Recorded Future Intelligence Cloud vs. ZeroFOX

Recorded Future is mainly beneficial to the SOC. As part of the Monitoring team, Recorded Future makes the investigation of the alarms a lot easier for me. It can show the reputation of the IP/domain or even hashes which helps me redirect my focus to potentially malicious network activities.

Incentivized

ZeroFOX is well suited for companies who want to track and takedown accounts that are impersonating them but isn’t so great for personal use - it’s built well for medium large companies who have a large workload.

Incentivized

• Searching across multiple sources at the same time
• Indexing information in real time
• Dashboards, statistics and heatmaps about a certain topic

Incentivized

• Great overall picture of all accounts that aren’t protected by our company.
• UI is very easy to use and quick clicks let you navigate to where to need to be efficiently.
• Very fast customer service - we have a company partner that responds quickly and to the point.

Incentivized

• For the Browser extension, since the main purpose is to present information with regards to the IP, I think it's best to give us an idea of where the IP originated/some additional information about the organization it belongs to.

Incentivized

• Would like to see email integration within the system if possible.
• Would be great to have language options within the system for quick translations.

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

• We've been able to identify leaked credentials and close those accounts off.
• We've also been able to identify malware being distributed or spam being sent out by customers using our infrastructure. Again we could shut off those accounts.
• Their domain-monitoring allows us to identify typo-squats and issue domain-takedowns for those (or at least add them to our monitoring / detection)

Incentivized

• Reducing rogue threats may have saved us from negative situations where customers may have thought an impersonating account was really us.
• Prevention of social media backlash.

Incentivized