total disclosed funding of roughly $60 million; it has since extended its technology from static file analysis into fileless and memory-based threat detection.

Innovation Matrix Assessment

Innovation Velocity 5/10

Extension into fileless and memory-based analysis shows continued product development, though funding and public releases have been less frequent than faster-growing category peers.

Operational Value 6/10

Code-reuse-based classification can reduce analyst time spent manually reverse-engineering samples that share lineage with known threats.

Market Momentum 4/10

Its most recent disclosed funding round is a $15M Series B; no larger, more recent rounds or major new customer disclosures were found in this research, suggesting comparatively modest recent momentum.

Category Disruption 7/10

Code-lineage/genetic comparison is a structurally different detection primitive than signature or hash matching, resistant to trivial attacker modifications that break simple hash-based detection.

Real-World Efficacy 6/10

The approach has a sound technical rationale, but independent, named-incident validation of Intezer's real-world detection accuracy was not found in this research.

Enduring Relevance 7/10

Code-lineage analysis remains relevant as attackers increasingly reuse and repackage existing toolkits, including through AI-assisted variant generation.

Why CISOs Should Care

Intezer helps malware-analysis teams quickly determine whether a new sample is a variant of a known threat family, cutting reverse-engineering time compared to starting classification from scratch.

What Makes It Different

It classifies malware by comparing reused code fragments against a reference database, a detection method resistant to the superficial hash and signature changes attackers use to evade traditional detection.

The Matrix Verdict

58/100 — INCREMENTAL INNOVATOR

A technically sound, structurally differentiated malware-analysis approach with a relatively small, quiet funding and momentum profile compared to more recently funded category peers; a solid but lower-momentum middle-tier player.

Editorial Note: Claims vs. Verified Findings

Funding figures are corroborated by independent press coverage (TechCrunch, VentureBeat); efficacy and detection-accuracy claims are vendor-sourced, and no independent third-party benchmark was located.

Sources