ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox is the external cybersecurity platform that helps security teams discover, validate, and disrupt threats across platforms, people, and locations outside their control.
Discover: Map your external digital presence, including domains, credentials, and assets, to spot exposure early.
Validate: AI correlation and expert analysts confirm real threats from 12B+ signals, cutting noise and false positives.
Disrupt: Act fast with takedowns through ZeroFox's Global Disruption Network, executing 1M+ takedowns a year with a 95% acceptance rate.
The ZeroFox Premium Bundle elevates your organization's security by combining advanced, AI-enabled Brand, Domain, and Executive Protection with expanded Takedown services, and self- and full-service Intelligence capabilities.
What's Included:
Brand Protection (50)
Domain Protection (100)
Executive Protection (100)
Takedown (1,000/yr.)
Intelligence Search (5 seats)
On-Demand Investigation Credits (20)
Platform Alerts & Takedown API Connector (1)
OnWatch Alert (Managed Service)
Brand Protection (50)
Monitoring for brand and organizational threats for brands, sub-brands or product line/family across all data sources of surface, deep and dark web. This includes brand impersonation, mentions or breach evidence on non-OSINT channels. Includes monitoring for corporate social accounts for a given brand or product.
Domain Protection (100)
Protection for company owned domains/sub-domains through continuous identification and remediation of impersonating domains, trademark infringement, and spoofing against bad actors that trick your customers into providing information and damage your brand. Includes protection for the primary domain for a given brand or product. Each domain protected asset covers all derivative sub-domains for the same primary domain.
Executive Protection (100)
Monitoring for high profile executives, employees, or VIPs against account takeover impersonations, sensitive information leakage, doxxing, credential compromise, PII exposure, and cyber-threats. Includes PII Removal for the executive.
Takedown (1,000/yr.)
Takedown and/or disruption actions of any and all applicable impersonating or malicious account/site/content and other terms of service violations from social networks, mobile app stores, paste sites, domains, code shares, and other data sources (excluding deep and dark web). Rapidly Identify and automate the request submission process to remove or block malicious sites and content with end-to-end visibility.
Takedown malicious & illegal content across social media platforms
Takedown malicious & illegal domains
Automated requests to our Global Disruption Network partners for content blocking and attacker campaign disruption
Full-transparency of takedown status via in-platform experience and managed service team support
Intelligence Search (5 seats)
Provides unlimited access to ZeroFox's unique threat intelligence graph, comprising over 12 billion interconnected records. Search across threat actors, indicators, malware, dark web activity, breaking news, and curated intelligence reports. Accelerate investigations and uncover actionable insights by mapping critical relationships in real time, empowering smarter, faster decision-making.
On-Demand Investigations (ODI) (20/yr.)
Gain access to teams of intelligence analysts, researchers, and deeply embedded dark web operatives with experience conducting specialized risk assessments, investigations, and engaging with adversaries to curate intelligence specific to you.
Platform Alerts & Takedown API Connector (1)
Connect alerts from the ZeroFox platform with your other internal tools and applications to streamline your security programs. Also request takedowns through the API from your application. Customers are entitled to support for integration enablement and ongoing Platform API support and maintenance.
OnWatch Alert
Platform support for the ZeroFox platform:
24x7 Alert Review, Validation and Escalation
Global SOCs, SOC 2 Type 2 Certified
Standard Launch and 24x7 Support
Access to Global Intelligence Collection (GIC)
Advanced AI Analysis Including Computer Vision, NLP, Image Analysis, Machine Learning, and more
Highlights
Discover: map your external digital presence (domains, credentials, assets) to spot exposure early
Validate: AI plus expert analysts confirm real threats from 12B+ signals across 180+ platforms, including the dark web
Disrupt: 1M+ takedowns a year through the Global Disruption Network, with a 95% acceptance rate
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing uses a contract model with two pricing dimensions that work together. The ZeroFox Premium Bundle is the base purchase. It covers your asset portfolio with threat intelligence and expert support, and includes a set yearly allotment of takedowns. The Additional Takedowns dimension is a usage add-on priced per takedown. You buy it only when you exceed the takedowns included in the bundle. So the bundle sets your baseline coverage, while additional takedowns let you scale removal volume as needed through the contract term.
Top-of-mind questions for buyers
What counts as one takedown for billing purposes?
A takedown counts toward your total only once it is successfully completed. Denied requests, those needing more evidence, items already inactive on arrival, or requests that get no provider response do not count against your allotment.
What happens if I use up the takedowns included in the Premium Bundle before the contract year ends?
You can keep submitting takedowns. The platform notifies you as you near your limit and prompts you to contact your representative. Additional Takedowns are then purchased per takedown for use through the end of the contract year. You stay able to respond to threats.
What does the ZeroFox Premium Bundle include beyond takedowns?
The bundle covers brand protection, domain protection, and executive protection assets, plus a yearly takedown allotment. It also includes intelligence search seats, on-demand investigation credits, a platform alerts and takedown API connector, and managed alert service. On-demand investigation credits support assessments and dark ops investigations.
www.zerofox.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Threats don't keep business hours, and neither do we. ZeroFox provides 24/7/365 support by phone at +1 (855) 936-9778 and by email at ask@zerofox.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
Build, secure and run better websites, domains and applications on AWS with Plesk. Includes all your server management and security tools plus WordPress staging /cloning. Simplifying the lives of Web Professionals and providing the scalability, security, and performance that your customers need.
Powerful email security and data protection. Get AI-powered defense against all email threats, DMARC reporting, unlimited Microsoft 365 backup, and sensitive data scanning and remediation.
Most Effective Partner for Catching Fraudulent Social Posts
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It is the most effective partner in getting fraudulent posts for Social platforms
What do you dislike about the product?
Nothing I dislike about them - they are great partners
What problems is the product solving and how is that benefiting you?
They are taking down fraudulent social posts and websites protecting consumers wallet and our Company's image
Utilities
Proactive Alerts Help Us Catch Negative Mentions Early
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I receive alerts whenever negative mentions of our company are identified online, which gives us an opportunity to investigate and remediate potential issues early. I’d rather know proactively than learn about an issue from a news agency after the fact.
What do you dislike about the product?
There are times when the platform generates alerts that aren’t relevant, so I periodically have to fine-tune the alert settings. For example, I may receive an alert when a new website has a name similar to our company. After review, the site may be completely legitimate, so there would be no basis for a takedown.
What problems is the product solving and how is that benefiting you?
ZeroFox gives us early visibility into potential threats or negative activity involving Cal Water outside of our environment. It alerts us to things like suspicious websites, impersonation, or negative mentions so we can investigate and respond before an issue escalates. The biggest benefit is being proactive rather than finding out about an issue from the media or another third party after the fact.
Retail
ZeroFOX Digital Risk Protection Review
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
Our account representatives are fantastic and have been open to suggestions. We aid in helping evaluate gaps in the tool and the team acknowledges that information.
What do you dislike about the product?
Collection and enforcement across platform providers is limited. We found the sales and implementation process challenging, as capabilities initially represented as available later required additional purchases. This led to repeated discussions and shifting expectations, making it difficult to accurately assess the true cost and functionality of the solution.
What problems is the product solving and how is that benefiting you?
To some degree, the tool has helped us identify and disrupt external digital threats targeting our brand. That includes social media activity, impersonation accounts, counterfeit listings, unauthorized mobile apps, scam websites, and compromised credentials.
Anonymous
Expert-Triaged Threat Intelligence with White-Glove Support
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I like that ZeroFox isn’t just a console full of alerts. Its intelligence and AI filter out noise, and a team of specialists reviews and triages alerts so I’m informed about the threats that really matter. I also appreciate the hands-on support from my dedicated technical account manager. We work closely on tuning, and they address concerns to make sure the product works effectively for me. Setup was very easy: I provided our brand names, ZeroFox did much of the discovery automatically and populated the console, and I was able to get value from the tool almost instantly without spending hours entering information.
What do you dislike about the product?
The only thing I’d improve is making it easier to classify different types of threats in my triage console. Sometimes it’s a little tough to hard-code or set threat types to my preferred categories. Outside of that, I don’t have any other real technical challenges.
What problems is the product solving and how is that benefiting you?
I use ZeroFox to initiate legal takedowns of malicious resources, including fake social media profiles or accounts and domains hosting phishing or other malicious content. It’s one of my main use cases.
Jeff P.
Clear External Threat Visibility, Effortless to Manage
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I appreciate the visibility ZeroFox provides outside of traditional security tools. It helps me keep an eye on our executives and domains for potential impersonation, malicious activity, and other external threats. That layer of protection helps fill an important gap in our overall security program. The setup and management are super easy and make sense.
What do you dislike about the product?
There is nothing I dislike about the tool. It fills the gaps that I'm looking for it to fill!
What problems is the product solving and how is that benefiting you?
I use ZeroFox to protect our company outside the traditional corporate network.