Listing Thumbnail

    Recorded Future Intelligence Platform

     Info
    Deployed on AWS
    Recorded Future arms security teams with the only complete threat intelligence solution powered by patented machine learning to lower risk. Recorded Future can help you find threats 10 times faster, identify 22 percent more threats before impact, and resolve threats 63 percent quicker.
    4.6

    Overview

    Play video

    INTELLIGENCE-DRIVEN SECURITY

    Threat intelligence can sit at the very center of your information security strategy, applied to add value across all functions and teams: -CISOs gain critical insights into the threat landscape to inform strategy. -Threat analysts proactively defend their companies against cyberattacks with alerts and insight. -Security operations can investigate indicators 10 times faster and more effectively prioritize vulnerabilities. -Incident responders can investigate incidents more confidently with a broader context.

    THE SOLUTION

    -SaaS Platform: Research, analyze, and collaborate on intelligence through our intuitive web interface. -Integrations: Layer our contextualized threat intelligence onto your existing security infrastructure.

    For orders greater than 8 users, Please contact AWS-Marketplace@recordedfuture.com 

    Highlights

    • Easy-to-use browser extension accessible from any web-based application
    • Real-time threat intelligence integrated into any security solution - SIEM, SOAR, Incident Response, and more
    • Portal access for research, real-time alerting and dashboard views of trending threats and relevant intelligence

    Details

    Categories

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Recorded Future Intelligence Platform

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    36-month contract (9)

     Info
    Dimension
    Description
    Cost/36 months
    Brand Intelligence
    Brand Intelligence and access for up to 4 users.
    $243,750.00
    Vulnerability Intel
    Vulnerability Intelligence and access for up to 4 users.
    $168,750.00
    SecOps Intelligence
    SecOps Intelligence and access for up to 10 users
    $243,750.00
    Identity Intel Workforce
    Supports up to 25k workforce identities
    $262,500.00
    Third Party Intel
    Third Party Intel Monitoring for up to 100 companies.
    $318,750.00
    Threat Intelligence
    Threat Intelligence and access for up to 2 users
    $281,250.00
    Geopolitical Intel
    Geopolitical Intelligence and access for up to 2 users
    $281,250.00
    ASI
    Attack Surface Intelligence and up to 5 users and 1 project
    $281,250.00
    Identity Intel External
    Supports up to 1M Identities
    $393,750.00

    Vendor refund policy

    All orders and fees are non-cancellable and non-refundable once placed except as required by law.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Resources

    Support

    Vendor support

    Support is available 24/7 at +1(855) 476-9728 or via Support@recordedfuture.com  Your success is important to us. Please refer to https://support.recordedfuture.com/hc/en-us  for additional details or to submit a ticket.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    100
    In Security
    Top
    100
    In Log Analysis

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    4 reviews
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Machine Learning-Powered Threat Detection
    Patented machine learning algorithms for identifying and analyzing security threats across multiple data sources
    Real-Time Threat Intelligence Integration
    Integration capabilities with security infrastructure including SIEM, SOAR, and incident response platforms for contextualized threat intelligence
    Browser Extension for Threat Context
    Browser extension accessible from web-based applications providing threat intelligence context during security operations
    Threat Intelligence Portal and Dashboard
    Web-based portal with research capabilities, real-time alerting functionality, and dashboard visualization of trending threats and relevant intelligence
    Indicator Investigation and Analysis
    Capability to investigate security indicators with contextual threat data for vulnerability prioritization and incident investigation
    Security Information and Event Management
    Real-time monitoring and visibility for threat detection including ransomware, insider threats, and cloud attacks with security analytics for rapid investigation and prioritization of critical threats.
    Incident Response Automation and Orchestration
    Automation and orchestration of incident response workflows with consistent, optimized, and measurable process execution.
    Enterprise-Grade AI and Automation
    Embedded artificial intelligence and automation capabilities designed to increase analyst productivity and accelerate incident lifecycle management.
    Multi-Source Data Correlation
    Correlation of data across users, networks, and cloud-native services to identify threats including cloud misconfigurations, policy changes, and suspicious user activity with alert deduplication.
    Hybrid and Cloud Environment Integration
    Centralized visibility across hybrid cloud and on-premises environments with deep integrations to AWS security services including Security Hub, CloudTrail, GuardDuty, Network Firewall, WAF, Detective, CloudWatch, and VPC Flow Logs.
    Multi-Source Threat Data Integration
    Correlates security events from Trellix Security Platform and over 500 third-party tools including 13 AWS integrations to create unified threat visibility across the security stack.
    AI-Driven Alert Triage and Prioritization
    Applies artificial intelligence-driven analytics to perform 100% alert triage, prioritize threats, and provide GenAI-powered insights for threat investigation and remediation guidance.
    No-Code Automation for Investigation and Response
    Provides UI-driven, point-and-click automation capabilities to offload repetitive security operations tasks and accelerate investigation and response workflows.
    Pre-Built Analytics and Correlation Rules
    Ingests data from multiple sources and correlates events using pre-built analytics and rules to reconstruct complete attack narratives and reduce manual investigation pivots.
    Multi-Deployment Architecture Support
    Supports cloud, hybrid, and air-gapped deployment models with an open integration ecosystem for flexible security infrastructure configurations.

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.6
    230 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    71%
    28%
    1%
    0%
    0%
    2 AWS reviews
    |
    228 external reviews
    External reviews are from G2  and PeerSpot .
    Nijat I.

    Real-Time, Actionable Threat Intelligence with Seamless Security Tool Compatibility

    Reviewed on May 03, 2026
    Review provided by G2
    What do you like best about the product?
    The utility of Recorded Future can be seen in its ability to provide real-time awareness about possible security threats. It collects information from diverse sources and displays it in a comprehensible format, making it easy to assess and take necessary action. It provides threat intelligence that is highly informative and actionable, helping users to address issues before they become serious problems. It also has excellent compatibility with other security software.
    What do you dislike about the product?
    One issue is the volume of data, which can be overwhelming without any experience. It requires time to learn to distinguish between the noise and only those elements that need attention. The user interface is quite strong; however, it may not be straightforward for beginners, and there are certain things that need to be configured first before they become functional. There are also instances when alerts can be a bit wide and need validation manually, which creates an extra task. Another disadvantage is that it can be quite costly, particularly for small groups who cannot take advantage of all the offered features.
    What problems is the product solving and how is that benefiting you?
    Staying abreast of ever-changing cyber threats becomes a challenge with the absence of data in one place. The use of Recorded Future makes such task easier as it consolidates all necessary intelligence and brings contextual insight. This helps eliminate manual work and enables fast detection of any possible danger. Thus, time frames are reduced, and emphasis shifts from reaction to prevention. Furthermore, it allows prioritization, which improves risk management.
    Xavier M.

    Centralize Threats and Anticipate Attacks

    Reviewed on Apr 23, 2026
    Review provided by G2
    What do you like best about the product?
    I use Recorded Future mainly to centralize threat collection and reduce noise. I really like its ability to anticipate attacks, which helps prevent them. With the speed of attacks nowadays, being on the front line is essential.
    What do you dislike about the product?
    Compatibility with all computers on the network and the initial setup could be a bit more guided.
    What problems is the product solving and how is that benefiting you?
    I use Recorded Future to centralize threat collection, reduce noise, and avoid blind spots in the network. It also helps to anticipate and prevent attacks, which is crucial given the pace of attacks nowadays.
    Dragos L.

    Recorded Future Delivers Real-Time Threat Intelligence with Unmatched Data Breadth

    Reviewed on Apr 22, 2026
    Review provided by G2
    What do you like best about the product?
    What I like best is the breadth of its data collection. Recorded Future excels at aggregating massive amounts of open-source, dark web, and technical data into a single, searchable platform. It saves our team a lot of time on manual research by giving us real-time visibility into the global threat landscape.
    What do you dislike about the product?
    he primary drawback is the pricing model. Recorded Future is a premium tool with a price tag to match, which can be hard to justify for smaller security teams or organizations with limited budgets. Sometimes the cost of additional modules feels a bit steep compared to the incremental value they provide.
    What problems is the product solving and how is that benefiting you?
    So called"alert fatigue."
    My team spent 60% of their day manually researching IP addresses, file hashes, and domain names across dozens of different websites to see if an alert was a real threat.
    The Benefit: Recorded Future centralizes all that context. It automates about 70% of that manual research
    Hospital & Health Care

    Recorded Future Delivers Actionable Threat Intelligence with Strong Integrations

    Reviewed on Apr 22, 2026
    Review provided by G2
    What do you like best about the product?
    Overall Review – Recorded Future
    I’ve worked with several threat intelligence platforms over the years, and Recorded Future is one of the few that consistently delivers real value in day-to-day security operations—not just in a demo environment. What stands out most to me is that it’s designed to help security teams make faster, better decisions, rather than overwhelm them with raw data.

    UI / UX
    Given the complexity of the intelligence it handles, the UI is thoughtfully designed and easy to navigate. I appreciate how quickly you can move from an alert or risk score to meaningful context without a lot of extra clicking. The dashboards are practical and focused on what matters—real risk, active threats, and prioritization—instead of vanity metrics.

    Integrations
    This is one of Recorded Future’s strongest areas. Its integrations with SIEM, SOAR, vulnerability management, and SOC tools make threat intelligence part of the operational workflow. In real-world environments, that matters because it reduces manual effort and drives broader adoption across the security team.

    Performance
    The platform performs reliably, with fast response times and intelligence that’s updated regularly. I especially value that the alerts and risk insights feel current and relevant, which is critical when dealing with actively exploited vulnerabilities or emerging threats.

    Pricing / ROI
    Recorded Future isn’t a low-cost solution, but the ROI comes from efficiency and better prioritization—not only from incident prevention. For mid-size and large organizations, the value shows up in reduced noise, improved decision-making, and time saved across the security lifecycle.

    Support / Onboarding
    Onboarding was smooth and well supported. The support and customer success teams clearly understand both the product and real-world security challenges. Rather than simply walking through features, they focused on how to get tangible value based on our maturity level and use cases, which I genuinely appreciated.

    AI / Intelligence
    This is Recorded Future’s core strength. It’s not just about collecting feeds; it’s about correlating data, adding context, scoring risk, and delivering actionable intelligence. The AI-driven analysis helps cut through the noise and keeps the team focused on the threats that actually matter to the organization.
    What do you dislike about the product?
    One aspect is the platform’s complexity for new users. Because the intelligence is very rich and detailed, it can take time for teams to fully understand how to navigate and prioritize everything effectively. This isn’t a flaw in the intelligence itself, but it does mean that proper onboarding and internal processes are important to avoid information overload.
    Another consideration is pricing. Recorded Future is clearly designed for organizations that are serious about threat intelligence and operationalizing it. For teams that don’t yet have the maturity or resources to consume intelligence consistently, it may feel harder to justify the investment.
    From a UI perspective, while the interface is powerful and well designed for analysts, some views can feel dense when you’re looking for quick answers. A few more simplified or executive‑level views could make it easier to communicate risk to non‑technical stakeholders.
    Regarding integrations, although there are many excellent out‑of‑the‑box options, getting maximum value usually requires some tuning and customization. This is expected at an enterprise level, but it does require time and coordination between teams.
    Finally, the platform delivers the most value when intelligence is operationalized. Recorded Future provides strong scoring and context, but organizations still need clear workflows and ownership to consistently turn insights into action.
    What problems is the product solving and how is that benefiting you?
    Recorded Future primarily solves the problem of too much security data and not enough clarity on what actually matters. In most environments, threat intelligence, vulnerability data, and external risk signals exist in silos or come in overwhelming volumes. Recorded Future helps consolidate, correlate, and prioritize that information so it can be acted on.
    For me, the biggest benefit is better prioritization. Instead of treating all alerts, vulnerabilities, or indicators as equally important, Recorded Future provides context—such as exploit activity, threat actor relevance, and real‑world exposure—so I can focus on what represents actual risk to the organization. This directly improves decision‑making and reduces wasted effort.
    Another key problem it solves is the gap between intelligence and operations. Threat intelligence is often underused because it doesn’t integrate well into daily workflows. Recorded Future’s integrations allow intelligence to feed directly into SOC processes, vulnerability management, and incident response, which makes it practical rather than theoretical. As a result, intelligence becomes part of how the team operates, not a separate activity.
    It also addresses the challenge of reacting too late to emerging threats. By monitoring a wide range of sources and surfacing early signals, Recorded Future helps identify risks sooner—whether that’s an actively exploited vulnerability, a new campaign, or changes in adversary behavior. That gives us more time to respond proactively instead of reacting after impact.
    Markuss J.

    Streamlined Threat Intelligence, Needs Tuning

    Reviewed on Apr 17, 2026
    Review provided by G2
    What do you like best about the product?
    I like using Recorded Future mainly as a threat intelligence prioritization platform. The platform's ability to assist in faster triage and minimizing wasted cycles on false positives is beneficial. It effectively turns raw data into usable decisions very quickly, which cuts investigation times and helps me act faster.
    What do you dislike about the product?
    It still needs tuning and analyst validation to avoid overreliance on scores. Context depth can vary.
    What problems is the product solving and how is that benefiting you?
    I use Recorded Future for threat intelligence prioritization, which speeds up triage and reduces false positives. It quickly turns raw data into actionable decisions, cutting investigation times and enabling faster response.
    View all reviews