Try our new research platform with insights from 80,000+ expert users

ThreatConnect Threat Intelligence Platform (TIP) vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ThreatConnect Threat Intell...
Ranking in Threat Intelligence Platforms (TIP)
7th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
6
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (16th)
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
9th
Average Rating
8.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (2nd)
 

Mindshare comparison

As of October 2025, in the Threat Intelligence Platforms (TIP) category, the mindshare of ThreatConnect Threat Intelligence Platform (TIP) is 5.6%, down from 6.5% compared to the previous year. The mindshare of ZeroFOX is 4.0%, down from 4.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Market Share Distribution
ProductMarket Share (%)
ThreatConnect Threat Intelligence Platform (TIP)5.6%
ZeroFOX4.0%
Other90.4%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Aadarsh Dawn - PeerSpot reviewer
Offers features like response capabilities and automation response and automation orchestration
ThreatConnect aggregates and operationalizes Threat intelligence data and sources across internal client environments. It leverages Automation and built in Case Management to streamline and automate threat intelligence-driven processes and investigations within client environments ThreatConnect…
AS
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like their customer support."
"ThreatConnect has a highly user-friendly interface."
"It's a solid platform and is stable enough. It is not complicated and is easy to use."
"The most valuable features are ease of use and the ability to customize it."
"We have been able to see a return on investment as our clients believe in us more."
"The product automatically generated a threat score based on the maliciousness of an IP."
"The tool's installation, integration, and playbooks are very straightforward."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
"ZeroFOX has no language limitations. It can detect many languages."
"I rate ZeroFOX a ten overall."
 

Cons

"They should make it a little bit easier to generate events and share them with the community"
"It would be good to have more feeds and more integrated sources for enrichment."
"I couldn’t get any training videos online when I was working with the tool."
"Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats."
"Support is an area with which nobody is ever fully satisfied, so it can be improved."
"I would like to see improvements in the time zone support of their customer service, considering users are from different time zones."
"Integration is an area that could use some improvement."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
"ZeroFOX is not configured to grab the information automatically, including the news."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours."
 

Pricing and Cost Advice

"The price of this product is in the mid-range, not too expensive, nor inexpensive."
"The price could be better."
"The tool is expensive."
"I rate the product price as six on a scale of one to ten, where one is extremely expensive, and ten means it is cheap."
Information not available
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
868,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
8%
Government
7%
Manufacturing Company
6%
Financial Services Firm
19%
Computer Software Company
12%
Comms Service Provider
6%
Manufacturing Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise23
Large Enterprise4
No data available
 

Questions from the Community

What do you like most about ThreatConnect Threat Intelligence Platform (TIP)?
The product automatically generated a threat score based on the maliciousness of an IP.
What is your experience regarding pricing and costs for ThreatConnect Threat Intelligence Platform (TIP)?
The pricing seems a bit high for smaller companies. It would be beneficial if they had pricing tailored to different client sizes.
What needs improvement with ThreatConnect Threat Intelligence Platform (TIP)?
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial...
What do you like most about ZeroFOX?
The best thing about the tool is that its backend team is pretty good and has a strong engineering team.
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Customer Case Studies & Use Cases
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about ThreatConnect Threat Intelligence Platform (TIP) vs. ZeroFOX and other solutions. Updated: September 2025.
868,706 professionals have used our research since 2012.