No more typing reviews! Try our Samantha, our new voice AI agent.

SOCRadar Extended Threat Intelligence vs VirusTotal comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SOCRadar Extended Threat In...
Ranking in Threat Intelligence Platforms (TIP)
10th
Average Rating
9.0
Reviews Sentiment
6.8
Number of Reviews
4
Ranking in other categories
Digital Risk Protection (6th), Attack Surface Management (ASM) (17th)
VirusTotal
Ranking in Threat Intelligence Platforms (TIP)
4th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
11
Ranking in other categories
Anti-Malware Tools (4th)
 

Mindshare comparison

As of May 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of SOCRadar Extended Threat Intelligence is 2.5%, up from 2.4% compared to the previous year. The mindshare of VirusTotal is 3.4%, down from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
VirusTotal3.4%
SOCRadar Extended Threat Intelligence2.5%
Other94.1%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Pedro Ladeiro - PeerSpot reviewer
Senior Cyber Security Expert at a computer software company with 201-500 employees
Centralized threat intelligence has protected vip accounts and detects dark web exposure quickly
Pricing is a problem as I see it. The credit-based model is extremely expensive. If a company does not have at least €70,000 to invest, they tend to avoid the solution because of the cost structure. The issue is not necessarily the pricing itself, but rather the credit-based model. If the pricing were structured as a flat fee of €70,000 or €30,000 with unlimited searches and unlimited credits, I would see much greater value in the solution. However, with the current model, you pay tens of thousands of euros and still have limitations on your searches. For an MSSP like myself, this is particularly challenging because we have dozens of customers. If we conduct a search for every customer monthly, bi-monthly, or even quarterly, the credits will be depleted by the end of the year or even sooner. The credits can become expendable very quickly, sometimes within a few months. This is the only downside of SOCRadar Extended Threat Intelligence. Otherwise, I believe it is almost the perfect tool for CTI. I consider it the leading CTI tool on the market. There are many others that try to get close to it, but they are not even close.
Chinmay Banerjee - PeerSpot reviewer
Advisor Adtech/Martech/API product/project Engineering at a financial services firm with 10,001+ employees
Helps businesses collect threat data while keeping privacy in mind and apable of detecting, blocking, and removing viruses and malware
There are two gray areas I still need to explore. I have worked with VirusTotal because it easily integrates with over seventy antivirus scanners and blacklisting services. In addition to those there is much scope to improve and add other services or integrations. The areas for improvement are that VirusTotal is not using much AI or generative AI models, while other competitors are starting to build them. For example, VirusTotal's work is based on the setup done by their engineers. If you want to do scanning or protection activities for a specific site, app, or device, that is the area VirusTotal is currently focused on. But other competitors are building AI models that can do things like left-side scanning and provide auto-generated reports. VirusTotal has predefined reports, but there is a lot of manual effort involved. Secondly, the API is very limited if I want to integrate VirusTotal with other applications. They need to build more connectors and provide support for Webhook connectors for the API. If you can't build your own connector, it's always good to have provisions for Webhook setup connectors across platforms. Thirdly, Kaspersky, a competitor of VirusTotal, is using a methodology called "gatekeeper." A gatekeeper is a security system that protects the inside of a building from outside threats. This is the model Kaspersky is currently using. You have your website set up, but the entire army of VirusTotal or Kaspersky is standing guard, protecting you from the first gate itself. Right now, VirusTotal detects threats from your domain, but it is always better to verify inside the domain and protect it from the first level when people or malware are entering. This first level of protection is lacking in VirusTotal right now. The security bridge and protection gate are missing.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most complete solution of all, which goes across everything and the entire spectrum, is SOCRadar Extended Threat Intelligence."
"The best feature that SOCRadar Extended Threat Intelligence offers is definitely the detection of leaks in the dark web."
"SOCRadar Extended Threat Intelligence offers relevant information about organizations, along with threat intelligence tailored to specific industries."
"SOCRadar Extended Threat Intelligence is a very proactive security providing product in the market, and it helps identify potential threats related to our organization that we currently found."
"VirusTotal provides 95% to 98% accurate information."
"VirusTotal provides 95% to 98% accurate information."
"The feature I like the most is the ability to see the MD5 or SHA-256 signature of the file, and also the composition of the file according to its segments."
"The initial setup is easy."
"It gives detailed information about suspicious IPs, which is one of its most valuable features."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"It is quite simple for anyone if they just want to check some suspicious URLs."
"I have never had any problems with stability or bugs while using VirusTotal."
 

Cons

"SOCRadar Extended Threat Intelligence does not handle growth well as my needs change."
"The customer support for SOCRadar Extended Threat Intelligence is average, as the support team is responsive and knowledgeable, although it takes some time to get responses."
"Pricing is a problem as I see it. The credit-based model is extremely expensive."
"However, pricing, interface, customization, AI, and integration could be improved."
"I would like to see improved correlation with other threat intelligence sources, not just reliant on its own database, to enhance the database of threat intelligence that VirusTotal offers."
"There should be room for improvement, particularly in the API side of things."
"I would like to see improvements in the score consistency and accuracy."
"VirusTotal has predefined reports, but there is a lot of manual effort involved."
"VirusTotal is hard to understand because you need to know Google Docs to create queries, and it doesn't have documentation for that."
"I would like to see improvements in the score consistency and accuracy."
"I would like to see an improved user interface and some automation."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
 

Pricing and Cost Advice

Information not available
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
"VirusTotal is an expensive solution."
"The pricing is very economical."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
893,438 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Outsourcing Company
12%
Computer Software Company
11%
Comms Service Provider
9%
Computer Software Company
13%
Financial Services Firm
11%
Comms Service Provider
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What needs improvement with SOCRadar Extended Threat Intelligence?
There are many things that could be improved in SOCRadar Extended Threat Intelligence. Firstly, it could benefit from improvements in SIEM SOAR integration, alert customization, and deeper threat c...
What is your primary use case for SOCRadar Extended Threat Intelligence?
I primarily use SOCRadar Extended Threat Intelligence for incident response and threat detection. Apart from threat monitoring and incident response support, SOCRadar Extended Threat Intelligence a...
What advice do you have for others considering SOCRadar Extended Threat Intelligence?
We have utilized the dark web intelligence sources from SOCRadar Extended Threat Intelligence, and they have been quite valuable for early threat detection, as the platform helps monitor dark web f...
What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
 

Overview

Find out what your peers are saying about SOCRadar Extended Threat Intelligence vs. VirusTotal and other solutions. Updated: April 2026.
893,438 professionals have used our research since 2012.