Listing Thumbnail

    Recorded Future Intelligence Platform

     Info
    Deployed on AWS
    Recorded Future arms security teams with the only complete threat intelligence solution powered by patented machine learning to lower risk. Recorded Future can help you find threats 10 times faster, identify 22 percent more threats before impact, and resolve threats 63 percent quicker.
    4.5

    Overview

    Play video

    INTELLIGENCE-DRIVEN SECURITY

    Threat intelligence can sit at the very center of your information security strategy, applied to add value across all functions and teams: -CISOs gain critical insights into the threat landscape to inform strategy. -Threat analysts proactively defend their companies against cyberattacks with alerts and insight. -Security operations can investigate indicators 10 times faster and more effectively prioritize vulnerabilities. -Incident responders can investigate incidents more confidently with a broader context.

    THE SOLUTION

    -SaaS Platform: Research, analyze, and collaborate on intelligence through our intuitive web interface. -Integrations: Layer our contextualized threat intelligence onto your existing security infrastructure.

    For orders greater than 8 users, Please contact AWS-Marketplace@recordedfuture.com 

    Highlights

    • Easy-to-use browser extension accessible from any web-based application
    • Real-time threat intelligence integrated into any security solution - SIEM, SOAR, Incident Response, and more
    • Portal access for research, real-time alerting and dashboard views of trending threats and relevant intelligence

    Details

    Categories

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Recorded Future Intelligence Platform

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    36-month contract (9)

     Info
    Dimension
    Description
    Cost/36 months
    Brand Intelligence
    Brand Intelligence and access for up to 4 users.
    $243,750.00
    Vulnerability Intel
    Vulnerability Intelligence and access for up to 4 users.
    $168,750.00
    SecOps Intelligence
    SecOps Intelligence and access for up to 10 users
    $243,750.00
    Identity Intel Workforce
    Supports up to 25k workforce identities
    $262,500.00
    Third Party Intel
    Third Party Intel Monitoring for up to 100 companies.
    $318,750.00
    Threat Intelligence
    Threat Intelligence and access for up to 2 users
    $281,250.00
    Geopolitical Intel
    Geopolitical Intelligence and access for up to 2 users
    $281,250.00
    ASI
    Attack Surface Intelligence and up to 5 users and 1 project
    $281,250.00
    Identity Intel External
    Supports up to 1M Identities
    $393,750.00

    AI Insights

     Info

    Dimensions summary

    You buy each intelligence capability as a separate contract unit, priced independently rather than as stacked tiers. The units cover distinct use cases: Threat Intelligence, SecOps Intelligence, Brand Intelligence, Vulnerability Intel, Geopolitical Intel, Attack Surface Intelligence (ASI), and Third Party Intel. Several units scale by capacity or coverage. Identity Intel External supports up to 1M identities, while Identity Intel Workforce supports up to 25k workforce identities. Third Party Intel monitors up to 100 companies. Other units set user seat limits, ranging from 2 to 10 users. You select and combine the units that match your needs.

    Top-of-mind questions for buyers

    Identity Intel Workforce covers up to 25,000 workforce identities, meaning your own employee accounts. Identity Intel External covers up to 1 million identities, aimed at broader external credential monitoring. Each option is a separate contract unit sized by identity count, so you pick based on which population you need to monitor.
    Each intelligence capability is a separate contract unit priced on its own. Buying multiple units does not merge them into one tier or combined rate. Your total is the sum of each unit you select. This lets you add or drop capabilities like Threat Intelligence, ASI, or Third Party Intel independently.
    Each unit sets a fixed capacity: Third Party Intel monitors up to 100 companies, and user-based units cap seats from 2 to 10 depending on the capability. Growing past a limit means adding capacity rather than automatic overage billing. Contact the vendor to size a unit for larger needs.
    www.recordedfuture.com+1
    Helpful?

    Vendor refund policy

    All orders and fees are non-cancellable and non-refundable once placed except as required by law.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Resources

    Support

    Vendor support

    Support is available 24/7 at +1(855) 476-9728 or via Support@recordedfuture.com  Your success is important to us. Please refer to https://support.recordedfuture.com/hc/en-us  for additional details or to submit a ticket.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    100
    In Security
    Top
    100
    In Log Analysis

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Machine Learning-Powered Threat Detection
    Patented machine learning algorithms enable identification of threats with enhanced accuracy and speed compared to traditional methods.
    Real-Time Threat Intelligence Integration
    Contextualized threat intelligence can be integrated into existing security infrastructure including SIEM, SOAR, and incident response systems.
    Browser Extension for Threat Context
    Browser extension provides accessible threat intelligence context from any web-based application without requiring separate tool switching.
    Threat Investigation and Analysis Portal
    Web-based portal enables research, analysis, collaboration on intelligence with real-time alerting and dashboard visualization of trending threats.
    Multi-Function Security Team Support
    Platform supports threat intelligence application across security operations, incident response, threat analysis, and strategic planning functions.
    Security Information and Event Management
    Real-time monitoring and visibility for threat detection including ransomware, insider threats, and cloud attacks with security analytics for rapid investigation and prioritization of critical threats.
    Incident Response Automation and Orchestration
    Automation and orchestration of incident response workflows with consistent, optimized, and measurable process execution.
    Enterprise-Grade AI and Automation
    Embedded artificial intelligence and automation capabilities designed to increase analyst productivity and accelerate incident lifecycle management.
    Multi-Source Data Correlation
    Correlation of data across users, networks, and cloud-native services to identify threats including cloud misconfigurations, policy changes, and suspicious user activity with alert deduplication.
    Hybrid and Cloud Environment Integration
    Centralized visibility across hybrid cloud and on-premises environments with deep integrations to AWS security services including Security Hub, CloudTrail, GuardDuty, Network Firewall, WAF, Detective, CloudWatch, and VPC Flow Logs.
    Multi-Source Threat Data Integration
    Correlates and ingests security data from Trellix Security Platform and over 500 third-party tools including 13 AWS integrations to create unified threat visibility across the security stack.
    AI-Driven Detection and Alert Triage
    Applies artificial intelligence-driven analytics and automated alert triage to prioritize threats and provide GenAI-powered insights for threat investigation and remediation guidance.
    No-Code Automation for Investigation and Response
    Provides UI-driven, point-and-click automation capabilities to offload repetitive security operations tasks and accelerate investigation and response workflows.
    Pre-Built Analytics and Correlation Rules
    Utilizes pre-built analytics and correlation rules to rapidly correlate multi-vector threat detections and reconstruct complete attack narratives from ingested security events.
    Hybrid and Air-Gapped Deployment Support
    Supports deployment across cloud, hybrid, and air-gapped environments with flexible integration architecture for diverse infrastructure configurations.

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.5
    260 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    68%
    30%
    2%
    0%
    0%
    3 AWS reviews
    |
    257 external reviews
    External reviews are from G2  and PeerSpot .
    Ibrahim m.

    Excellent Cybersecurity Threat Intelligence Platform

    Reviewed on Oct 14, 2026
    Review provided by G2
    What do you like best about the product?
    What I like most about Recorded Future is its innovative approach to cybersecurity and threat intelligence. I admire how the company uses AI and real-time data to help organizations identify potential threats and make informed security decisions. I am particularly interested in how its solutions help security teams stay ahead of emerging cyber threats, and I would be excited to contribute to a company that is making a real impact in the cybersecurity industry.
    What do you dislike about the product?
    I don't have any major concerns about Recorded Future. As with any advanced cybersecurity platform, I believe there is always room for improvement in making complex threat intelligence easier to understand and more accessible to users with different levels of technical expertise. I see this as an opportunity for continuous improvement rather than a major disadvantage.
    What problems is the product solving and how is that benefiting you?
    Recorded Future helps organizations identify cyber threats, detect potential risks, and make faster, more informed security decisions through real-time threat intelligence and AI-powered analysis. This is valuable to me because I am interested in cybersecurity and continuously developing my technical skills. Learning about how Recorded Future turns complex threat data into actionable insights helps me better understand modern cyber threats and how organizations can protect their systems, data, and infrastructure.
    Claire G.

    Great for Rapid Alert Triage, but Limited to Read-Only on Mobile

    Reviewed on Oct 08, 2026
    Review provided by G2
    What do you like best about the product?
    The Recorded Future mobile app serves as an on-the-go companion to the enterprise cyber threat intelligence platform, helping security analysts, incident responders, and executives stay informed when they’re away from their workstations. Its main strength is rapid alert triage: it delivers push notifications for critical incidents—such as compromised credentials, exploited vulnerabilities, or brand impersonation—so teams can react quickly to active threats.

    Users can also pull up “Intelligence Cards” for specific indicators of compromise, including suspicious IP addresses, domains, hashes, and CVEs. These cards make it easy to quickly review risk scores, malware links, and supporting evidence in one place. In addition, the app includes generative AI summaries that help break down technical actor activity, along with direct feeds of research from the Insikt Group and breaking reporting from Recorded Future News. That news content remains accessible even for users without an enterprise account.
    What do you dislike about the product?
    Strictly read-only with minimal interactivity: you can’t conduct serious threat hunting or run complex investigations from a phone. Advanced querying using Recorded Future’s syntax, building custom dashboards, and doing deep pivots across telemetry still require opening a laptop or desktop to access these capabilities.
    What problems is the product solving and how is that benefiting you?
    Immediate Awareness for Critical Incidents: Get push alerts for emergency triggers tailored to your organization—such as compromised employee credentials circulating on the dark web, brand-spoofing domains, or critical vulnerabilities targeting your company’s tech stack.

    On-the-Fly Verification: If you receive a phone call about a suspicious IP, domain, or zero-day CVE while you’re away from your desk, you can look it up in seconds to see its risk score, evidence timeline, and threat-actor associations without having to log into a full SIEM or desktop portal.

    Executive & On-Call Briefings: Generative AI summaries distill complex, multi-page threat reports into concise, bulleted briefs you can quickly skim between meetings or during off-hours incident calls.
    Patrik R.

    Highly Recommend for Personal Connectivity Needs

    Reviewed on Oct 06, 2026
    Review provided by G2
    What do you like best about the product?
    I like Recorded Future for its connectivity, which helps me connect a lot. The initial setup was easy.
    What do you dislike about the product?
    I don't like a lot of promo emails from Recorded Future. I'd prefer if there were a bit less of them.
    What problems is the product solving and how is that benefiting you?
    Recorded Future solves a lot of everyday problems for me and I like how it helps me connect a lot.
    Abdelrahman A.

    Unmatched Threat Visibility, but Demands Serious Budget and Maturity

    Reviewed on Oct 05, 2026
    Review provided by G2
    What do you like best about the product?
    It connects the dots between raw noise and what hackers are actually doing right now. Instead of drowning in alerts, you immediately see which threats have teeth and need fixing first. That means your team stops chasing false alarms and quickly blocks the attacks that genuinely threaten your business
    What do you dislike about the product?
    It costs a fortune, and without senior analysts to babysit the feeds and tune out the noise, you'll end up with an overpriced firehose of alerts that just overwhelms your team. Plus, their external attack surface scans often flag stale infrastructure, forcing your team to chase down phantom problems.
    What problems is the product solving and how is that benefiting you?
    It cuts through endless alert noise by showing which threats are actively weaponized, rather than just theoretical bugs. That benefits you by eliminating blind guesswork, letting your team prioritize real dangers first, and stopping attacks before they ever hit your perimeter that's way this best fit
    hichem s.

    Real-Time Threat Intelligence Simplified

    Reviewed on Oct 04, 2026
    Review provided by G2
    What do you like best about the product?
    I really like how Recorded Future brings threat intelligence into one place, making it easier to quickly identify potential threats. The real-time intelligence and clear insights are great for understanding emerging risks and help me prioritize what needs attention. It makes my day-to-day work much easier, saving me time by keeping updates and relevant context in one place, so I don't have to constantly jump between different sources. I also appreciate how I can quickly see which threats might matter to me, allowing me to focus my attention and feel more confident in my decisions. Additionally, the initial setup was quite easy.
    What do you dislike about the product?
    I think Recorded Future could improve its overall usability. Some parts can feel a little overwhelming, especially when you're first getting familiar with the platform due to the amount of information available. A simpler interface with more customized options for alerts and clearer guidance on which insights are most important would make it easier to get value from the platform quickly. It would also be helpful if some of the technical information was explained in a more straightforward way. Small improvements like these could make the overall experience feel more natural and easier to use.
    What problems is the product solving and how is that benefiting you?
    I use Recorded Future to monitor cyber threats, investigate indicators of compromise, and stay informed on vulnerabilities, making my day-to-day work easier with real-time updates and integrated threat intelligence.
    View all reviews