Try our new research platform with insights from 80,000+ expert users

Group-IB Threat Intelligence vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Group-IB Threat Intelligence
Ranking in Threat Intelligence Platforms (TIP)
10th
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
No ranking in other categories
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
8th
Average Rating
8.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (2nd)
 

Mindshare comparison

As of January 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of Group-IB Threat Intelligence is 1.9%, down from 3.4% compared to the previous year. The mindshare of ZeroFOX is 2.6%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Market Share Distribution
ProductMarket Share (%)
ZeroFOX2.6%
Group-IB Threat Intelligence1.9%
Other95.5%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

ALEX LOGINOV - PeerSpot reviewer
Managing Partner at INTEGRISEC CONSULTING
Completely satisfied with the way the report is prepared and easy to setup
We did use it for threat detection, but not directly. I analyze multiple reports, including this one, and assess my client's infrastructure. I identify threats outlined in the reports that may be relevant to the client's infrastructure, and then I help them build detection use cases. There's no automation. We don't do anything automatically at this point. It's all manual and based on analysis. I can't integrate it into automatic feeds because the report outlines threats that may not be relevant to the client's infrastructure. So, I do the analysis and integrate it manually. I'm completely satisfied with the way the report is prepared. It's a good report.
AS
Senior Consultant at LTI - Larsen & Toubro Infotech
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have found the site intelligence features to be the most valuable."
"Threat Intelligence's best feature is threat activation."
"The tool's most valuable feature is the sandbox."
"The totality of the recordings is quite important. The networks, the new threat actors, the new methods, tactics, techniques, and procedures."
"The most valuable Group-IB Threat Intelligence features are their detections, especially in terms of account and card information leakage. This data sets Group-IB apart from some of the competition."
"I rate ZeroFOX a ten overall."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
"ZeroFOX has no language limitations. It can detect many languages."
 

Cons

"The web intelligence could be improved. It is not as good as the intelligence from other solutions."
"The lack of appliance-based or on-premise options for this solution is its biggest downfall. Clients request them often."
"Group-IB Threat Intelligence should improve integration for SIEM and SOAR solutions."
"Threat Intelligence's OT security could be improved."
"As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours."
"ZeroFOX is not configured to grab the information automatically, including the news."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
 

Pricing and Cost Advice

"Group-IB Threat Intelligence's pricing is reasonable."
"Threat Intelligence is costly, but it gives value for money."
"The pricing is alright. It's right on the mark."
Information not available
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
11%
Manufacturing Company
8%
Outsourcing Company
6%
Financial Services Firm
17%
Manufacturing Company
9%
Computer Software Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Group-IB Threat Intelligence?
The pricing is alright. It's right on the mark. It costs money, but it's not too high. It's reasonable. For me, it's a reasonable price for the quality of the product.
What needs improvement with Group-IB Threat Intelligence?
As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework. Even though it is done in the report, it could be done better.
What is your primary use case for Group-IB Threat Intelligence?
I used it to build the strategic threat forecast. The annual forecast for clients.
What do you like most about ZeroFOX?
The best thing about the tool is that its backend team is pretty good and has a strong engineering team.
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Overview

 

Sample Customers

Information Not Available
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about Group-IB Threat Intelligence vs. ZeroFOX and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.