SOCRadar Extended Threat Intelligence Reviews

I use SOCRadar Extended Threat Intelligence for VIP monitoring, CM tool monitoring, and CTI, specifically for early detection systems for our customers. If there is any leakage of customer accounts, we know about it. If there is any information about them on the dark web, we are immediately informed. Overall, I use it for intelligence purposes.

My favorite feature is probably the API and the integration with the CM tool that allows for automated integration. The leak accounts feature is exceptionally valuable, as it provides high visibility to the dark web and hacker forums where we are immediately notified if any account or company within our scope appears. The visibility is quite comprehensive and the response is fast.

Pricing is a problem as I see it. The credit-based model is extremely expensive. If a company does not have at least €70,000 to invest, they tend to avoid the solution because of the cost structure. The issue is not necessarily the pricing itself, but rather the credit-based model. If the pricing were structured as a flat fee of €70,000 or €30,000 with unlimited searches and unlimited credits, I would see much greater value in the solution. However, with the current model, you pay tens of thousands of euros and still have limitations on your searches.

For an MSSP like myself, this is particularly challenging because we have dozens of customers. If we conduct a search for every customer monthly, bi-monthly, or even quarterly, the credits will be depleted by the end of the year or even sooner. The credits can become expendable very quickly, sometimes within a few months. This is the only downside of SOCRadar Extended Threat Intelligence. Otherwise, I believe it is almost the perfect tool for CTI. I consider it the leading CTI tool on the market. There are many others that try to get close to it, but they are not even close.

I have been using SOCRadar Extended Threat Intelligence for a couple of years, not only the advanced version but the whole product.

I have not experienced any stability issues. SOCRadar Extended Threat Intelligence is a very stable tool with no lack of performance. I cannot remember any instance of the system not working or being down. The tool has been perfect in this regard.

SOCRadar Extended Threat Intelligence is very scalable because they use MSSP as their main focus. It is scalable because you can have multiple sources and multiple customers, with everything going through the API. You can have a CM tool that scales with customers across it. However, the pricing prevents greater scalability. From one to ten, I would give it a seven out of ten just because of the pricing, as the pricing structure does not allow you to scale effectively without spending a significant amount of money. In terms of technology, I would give it a ten out of ten.

SOCRadar Extended Threat Intelligence's customer support is definitely strong. I have interacted with not only the sales team but also the customer support and their CTI experts across many companies where I worked and tried to purchase their services. I can tell you they are super fast, super helpful, and they seem to be quite knowledgeable.

I have definitely contacted the technical support and customer support for SOCRadar Extended Threat Intelligence. I have interacted with not only the sales team but also the customer support and their CTI experts across many companies where I worked and tried to purchase their services. They are super fast, super helpful, and they seem to be quite knowledgeable.

If I were to put SOCRadar Extended Threat Intelligence support on a scale from one to ten, ten being the highest, I would give them a solid seven or eight. I would not give them a ten because I did not have much interaction with them. The interactions I had were minimal, but they were quite good.

I have given this review a rating of ten out of ten.

Positive

I have used many alternative solutions. I basically use everything on the market, and when I see new ones, I use them. I use free OSINT tools as well. I use many of them, such as Hudson Rock and other similar ones. Hudson Rock is the one that gets closer, but it is more for infostealers and similar threats. The most complete solution of all, which goes across everything and the entire spectrum, is SOCRadar Extended Threat Intelligence. I use multiple free tools that, when combined, do not give me the same value as SOCRadar Extended Threat Intelligence provides. It is not the same as having ten tools versus having one. SOCRadar Extended Threat Intelligence was quite smart in consolidating all of this into one tool.

The initial setup is fairly easy. SOCRadar Extended Threat Intelligence does the whole work for us, and if we need to add an integration to our CM tools or anything else, it is super easy. They have a quite complete API tool. They have integrations for Palo Alto and other tools, or even for Sentinel, Rapid7, and others. They are really good at this. They have multiple integrations, and the implementation is fairly easy.

One person is enough to work with SOCRadar Extended Threat Intelligence team, such as a threat intelligence specialist who is able to do the job. It is basically easy because they will guide you through it. You do not need more people. You can always have one or two, but one is sufficient. You do not need that many.

I am not using their AI tool. I do not know if they have any AI currently. I did not check it, but every company nowadays has some AI platform or AI integration because it is a new niche. I basically use what they had from before, such as their threat intelligence, their guides, their background research, and their monitoring from Telegram. I do not use anything specifically labeled as AI from them. If they already have it implemented in the core of their solution, then I am using it and did not even know about it. They might have it, but not that I am aware of. I am not using something that is per se AI from them or used before.

I have used the unique dark web sources that SOCRadar Extended Threat Intelligence provides. I use the sources that they give me. Sometimes they provide even the Telegram chats and forums where they conduct their research. They are very transparent about this. We can go there and access the Onion links and everything. I use them, but not very often because when they do the work for me, I do not need to use them that much. However, for curiosity, I sometimes go in and check the sources.

SOCRadar Extended Threat Intelligence offers Takedown services. I have never used them because I never needed the service, as we never had an exposure that would require a takedown service from them. I did use the information once or twice to do it myself. We used the information that we had an impersonating domain and, instead of using their services which again requires credits and is expensive, I did the work myself. I contacted the provider and told them that the impersonation was not authorized, and we handled it ourselves. I never used their service and do not know how good it is. The issue comes down to credits and cost.

I have not used their Identical Phishing workflow for noise minimization capabilities. I have never used that tool because phishing is already integrated within Microsoft Exchange, and Microsoft already has pretty good threat intelligence with it, so we keep it within Microsoft. We mainly use Microsoft, or if we use Google, Google has their own services as well.

Attack Surface Threat Assessment is a really good feature because I can use it to get leads on customers. When I get a customer and input it there as an MSSP, it gives me the attack surface of the customer and their exposure. Again, you need some credits to make a search and complete the process. Before, you needed to ask them personally to add a customer. I believe they changed that so you can go on the fly and add it yourself, but previously you needed to ask them, which was not comfortable. Otherwise, the product itself is good because it gives you a good overview of the company's exposure. It was really good for getting leads. If you have a possible customer lead and input that domain, it will give you more information about the exposure of that possible customer and get you ready to win a new customer, which for me is a very important point when it comes to cybersecurity in MSSPs.

I had many consulting jobs with companies that wanted SOCRadar Extended Threat Intelligence and wanted more details on the operational side. One of the things I tell everyone is the ease of getting started with them because they are super fast, they are technical, and they help. When you pay such an amount of money, they will help you with everything.

SOCRadar Extended Threat Intelligence does not require any maintenance on my end. Everything is being taken care of by them from their API. For example, if you have it on your CM tool, it is taken care of by them. Only if you want to add more customers, you can do it yourself, but otherwise, everything is in the background with them. It is super easy. I do not need to deal with anything. I have never had to do any type of maintenance from my side. Even if I have the free tool or the complete tool, I have never had to do any maintenance.

Regarding the use cases for SOCRadar Extended Threat Intelligence, we made several implementations in dark web monitoring.

Whenever our organization is mentioned in Telegram, dark web monitoring, or social media phishing campaigns, we need a detection alert with some kind of analyst recommendation.

Our analyst will then go through the analysis to check for legitimacy and decide whether to approach for a takedown or handle it as a false positive.

In threat intelligence, we extracted some commercial feeds from SOCRadar Extended Threat Intelligence and made use cases by integrating them with our SIEM, receiving detection alerts when the IP, URL, or domain matched highly reputed domains.

We have used Cyber Threat Intelligence and Dark Web Monitoring modules specifically.

For dark web intelligence, the back-end research being conducted is valuable, but it requires some tuning.

Recently, I explored FortiBlade exposure, and upon release, SOCRadar Extended Threat Intelligence teams gathered information before some market leaders, such as Cybel or Recorded Future threat intelligence.

This is valuable because they captured important details and deployed them on the website.

Dark web sources sometimes generate false positive detection alerts, such as alerts related to BIN cards being data breached, as well as noisy alerts from Telegram about job portals.

However, we haven't experienced any breaches; instead, we received notifications about targeting from dark web mentions in private chat rooms, allowing us to take mitigation steps along with that.

SOCRadar Extended Threat Intelligence validating its IOC data with input from over 35,000 global users is very significant for our finance and NBFC industry, as we receive actionable IOCs related to campaigns and geopolitical events that we mitigate effectively.

For dark web intelligence, the back-end research being conducted is valuable, but it requires some tuning.

Regarding the noise minimization capabilities within the Agentic Phishing workflow, I understand that it lacks an organization-level baseline, and I need the analysis provided from Agentic responses to include a severity level.

The alerts generated for low-severity IOCs present high criticality, leading to unnecessary bombardments of alerts regarding reconnaissance and bot IP addresses.

As for the Attack Surface Threat Assessment feature, we haven't subscribed to it, but I accessed limited information through an open-source version.

It covers threat intelligence and subdomain enumeration, although it prompts for a license after a few alerts.

The actionable insights on breaches are limited, as some alerts are outdated.

I have used SOCRadar Extended Threat Intelligence about seven months ago, up to six months ago.

SOCRadar Extended Threat Intelligence scalability is good for MSSPs and a dedicated enterprise environment, providing features ideal for threat intelligence-based analysis.

When needing to expand, I would rate how well SOCRadar Extended Threat Intelligence adapts to new circumstances as ten.

I haven't utilized much customer support, but whenever I had doubts about the UI—such as needing to mention my organization with typosquatting or requesting more analysis based on triggered rules—I made a ticket, and I received analysis within a day.

The pre-sales team and my manager coordinated directly with customer support, with a designated SPOC for us.

I rate the technical support from SOCRadar Extended Threat Intelligence as nine.

Customer support is crucial. SOCRadar provides IOC-related insights that correlate with recent campaigns and geopolitical tensions, enabling us to understand whether the information suits the financial services or retail sectors.

Before SOCRadar Extended Threat Intelligence, I used CrowdStrike's inbuilt intelligence tool, Recorded Future, and Unit 42 specifically for various threat intelligence needs.

We have used a service provider, NFP.

We proactively blocked the IOCs provided by SOCRadar Extended Threat Intelligence before breaches occurred in other banks and financial industries.

For instance, we were alerted to certain finance-related assets being breached by malware, and we mitigated these IOCs effectively, seeing a very good return on investment.

I am a customer of SOCRadar Extended Threat Intelligence, and we are one of the customers.

What we have used SOCRadar Extended Threat Intelligence for are the intelligence modules.

We haven't used SOCRadar Extended Threat Intelligence takedown service; we rely on another takedown service developed by some IIT team as our internal tool.

These factors are crucial for my choice of SOCRadar Extended Threat Intelligence; we need reliable information to determine whether it is properly enriched, allowing us to analyze the data effectively.

As for the stability and reliability of SOCRadar Extended Threat Intelligence, the IOCs, commercial feeds, APT-based attack patterns, and vulnerability intelligence are all features that we find most reliable, especially when we receive alerts regarding tools related to vulnerability.

I appreciate the R&D team's efforts; regardless of how noisy the data is, we require information for our analysts. I rate this product a ten overall.

I primarily use SOCRadar Extended Threat Intelligence for incident response and threat detection.

Apart from threat monitoring and incident response support, SOCRadar Extended Threat Intelligence also helps track threat actor activity, leak credentials, and brand impersonation risk, which are some key features that definitely help the organization to secure everything. Among the features of advanced dark web monitoring, external attack surface management, and brand protection, I rely the most on advanced dark web monitoring, as it helps to identify leaked credentials, sensitive data exposure, and discussions by threat actors related to our organization. This is very useful because it provides early warning about potential security incidents and allows us to take proactive actions such as resetting compromised accounts and strengthening security controls before any attack happens.

SOCRadar Extended Threat Intelligence is a very proactive security providing product in the market, and it helps identify potential threats related to our organization that we currently found. It is a very important product for any organization that works on incident response and IOC correlation.

SOCRadar Extended Threat Intelligence has a positive impact on our organization by improving proactive threat visibility and early risk detection. With features such as dark web monitoring and external attack surface visibility, we can identify potential threats such as leaked credentials, which improves our overall response to threats and strengthens our security posture.

There are many things that could be improved in SOCRadar Extended Threat Intelligence. Firstly, it could benefit from improvements in SIEM SOAR integration, alert customization, and deeper threat context, which are areas for more effective enhancement for SOC teams.

Overall, SOCRadar Extended Threat Intelligence does great things, but one additional area that could be improved is advanced reporting and analysis. This improvement could focus on customizable reporting and dashboards, along with expanded automation and API integration.

SOCRadar Extended Threat Intelligence is definitely stable and provides much better security compared to any other solution.

SOCRadar Extended Threat Intelligence performs well in terms of scalability, offering a cloud-based solution along with on-premises options, allowing organizations to scale up their monitoring capabilities without requiring additional infrastructure.

The customer support for SOCRadar Extended Threat Intelligence is average, as the support team is responsive and knowledgeable, although it takes some time to get responses. It is better compared to other solutions.

Before choosing SOCRadar Extended Threat Intelligence, I evaluated other options, including Recorded Future, CrowdStrike Falcon Intelligence, and Digital Shadow.

Since implementing SOCRadar Extended Threat Intelligence, one of the key outcomes we have noticed is faster threat identification and improved response time, as the platform provides early visibility into potential risks such as credential risks and exposed assets. We have seen an improvement in threat detection speed and investigation efficiency, which helps us identify potential risks much faster compared to when we were not using this tool.

We have seen a positive return on investment from using SOCRadar Extended Threat Intelligence, particularly in time savings in threat investigation and monitoring. The platform aggregates intelligence from multiple sources and provides contextual insights, reducing the manual research required for tasks that previously involved manual dark web searches or correlation across different threat intelligence sources.

My experience with SOCRadar Extended Threat Intelligence concerning pricing, setup cost, and licensing has been generally positive, as the platform offers a flexible pricing model and modular licensing that makes it easier for organizations to scale as their threat intelligence needs grow. The implementation was straightforward because the platform is SaaS-based, requiring minimal infrastructure and allowing quick onboarding.

We have explored the AI-driven solution offered by SOCRadar Extended Threat Intelligence, which includes automated tools designed to assist with threat analysis and intelligence correlation. These features help streamline threat investigations by aggregating intelligence from multiple sources and providing contextual insights, reducing manual effort and improving our threat response speed.

We have utilized the managed takedown services from SOCRadar Extended Threat Intelligence, and they helped us quickly remove phishing sites and brand impersonation domains, improving our ability to mitigate external threats faster and reducing actionable time.

We have utilized the dark web intelligence sources from SOCRadar Extended Threat Intelligence, and they have been quite valuable for early threat detection, as the platform helps monitor dark web forums, marketplaces, and breached data sources where we can find leaked credentials and sensitive information. SOCRadar Extended Threat Intelligence allows us to take proactive remediation actions before they escalate into any incidents.

I would rate this product an eight out of ten.

My main use case for SOCRadar Extended Threat Intelligence is to obtain the external attack surface report. When I pull the external threat intelligence report, I can see leaked credentials from the dark web and determine whether it is from a recent data breach or how long ago it occurred. If it is recent, I take action regarding those breached credentials, any leaked credentials, and any vulnerabilities identified in my environment based on the threat intelligence report.

It is valuable to understand where I need to focus my organization's efforts from an external point of view, particularly which users are most susceptible to credential breaches.

SOCRadar Extended Threat Intelligence offers the best features, including the latest vulnerabilities available on the platform that help me identify if there are similar products utilized in my environment so I can remediate those vulnerabilities. The intelligence services such as dark web monitoring from SOCRadar have been particularly valuable.

The dark web monitoring feature has helped my team by identifying if any data relating to my organization is being sold on the dark web. Based on that data, I can identify what data was exposed, how it impacts my organization, and what kind of data was breached in that particular dark web marketplace. Based on that information, I can take precautions to protect my organization, employees, and any customer-related data that was compromised, and I will implement remediations according to the data found on the dark web.

SOCRadar Extended Threat Intelligence has positively impacted my organization by reducing the risk score. By monitoring leaked credentials and recently identified vulnerabilities, I am mitigating those vulnerabilities and credential breaches, thereby reducing my organization's risk score.

I have utilized SOCRadar's unique dark web sources, and by monitoring SOCRadar's threat intelligence platform, I can pull reports as soon as possible to address those gaps, which enhances my organization's risk score to a low level.

SOCRadar Extended Threat Intelligence could be improved by providing access through personal emails as well, instead of only offering access through company organization accounts. If I change organizations, I lose that access and must register again with a new company email address.

I have been using SOCRadar Extended Threat Intelligence for around two years.

SOCRadar Extended Threat Intelligence is stable.

SOCRadar Extended Threat Intelligence is scalable, and I can add my threat intelligence from my organization to SOCRadar to match and obtain a single pane of view.

The customer support for SOCRadar Extended Threat Intelligence is great. I would rate the customer support on a scale of one to ten as eight out of ten.

I previously utilized MISP, where I could track my organization's intelligence itself, and I chose it because it is open-source.

I evaluated Recorded Future and CrowdStrike threat intelligence before choosing SOCRadar Extended Threat Intelligence. It depends on different organizations as different threat intelligence platforms focus on their intelligence. For instance, Recorded Future monitors infrastructure-level intelligence more, while CrowdStrike focuses on different kinds of data such as incident response and threats they observe in their solutions. The prices also vary from solution to solution.

SOCRadar threat intelligence provides a rate of return on investment, but I do not have metrics. Currently, I am not taking new SOCRadar services at that level, so I could not provide those metrics.

I think the pricing, setup cost, and licensing for SOCRadar Extended Threat Intelligence are a good deal compared to other threat intelligence platforms such as Recorded Future, which costs too much. I hope SOCRadar premiums are lower than those platforms.

I rate SOCRadar Extended Threat Intelligence as a nine on a scale of one to ten, and this is reflected in my overall review rating of nine.

I chose nine because the platform provides intelligence that is tracked by SOCRadar team from all sources such as the dark web, Telegram, and any other platforms.

Regarding SOCRadar Extended Threat Intelligence's AI capabilities, I hope the SOCRadar team is following the guardrails they consider appropriate for organizations, and I hope it is not visible to outside people what kind of large language models and AI technology SOCRadar utilizes.

I find the accuracy and reliability of SOCRadar Extended Threat Intelligence's output to be better than competing solutions.

I am not utilizing SOCRadar Extended Threat Intelligence due to having separate threat intelligence platforms, as my organization tracks different kinds of threat intelligence and I already have a threat intelligence platform, so I am not purchasing the extra intelligence.

SOCRadar Extended Threat Intelligence is scalable, and I can add my threat intelligence from my organization to SOCRadar to match and obtain a single pane of view.

I would suggest others looking into using SOCRadar Extended Threat Intelligence to utilize the platform and their trainings so that they can use the SOCRadar platform in a much better way.

I am not currently utilizing SOCRadar's AI-driven solution with the forty-four orchestrated tools.

I have not currently utilized the managed takedown services provided by SOCRadar.

I am not certain about the significance of SOCRadar validating its IOC data with input from thirty-five thousand plus global users.

I am not certain about budget planning because I am not part of the IT budget planning team, which relates to my impression of the freemium tiers and flexible pricing offered by SOCRadar.

I prefer SOCRadar Extended Threat Intelligence for multiple use cases, starting from brand protection to assessing the external attack surface of the organizations I provide security solutions for, mainly the public open IP addresses, the ports, and the certificates that have been opened publicly.

When I try to do proof of concepts for my customers, I normally add the domain to SOCRadar Extended Threat Intelligence. Once I add the domain, it normally scans the domain and discovers all the external IP addresses and ports that have been opened. Then it scans from a brand protection perspective such as the bad names that circulate around that particular domain, or any threats targeted towards the open public IP address.

I have covered all the use cases that I get out of SOCRadar Extended Threat Intelligence.

Basically, the results that it gives me as an outcome after I integrate with my domain are impressive. Based on the results, I could also identify the threats that are targeted towards my domain and the bad reputations it has created based on the domain I have added. I also consider social media monitoring, which detects any fake news or bad reputations that have been created.

The main considerations that almost all the companies give are for brand protection because the brand is key for every business. If the brand looks damaged, there will be a business loss. Giving importance to brand protection is important for every organization so they can continue their business with a proper brand.

By integrating SOCRadar Extended Threat Intelligence, I have received many positive impacts. I was able to identify bad reputations that were created and also the publicly open malicious ports or any threats that are targeted towards the public open ports. I was able to stop all those external threats by using this platform.

I was able to eliminate the number of incidents that I received previously with the help of SOCRadar Extended Threat Intelligence. After implementing it, I was able to reduce the number of alerts or incidents I received. It also helped me save brand protection for my customers.

The accuracy and reliability of SOCRadar Extended Threat Intelligence is very high based on the artificial intelligence used. I couldn't find any rollbacks yet, and I am positively happy about the artificial intelligence offered by the platform.

SOCRadar has allowed me to do customization, so I don't think there are additional updates that need to be implemented inside the product. I am satisfied with the product for now.

The accuracy of SOCRadar Extended Threat Intelligence, validated with input from three to five thousand plus global users, is high compared to other threat intelligence. I have used open-source tools to check the results given by SOCRadar Extended Threat Intelligence, and it is mostly accurate. I don't think there is any need for improvement in the results provided by the software platform.

Compared to competitors such as Cyber and ThreatMon, the details provided by SOCRadar Extended Threat Intelligence are very accurate, and I get detailed reports. I don't think there are many improvements needed from SOCRadar's point of view.

Technologies always evolve. Continuous improvement helps all the customers around the world. Ten out of ten means your product is almost accurate, with no need for upgrades or updates in the future. That is why I marked it as eight.

I have used the managed takedown services from SOCRadar Extended Threat Intelligence. The takedown services are very helpful for any organization. Whenever there are specific domains misusing your brand, it is beneficial from the customer's perspective to accurately take down those domains. SOCRadar effectively helps to remove those domains.

I have been using SOCRadar Extended Threat Intelligence for the past six years.

SOCRadar Extended Threat Intelligence is very stable.

The scalability of SOCRadar Extended Threat Intelligence is very impressive. They help me scale the platform as needed, with nothing negative to comment about the scalability.

The customer support from SOCRadar Extended Threat Intelligence is very well articulated. I have access to the support portal, and whenever needed, I can log an incident and receive timely support from their support staff.

Governance and security is another important feature in cybersecurity. I have to ensure SOCRadar Extended Threat Intelligence is used correctly, and I think it should be implemented inside the security operations center and monitored twenty-four seven. By doing this, governance will facilitate a proper cybersecurity posture for all companies.

I would say to any companies that value their brands and want to protect their external attack surface, it is a must to adopt a solution such as SOCRadar Extended Threat Intelligence, which will be very useful for protecting your brand and identifying all malicious IP addresses and URLs targeted towards your domain. Monitoring this platform twenty-four seven will be very beneficial. Anyone using this platform should also consider SOC adoption. I provided a review rating of eight for this product.

I use SOCRadar Extended Threat Intelligence for cyber threat intelligence, CTI lookup, for IOCs, and for looking up advisories information, such as APTs group information. I also look up Dark Web intelligence and leaked information, including password leaks. Additionally, I use it for takedown in different social media platforms such as Facebook, Twitter, and LinkedIn for impersonation and brand protection mostly.

My main use case is that SOCRadar Extended Threat Intelligence's dashboard offers everything I need and their alerting system, once configured properly, provides everything necessary to monitor all attack surface and monitor all leaked passwords. I also use it for Dark Web monitoring where I query the Dark Web to look up additional information that may not come up in the dashboard.

The impact of using Dark Web monitoring and querying the Dark Web is that we can be even more proactive, allowing us to actually search for leaks or things happening in the Dark Web easily from SOCRadar Extended Threat Intelligence solution.

I used the managed takedown, and the takedown services are really good and helpful. They provide all the steps SOCRadar Extended Threat Intelligence is taking to ensure the takedown succeeds. If the takedown is successful or fails, they provide the reason why the takedown failed. This is really great, and we rely one hundred percent on SOCRadar to provide the takedown.

For the IOCs, I also only use the IOCs provided by SOCRadar Extended Threat Intelligence and I trust their validation. I have had no problems regarding the IOCs. I found them very helpful, so I trust them regarding this.

The best features of SOCRadar Extended Threat Intelligence are the Takedown feature and the dark market feature, and also the leaked password monitoring where I can see what passwords in the organization have been leaked. These are really the best features I see value in from SOCRadar's solution.

The Takedown solution in SOCRadar Extended Threat Intelligence is amazing because it feels like they support me by giving all information regarding the takedown process. I can see in the solution all the steps they are taking to ensure the takedown and if there is any problem along the way. Additionally, SOCRadar support is responsive and gives all information when asked about a specific takedown. In the end, if a takedown is possible, I feel it will go through without any problem with their support. If the takedown is not possible, I have all the information explaining why the takedown was not possible, so I can proceed forward and know how to handle such cases.

SOCRadar Extended Threat Intelligence has really impacted my view of the organization, especially what is being discussed on the Dark Web. Regarding the outcome, I feel I now have a better view of what is happening with the organization, the attack surface, supply chain vulnerabilities, and what is coming up with the supply chain. SOCRadar Extended Threat Intelligence has greatly improved the security posture regarding all of this. We feel more secure and more alerted about what is happening with the brand and company.

The dashboard and alerting, especially the dashboard, needs some fine-tuning at first. At first, there was a lot of noise in the dashboard, with some things that were already taken care of reappearing in the dashboard. Once I fine-tuned it and selected what I wanted to see, the dashboard became really the best thing in the solution. Once everything is fine-tuned, I need only to look at the dashboard.

Regarding improvement, SOCRadar Extended Threat Intelligence is already advanced and well-mature. Perhaps they could improve the dashboard slightly, though the navigating system is quite efficient and the dashboard is efficient. There is an AI assistant with everything I need, so I do not know of any improvement to suggest to make it better.

Regarding improvement, I do not really have anything to say. They shared their roadmap with me a few times ago, so I will let them provide new metrics and new information to make it better. I do not have anything to add regarding improvement. The solution is quite mature right now, so I have nothing to add.

I have started with SOCRadar Extended Threat Intelligence for more than a year.

The customer support is actually really great and really helpful. I have had no problem with the support. I would even say that the customer support is one of the best selling points regarding the solution.

SOCRadar Extended Threat Intelligence's solution is the first one I used, but before going with SOCRadar Extended Threat Intelligence, I explored the solutions provided in the region. I checked with Recorded Future, Group-IB, and Kaspersky Threat Intelligence, but I did not find what I needed and the pricing was very high for Group-IB and Recorded Future, so in the end I settled with SOCRadar Extended Threat Intelligence.

Regarding return on investment, I really utilized the takedown services and that really helped me get better control on brand images. Regarding metrics, I do not know if I have any metrics to give. I can say that the solution is very helpful and can be used by only one or two employees, which is great. This reduced the employee's workload, which is really helpful. However, I do not know if I can say anything more about the return on investment.

I think the pricing is really one of the best I can find in the region regarding a solid, mature CTI solution, meaning an extended threat intelligence solution. When compared to the competition such as Group-IB or Recorded Future where they gave me a very high price, SOCRadar Extended Threat Intelligence pricing is really much better for a very good set of features. These are mature features, so it is really good. Regarding setup cost, the setup is actually part of the licensing. During the first purchase, the SOCRadar Extended Threat Intelligence customer success team will help me put the platform in place, which is really great and helpful. The licensing is set in different bundles and it can really be optimized if I know exactly what I need, and that is really great.

I checked with Group-IB, Recorded Future, and Kaspersky Threat Intelligence solution.

For brand protection, I had my partner, or more of a client who had someone publishing on the internet, especially on LinkedIn, about their vulnerabilities or their scan results about their attack surface vulnerabilities. I quickly got in touch with SOCRadar Extended Threat Intelligence so they could take down those posts because they directly impacted my client's image. The response from SOCRadar Extended Threat Intelligence was amazing. They supported me throughout this process and the post was quickly taken down, I think it was taken down in about a day, something between 24 to 48 hours. It was a very good experience.

SOCRadar Extended Threat Intelligence has really impacted my view of the organization, especially what is being discussed on the Dark Web. Regarding the outcome, I feel I now have a better view of what is happening with the organization, the attack surface, supply chain vulnerabilities, and what is coming up with the supply chain. SOCRadar Extended Threat Intelligence has greatly improved the security posture regarding all of this. I feel more secure and more alerted about what is happening with the brand and company.

For numbers, I do not have any numbers to give, but the most specific metrics I can discuss is the faster response time because I am alerted in real time and I have the information in real time. I can respond more effectively and with the support of the SOCRadar Extended Threat Intelligence team, I can take action very fast. I can really resolve the issue before it becomes a bigger problem, especially with the takedown, with leaked passwords, or with anything similar. That is the biggest metric and the biggest improvement regarding the implementation of SOCRadar's solution.

SOCRadar Extended Threat Intelligence has an AI assistant that is a really simple assistant that explains attacks or things happening in the reports or in the alerts, which is great and really helpful.

I think if anyone is interested in SOCRadar Extended Threat Intelligence, I think calling or booking a POC with them would really give the opportunity to check the solution, to get in touch with the SOCRadar Extended Threat Intelligence team, and see the value they provide. That would be enough for anyone to actively consider the solution.

The solution is very mature. The customer support is really great. I think they will be better and better in the upcoming years and maybe they will be a leader in the industry, which I hope for them because the team is great.

I primarily use SOCRadar Extended Threat Intelligence for threat intelligence. Secondary uses include dark web news monitoring, threat hunting, and alerts regarding the dark web such as data breaches, VIP monitoring, and brand protection. These are the activities we use regularly.

Regarding the IGENTIC phishing workflow, we do not directly use it because this tool is not utilized for phishing purposes. We have not used that module and workflow. However, we have observed that it is able to detect phishing alerts, though not directly. The alerts are mostly related to similar domains being registered and hosting similar pages. Our engineers resolve these alerts, but we have not implemented IGENTIC or automation for this.

SOCRadar Extended Threat Intelligence provides access to unique dark web sources where credentials can be purchased. We have credits provided by SOCRadar that allow us to unlock more details. Sometimes general information is provided, such as an email ID found. When we need a hash, password, or further details regarding which server was compromised or which identities were compromised, we purchase this information using these credits. We use these credits to buy from the Russian market or any other dark web sources we deem necessary. SOCRadar Extended Threat Intelligence also offers a malware analysis option that uses some credits. The credits vary depending on different modules, as each module has a different set of credits that renew monthly, which we utilize.

The support quality is inconsistent. While support is adequate in some scenarios, they fail to assist when we request takedowns of websites that use our company's key information and portray themselves as fake versions of our company. In these situations, they respond that this falls outside their scope. During the proof of concept phase, this was within their scope, but after purchasing, when we ask them to take down websites similar to our company, they refuse by stating it does not come within their scope.

Recently, SOCRadar Extended Threat Intelligence integrated its own artificial intelligence, but I do not believe it is sufficiently capable. The AI still requires training on its own platform and does not provide accurate results. The platform can deliver good results based on the data it possesses. When asking generic questions, the AI has difficulty, but when we navigate to any particular page and ask for details regarding it, the results improve. However, when directly requesting information from the dashboard, the AI does not work as expected.

I have used SOCRadar Extended Threat Intelligence for about two years.

I have not observed significant lagging, crashing, or downtime. On one or two occasions, it failed due to SSO, but this was not a direct failure. Nothing has impacted us because of these issues since it is not a critical tool. As a result, we have not experienced any problems until now.

The licenses we purchased for SOCRadar Extended Threat Intelligence are being utilized for nearly all of our needs, but sometimes we must confirm from our end whether something is our asset or not. This is the only challenging task because the tool scans across the entire internet and provides us with many URLs similar to our company. However, some results are not actually similar, as they may contain synonyms or be from other products or companies that are not part of our organization, yet the tool still shows them. This represents a hectic task that we must manage. Apart from this, I do not see much of an issue.

We can have three to four connections with the support team every quarter, and they assist us with suggestions on how to fine-tune and obtain better results. We have engaged with them in the past, approximately six months ago.

SOCRadar Extended Threat Intelligence was easy to deploy because it is a SaaS-based tool that does not require much integration with our other tools. It does not require any personally identifiable information from our company, so the deployment was straightforward. We have completed a few integrations, and these were also simple. The tool does not have direct integration, but it offers open-source integrations such as STIX format and TAXII, which were helpful.

We conducted proof of concept evaluations for FortiRecon from CrowdStrike, ThreatFox, and another vendor whose name I do not recall exactly. Additionally, CloudSEK was another vendor we evaluated. We ran proof of concept studies with three to four vendors, and SOCRadar emerged as the winner.

SOCRadar Extended Threat Intelligence was easy to deploy because it is a SaaS-based tool that does not require much integration with our other tools. It does not require any personally identifiable information from our company, so the deployment was straightforward. We have completed a few integrations, and these were also simple. The tool does not have direct integration, but it offers open-source integrations such as STIX format and TAXII, which were helpful.

I expect clear and detailed responses to my inquiries based on the product.

Since SOCRadar Extended Threat Intelligence is a SaaS platform, maintenance can primarily be handled by the vendor. We only need to fine-tune the alerts for our benefit by determining which alerts are necessary and which are not.

The pricing for SOCRadar Extended Threat Intelligence is within our budget, and the features offered are more comprehensive compared to other solutions available at the same price point. Overall, I rate this solution at eight out of ten.

My primary use case for SOCRadar Extended Threat Intelligence is detecting credential and data leaks for our clients. We use the platform to monitor the dark web for compromised domains and leaked datasets containing our customers' emails and passwords. When we discover an active, leaked account—particularly for high-risk clients like those in the banking sector—we immediately notify them to change their credentials and secure the account before an attacker can exploit it. My experience with the tool is highly focused on this specific area of proactive data leak detection, and it is highly effective for this work.

The best feature that SOCRadar Extended Threat Intelligence offers is definitely the detection of leaks in the dark web.

When I mentioned detection clips, I think a lot of our customers don't have security teams, so it is easier to use.

SOCRadar Extended Threat Intelligence has positively impacted my organization by saving time and giving us an overview of all that we need in our hands.

We reduce the surface of attack for our customers and give them more recommendations based on what we found in SOCRadar Extended Threat Intelligence.

I have been using the solution for the past three months.

SOCRadar Extended Threat Intelligence is stable in my experience.

SOCRadar Extended Threat Intelligence does not handle growth well as my needs change.

Regarding the utilization of SOCRadar Extended Threat Intelligence's unique dark web sources, I should clarify that I am not the one who pays for SOCRadar Extended Threat Intelligence or provides the licenses. I was using it as a solution.

I have used SOCRadar Extended Threat Intelligence's dark web sources to find leaked credentials or data about my customers, and it helps. It is very helpful and gives us an advantage in protecting our customers.

For advice, I think it is easier if you go to read the documentation before using it.

The platform provides valuable insights on various Telegram channels involved in cyber campaigns, particularly relevant given the Russia-Ukraine conflict.

SOCRadar Extended Threat Intelligence helps me identify potential threats early through monitoring of Telegram channels and dark web sources. I typically receive information about users whose data was leaked from companies we monitor, as well as information regarding APT plans that may involve our clients.

SOCRadar Extended Threat Intelligence minimizes noise through its noise minimization capabilities and agentic phishing workflow. However, the system sometimes misses phishing emails, requiring me to double-check emails that appear suspicious or may be false positives. Overall, the platform provides significant assistance to our operations.

The Attack Surface Threat Assessment feature is exceptional. I can understand how attacks are initiated, where they originate, and how to proceed accordingly, making it an excellent feature.

I utilize the unique dark web sources through SOCRadar Extended Threat Intelligence via dark web monitoring, which is a valuable feature.

My main use case for SOCRadar Extended Threat Intelligence is tracking threat campaigns on our clients.

There was a recent Team 313 campaign going on, and on a public Telegram channel, they stated they were targeting a Dubai-based government. That Dubai-based government is integrated with us, so as a provisional measure, we made a case on high severity and told them to use rate limiting or other DDoS prevention techniques. This is how we use SOCRadar Extended Threat Intelligence.

We also use SOCRadar Extended Threat Intelligence to track the PII exposure of clients. For example, if there is a third-party application, such as a Udemy breach, we check if our client data is leaked or not. If we are logged in because of the credentials of that user, we will raise a high severity alert.

The best feature that SOCRadar Extended Threat Intelligence offers is its scans. It does passive scanning, and you will know if there is anything suspicious related to the client. In case there is an impersonation domain or any GitHub repository, you will know instantly. That's the best thing about SOCRadar Extended Threat Intelligence.

The passive scan definitely improves accuracy. If you do the manual work, it may take some time, around three to four business days. However, with SOCRadar Extended Threat Intelligence, you will get notified if there is a new domain formed or if the domain formed is related to the client. That's the best thing.

There is all positive experience with SOCRadar Extended Threat Intelligence. For example, if an exposed subdomain or leaked credential is detected through passive methods, the organization can take proactive actions, such as restricting access, resetting passwords, or enabling MFA. This reduces the risk of unauthorized access, data breaches, or account compromise.

Passive scanning improves our organization's security posture in measurable ways. It helps to reduce the external attack surface by identifying and removing exposed assets, such as new subdomains or open services. Our organization can track metrics corresponding to the number of exposed assets discovered versus remediated over time. This lowers the risk of account compromise by detecting leaked credentials.

Everything is good about SOCRadar Extended Threat Intelligence, but it produces too much noise that needs to be reduced. SOCRadar Extended Threat Intelligence works by keywords, so if there is a particular keyword that you have added, it will trigger an alert. Most of the time, those cases are false positives, so it does take time with the investigation you have done. This is a key improvement area. I would also suggest improving the customization options, such as a tailor-made dashboard, industry-specific intelligence, and more flexible alert rules. With SOCRadar Extended Threat Intelligence, there are no options to create rules; there is a fixed number of rules that will be triggered.

Regarding SOCRadar Extended Threat Intelligence's AI capabilities, the accuracy and reliability of output are not that accurate.

I have been using SOCRadar Extended Threat Intelligence for around 1.3 years.

SOCRadar Extended Threat Intelligence is stable.

SOCRadar Extended Threat Intelligence is pretty scalable.

The customer support for SOCRadar Extended Threat Intelligence is pretty good. You will get a response within one business day. For example, if there is a takedown request, you will definitely get a faster response.

We have only relied on SOCRadar Extended Threat Intelligence from the start and have not used any previous solutions.

We have evaluated other options with DarkOwl services, but SOCRadar Extended Threat Intelligence's services are pretty good. We spoke with different organizations regarding DarkOwl.

I would advise others looking into using SOCRadar Extended Threat Intelligence to definitely go ahead, especially if you are a fresher, because the dashboard is pretty user-friendly. If you are new to dark web monitoring, SOCRadar Extended Threat Intelligence team is going to provide you with the guidance.

Time has definitely been saved. I rate this product an 8 out of 10.