Intrusion is a small cybersecurity company based in Plano, Texas. Its core product, INTRUSION Shield, is a SaaS-based network security solution that inspects every inbound and outbound network packet in real time and blocks connections to or from known malicious IP addresses. Rather than relying on malware signatures like traditional firewalls, Shield uses a reputation-based approach, evaluating each packet against a proprietary database of over 8.5 billion IP addresses. Shield is available as an on-premise hardware appliance, a cloud-based solution for AWS and Azure environments, an endpoint product for remote workers, and an OT Defender variant for critical infrastructure like water systems and power grids. Intrusion's two other products — TraceCop, a forensic threat intelligence database covering 20+ years of IP address reputation data, and Savant, a real-time network monitoring tool — are used primarily by U.S. government agencies. Government customers account for roughly 95% of revenue, which is split between consulting services (ongoing network monitoring and analysis, ~77% of revenue) and Shield SaaS subscriptions (~23%). Gross margins are high at roughly 76%, but Intrusion is deeply unprofitable at its current revenue scale. Revenue is highly concentrated, with three government customers each exceeding 10% of revenue. Intrusion is working to diversify through critical infrastructure contract expansion, cloud marketplace sales on AWS and Azure, a licensing partnership with PortNexus that embeds Shield into school safety and law enforcement products, and a rebuilt channel partner program targeting MSPs and MSSPs.
Read full business overview →Mid to long-term bullish thesis
View →Mid to long-term bearish thesis
View →Mid to long-term bull-bear debate
View → NEWSummary and scoring of the bull-bear debate
View →Find ideas with similar bull or bear theses
View →Investor-relevant company attributes
View →Key risks to the business
View →Comparisons of annual risk disclosures
View →