Recorded Future Reviews

Being a financial organization, we had a lot of domains, and we were using a lot of public-facing applications. We had listed our public IPs over there, and if any of our licensed applications were found on some sort of dark web or anonymous or rogue IP, or a fake application was being run by using our domain name or using our logo or trademark pictures without authorization, Recorded Future reported it to us.

We were using the cloud service. We were just using it as SaaS.

In one particular case, an impersonation attempt was made on social media sites. Our executive's name was being used, and people were offering jobs. Fake IDs were created on behalf of our executive management, and they were offering jobs or offering different services on behalf of our organization. We took it up with Recorded Future. We reported their IDs. If it was on Twitter or Facebook, they took it up with them, and they blocked and took down their IDs. This was one of the cases that we experienced.

Other than that, we saw an application that was published on Play Store, which was using our graphics and logos. It was also like an impersonation attempt. The application was using our logo and offering services on our behalf. We requested Recorded Future. They were very responsive. They initiated a request with Google, and they took it down within a few days.

I found it to be very useful. The intel that they were providing us over the emails was very good. If it found any hashtag in our organization's name on the dark web, a rogue IP, or a marketplace, it would send us an email and notify us that this is being mentioned, and if we want, they can take some action. Along with that, just like the normal platforms, you can also check IPs, hashes, scores, and the global trends on the current vulnerabilities and rogue IPs across the globe. It was quite useful and informative.

For login, they had two-factor authentication, which was quite good.

Their dashboards were very informative. We could edit them or make them the way we wanted them to be. 

We can get the data of different malware active throughout the globe, but it would be good if we can do sandboxing of a file. For example, on Any Run, we can perform sandboxing of malware along with their intel about a particular file or hash. It would be great if they have a feature like that.

I've been working with this solution for almost two years.

It was scalable. We could have as many IDs as we wanted. It all depended on the license. We could expand it as per our requirements.

In one instance, we had to get their technical team on board for justification and explanation of things that we couldn't understand. It was regarding the intel provided on the images and the trademarks of our organizations. A lot of fake pages and posts were being posted using our trademark, pictures, etc. We took it up with their technical team, and they told us how things are working and how the AI is working to correlate our data.

I'd rate them a nine out of ten because most of the time, as soon as we raise any case or have any queries, they get back within hours or minutes.

It was cloud-based, so we didn't have to do too many things on our end. It was just an API connection that we had to do. Our SIEM solution was also integrated with the threat intelligence of Recorded Future. It was pretty handy and easy to configure.

We could implement it in a few days. There were a lot of requirements and queries regarding:

• How will it access our systems?
• Which ports need to be enabled?
• Do we have to go public to expose our network or connectivity?

Sorting these things took time. Overall, it took one to two weeks.

Go for it because of the features they are offering. They are quite competitive in the market. Along with the basic features, you can also get specific features you want. For example, we took the takedowns and watchlist services. It's a good product.

I have not worked with other paid threat intelligence platforms. I have used the public ones though. It offers great value for your money, and there are also notifications and things like that. They offer quite good services.

Overall, I'd rate it an eight out of ten.

We're using this product to support our front team with regard to threat intelligence and provide brand protection and prevent cyber threats. It also provides a strategic perspective for the company executives.

I like the ability to conduct and build any query I want without any limitations. It also provides a variety of sources which is great.

I think the user experience could be improved. I'd also like to see an improvement in the visibility of malware and international APT attacks. Those are the two important things for me right now. In any future release, I'd like to see a greatly simplified ability to extract data from their tickets. 

I've been using this solution for five years. 

The solution is stable. 

The solution is scalable; we have three users in the company and around 20-30 users among our customers. 

The technical support is quite good. 

The implementation is not overly simple but not overly complex either. Deployment takes a few minutes. 

The solution is very expensive, costing several thousands of dollars per year. The cost depends on the model you buy and the API but I think it's worth the investment. 

I recommend this solution as it's currently the best on the market for threat intelligence. It's not perfect, though, so I rate it eight out of 10. 

We use Recorded Future for threat intelligence.

The most valuable feature is Recorded Future's protection of exposed customer data on the hardware side.

When you add one website to Recorded Future, it should automatically call all other websites and social media platforms.

I deployed Recorded Future for a client. They've used the product for more than three years. 

Every cloud solution is stable. Recorded Future also has auto-scaling. 

Recorded Future is a scalable product. 

Setting up Recorded Future is straightforward.  It's a cloud-based service, so you only need to contact their team and ask them to create an instance. Everything is hosted on their cloud so it takes no time to deploy.

We see an ROI from using Recorded Future. It has dark web monitoring, which our previous solution lacked.

We have a yearly subscription. The license is based on the modules and features you use. For example, it's a different cost if you want to cover the dark web and deep scanning. 

I rate Recorded Future seven out of 10. I can recommend Recorded Future, depending on a company's budget and the features it needs. 

We used Recorded Future to find many things like passwords captured in the dark net and websites selling other information regarding our domains. We use the solution to search for our brand or other institutions on the darknet.

Recorded Future helps our organization to be a step ahead of future attacks.

The most valuable feature of Recorded Future is how it detects everything regarding our domain.

Recorded Future is a very expensive solution, and its pricing could be improved.

We recently acquired Recorded Future.

Recorded Future is a stable solution, and we haven't experienced any downtime with it.

Recorded Future is a scalable solution. Around five users are using the solution in our organization. We are spread across the country and have around 30,000 endpoints for Recorded Future.

We are still learning how to use the solution. I think Recorded Future has a normal deployment or a normal learning curve.

It takes around three months to deploy the solution.

Before choosing Recorded Future, we evaluated other options like Mandiant and FortiRecon. We chose Recorded Future because it gives much better results.

Organizations must have at least two dedicated technicians working with the solution since the learning curve is a little big. To use the solution to its maximum capacity for the first year, having at least two technicians working with Recorded Future is better.

Overall, I rate Recorded Future ten out of ten.

As an analyst serving several clients, our team relies on Recorded Future to receive timely alerts related to using underground screen searches. This involves using an algorithmic code feature to gather the specific data we need, which then triggers an alert for us. When we receive the alert on the platform, we assess it to determine if it pertains to our client's needs. If it does, we report our findings to the client.

I have been working with these types of services and tools for a while. When compared to other tools, Recorded Future provides good alerts. For example, clients' credentials, documents posted from GitHub, and other testing sites.

The most valuable features of Recorded Future are the useful alerts it provides. If we are monitoring a domain, the solution will provide us with an alert in a prompt manner. It is simple for clients to receive alerts. The advanced search is useful for more accurate filter results.

The solution could improve in reducing the false positives. However, most of the other tools on the market have false positives. If they enhance their data algorithm, it could improve the accuracy of results and minimize false positives. Identifying patterns of false possibilities can aid in developing better reporting features that could potentially eliminate them in the future. This recording feature tool could benefit from adopting similar techniques utilized by other tools to enhance its functionality. By doing so, it could minimize the need for manual efforts in distinguishing true positives from false positives, ultimately reducing the workload.

In a future release, it would be beneficial if the vendor would add more features to create one full solution that can meet the needs of the whole cybersecurity incident purpose.

I have been using Recorded Future for approximately four years.

I have never experienced any downtime during our production hours. Maintenance work is typically scheduled during off-peak times, so it does not cause any disruptions. As a result, we can confidently rely on this tool for our work without any issues.

The solution provides beneficial results. 

I rate the scalability of Recorded Future a nine out of ten.

We faced some difficulties initially due to our unfamiliarity with the tool. However, after reaching out to their tech support team, we received excellent assistance from their cooperative staff. With their help, we were able to resolve our issues quickly and efficiently. However, there have been some times when the knowledge of the agent could have been better.

I rate the support of Recorded Future an eight out of ten.

Positive

I have previously used other tools, such as legacy tools.

The price of the solution is worth it. The overall performance of the solution outweighs the cost.

I rate Recorded Future nine out of ten.

Recorded Future covers a lot of different use cases. For example, we are using it for threat intelligence research. We do use the tool to make active research on what is found around the threat. We look at patterns, for example, and see what can be elaborated on from that. 

In another use case, we use it to get all the IOCs registered and use it after that to allow other intelligence technologies to feed into that to prevent any issues for customers.

We can also use it for active monitoring in the customer interface. We can monitor the business side of a campaign. We can monitor for specific threats or market activity on the dashboard. We can develop queries to run in a continuous mode in order to get the best reviews. 

With all the related IOCs we were able to provide really deep information about the impact, about where we are with the big campaign, and also provide tools that were a priority to be a preventative block on the customer side. It was helpful in that sense.

As a threat intelligence tool, it's very helpful.

The stability is very good.

Technical support has been helpful.

It's really easy to create dashboards and modify them to fit what you need.

The product is too big. The vast majority of data you have. You can run queries and you can get more data than you probably want, and you have to take a deep dive a lot of the time.

The solution would benefit from introducing automation. When you are running a query just to get the data you're looking for, the result comes back so big, as it will be able to return a lot of results from different sources. Sometimes it could be a bit messy. Automation would help streamline and simplify.

The tool can be pricey, especially for smaller companies.

I was working with the tool in November. I've used it in the last 18 months or so.

I have a good impression of the stability of the product. Any time that we needed it, it was there. It is always up and running and we didn't have any issues with it. There are no bugs or glitches, for example, and it didn't crash or freeze.

We haven't attempted to scale or optimize the solution. I can't say how easy or difficult the process would be.

We only have one license feed and have up to ten users on it. We're already beginning to increase usage a bit.

Technical support has been pretty good so far. I haven't had any issues with them. We're quite satisfied with the level of service provided.

I didn't previously use a different solution.

By the time I joined the company, the tool was already in place. Therefore, I can't speak to the initial implementation or deployment process. I can't say if it was difficult or simple or how long it took.

As a cloud solution, it doesn't require much maintenance. Anything else, such as automation using a document, would be on our side, and we'd update it as needed.

We haven't seen an ROI. The area that it was used for, as a report, initially was assigned to be used internally only and after that, we decided to try it out as a service to our customers. However, we never sold that service, so we never got a return immediately. 

The pricing is quite high compared to other intelligence tools.

The licensing is based on the user and also the amount of usage. It's expensive in terms of what you can get. You need to be a very sizable company in order to get any real value as it's quite a sizable tool. There are other tools on the market that are less expensive - especially for smaller companies.

There aren't any additional costs above the standard licensing fee, although there are some add-ons you can get that can expand the solution's capabilities. 

At the moment the solution is hosted on a SaaS. It's hosted on their own cloud that they are managing. We only have access to a part that is completely isolated from other customers and in another area. 

As far as I know, we are using the latest version of the solution. As it's cloud-based, it's constantly updated independently.

If a company is ready to introduce the solution, my main recommendation would be to have a really, really good threat intelligence team working on-site beforehand. If you don't have a good design or a good knowledge of threat intelligence you will never get the insights you need or use the tool to its full potential.

I'd rate the solution nine out of ten. It's quite an expensive solution. If it was less expensive, I'd likely rate it higher.