# Recorded Future vs ZeroFox

| Attribute | Recorded Future | ZeroFox |
|---|---|---|
| **vioscaleAI score** | 48.6 (6% (low)) | 42.8 (25% (low)) |
| content.faq | `[{"answer":"A threat intelligence platform that aggregates and correlates threat signals from technical infrastructure, dark web sources, public internet, and adversary activities. It combines automated analysis with expert human insights to provide organizations with actionable threat awareness and support rapid, informed security decisions. It is indexed under Dark Web Monitoring.","source":"https://www.recordedfuture.com","question":"What is Recorded Future?","confidence":0.6},{"answer":"We have confirmed browser-based access to Recorded Future. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.recordedfuture.com","question":"What platforms does Recorded Future support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Recorded Future, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.recordedfuture.com","question":"Can Recorded Future be self-hosted?","confidence":0.6},{"answer":"We have confirmed 4 integrations for Recorded Future, including Microsoft Azure Sentinel, Microsoft Defender ATP, IBM X-Force Exchange and Phantom. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.recordedfuture.com","question":"What does Recorded Future integrate with?","confidence":0.6}]` | `[{"answer":"A cybersecurity platform that automatically discovers and monitors your online presence across domains, social accounts, and exposed data, then helps teams prioritize and disrupt threats in real time. It is indexed under Dark Web Monitoring.","source":"https://www.zerofox.com","question":"What is ZeroFox?","confidence":0.6},{"answer":"We have confirmed 4 integrations for ZeroFox, including TIP, SIEM, SOAR and EDR. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.zerofox.com","question":"What does ZeroFox integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 for ZeroFox. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as ZeroFox not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.zerofox.com/blog/security-threats-at-the-2026-fifa-world-cup-what-intelligence-reveals-before-kickoff/","question":"What security certifications does ZeroFox have?","confidence":0.7}]` |
| deployment.options | `{"cloud":true}` | - |
| description.long | A threat intelligence platform that aggregates and correlates threat signals from technical infrastructure, dark web sources, public internet, and adversary activities. It combines automated analysis with expert human insights to provide organizations with actionable threat awareness and support rapid, informed security decisions. | Detects and alerts users when their personal information appears on social media, public data broker sites, or dark web forums; automatically removes exposed credentials from public databases and monitors social accounts for unauthorized access and fraudulent activity. |
| features.capabilities | `{"human_analyst_validation_service":true}` | - |
| integrations.count | 100 | 4 |
| integrations.list | `[{"name":"Microsoft Azure Sentinel"},{"name":"Microsoft Defender ATP"},{"name":"IBM X-Force Exchange"},{"name":"Phantom"}]` | `[{"name":"TIP"},{"name":"SIEM"},{"name":"SOAR"},{"name":"EDR"}]` |
| platform.support | `{"web":true}` | - |
| pricing.model | - | commercial |
| security.soc2 | - | yes |

## Capabilities (Dark Web Monitoring)

| Capability | Recorded Future | ZeroFox |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Credential infostealer log parsing | - | - |
| Brand impersonation domain takedowns | - | - |
| Executive vip physical threat monitoring | - | - |
| Dark net hacker forum infiltration | - | - |
| Telegram discord illicit channel scraping | - | - |
| Public github source code leak detection | - | - |
| Fraudulent social media account takedowns | - | - |
| Active directory okta forced password reset | - | - |
| Human analyst validation service | ✓ | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: vioscaleAI. Generated 2026-10-16T00:21:26.162Z. "-" = undocumented, not absent.*