# ZeroFox Reviews **Vendor:** ZeroFox **Category:** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) **Average Rating:** 4.4/5.0 **Total Reviews:** 134 ## About ZeroFox ZeroFox is the solution used to illuminate threat actor intent, mitigate threats and exposures, remove threats from the internet, and preemptively safeguard your reputation. ZeroFox uniquely fuses the core capabilities of Cyber Threat Intelligence, Brand and Domain Protection, Attack Surface Intelligence, Executive Protection and Physical Security Intelligence in one platform packed with intelligence you’ll actually use. ZeroFox defends your business from the everyday attacks that impact revenue, erode trust, and frustrate teams by: Discovering exposed assets, brands, domains, accounts, and emerging threats Validating the risks that matter most to you and your digital estate Disrupting attacks before they harm your business, your customers, and your people Our continuous cycle—Discover, Validate, Disrupt—delivers outcomes and helps organizations achieve deeper threat contextualization, faster detection and response times, and longer-term cost savings by anticipating, understanding, and mitigating external digital threats at scale. Join thousands of customers, including some of the largest public sector organizations and leaders in finance, media, technology, retail, and healthcare, and let ZeroFox deliver timely, personal, and usable intelligence so you can stay ahead of what’s next and reclaim what’s right. ## ZeroFox Pros & Cons **What users like:** - Users find ZeroFox to be **extremely user-friendly** , facilitating seamless onboarding and smooth setup processes. (35 reviews) - Users value the **effective protection** ZeroFox provides against threats, enhancing brand safety and user experience. (32 reviews) - Users value the **real-time threat detection** of ZeroFox, enhancing security across various digital platforms effortlessly. (28 reviews) - Users value the **efficiency of alert notifications** , appreciating quick and effective alerts that streamline daily security tasks. (23 reviews) - Users commend the **timely alerting system** of ZeroFox, enhancing daily operations and improving overall security management. (22 reviews) - Threat Intelligence (22 reviews) - Users commend the **responsive and attentive customer support** of ZeroFox, enhancing their experience and satisfaction. (21 reviews) - Users value the **efficient monitoring** and takedown features of ZeroFox, ensuring brand safety and ease of use. (20 reviews) - Analytics (19 reviews) - Detection Efficiency (17 reviews) **What users dislike:** - Users find the **inefficient alerts** in ZeroFox frustrating, highlighting the need for better customization and timely responses. (24 reviews) - Users often face **false alarms** , which require time-consuming manual reviews and disrupt overall efficiency. (16 reviews) - Users experience **slow performance** with ZeroFox, including delayed alerts and extended review times from the analyst team. (14 reviews) - Users experience frequent **false positive alerts** with ZeroFox, leading to time-consuming manual reviews and inefficiencies. (12 reviews) - Users report an **inefficient alert system** with delays and false positives that hinder timely responses and actionable insights. (11 reviews) - Users find the **excessive notifications** from ZeroFox overwhelming, complicating the prioritization of genuine threats. (10 reviews) - Users find the **inadequate reporting** features of ZeroFox limiting and desire more detailed analytics options. (10 reviews) - Limited Customization (9 reviews) - Users note **missing features** in ZeroFox, highlighting issues with alert noise, customization, and unreliable takedown success. (9 reviews) - Users face **integration issues** with ZeroFox, particularly around email and other security tool configurations. (7 reviews) ## ZeroFox Reviews ### 1. ZeroFox Fills the Gap Traditional Security Tools Miss **Rating:** 5.0/5.0 stars **Reviewed by:** dhananji s. | Associate, Enterprise (> 1000 emp.) **Reviewed Date:** October 31, 2025 **What do you like best about ZeroFox?** One of the new and most impactful aspects I appreciate about ZeroFox is how it delivers actionable external threat intelligence rather than just raw indicators. The platform effectively combines AI-driven monitoring with human analyst validation to identify real threats across social media, surface web, deep web, and dark web sources. This approach significantly reduces noise and false positives, which is extremely valuable for SOC teams working under time constraints. ZeroFox’s ability to detect phishing campaigns, brand impersonation activities, leaked credentials, and early threat‑actor discussions allows analysts to move from reactive response to proactive defense. From a SOC operations standpoint, I particularly like how ZeroFox provides strong contextual enrichment clearly linking suspicious activity to adversary intent, targeted assets, and potential business impact. This context makes investigations faster and more effective, especially during high‑severity incidents involving phishing, account compromise, or data leakage. Additionally, its seamless integration with SIEM and SOAR platforms supports automated workflows such as alert ingestion, correlation, and response actions, which helps improve overall detection efficiency and incident response timelines. Overall, ZeroFox strengthens digital risk protection by extending security visibility beyond the traditional perimeter and empowering SOC analysts with intelligence that is practical, prioritized, and ready for action. **What do you dislike about ZeroFox?** While ZeroFox is a very strong platform for external threat intelligence and digital risk protection, there are a few areas where it could be further improved from a SOC analyst’s perspective. One key area is alert prioritization and customization. Although ZeroFox already reduces noise through analyst validation, giving SOC teams more granular control over alert thresholds, severity scoring, and use‑case‑based filtering would help align alerts more closely with specific organizational risk priorities and reduce additional triage effort during peak hours. Another improvement area is deeper integration visibility with SIEM and SOAR tools. While ZeroFox integrates well with platforms like Microsoft Sentinel and other security stacks, enhanced out‑of‑the‑box correlation dashboards and clearer mapping between external intelligence and internal telemetry would make investigations even faster and more intuitive for analysts handling incidents end‑to‑end. Additionally, expanding guided investigation workflows and SOC‑focused playbooks within the platform could further support junior analysts and new team members. More scenario‑based recommendations tied to phishing campaigns, credential leaks, or dark web chatter would help speed up response and ensure consistent investigation quality across shifts. Overall, these enhancements would further strengthen ZeroFox’s usability and operational efficiency for SOC teams without changing its already strong intelligence foundation. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox is addressing a critical gap that our traditional security stack simply wasn’t built to cover: external threats that exist outside our perimeter. Firewalls, endpoint tools, and SIEMs do a great job protecting what’s inside, but they provide limited visibility into what’s happening on social media, the open and dark web, or across lookalike domains targeting our brand and executives. ZeroFox gives us that visibility in a centralized, actionable way. Brand and Executive Protection: One of the biggest issues it solves for us is impersonation—fake social media profiles, spoofed domains, and fraudulent accounts posing as our executives or the firm itself. ZeroFox identifies these quickly and, through its managed takedown service, manages remediation end-to-end. This has saved our team a significant amount of time that would otherwise be spent coordinating directly with platforms and registrars. Phishing and Domain Threats: The platform continuously monitors for newly registered lookalike domains and phishing infrastructure. Catching these early—often before they go live—helps us stay ahead of potential attacks targeting our employees, clients, or partners. Dark Web and Credential Exposure: ZeroFox’s dark web intelligence, powered by the Dark Ops team, surfaces leaked credentials, insider chatter, and threat actor activity that’s relevant to us. This feeds directly into our incident response and threat hunting workflows, helping us act on risks before they escalate. Operational Efficiency (UI/UX + Integrations): By consolidating these external threat categories into a single platform and integrating with our SIEM and ticketing tools, ZeroFox reduces the need for analysts to pivot between multiple consoles. The result is faster triage, smoother workflows, and less alert fatigue. AI / Intelligence: The combination of AI-driven detection and human-curated intelligence gives us both scale and quality. We’re not just receiving raw data—we’re getting context, attribution, and actionable insights that help us prioritize response efforts. ROI and Business Impact: The benefits are tangible. We’ve significantly reduced the time spent on manual takedowns, improved our response time to brand and executive threats, and strengthened our overall external attack surface posture. For a firm where reputation, client trust, and executive safety are paramount, that value is hard to overstate. Support / Onboarding: The ZeroFox team has been a true partner throughout—helping us tune the platform, interpret findings, and continuously improve how we use it. That partnership has amplified the value we get from the tool itself. In short, ZeroFox helps us see and respond to threats we otherwise wouldn’t even know existed, and it’s had a direct, measurable impact on reducing our external risk. ### 2. ZeroFox: Powerful Digital Risk Detection, Requires Tuning and correct configuration. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** April 18, 2026 **What do you like best about ZeroFox?** ZeroFox excels at proactively detecting and disrupting digital threats across social, surface, and dark web channels, giving security teams timely, actionable intelligence before incidents escalate. Its strong integrations and automated takedown capabilities help turn insights into rapid remediation, reducing risk and shortening response times for organizations. Performance is good as it detects pages registered like 24 hours ago and AI plays a important role for this. The UI/UX is easy to understand and use, and the support team responds within a good timeframe to the questions I’ve raised. **What do you dislike about ZeroFox?** ZeroFox can generate false positives and noisy alerts that require significant tuning and analyst time to manage effectively. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox detects and disrupts external digital threats across social, surface, and dark web channels—protecting brand, executive, and customer exposure while uncovering phishing, fraud, and data leaks. That gives my incident response team timely, contextual intelligence and automated remediation options, speeding detection-to-containment and reducing overall risk. ### 3. ZeroFox: A Trusted Solution for External Threat Monitoring and Takedowns **Rating:** 5.0/5.0 stars **Reviewed by:** Prateek B. | Sr. Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** February 17, 2026 **What do you like best about ZeroFox?** After three years of continuous use, we view ZeroFox not just as a tool, but as a trusted cybersecurity partner. Its unified approach to external threat intelligence, brand protection, and rapid disruption has delivered tangible value by reducing risk, protecting reputation, and improving operational efficiency. For organizations seeking robust protection against modern digital threats—especially those targeting brands, executives, and customers—ZeroFox stands out as a mature, effective, and future‑ready solution. As threat actors increasingly target brands, executives, and customers across social media, domains, and the open, deep, and dark web, ZeroFox has proven itself to be a reliable, forward‑thinking, and highly capable platform for external cybersecurity **What do you dislike about ZeroFox?** While ZeroFox delivers strong external threat visibility, the volume of alerts can occasionally be overwhelming and requires ongoing tuning to reduce noise and focus on the most critical risks. Some advanced workflows and customization options have a learning curve, which can slow efficiency for smaller or lean security teams. Additionally, as an enterprise‑grade platform, the cost and feature depth may feel heavier than necessary for organizations with more limited or narrowly scoped use cases. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps us address the problem of external threats that sit completely outside traditional security controls, particularly brand impersonation, phishing infrastructure, and exposed data on the dark web. The biggest benefit has been its takedown capability—ZeroFox consistently identifies fake social media accounts, phishing domains, and scam pages impersonating our brand and works directly with platforms, registrars, and hosting providers to remove them quickly. This has materially reduced customer‑facing fraud and limited the window of opportunity for attackers, which is critical for protecting brand trust and preventing downstream incidents. ### 4. ZeroFox has streamlined our external threat monitoring and boosted our incident response times. **Rating:** 4.5/5.0 stars **Reviewed by:** Tonnika R. | IT Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 30, 2025 **What do you like best about ZeroFox?** Its ability to detect and remediate brand impersonations and account takeovers in real time is impressive. The dashboard is user-friendly, and the alerts are actionable and easy to prioritize. ZeroFox significantly enhances our digital risk protection by offering proactive threat intelligence across social media, surface web, and dark web sources. The automation features reduce manual workloads and improve response time, making it a solid tool for staying ahead of external threats. **What do you dislike about ZeroFox?** Occasional alert noise can lead to extra triage time, and deeper customization of policies could be more intuitive. Additionally, integrating with other security platforms sometimes requires manual configurations that could be smoother **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox addresses the challenge of identifying and mitigating digital threats in real time. It helps detect impersonation attempts, phishing attacks, and unauthorized use of our brand assets across social media and web platforms. The proactive alerts allow us to neutralize risks before they escalate, preserving our reputation and customer trust. What business problems is ZeroFox helping you solve? - Reducing brand impersonation that could lead to fraud or data breaches - Minimizing the impact of account takeover attempts on social media - Saving time and resources with automated threat detection - Enhancing compliance and reporting for security operations ### 5. Effective Scam Monitoring with Room for Improvements **Rating:** 4.0/5.0 stars **Reviewed by:** Yelen M. | Marketing Associate **Reviewed Date:** April 21, 2026 **What do you like best about ZeroFox?** I like that ZeroFox makes it easy to track potential threats and scams that could damage our company's name. The status feature of the platform is really clear, showing if an issue is new, reopened, or if a takedown was requested, accepted, or denied, which helps me manage the issues efficiently. My former account manager, Larissa, was very attentive, and typically, both account managers and the platform escalate relevant issues, which reduces my work. Also, the initial setup was straightforward since we received regular updates via an Excel file from our account manager. **What do you dislike about ZeroFox?** It's often repetitive because the same issues from the past are reopened. And also disappointing when registrars don't accept the takedown but there's nothing much we can do about it. When there's a reopened issue, we'd appreciate more clarity on why an issue was closed initially and why it was reopened, more intelligence in the platform regarding false positives and to continue disregarding false positives for future scans. Another complexity has been to delimit and update the list of whitelisted domains. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox to monitor web pages, track potential scams, and request takedowns, which makes tracking threats easy and reduces my workload by escalating relevant issues. ### 6. Comprehensive, Easy-to-Use Brand Protection with Strong Service and Onboarding **Rating:** 4.0/5.0 stars **Reviewed by:** Andrea P. | Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** February 04, 2026 **What do you like best about ZeroFox?** What I like best about ZeroFox is how comprehensive yet straightforward it is to use for brand protection. It covers the full workflow end-to-end — from phishing website detection and submitting takedown requests, to dark web monitoring for potential data leaks — without being overly complex to operate day to day. I also appreciate the level of service from their team. The launch/onboarding configuration was well handled, and the recurring check-in meetings are genuinely useful. They actively listen to customer feedback and it’s clear they take it seriously. **What do you dislike about ZeroFox?** What I dislike is mostly around some usability and customization details. Access control could be more granular, especially RBAC and visibility controls, so different teams can be limited to only the assets or alert types relevant to them (for example, allowing marketing to view impersonation-related alerts without access to data leak or dark web monitoring). Today, achieving that kind of separation can require duplicating configurations, which adds unnecessary overhead. Alert search and day-to-day alert handling could also be improved to make investigation and triage faster. Reporting could also be stronger, particularly around more customizable customer reports (e.g., filtering and trending by geolocation and industry, and risk scoring based on alerts and monitored assets). Finally, the physical security module feels very US-oriented and would benefit from stronger coverage and relevance for European organizations. Overall these are smaller details, but addressing them would make the platform even better. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox is helping us protect our brand and reduce exposure to external threats by detecting and responding to impersonation and fraud at scale. It supports takedowns for phishing websites and malicious infrastructure, including suspicious email addresses and phone numbers used for CEO fraud and other social engineering attempts. It also provides dark web monitoring to identify potential data leaks, not only for our organization but also for key vendors, to ensure our data isn’t being exposed through third parties. Overall, it helps us mitigate fraud risk and reduce potential reputation damage by giving us visibility into brand abuse and enabling faster response and takedown actions. ### 7. Reliable Intel and Takedown Precision, Needs Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Rodolfo C. | Enterprise (> 1000 emp.) **Reviewed Date:** April 21, 2026 **What do you like best about ZeroFox?** I like using ZeroFox for intelligence research because it helps maintain awareness, especially for a CTI analyst. It provides visibility on things that we're not getting from other vendors and delivers reports in a timely manner. I also appreciate the ability to check for chatters in the underground world, the functionality to takedown domains trying to impersonate our company, and staying informed on the latest campaigns or intel. The ZeroFox Intelligence Research really stands out for me. **What do you dislike about ZeroFox?** I don't like that the takedowns feature is not automated and grab the evidence by itself instead of asking for proof from the client. Implementing an automation for takedowns where it does the research on its own would be better. CrowdStrike is already doing that. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for intel reports, takedown domains, and checking dark web postings. It solves problems by detecting underground chatter, impersonation domains, and updating on latest campaigns, providing timely visibility not available from other vendors. ### 8. A Powerful and Proactive Digital Risk Protection Partner **Rating:** 5.0/5.0 stars **Reviewed by:** Guru Charan K. | Security delivery analyst, Enterprise (> 1000 emp.) **Reviewed Date:** October 30, 2025 **What do you like best about ZeroFox?** The platform's ease of use is a major highlight; the dashboard is incredibly intuitive, allowing us to quickly assess our external risk posture without a steep learning curve. This simplicity encourages high adoption, and it has become a tool we rely on with high frequency of use - it's integrated into our security team's daily operational checks. The ease of implementation was also impressive. We were up and running in less than a day, with our core assets configured and alerts flowing in. It also offers great ease of integration; we've connected it to our SIEM via its API, which allows us to correlate external threat data with our internal logs for a more unified security view. The sheer number of features is comprehensive. We get immense value from the automated takedown services for phishing sites and the proactive intelligence on fraudulent domains and executive impersonations. Finally, the customer support has been excellent. On the few occasions we've needed assistance - once to help fine-tune a complex alerting rule - our account manager was responsive, knowledgeable, and provided a clear resolution quickly. It's a complete package that delivers tangible results. **What do you dislike about ZeroFox?** While the platform is powerful, the initial volume of alerts can feel a bit overwhelming until everything is properly tuned. In our first couple of weeks, we saw a noticeable number of false positives, which meant extra manual review along with ongoing rule tweaks and adjustments. Also, although the main dashboard is easy to use, I think the reporting module could offer more flexibility. I’d like to be able to create more granular, bespoke reports directly in the UI, rather than exporting raw data and manipulating it elsewhere. Strengthening the advanced alert-filtering logic as well (for example, supporting multi-conditional rules) would be a welcome improvement and would help us narrow in on the most critical threats even faster. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox is solving the critical problem of external attack surface management and brand protection for our organization. Before implementing it, our team spent significant manual hours searching for brand abuse, look-alike domains used for phishing, and social media impersonations. This process was reactive and inefficient. Now, ZeroFox automates this entire discovery process. It has directly benefited us by: Reducing Risk: We've successfully identified and initiated takedowns of dozens of malicious domains and social media profiles targeting our brand and employees before they could be weaponized in a large-scale phishing campaign. Increasing Efficiency: It has freed up at least 10-15 hours of analyst time per week. That time is now reallocated from manual searching to strategic threat analysis and incident response. Providing Actionable Intelligence: The alerts aren't just noise; they provide context that helps us understand the evolving threat landscape and protect our digital footprint proactively. ### 9. Great for Takedowns **Rating:** 4.0/5.0 stars **Reviewed by:** Folakunmi A. | Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** I love the account takedown feature in ZeroFox. I also like the domain takedown tool, which is pretty handy. Additionally, I appreciate that it helps take down apps masking my own from the Play Store and Cloud Store. Another feature I love is the intro it gives into the dark web, especially if any customer data or organizational data is being sold there. It's a very beautiful capability. The initial setup of ZeroFox was quite easy and straightforward. **What do you dislike about ZeroFox?** I would say for users with infected hosts and users with compromised credentials, sometimes we get some behind alerts in the sense that we don't get to see the URL. You're saying you're having a compromised credential, but you don't even know the domain at which this compromised credential is for. Then two, sometimes we don't get enough visibility into the dark web alerts. We just see the Telegram alert and think it can be done better in that aspect. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for account and domain takedown, and it helps with feeds from social platforms. I love its takedown capability for unauthorized apps and intro to the dark web, which alerts me if organization data is sold. ### 10. Efficient Brand Protection, Could Improve Discovery **Rating:** 4.0/5.0 stars **Reviewed by:** Bachar Y. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 17, 2026 **What do you like best about ZeroFox?** I find ZeroFox to be doing good, especially the tool and the search feature, which help in shutting down malicious websites. The response from the portal is also good, and the integration makes it nice and easy to submit a request. The integration with our SSO environment makes submitting a ticket very easy; you just copy the website or URL and submit the follow-up. Furthermore, the platform is accessible from an iPad, phone, or portal, which makes it easy to reach and submit the environment. Scanning or searching for the public website is also helpful. **What do you dislike about ZeroFox?** The Discovery sometimes is not good. I don't know because maybe it's very big. And maybe it's consuming a lot of the Internet because nowadays, the new AI tools, it's always nowadays instead of ZeroFox discover the website or the patent, we are getting information from our client or somebody from legal to department that we have discover a site. So that should be something in ZeroFox to be able to do more discovery and depend on what we give the name, the patent, and all these things. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox to submit tickets for shutting down sites or social media accounts that infringe on our information. It streamlines identifying malicious websites and is easy to use with SSO integration, making submitting requests or follow-ups straightforward. ### 11. Comprehensive Threat Intelligence with Room for Improvement **Rating:** 4.0/5.0 stars **Reviewed by:** Ahmad H. | Cyber Security Associate, Enterprise (> 1000 emp.) **Reviewed Date:** April 17, 2026 **What do you like best about ZeroFox?** I use ZeroFox at my job mainly for brand insight, threat intel, and brand image protection. I appreciate that it helps me look out for possible threat leads and close any gaps visible to threat actors publicly. I like that I can look through frequently updated databases and breaches, meaning I never miss out on any recent activity related to both publicly and privately held breaches. I also really appreciate having a team that handles all the nitty gritty stuff, like legal work and going back and forth with companies and platforms. The initial setup was rather simple—just identifying our assets, providing asset details, and handling escalations and submissions. **What do you dislike about ZeroFox?** I really think the intelligence search needs to be revamped to include more filters and more parameters. For example, you should be able to select a specific time range or a date range. You should be able to expand each indexed item and view all the parameters in detail. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for brand insight and threat intel. It helps me identify threat leads and close gaps visible to threat actors, protecting our brand image. ### 12. Centralized Monitoring, But Late Notifications **Rating:** 4.0/5.0 stars **Reviewed by:** Lizeth Yanira G. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 18, 2026 **What do you like best about ZeroFox?** What I like most about ZeroFox is the ability to centralize brand monitoring across multiple sources, which greatly facilitates the identification of potential threats without having to constantly perform manual searches. I also highlight the quality of some findings, especially in matters of brand impersonation and suspicious domains. Additionally, the initial setup of ZeroFox was very easy. **What do you dislike about ZeroFox?** I have noticed that on certain occasions the detection and notification of findings is not as timely as expected, which can affect response capability. You could improve by optimizing the frequency of scans on critical sources and perhaps incorporating near real-time alerts or lower latency for certain types of high-priority findings. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox centralizes threat monitoring such as impersonations and brand misuse, allowing me to identify risks without manual searches and offering quality in findings of suspicious domains. ### 13. Effective Dark Web Monitoring with User-Friendly Interface **Rating:** 4.0/5.0 stars **Reviewed by:** Kyle J. | IT Security Officer Assistant, Mid-Market (51-1000 emp.) **Reviewed Date:** July 30, 2025 **What do you like best about ZeroFox?** I like ZeroFox because of its ease of use, which makes it very user-friendly. One of my favorite features is the alerts tab, providing very detailed information on potential threats we observe. This feature keeps us aware of threats aimed at our institution and makes investigating or elevating alerts quite straightforward. **What do you dislike about ZeroFox?** I have issues with the AI aspect of ZeroFox, especially in determining the legitimacy of some alerts, like domain analysis. I've noticed these are mainly false positives. I think they rely too much on potential typosquat or substring aspects without accurately comparing potential reported sites to our institution's own. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for dark web monitoring, solving hidden cyber threats and data exposure issues. I like the ease of use and detailed alerts on potential threats, keeping us aware and simplifying investigations. ### 14. Timely Alerts Bolster Our Security **Rating:** 4.5/5.0 stars **Reviewed by:** Karl J. | Electronic Services, Mid-Market (51-1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** I like how the alerts from ZeroFox are timely. They've allowed us to block and replace reported cards before they are used for fraud. Also, providing the card BINs during the initial setup was easy to accomplish. **What do you dislike about ZeroFox?** It would be great if different alert emails could be targeted to specific user groups. Not every user needs to receive an alert notification when a request to remove a listed card is still pending or in process. Some users need to only act on the card being reported initially and do not need to be concerned with the follow-up that ZeroFox is doing on our behalf. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for reviewing card numbers found on the dark web. It helps locate compromised cards and allows us to block and replace them before fraud occurs, thanks to timely alerts. ### 15. Effortless Threat Management and Takedown Assurance **Rating:** 5.0/5.0 stars **Reviewed by:** Shammy R. | Security Lead, Enterprise (> 1000 emp.) **Reviewed Date:** October 30, 2025 **What do you like best about ZeroFox?** I like ZeroFox for its ease of usage and takedown assurance. Their UI and alert management configuration are very good, making it easy to navigate alerts, update, and follow up on cases. I find the feature of adding threats to a watchlist to be very helpful. The alert management allows me to easily look back at old alerts and filter down by attributes, which helps in tracking particular cases well. The configuration is straightforward, which made the initial setup not complex. **What do you dislike about ZeroFox?** NA **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for submitting takedown requests for fake profiles, getting a summary of recent breaches, and discovering new attack trends. It helps with social media takedowns, provides threat intelligence feeds, and offers an easy-to-use alert management system. ### 16. Intuitive Information Layout, but the Takedown Submission Process Is Too Complex **Rating:** 3.5/5.0 stars **Reviewed by:** Paul M. | Security Engineer 2, Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** The way the information is present is very intuitive and easy to follow. **What do you dislike about ZeroFox?** The submission process to take something down, there seems to be a lot of steps required to get what is needed. Wish there was a way to make it easier, seems like if something is being flagged by one of our perimeters, it should be successful when trying to do a take down. **What problems is ZeroFox solving and how is that benefiting you?** Dark web monitoring, not something we are able to do on a small team with limited resources. ### 17. Effective Threat Scanning with Takedown Challenges **Rating:** 3.0/5.0 stars **Reviewed by:** Jeremy C. | Vice President & Digital Experience Officer, Banking, Mid-Market (51-1000 emp.) **Reviewed Date:** February 12, 2026 **What do you like best about ZeroFox?** I like how ZeroFox thoroughly scans the web and dark web for threats, ensuring a broad coverage. They provide a lot of configuration options to get good results, which helps tailor the product to our specific needs. The process of taking down spoofed websites is valuable for protecting the bank and our customers from fraud, as it ensures that fake sites are removed promptly. The initial setup was pretty easy, which made integrating ZeroFox into our workflow smoother. **What do you dislike about ZeroFox?** They make it difficult to actually take some sites down sometimes. They are always asking for more evidence, when the site is clearly fraudulent. For example, they alerted me to a fraudulent site that was loading a beacon from our webpage, which meant it is fake and copied. The URL is also phishy. I ask them to take it down and they ask for more evidence, when there is nothing else that could possibly be provided. It is not us, it is clearly not us, and it is loading the beacon ZeroFox placed to identify these fake sites, and they ask for more evidence. Kinda silly. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for external threat monitoring, brand protection, and takedown of threats. It scans the web, dark web, and social media for threats like fake profiles and spoofed sites, alerting us to take action. This helps protect the bank and our customers. ### 18. Enhances Security with Proactive Alert Systems **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User **Reviewed Date:** February 11, 2026 **What do you like best about ZeroFox?** I like that alerts are escalated manually by ZeroFox analysts, but also brought to our attention with the ZeroFox GPT service which automates the escalation process and provides quick remediation advice. By escalating alerts to our team, we can quickly identify the core issues that we need to remediate without having to dig through hundreds of potential alerts and risk missing critical issues through manual analyst review. We had issues with the quality of alerts provided by Recorded Future, which thankfully seems to be solved with ZeroFox. **What do you dislike about ZeroFox?** At times ZeroFox can miss alerts or delay reporting alerts which we feel should have been raised to us quicker. We have noticed that some services offer weaker detection than others without manually tuning detection criteria, but overall the detection rate is acceptable. From what I have heard from the team responsible for the setup of ZeroFox there were an excess of false positive alerts when the tool was originally deployed. Tuning the software has taken a long time to get right. **What problems is ZeroFox solving and how is that benefiting you?** We use ZeroFox for brand protection, threat identification, and safeguarding personal information. It helps prevent phishing, impersonation, and alerts us to critical issues quickly without manual review, which improves our response time. ### 19. Intuitive Dashboard and Clear Threat Notifications at a Glance **Rating:** 5.0/5.0 stars **Reviewed by:** Eli H. | Jr. Information Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** April 17, 2026 **What do you like best about ZeroFox?** Deep web threats are brought together in an easy-to-read notification email, which makes them simple to review at a glance. Navigating through the dashboard feels intuitive and smooth. **What do you dislike about ZeroFox?** Very minimal issues. Mostly cosmetic. For example, the lack of an easy to toggle dark mode switch on the home screen. **What problems is ZeroFox solving and how is that benefiting you?** For my particular company, bringing potential member PII including BINs, account numbers, usernames, and password leaks, helps me do my job faster and focus on issues that only require my intervention. ### 20. Effortless Protection Against Online Threats **Rating:** 5.0/5.0 stars **Reviewed by:** Rhema P. **Reviewed Date:** February 10, 2026 **What do you like best about ZeroFox?** I love the ease of the platform and the transparency with reporting on ZeroFox. I'm able to follow up on individual use cases using specific alert numbers that are easy to find in the platform. Monitoring social media for impersonators and scams cuts out a bulk of our manual labor efforts. They auto-report alerts for us, which speeds up takedown time and relieves us from having to fill out individual takedown request forms. I also like how I can view numbers and trends in our alerting, which helps us adjust our settings as trends shift to have the most coverage at all times. **What do you dislike about ZeroFox?** It was a bit bumpy the first 3 months, but was very easy after some communication issues were resolved. **What problems is ZeroFox solving and how is that benefiting you?** We needed protection for our artists and brands from online impersonators. It monitors social media for scams, reduces manual labor by auto-reporting alerts, and speeds up takedown time by eliminating individual request forms. ### 21. Robust Brand Protection with Room for Improvement **Rating:** 5.0/5.0 stars **Reviewed by:** Javid H. | Mid-Market (51-1000 emp.) **Reviewed Date:** February 06, 2026 **What do you like best about ZeroFox?** I am very much pleased with ZeroFox, especially in terms of brand protection and darkweb scrubbing. The platform excels at scrubbing the internet for brand and domain-related threats, giving us valuable intel from the dark web regarding things like our bank identification numbers for credit cards and debit cards. This advance knowledge helps us act swiftly to protect our customers and assets. I really appreciate the dashboard for presenting issues clearly, and the supportive role of the ZeroFox team in verifying items and escalating necessary actions. The takedown and disruption tools are significant for us, effectively handling malicious websites and protecting our brand. We have not experienced any issues or complaints and look forward to seeing further improvements as time goes on. I am really satisfied with the initial setup as well; it was seamless and insightful, with a knowledgeable support team. Overall, ZeroFox is a great platform that meets our diverse needs all in one space. **What do you dislike about ZeroFox?** I find that it takes a while for websites to be taken down. Even in some cases, I have documented where a request was made to take down a malicious site. While I know that some aspects of the takedown process involve the site registrar or host acceptance, I think it takes in excess of forty-eight hours to have a site killed. That should be improved to make it more efficient and reduce the risk of exposure to our customers and organization. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps us with brand protection and scrubbing the Internet and dark web as well as domain protection, giving us early intel on threats. It effectively takes down malicious websites and provides data on potential compromises, helping us protect our assets and respond timely to threats. ### 22. Effortless Setup, Exceptional Support **Rating:** 4.5/5.0 stars **Reviewed by:** Emily O. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ZeroFox?** I like that ZeroFox is easy to use and navigate, which saves us time. I also appreciate our amazing customer support managers who contribute to our positive experience with the platform. The initial setup of ZeroFox was very easy, and I find the platform helpful for protecting our brands, executives, and locations. It helps us know what's going on faster. **What do you dislike about ZeroFox?** I wish the mobile app / mobile phone viewing was better. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for protecting our brands, executives, and locations. It helps us know what's going on faster and saves us time. The platform is easy to use, navigate, and the customer support is amazing. ### 23. Easy Dashboard, But a Frustrating Takedown Process **Rating:** 0.5/5.0 stars **Reviewed by:** Joseph F. | VP, Chief Information Security Officer, Enterprise (> 1000 emp.) **Reviewed Date:** April 17, 2026 **What do you like best about ZeroFox?** The dashboard is easy to use and navigate. It is great to have the alerts in the different categories including social media **What do you dislike about ZeroFox?** The takedown process is terrible. Most of the time we have to go through a separate process to have a site taken down due to intellectual property violations and Zerofox declines the request **What problems is ZeroFox solving and how is that benefiting you?** Social media and public monitoring of brand reputation that includes leadership members. It is good to identify mobile app and website impersonators ### 24. Robust Protection and User-Friendly Interface **Rating:** 5.0/5.0 stars **Reviewed by:** Hoeun K. | Information Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** February 04, 2026 **What do you like best about ZeroFox?** I appreciate ZeroFox's Platform module for being user-friendly and integrated with AI enhancements via Tags, which help AI learn the behavior of alerts to reduce false positives and alert fatigue. I also enjoy the convenience of communicating directly with the support team right from my email, which makes for faster progress without needing to open up a ticket elsewhere. Additionally, I like how easy the initial setup of ZeroFox was. **What do you dislike about ZeroFox?** The only feedback or perhaps a future roadmap to include options to be able to whitelist users listed in the affected alert from showing up since they don't actually exist in our system to avoid multiple manual labor to repeat detail information to be validated each escalated alert. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox sends email notifications for updates on takedowns, daily reports on ongoing efforts, and alerts on breaches, helping protect our domains and branding. It escalates alerts for potential user account issues with high-level recommendations. ### 25. Efficient Brand Protection with Room for Alert Improvement **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** July 29, 2025 **What do you like best about ZeroFox?** I like ZeroFox because it saves hours on the takedown process for infringements or phishing IOCs. Once we confirm a real phishing or infringement alert, all we need to do is send the information to the ZeroFox team, and they take care of the takedown processes. I also find the setup to be straightforward with a friendly user interface. **What do you dislike about ZeroFox?** I get lots of false positive alerts triggered by simple keyword searches or monitoring. It would be better if ZeroFox could improve their detection methodology. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for brand protection, detecting phishing and infringements earlier, and monitoring the dark web. It saves hours on takedown processes by handling confirmed alerts efficiently. ### 26. ZeroFox Shines on External Attack Surface and Digital Risk Protection **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** ZeroFox’s main appeal is that it genuinely focuses on the external attack surface and social media/digital risk—areas most companies tend to overlook until something goes wrong, like someone impersonating their CEO on Twitter and asking for gift cards. **What do you dislike about ZeroFox?** ZeroFox offers helpful visibility into external threats and supports automated takedowns, but it’s held back by noisy alerts and coverage that can feel incomplete. To get real value from it, we’ve found it requires substantial tuning as well as meaningful integration effort before it becomes truly effective. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps us detect and stop external threats like phishing and brand impersonation early, reducing fraud risk and protecting both our users and our reputation. ### 27. Strengthens Security and Provides Expert Support **Rating:** 4.5/5.0 stars **Reviewed by:** Tara D. | Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** I use ZeroFox to help defend our business against online threat actors, and they are instrumental in strengthening our team's bandwidth through expert support. I appreciate how they provide tangible confirmation that our security controls are working, which helps maintain organizational credibility. The service confirms the existence of digital risks and helps reduce the time to stop these threats. I'm very satisfied with ZeroFox, and I find the team very personable and hardworking. **What do you dislike about ZeroFox?** I wish I had more time to refine the insights we provide **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps defend against online threats, strengthens our team with expert support, confirms our security controls, and reduces time to stop threats. ### 28. User-Friendly, Feature-Rich Threat Detection with Excellent Support **Rating:** 5.0/5.0 stars **Reviewed by:** Gajjala R. | Cyber Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** October 31, 2025 **What do you like best about ZeroFox?** ZeroFox is extremely user-friendly with an intuitive interface, making it easy for both technical and non-technical users to navigate. The wide range of features, from real-time threat detection to automated remediation, allows us to address multiple security needs in one platform. Implementation was straightforward, and integration with our existing systems was seamless, enabling a smooth onboarding process. Customer support has been responsive and knowledgeable, providing quick resolution to any questions. The platform’s frequent use in our daily operations ensures we are constantly monitoring and protecting against external threats, which strengthens our security posture **What do you dislike about ZeroFox?** Occasionally, the platform produces false positives that need to be manually reviewed, which can take up a significant amount of time. Furthermore, some of the advanced reporting features would benefit from greater customization options to better address our unique operational and compliance requirements. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox effectively addresses the critical challenge of safeguarding our organization against external digital threats, including phishing attacks, brand impersonation, and malicious domain activity. With its continuous monitoring of social media, websites, and other external channels, the platform detects and alerts us in real time, enabling a swift response before problems escalate. Its seamless integration with our existing systems helps streamline workflows, and the user-friendly interface ensures that both security teams and other stakeholders can promptly act on the actionable intelligence provided. This proactive approach to threat detection has greatly reduced our exposure to reputational and financial risks, ultimately enhancing our overall security posture. ### 29. A Smart and Reliable Platform for Digital Risk Protection **Rating:** 5.0/5.0 stars **Reviewed by:** Samikari D. | SOC analyst, Enterprise (> 1000 emp.) **Reviewed Date:** November 03, 2025 **What do you like best about ZeroFox?** What I appreciate most about ZeroFox is its proactive approach to digital threat intelligence. The platform is very intuitive and provides real-time alerts that help us stay ahead of potential risks across social media, surface, deep, and dark web. The automated takedown feature is especially useful—it saves a lot of manual effort and ensures threats are addressed quickly. The dashboard is clean and easy to navigate, making it simple to monitor and respond to incidents efficiently. **What do you dislike about ZeroFox?** While ZeroFox is a powerful tool, I feel there’s room for improvement in terms of integration with other security platforms. Sometimes the customization options for alerts and reports can be a bit limited, and having more flexibility there would make it even more effective. Also, initial setup and tuning might require some time and support, especially for new users **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox is helping us tackle the growing challenge of external threats across social media, surface, deep, and dark web. It identifies impersonations, phishing attempts, data leaks, and brand abuse in real time, which is crucial for maintaining our organization’s reputation and security posture. The automated takedown capabilities are a major benefit—they reduce manual workload and ensure faster response to threats. For someone in a SOC role like mine, it adds a layer of external threat intelligence that complements internal monitoring tools, helping us build a more complete and proactive defense strategy. ### 30. High-Fidelity Alerts and Excellent Support with ZeroFOX **Rating:** 4.5/5.0 stars **Reviewed by:** Bhavani Shankar P. | Security Operation Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** October 30, 2025 **What do you like best about ZeroFox?** I appreciate ZeroFox for its ability to solve critical problems related to impersonation attempts on valuable assets, helping us reduce potential lawsuits and prevent fraudulent activities. I find it incredibly valuable how ZeroFox can gather and identify impersonation of high-value targets from platforms like Facebook, YouTube, and TikTok, thereby saving us from legal complications and protecting stakeholders from fraudulent emails and interactions. I am very impressed by the high fidelity of alerts generated by ZeroFox, which predominantly report true positives with very few false positives. Its capability to distinguish between parody and fraudulent accounts where other products fail is remarkable. The features offered by ZeroFox, such as brand impersonation detection and the ability to take down fraudulent profiles with a simple request without needing to approach social media platforms, are extremely beneficial. The prompt and self-explanatory support for alert management is another aspect that stands out and simplifies our workflow considerably. Moreover, the integration with Jira Service Management is seamless, allowing us to manage alerts and investigations efficiently. **What do you dislike about ZeroFox?** I dislike the outdated interface design of ZeroFox. It feels old when compared to the modern user interfaces we see from other vendors and software types. Updating it to a more modern or retro style could enhance the user experience and increase motivation as we use it daily. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for identifying and taking down impersonation attempts on valuable assets, reducing potential lawsuits and preventing fraud, which streamlines our response to threats efficiently. ### 31. Zerofox overall is a great asset and tool for our company. **Rating:** 4.0/5.0 stars **Reviewed by:** Mallory A. | Global Security, Small-Business (50 or fewer emp.) **Reviewed Date:** April 22, 2026 **What do you like best about ZeroFox?** I like how easy it is to learn and access. The format is built great to help with . **What do you dislike about ZeroFox?** When you request a take-down of a particular post, I believe the process could be more efficient. I also get many emails when you take something down for the same issue or reason. **What problems is ZeroFox solving and how is that benefiting you?** Zerofox is assisting in keeping our assets and employees safe. ### 32. Exceptional Threat Detection and Takedown Service **Rating:** 5.0/5.0 stars **Reviewed by:** craig.whittaker@monygroup.com W. **Reviewed Date:** February 06, 2026 **What do you like best about ZeroFox?** I appreciate how ZeroFox is great at finding scam sites, even those that use only logos instead of text, which effectively reduces the attack vector. Their Takedown service is amazing, especially with their strong partnerships with companies like Facebook, speeding up the process significantly. The onboarding experience was excellent, with the ZeroFox team handling most of the setup work, making it smooth and hassle-free. I find their service delivery to be top-notch across all functions. **What do you dislike about ZeroFox?** Sometimes the UI can take a moment to load, but I'm told it's being addressed. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps in detecting external threats, phishing, and scams; offers brand and executive protection, and provides dark web intelligence. Their takedown service is excellent, quickly addressing threats through strong partnerships. They also efficiently find scam sites by pictures, helping reduce attack vectors. ### 33. Quick response, reliable attention, and broad protection coverage **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Airlines/Aviation | Enterprise (> 1000 emp.) **Reviewed Date:** February 11, 2026 **What do you like best about ZeroFox?** I like the quick response and the attention they provide, as this gives us security. Additionally, it has a wide range of protection. **What do you dislike about ZeroFox?** Sometimes, based on our own experience, we have received numerous alerts about parked domains, but there is no action to take with these sites, which generates an excess of unnecessary notifications. At times, I have the feeling that these alerts are sent without human review, relying solely on an automated process, probably driven by artificial intelligence. **What problems is ZeroFox solving and how is that benefiting you?** It helps us solve problems related to a bad image, protecting us against negative publications, deepfakes, or phishing attempts that affect us. This not only safeguards our reputation as a company but also provides security to our customers, helping them avoid falling for frauds. ### 34. Game-Changer for Digital Risk Management **Rating:** 5.0/5.0 stars **Reviewed by:** vincent v. **Reviewed Date:** February 04, 2026 **What do you like best about ZeroFox?** ZeroFox is a game changer in the digital risk management platforms space. I really appreciate its social media monitoring capabilities. The dark web monitoring feature is particularly valuable, allowing me to see what information about the organization might be available on the dark web. This is crucial for any organization that is serious about their digital safety. When setting up ZeroFox, I found the process easy and smooth, and the technical team was the best in hand-holding. **What do you dislike about ZeroFox?** I find the ability to read and intercept WhatsApp conversations and other social media platforms lacking. These features would be critical for law enforcement entities during investigations. **What problems is ZeroFox solving and how is that benefiting you?** I use ZeroFox for social media and dark web monitoring, which helps track information about the organization on the dark web, essential for digital safety. ### 35. Flexible Customizations and Keyword Flagging with Zerofox **Rating:** 4.0/5.0 stars **Reviewed by:** Ryan J. | Security Officer/GSOC operator, Enterprise (> 1000 emp.) **Reviewed Date:** April 22, 2026 **What do you like best about ZeroFox?** I like all of the customizations, and you can use keywords for Zerofox to flag it for our company. **What do you dislike about ZeroFox?** The takedown process takes a rather long time and could be done faster. **What problems is ZeroFox solving and how is that benefiting you?** Their monitoring any negative feedback or threats that our company faces. This helps our company be safe and aware. ### 36. Automated Managed Takedowns with Strong Social Media & Threat Intelligence Coverage **Rating:** 4.0/5.0 stars **Reviewed by:** Erwin B. | Information Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** Response Automated and managed takedowns (not just alerts). Visibility Strongest in Social Media, Brand, and Executive protection. Efficiency Managed services mean their team does the "heavy lifting" of validation. Scope Includes Dark Web, Surface Web, and Physical threat intelligence. **What do you dislike about ZeroFox?** Alert Noise You'll spend more time clicking "ignore" on false alarms. UI Speed Potential frustration during heavy usage or investigations. Reporting You may have to do extra manual work to make data "board-ready." **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox uses AI to scan 180+ platforms (Social Media, App Stores, Domains) to find these "digital twins ### 37. Effective Web Threat Monitoring for Our Brand **Rating:** 4.0/5.0 stars **Reviewed by:** Joe H. | GSOC Operator, Enterprise (> 1000 emp.) **Reviewed Date:** April 21, 2026 **What do you like best about ZeroFox?** I appreciate the ability to monitor the web for concerning threats related to someone in our company or to the 3M brand. **What do you dislike about ZeroFox?** At times, the ability to take down things feels questionable. **What problems is ZeroFox solving and how is that benefiting you?** The ability to monitor our executives/assets at a high level. ### 38. Effortless Executive Protection with Seamless Web Monitoring **Rating:** 4.5/5.0 stars **Reviewed by:** Talia O. **Reviewed Date:** February 10, 2026 **What do you like best about ZeroFox?** I use ZeroFox to protect our executives, and it plays an extremely vital role in our day-to-day protection. I like their web monitoring and takedown processes of websites because they streamline the process for us when a website is made with an executive's information. They also send us our compromised credentials, which is extremely helpful. Setting up ZeroFox was very easy; we just had to provide information, and they set it up for us. **What do you dislike about ZeroFox?** Dont have any complaints. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox protects our executives and plays a vital role in our everyday safety. Their web monitoring and takedown processes streamline handling sites using executive info. They also send us compromised credentials, which is extremely helpful. ### 39. Accurate Dark Web Updates You Can Trust **Rating:** 4.0/5.0 stars **Reviewed by:** Osama A. | Cyber Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** April 26, 2026 **What do you like best about ZeroFox?** Darkweb updates which usually are a True positive alerts **What do you dislike about ZeroFox?** duplicated alerts as the same alert maybe recieve for multiple times **What problems is ZeroFox solving and how is that benefiting you?** helping me in darkweb montioring about credetial leaks and threat intel reports ### 40. Fantastic Search and Reporting That Keeps Getting Better **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** The ability to search submissions and takedowns easily for executive staff. Additionally, the reporting, graphs, and the daily intelligence reports is fantastic. **What do you dislike about ZeroFox?** Nothing off the top of my head. The tool has gotten better, fox-gpt has gotten way better over time. **What problems is ZeroFox solving and how is that benefiting you?** Finding impersonation accounts that don't normally show up in searches, identifying impersonation accounts across various platforms that I do not have access to. Providing statistics and visualizations quickly for briefing purposes. ### 41. Essential for Brand Protection, But Needs More Granular Alerts **Rating:** 5.0/5.0 stars **Reviewed by:** Sally T. | Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** October 29, 2025 **What do you like best about ZeroFox?** ZeroFox has become a staple in the way we process. It allows us to have better visibility when it comes to brand protection, and dark web monitoring. **What do you dislike about ZeroFox?** One thing that I do believe ZeroFox could improve upon is granularity in alerts. I would like to drill further down into alerts from the dark web and see not only who the user is but how this information was captured and where it has been exposed. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox solves the need to have an ear listening on the inside. We don't have eyes everywhere and so having a tool with this functionality is imperative. Threat intelligence, fraud detection and brand protection are the main areas that ZeroFox gives us eyes into. ### 42. Effortless Brand Protection and Easy SSO Setup **Rating:** 5.0/5.0 stars **Reviewed by:** Eder R. **Reviewed Date:** February 18, 2026 **What do you like best about ZeroFox?** ZeroFox makes it very easy to set up SSO for business users, which I appreciate. The instructions on the ZeroFox website are very detailed and the steps are easy to follow. It's also very effective in helping our company track fake websites using our brands, which would be very difficult without ZeroFox. The initial setup was very easy as well. **What do you dislike about ZeroFox?** The 2 links (Single Sign-On (SSO) for the ZeroFox Platform) and (In-Platform SSO configuration) are OK. Maybe provide next steps after the 'Test SSO Instructions'. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps my company track fake websites using our brand, which would be difficult otherwise. ### 43. All-in-One Social, Web, and Dark-Web Threat Coverage **Rating:** 5.0/5.0 stars **Reviewed by:** Jose M. | Digital Communications Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** Strong coverage of social, web, and dark‑web threats in one place, **What do you dislike about ZeroFox?** Alert Noise and False Positives. Manual review still required **What problems is ZeroFox solving and how is that benefiting you?** External brand and impersonation risk. Faster identification of impersonation and phishing threats ### 44. Comprehensive Threat Intel **Rating:** 3.5/5.0 stars **Reviewed by:** Patricia C. | Enterprise (> 1000 emp.) **Reviewed Date:** May 05, 2026 **What do you like best about ZeroFox?** We use ZeroFox for executive threat protection, and I really like the comprehensive information and threat intelligence it provides. This helps our organization keep our most important VIPs safe. **What do you dislike about ZeroFox?** IDX product as a separate entity. And credit freeze only available for 1 of 3 bureaus **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox provides comprehensive threat intel and information, allowing our organization to keep important VIPs safe from threats. ### 45. Cost-Effective and Easy to Start, but Sales Experience Needs Work **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Chemicals | Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2026 **What do you like best about ZeroFox?** A cost-effective solution that was quick and easy to get started with. **What do you dislike about ZeroFox?** The contract was confusing to complete. The sales team didn’t seem to know the products well and didn’t fully understand what they were selling us. Interface is sometimes sluggish to perform. **What problems is ZeroFox solving and how is that benefiting you?** Deep/Dark web intelligence for identifying shadow IT and spotting new web presence. It also provides threat actor intelligence, with alerting when matching items are found. ### 46. Efficient Domain Monitoring with Easy Setup **Rating:** 4.0/5.0 stars **Reviewed by:** Michelle G. | Cybersecurity Threat Intelligence Analyst **Reviewed Date:** February 12, 2026 **What do you like best about ZeroFox?** I like the format of the alert and the customization of the disruption dashboard in ZeroFox. It's a lot easier to filter domains and search previously actioned ones, which helps to update our internal reporting. Setting up ZeroFox was very easy and straightforward, thanks to ZeroFox University and the hands-on training from customer support. **What do you dislike about ZeroFox?** Sometimes it doesn't let me filter past 60 days, and I can't find domains past that time frame to check the status of their actions. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps us shut down fraudulent domains, making it easier to manage internal reporting with its customizable dashboard and alert system. ### 47. Zerofox’s Excellent Platform Makes Work Efficient **Rating:** 4.5/5.0 stars **Reviewed by:** Manuel A. | Cybersecurity Specialist, Enterprise (> 1000 emp.) **Reviewed Date:** February 11, 2026 **What do you like best about ZeroFox?** Zerofox has an excellent user platform, and the way it works makes it easier to get everything done efficiently. **What do you dislike about ZeroFox?** Probably the only thing I dislike, or at least the thing I’ve noticed the least, is the repetitive alerts. **What problems is ZeroFox solving and how is that benefiting you?** The lack of visibility into the EASM makes it difficult for us to monitor our external environment and understand which issues are being presented. ### 48. Effective Brand Protection with Room for Improvement **Rating:** 3.0/5.0 stars **Reviewed by:** Kevin V. | Social Media and Online Reputation Specialist, Enterprise (> 1000 emp.) **Reviewed Date:** October 31, 2025 **What do you like best about ZeroFox?** I really appreciate the fact that ZeroFox provides notifications on issues that I wasn't initially aware of. This feature is extremely helpful as it allows us to address potential problems proactively. Furthermore, ZeroFox's ability to take down content is impressive, even though the success rate can vary. Nevertheless, we've experienced some notable successes in using this tool. I find the concept of escalated alerts particularly valuable because the tool captures a large volume of alerts and they have a team to vet and escalate the most critical ones for us. Trusting ZeroFox to find social media accounts and website domains impersonating our brand saves my team a tremendous amount of time and energy by automating what would otherwise be a labor-intensive and manual process, but it’s not always perfect. **What do you dislike about ZeroFox?** This concept of escalated alerts is really helpful, but there are times when alerts we would be highly concerned with are not escalated and alerts of little concern are escalated. Though this improved over time with better communication, it was initially problematic. Additionally, I'm frustrated by the varying success rate of ZeroFox's takedown ability, as it does not consistently achieve successful content removal, which can be attributed to platform limitations but is nonetheless a limitation. It also can take several weeks for a takedown to be successful. I'm confused and frustrated by alerts concerning content violations that are notified years after the content's original creation, which I assumed would only be a problem early on, but it persists. Lastly, I see limitations in ZeroFox's social media coverage, particularly the lack of alerts related to LinkedIn and inadequate monitoring capabilities for platforms like Facebook and Instagram. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps by notifying us of unknown threats, offering potential content takedowns, and automating social media monitoring, saving my team from time-consuming manual processes. ### 49. Easy to Use with a Smooth Escalation and Takedown Workflow **Rating:** 5.0/5.0 stars **Reviewed by:** Stefan D. | Expert principal, Mid-Market (51-1000 emp.) **Reviewed Date:** April 08, 2026 **What do you like best about ZeroFox?** Easy to use, with a smooth escalation process and a straightforward takedown workflow. **What do you dislike about ZeroFox?** Nothing to report. Everything works fine and without any problems. **What problems is ZeroFox solving and how is that benefiting you?** A threat intelligence solution for monitoring the brand and critical individuals. ### 50. ZeroFox: Robust Digital Protection with Intuitive Interface and Real-Time Threat Intelligence **Rating:** 5.0/5.0 stars **Reviewed by:** Sree Gowri H. | Security Delivery Associate, Small-Business (50 or fewer emp.) **Reviewed Date:** October 30, 2025 **What do you like best about ZeroFox?** ZeroFox sets itself apart by delivering strong protection against digital risks, swiftly detecting and addressing threats across social media, email, and web platforms. The interface is easy to navigate, and the real-time threat intelligence gives organizations the ability to take proactive steps in safeguarding their digital assets. **What do you dislike about ZeroFox?** One issue with ZeroFox is that it occasionally produces a large number of alerts, some of which are false positives. This can make it difficult to focus on genuine threats. Furthermore, the platform's customization options for certain features could be more adaptable to better meet the unique requirements of different organizations. **What problems is ZeroFox solving and how is that benefiting you?** ZeroFox helps address major challenges related to external digital threats by monitoring and protecting against risks across social media, email, the dark web, and other online platforms. It tackles issues like brand impersonation, phishing attacks, data leaks, and fraudulent activities, helping to safeguard the organization’s reputation and sensitive information. With its real-time threat intelligence and automated remediation capabilities, ZeroFox saves time, reduces manual work, and strengthens the overall security posture, allowing the team to focus on more critical priorities ## ZeroFox Discussions - [Who owns ZeroFox?](https://www.g2.com/discussions/who-owns-zerofox) - 1 comment - [How much does ZeroFox cost?](https://www.g2.com/discussions/how-much-does-zerofox-cost) - 1 comment - [Is ZeroFox safe?](https://www.g2.com/discussions/is-zerofox-safe) - 1 comment - [View ZeroFox pricing details and edition comparison](https://www.g2.com/products/zerofox/reviews?qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-05-19+08%3A52%3A47+-0500&secure%5Bsession_id%5D=d8a23063-2e39-427a-ae89-0f8b57bc83eb&secure%5Btoken%5D=917eab1570b02135c25b23f35143b232c7c1201489ef3c7375c97dd694a1413f&format=llm_user) ## ZeroFox Integrations - [Crisis24](https://www.g2.com/products/crisis24/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [Exabeam New-Scale Platform](https://www.g2.com/products/exabeam-exabeam-new-scale-platform/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews) - [Liferaft](https://www.g2.com/products/liferaft/reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - [Microsoft SharePoint](https://www.g2.com/products/microsoft-sharepoint/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Splunk Enterprise](https://www.g2.com/products/splunk-enterprise/reviews) - [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) ## ZeroFox Features **Detection** - Bot Mitigation - Real-Time Monitoring - Alerts **Identification** - Monitoring - Violations **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Functionality** - Monitoring - Deep Web - Monitoring - Dark Web - Analysis - Ticketing - Simple Search - Leak Source - Centralized Dashboard - Real-Time Alerts **Functionality** - Detection - Media type **Vulnerability Management - Digital Risk Protection (DRP) Platforms** - Vulnerability Assessment - Digital Footprint Mapping - Fraud Detection - Data Leak Detection - Anti-Counterfeiting - Brand Protection **Orchestration** - Security Workflow Automation - Deployment - Sandboxing **Analysis ** - Intelligence Reporting - Incident Reports **Enforcement** - Communication - Plans - Track **Vulnerability Assesment** - Vulnerability Intelligence - Contextual Data - Dashboards **Incident Response Digital Risk Protection (DRP) Platforms** - Threat Remediation - Automated Reponses - Incident Response Capabilities **Information** - Proactive Alerts - Malware Detection - Intelligence Reports **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Reporting and Analytics - Digital Risk Protection (DRP) Platforms** - Threat Trends Analysis - Risk Assessment Reports - Customizable Dashboards **Personalization** - Security Validation - Dynamic/Code Analysis **Agentic AI - Fraud Detection** - Cross-system Integration - Adaptive Learning - Decision Making **Generative AI** - AI Text Summarization - Generate Attack Scenarios - Generate Threat Detection Rules - Generate Threat Summaries **Agentic AI - Threat Intelligence** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making ## Top ZeroFox Alternatives - [Recorded Future](https://www.g2.com/products/recorded-future/reviews) - 4.6/5.0 (224 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.7/5.0 (374 reviews) - [Keeper Password Manager](https://www.g2.com/products/keeper-password-manager/reviews) - 4.6/5.0 (1,187 reviews)