Intrusion Buys VigilAigent, $3.5M ARR, 1B Events/Day AI Platform

As AI-powered attacks become cheaper and faster to execute, cybersecurity vendors are forced to rearchitect their defenses from the ground up. Intrusion Inc.'s acquisition of VigilAigent signals a deliberate pivot to an AI-native stack, where the Oracle engine's 1 billion daily events and TraceCop's 8.5 billion IP histories converge to deliver predictive, autonomous threat mitigation. For security practitioners, this isn't just another M&A deal—it's a blueprint for how mid-tier vendors can leapfrog into the AI arms race.

Intrusion Inc. (NASDAQ: INTZ) has completed the acquisition of VigilAigent, a cybersecurity managed security service provider (MSSP), from Tego Cyber Inc. Announced after market close on June 29, 2026, the deal immediately adds approximately $3.5 million in annual recurring revenue (ARR) from a diversified base of multi-year contracts, an installed base of roughly 1,000 customers, and a reseller network of over 80 partners. The acquisition transforms Intrusion from a pure-play cyberattack prevention vendor into an AI-native cybersecurity platform play by merging VigilAigent's proprietary Agentic AI engine, called The Oracle, with Intrusion's own massive TraceCop threat intelligence database. The Oracle currently processes and learns from 1 billion security events each day; paired with TraceCop's historical data on more than 8.5 billion IP addresses, the combined platform promises deeper visibility, faster threat detection, and more actionable automated responses. Two senior executives from VigilAigent – Bobby Mikkelsen as Chief Executive Aigent and Mark Porter as Chief Revenue Officer – will join Intrusion's management team to drive integration and commercial strategy. A special investor call is scheduled for 10:00 a.m. ET on June 30, 2026.

“

Intrusion Inc.'s acquisition of VigilAigent signals a deliberate pivot to an AI-native stack, where the Oracle engine's 1 billion daily events and TraceCop's 8.5 billion IP histories converge to deliver predictive, autonomous threat mitigation.

This acquisition arrives at a critical inflection point for the cybersecurity industry. The rapid democratization of artificial intelligence has lowered the barrier for threat actors to develop and launch sophisticated, scalable attacks. As Intrusion CEO Tony Scott noted, AI is ‘reshaping the cybersecurity space… significantly reduc[ing] the cost, technical expertise and time required' to execute these attacks. In response, security vendors are racing to embed AI not just as a bolt-on feature but as a foundational element of their detection and response stacks. Intrusion's move is a direct response to this market shift, aiming to create a platform that can anticipate and neutralize threats before they materialize, rather than merely reacting.

The financial impact for Intrusion is both immediate and strategic. The $3.5 million in ARR nearly doubles the company's recurring revenue base, which has been historically modest. With approximately 1,000 new customers and 80+ resellers, Intrusion gains a ready-made distribution channel that would have taken years to build organically. The multi-year nature of VigilAigent's contracts provides revenue visibility, while cross-selling Intrusion's existing solutions into that base offers incremental growth potential. Conversely, VigilAigent's AI engine can now be offered to Intrusion's legacy customers, enhancing their protection and potentially reducing churn. The deal structure and purchase price were not disclosed, but given Intrusion's small market capitalization, it likely involved a mix of cash and equity, which could be dilutive to existing shareholders if not carefully managed.