SOCRadar Extended Threat Intelligence Reviews & Product Details

There isn’t one specific thing I’d call the best, but I’d say all of the features are great overall. for example the Vulnerability Intelligence helped us keep up to date on our systems. checking IoC enrichment helped us investigate malicious IoC. News and trend news gave us the opportunity to prepare for possible threats. Primum feeds keep us monitor the malicious IoCs which reached to our environment and give us the chance to act and block them. Review collected by and hosted on G2.com.

I’m running into a few issues when trying to integrate best practices for the Primum feeds. I was hoping there would be a package or built-in option where I could enter the threat actors I’m monitoring and have it return the related IoCs for those actors. Review collected by and hosted on G2.com.

What I like best about SOCRadar Extended Threat Intelligence is the dark web monitoring and digital risk protection features. They've helped us catch leaked credentials and phishing domains targeting our brand early, before they became real incidents. The SIEM integration was also easy to set up, and alert prioritization helps our small team focus on what matters instead of chasing noise. Review collected by and hosted on G2.com.

What I dislike about SOCRadar Extended Threat Intelligence is the volume of false positives in some alert categories, which requires manual tuning to reduce noise. The dashboard can also feel a bit overwhelming for new users, and generating custom reports isn't always as intuitive as I'd like. Review collected by and hosted on G2.com.

The platform has a user-friendly UI and integrates with many applications that support API integration. The web interface is relatively fast, and adding assets to monitor is straightforward. It also uses AI agents to help with tasks such as IOC enrichment, alarm management, and identity management. Overall, the platform has saved us time when investigating leaked credentials associated with our organization.

SOCRadar also provides weekly support training on how to use the platform effectively. The tool was relatively easy to set up because it was already deployed in the cloud. All it took was providing our main domain; it discovered the subdomains on its own, and we only needed to approve the correct ones. Review collected by and hosted on G2.com.

The biggest limitation for me is the credit restriction. Because of it, I sometimes have to prioritize which credentials or data to retrieve based on what feels most important at the time. That can be frustrating when I need broader visibility, since I’d rather have access to all relevant credentials without having to choose between them.

Another issue is repetitive alerts. On a few occasions, the platform has sent alerts about detected credentials that were already identified in the past, but they come through again as new alerts. It seems like the system can categorize a repeat detection as “new,” which creates unnecessary noise and makes it harder to focus on what actually changed. Review collected by and hosted on G2.com.

What I like most is the ease of finding everything related to the entity's environment, such as compromised client credentials and credit cards mentioned on the Dark Web, as well as the integrations with other applications we have in the entity, in addition to the good support they provide when we have any questions about the tool. Review collected by and hosted on G2.com.

So far, I haven't found any problems with the platform. Review collected by and hosted on G2.com.

The large number of sources available for finding information about our company anywhere. We just switched from another tool we were using, and we never imagined we would have so much visibility compared to the tool we were using before.

Above all, it is very easy to use and we can manage the platform well.

The support they provide is extremely fast. Compared to other vendors, they respond very quickly. Sometimes I create a case and by the time I refresh the page, I already have a response. Review collected by and hosted on G2.com.

I think they should improve the alarms only, because sometimes I would like to close the incident directly from the alarm, but I have to go to the incident to close it, and that's a bit difficult. Review collected by and hosted on G2.com.

SOCRadar provides good visibility into external threats, particularly exposed assets, dark web activity, leaked credentials, and emerging threats. I especially appreciate having these capabilities consolidated into one platform, which makes monitoring more efficient and allows our small cybersecurity team to focus on the risks that require attention, all within a few clicks which would require several hours to achieve. Review collected by and hosted on G2.com.

Actually, we are now at the POC stage in which evaluating this SW tool. Accordingly the cost could be a real challenge to purchase the product. let see later! Review collected by and hosted on G2.com.

The interface is elegant, with visual indicators, tags, and hyperlinks that save a lot of effort. The modules are integrated in a seamless manner, with easy-to-use navigation. Review collected by and hosted on G2.com.

I found it difficult to conduct a thorough analysis of the raised tickets. There was no clear or efficient way to filter out the noise and focus on the real underlying issues, which made the investigation process more time-consuming. Review collected by and hosted on G2.com.

I like the visibility SOCRadar Extended Threat Intelligence gives us across the organization. Getting first-hand information when an account password is leaked helps us act quickly, whether that means resetting the password or scanning systems for malware. It also helps improve our incident management. I like the attack surface management, vulnerability management, and compromised-credential detection features. Setup was quite easy and straightforward, and I deployed it myself. Review collected by and hosted on G2.com.

I think SOCRadar Extended Threat Intelligence’s notifications can be delayed. The PHP vulnerability came out around Wednesday, but we didn’t receive an alert until yesterday, and I expected it sooner. There’s a discrepancy in how quickly it reports existing vulnerabilities. Delays can be dangerous with zero-day attacks and leave us in the dark when we rely on SOCRadar for this information. Review collected by and hosted on G2.com.

My org has a high number of users who generate a lot of leaked-credentials noise in other tools, but SOCRadar’s alerts are relevant and usually accurate. I also appreciated the unexpectedly detailed information included with some detections, such as machine names, IP addresses, and even the offending file path on the affected device, which makes isolation and remediation much more effective. Review collected by and hosted on G2.com.

I haven't come across any feature or functional issues that have had any impact on my productivity, but If I had to make one suggestion regarding the Exposed Credentials that I use most often, I would say that is would be nice to see a count or a list of previous detections for the same email address/username. That would help me to know if a particular user is at a higher risk due to repeated misuse of their email address/username on systems outside of our organization. Review collected by and hosted on G2.com.

The SOCRadar platform has detailed threat intelligence and broad coverage. I work in a region where most platforms provide very scanty intel on so SOCRadar has plugged that gap well, while being cost effective at the same time. The platform is intuitive and easy to use in SOCs of all maturity levels and the usecases supported match client requirements. I use the Digital Risk Protection, Attack Surface Management, and the CTI modules in my everyday tasks and have integrated to most of the security controls (SIEM, XDR, ITSM). The platform supports Agentic AI workflows that automation quite simple. The onboarding process was quite smooth as a TAM is assigned to support in knowledge transfer, building of usecases, and platform tuning to minimise false positives. Review collected by and hosted on G2.com.

It may be a bit technical for some users at first but once the platform modules are understood, it becomes easier to trace where a specific functionality lies Review collected by and hosted on G2.com.