ZeroFox Reviews & Product Details

The standout feature for us is ZeroFox’s external threat intelligence and its automated brand protection capabilities. In particular, the platform is very strong at identifying rogue domain registrations and look-alike social media profiles that target our organization. Rather than having our team manually hunt down these phishing risks, the alerting engine flags them right away using high-fidelity indicators. The biggest value-add, though, is the managed takedown service. Having a built-in mechanism where ZeroFox handles the legal and technical heavy lifting to remove malicious infrastructure saves our security team hours of paperwork and weekly back-and-forth, and it directly lowers our mean time to remediation (MTTR). Review collected by and hosted on G2.com.

The platform can sometimes produce a lot of noise and false positives, especially during the initial setup of keyword monitoring for brand protection or executive profiles. Common names and generic terms may trigger frequent alerts that still need manual triage, which can temporarily stretch a small analyst team. Although the rules can be refined over time and the AI filtering does help, the early optimization period takes a meaningful time investment to bring alerting down to a consistently accurate baseline. Review collected by and hosted on G2.com.

I like ZeroFox for its easy-to-navigate consolidated dashboard and the customizable functionality that's all in one place. The ability to scan social media is a nice feature for us, despite our social media teams using a different solution. I find the price of the solution to be on par with the industry. I also appreciated the easier takedown process with ZeroFox and the potential for better integration into our ecosystem. Setting up ZeroFox was straightforward, aligning well with our cloud-only infrastructure as it didn't require deploying hardware, and there were no agents or software configurations needed, making it a fairly easy and intuitive experience. Review collected by and hosted on G2.com.

It's unclear when an automatic takedown is in process versus having to initiate a takedown. The request to submit evidence, sometimes when the takedown is for intellectual property, puzzles the team, and this isn't all the time making it difficult to predict. The contract terms for auto renewal are terrible, which has negatively impacted our perspective, especially during the renewal process. Because of these concerns, we're hesitant to expand our use of ZeroFox despite its potential. Review collected by and hosted on G2.com.

I like the automated disruption and social storefront takedowns with ZeroFox. It automates the breakdown pipeline, which used to drain dozens of hours from our internal legal and marketing teams. ZeroFox shuts down malicious social ads and scam storefronts without requiring our team to draft legal paperwork, which is a big help. Review collected by and hosted on G2.com.

I dislike the excessive false positives on authorized wholesale dealer promotions. Authorized wholesale dealers, regional trade showrooms, and approved liquidators often post legitimate promotional campaigns using our official catalog photography. ZeroFox tends to flag these approved listings as brand abuse, clogging our triage queue. To improve, it would be great if ZeroFox introduced an authorized partner and dealer registry module where we can upload verified distributed domain lists, social handles, and deal agreement parameters so the system can automatically whitelist appropriate partner promotions. Review collected by and hosted on G2.com.

I really appreciate ZeroFox's automated domain impersonation detection and takedown. It helps us eliminate fraudulent supplier clone sites and protects our enterprise client procurement portals. I also like the web credential and compromised account monitoring, which continuously scans for exposed employee and client credentials, giving us early warnings if a compromise occurs. Additionally, the protection offered for our executive and regional sales leads from social media impersonation and targeted spear phishing is crucial. This feature prevents threats that could lead to fraudulent banking updates or invoice modifications to our corporate clients. Overall, managing daily external risk monitoring has been very efficient and effective for our business. Review collected by and hosted on G2.com.

I wish they would improve the custom SOAR API mapping complexity. Right now, integrating threat intelligence feeds into our security operations center dashboard requires custom API field mapping, which is tedious during the initial setup. It would be great if ZeroFox could offer preconfigured SIEM integration connectors and standardized JSON mapping templates for popular tools like Microsoft Sentinel and Splunk. It would make the process much smoother, allowing external threat data to flow into our internal dashboards without the need for manual coding. Review collected by and hosted on G2.com.

The experience with Zerofox from day 1 beginning with the sales process has been smooth. From sales, to onboarding, to continuous support everything has been white glove service. Each representative that I have dealt with has been very supportive and attentive to our needs as a customer and supportive of any situation that has come up. The cost of the platform per year is very reasonable for the amount of service that is received.

In addition to the support on the customer side, the platform has been very easy to manuever through updates and searches as needed. In addition, performance has never been an issue. Review collected by and hosted on G2.com.

Nothing that I can think of at this time. Review collected by and hosted on G2.com.

I find ZeroFox really helpful for quickly detecting and preventing brand threats or impersonators, often in less than two days. This quick detection is crucial in minimizing damage to our brand's reputation. The social media monitoring feature is particularly effective; it caught an impersonating account early on, which could have caused significant issues if left untreated. I appreciate that the platform enables us to address threats before they escalate, as the takedown process for flagged posts is immediate. This automation means our IT team can focus on other tasks, as ZeroFox efficiently automates the threat-detection process. Review collected by and hosted on G2.com.

The alert delivery is sometimes too vague to act on quickly. We get flagged for things that technically match criteria but aren't actual scams or impersonation, which takes a few seconds to dismiss but adds up over time. The plan we're on doesn't include real human analysis; it's all automated flagging, and sometimes this misses sophisticated impersonating attempts. We found a fake website impersonating us that ZeroFox's automated system didn't flag, and we had to catch it manually. The initial setup took about three weeks and defining what should trigger an alert was harder than expected, needing adjustments to thresholds based on real observations. Review collected by and hosted on G2.com.

What I value most about ZeroFox is the partnership. The support and technical account teams feel like an extension of our own team and are consistently invested in our success. The platform is intuitive and easy for new users to learn, and the findings provide confidence that we're proactively protecting our assets and monitoring the right threats. The majority of escalated alerts are relevant, actionable, and worth our team's attention. The new AI features integration with the intelligence and reporting make it easier to sift through all the data. Review collected by and hosted on G2.com.

I don’t have any dislikes when it comes to ZeroFox or their team. We’ve been happy working with them over the past five years, and the experience has been consistently positive. Review collected by and hosted on G2.com.

I really like how ZeroFox has evolved in terms of user experience, especially for us who manage the platform. The representation of information has been considerably reinforced with the incorporation of more visual dashboards and clear indicators, which facilitates data analysis and control. Additionally, the diversity of categories offered by the platform greatly facilitates our management. The integration of data and the possibility of using whitelists are significant advances, especially because they help reduce false positives, making the review process much faster. I also appreciate the ease with which we were able to initially set up ZeroFox and the fact that it is always up to date, thanks to the constant work with ZeroFox analysts. This ensures that we can make the most of the platform's functionalities. Likewise, the fact that it is user-friendly for the administrator and allows for the segmentation of different alerts is a great benefit. It is also worth noting that they have integrated social media elements and offer resources like ZeroFox University to facilitate getting started with the platform. Review collected by and hosted on G2.com.

I find that the previous visualization was simpler when we were reviewing alerts. With the categorization of events in the current visual, it has become complicated to quickly identify the type of alert. It would be useful to have a color categorization scheme for the alerts, which would facilitate their identification and improve the user experience. Review collected by and hosted on G2.com.

The UI changes are great. It’s easier to use now and feels much faster than the previous version; from a user’s perspective, it also comes across as more responsive overall. The AI alert detection is clearer too, and it surfaces more relevant, actionable items. The onboarding process with the new look was smooth and great and what is greatly appreciated is the direct integrations with multiple social media sites and website providers for faster takedown or contest. The capability it provides is enough to justify its cost. Review collected by and hosted on G2.com.

I just want to add the capability of adding bulk notes for alerts for better audit trail. It already has the feature to do bulk takedown so i think this is doable. Review collected by and hosted on G2.com.

I like that ZeroFox gets a lot of alerts, and they have a team that combs through all the noise and escalates the alerts that are most relevant and need my team's attention. This is a big time saver. It's also a pretty easy program to learn with an easy user interface. I appreciate that if we come across some content we would like to submit to a social media network to take down, it's possible to email the ZeroFox team, and they will enter that content as an alert and be able to submit a takedown request even if their system originally missed it. Review collected by and hosted on G2.com.

Unfortunately, the security alerts are not filtered out by ZeroFox's team, and we get a lot of noise that's not relevant to our business. Also, the takedowns are a great concept in theory, but they often take quite a while to be successful, and a high percentage of them are never actually taken down. The promise is to clean up threatening accounts and posts for the brand, but in reality, some content we want removed doesn't get taken down. The initial setup wasn't as easy as I would have liked, with calibration issues on escalated alerts leading to irrelevant escalations. Lastly, ZeroFox is a fairly expensive platform, and it's tied heavily to the platform formerly known as Twitter, which isn't as mainstream now. There are limitations with other platforms like LinkedIn and TikTok, which ZeroFox cites as API limitations, but this means missing out on information we'd like to be alerted on. Review collected by and hosted on G2.com.