Try our new research platform with insights from 80,000+ expert users

SOCRadar Extended Threat Intelligence vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SOCRadar Extended Threat In...
Ranking in Threat Intelligence Platforms (TIP)
10th
Ranking in Digital Risk Protection
5th
Average Rating
9.0
Reviews Sentiment
5.8
Number of Reviews
2
Ranking in other categories
Attack Surface Management (ASM) (16th)
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
8th
Ranking in Digital Risk Protection
1st
Average Rating
8.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Digital Risk Protection category, the mindshare of SOCRadar Extended Threat Intelligence is 6.1%, up from 2.4% compared to the previous year. The mindshare of ZeroFOX is 12.8%, down from 16.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Digital Risk Protection Mindshare Distribution
ProductMindshare (%)
ZeroFOX12.8%
SOCRadar Extended Threat Intelligence6.1%
Other81.1%
Digital Risk Protection
 

Featured Reviews

Pedro Ladeiro - PeerSpot reviewer
Senior Cyber Security Expert at a computer software company with 201-500 employees
Centralized threat intelligence has protected vip accounts and detects dark web exposure quickly
Pricing is a problem as I see it. The credit-based model is extremely expensive. If a company does not have at least €70,000 to invest, they tend to avoid the solution because of the cost structure. The issue is not necessarily the pricing itself, but rather the credit-based model. If the pricing were structured as a flat fee of €70,000 or €30,000 with unlimited searches and unlimited credits, I would see much greater value in the solution. However, with the current model, you pay tens of thousands of euros and still have limitations on your searches. For an MSSP like myself, this is particularly challenging because we have dozens of customers. If we conduct a search for every customer monthly, bi-monthly, or even quarterly, the credits will be depleted by the end of the year or even sooner. The credits can become expendable very quickly, sometimes within a few months. This is the only downside of SOCRadar Extended Threat Intelligence. Otherwise, I believe it is almost the perfect tool for CTI. I consider it the leading CTI tool on the market. There are many others that try to get close to it, but they are not even close.
AS
Senior Consultant at LTI - Larsen & Toubro Infotech
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most complete solution of all, which goes across everything and the entire spectrum, is SOCRadar Extended Threat Intelligence."
"The best feature that SOCRadar Extended Threat Intelligence offers is definitely the detection of leaks in the dark web."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
"ZeroFOX has no language limitations. It can detect many languages."
"I rate ZeroFOX a ten overall."
 

Cons

"Pricing is a problem as I see it. The credit-based model is extremely expensive."
"SOCRadar Extended Threat Intelligence does not handle growth well as my needs change."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
"ZeroFOX is not configured to grab the information automatically, including the news."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours."
report
Use our free recommendation engine to learn which Digital Risk Protection solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Comms Service Provider
9%
Outsourcing Company
8%
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What needs improvement with SOCRadar Extended Threat Intelligence?
Pricing is a problem as I see it. The credit-based model is extremely expensive. If a company does not have at least €70,000 to invest, they tend to avoid the solution because of the cost structure...
What is your primary use case for SOCRadar Extended Threat Intelligence?
I use SOCRadar Extended Threat Intelligence for VIP monitoring, CM tool monitoring, and CTI, specifically for early detection systems for our customers. If there is any leakage of customer accounts...
What advice do you have for others considering SOCRadar Extended Threat Intelligence?
I am not using their AI tool. I do not know if they have any AI currently. I did not check it, but every company nowadays has some AI platform or AI integration because it is a new niche. I basical...
What do you like most about ZeroFOX?
The best thing about the tool is that its backend team is pretty good and has a strong engineering team.
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Overview

 

Sample Customers

Information Not Available
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about SOCRadar Extended Threat Intelligence vs. ZeroFOX and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.