Sold by: Recorded FutureÂ
Recorded Future arms security teams with the only complete threat intelligence solution powered by patented machine learning to lower risk. Recorded Future can help you find threats 10 times faster, identify 22 percent more threats before impact, and resolve threats 63 percent quicker.
Overview
INTELLIGENCE-DRIVEN SECURITY
Threat intelligence can sit at the very center of your information security strategy, applied to add value across all functions and teams: -CISOs gain critical insights into the threat landscape to inform strategy. -Threat analysts proactively defend their companies against cyberattacks with alerts and insight. -Security operations can investigate indicators 10 times faster and more effectively prioritize vulnerabilities. -Incident responders can investigate incidents more confidently with a broader context.
THE SOLUTION
-SaaS Platform: Research, analyze, and collaborate on intelligence through our intuitive web interface. -Integrations: Layer our contextualized threat intelligence onto your existing security infrastructure.
For orders greater than 8 users, Please contact AWS-Marketplace@recordedfuture.comÂ
Highlights
- Easy-to-use browser extension accessible from any web-based application
- Real-time threat intelligence integrated into any security solution - SIEM, SOAR, Incident Response, and more
- Portal access for research, real-time alerting and dashboard views of trending threats and relevant intelligence
Details
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/36 months |
|---|---|---|
Brand Intelligence | Brand Intelligence and access for up to 4 users. | $243,750.00 |
Vulnerability Intel | Vulnerability Intelligence and access for up to 4 users. | $168,750.00 |
SecOps Intelligence | SecOps Intelligence and access for up to 10 users | $243,750.00 |
Identity Intel Workforce | Supports up to 25k workforce identities | $262,500.00 |
Third Party Intel | Third Party Intel Monitoring for up to 100 companies. | $318,750.00 |
Threat Intelligence | Threat Intelligence and access for up to 2 users | $281,250.00 |
Geopolitical Intel | Geopolitical Intelligence and access for up to 2 users | $281,250.00 |
ASI | Attack Surface Intelligence and up to 5 users and 1 project | $281,250.00 |
Identity Intel External | Supports up to 1M Identities | $393,750.00 |
Vendor refund policy
All orders and fees are non-cancellable and non-refundable once placed except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support is available 24/7 at +1(855) 476-9728 or via Support@recordedfuture.com Your success is important to us. Please refer to https://support.recordedfuture.com/hc/en-us for additional details or to submit a ticket.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Recorded Future
By IBM Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Machine Learning Threat Detection
Patented machine learning algorithms for proactive threat intelligence and identification
Threat Intelligence Integration
Seamless integration with existing security infrastructure including SIEM, SOAR, and incident response platforms
Web-Based Intelligence Platform
SaaS platform with intuitive web interface for research, analysis, and collaborative threat investigation
Real-Time Threat Alerting
Comprehensive real-time alerting system with dashboard views of trending and emerging cyber threats
Browser Extension Capability
Cross-platform browser extension enabling threat intelligence access from multiple web-based applications
Threat Detection and Analytics
Advanced security information and event management (SIEM) solution with real-time monitoring and threat detection capabilities
Cloud Security Integration
Deep integration with AWS security services including Security Hub, CloudTrail, GuardDuty, Network Firewall, and VPC Flow Logs
Incident Response Automation
Enterprise-grade AI and automation to orchestrate and streamline incident response workflows across security technologies
Event Correlation
Ability to correlate data across users, networks, and cloud services to provide comprehensive threat insights and minimize alert fatigue
Multi-Environment Monitoring
Unified security analytics platform supporting monitoring and visibility across cloud and on-premises infrastructure
Threat Intelligence Integration
Comprehensive threat intelligence platform analyzing over 3,000 threat campaigns with advanced correlation capabilities
Cross-Platform Event Ingestion
Ability to ingest event and incident data across multiple products and over 1,000 third-party services with 13 AWS integrations
AI-Powered Investigation
Deep AI-guided investigations with advanced threat modeling and intelligent response capabilities
Security Operations Automation
Advanced AI models for operationalizing threat intelligence through control posture updates and automated response mechanisms
Adaptive Threat Detection
AI-driven threat landscape analysis enabling proactive and dynamic security threat identification and mitigation
Standard contract
No
No
No
Customer reviews
4.5
1 ratings
1 AWS reviews
|
145 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Events Services
Fantastic Piece of Intelligence added to our Security Team
Reviewed on Aug 04, 2025
Review provided by G2
What do you like best about the product?
- Its updated most of time
- Easy to setup alerts according to our Intelligence Requirements
-Good Support to Map our Requirements
-Provides good Insights related to Threat actors targeting our organization
-Gives complete TTP's related to any threat actor which helps us focus on our detections
-Sandbox gives good results & we use it most of time
-Malware intelligence is a great new addition to this product
- Easy to setup alerts according to our Intelligence Requirements
-Good Support to Map our Requirements
-Provides good Insights related to Threat actors targeting our organization
-Gives complete TTP's related to any threat actor which helps us focus on our detections
-Sandbox gives good results & we use it most of time
-Malware intelligence is a great new addition to this product
What do you dislike about the product?
- Sometimes the data displayed comes out to be false positive & just something meaningless
What problems is the product solving and how is that benefiting you?
- Helps us keep ahead of adversaries by keeping our detections up to date
-Vulnerability intelligence helps us to focus on patching efforts
-We monitor it for our brand abuse detection
-We have alerts setup according to our intelligence requirements, we are a bit relaxed and feel covered
- We keep a track of threat actors & techniques they are using. RF gives us a lot of intel to hunt for adversary behavior in our environment
-Vulnerability intelligence helps us to focus on patching efforts
-We monitor it for our brand abuse detection
-We have alerts setup according to our intelligence requirements, we are a bit relaxed and feel covered
- We keep a track of threat actors & techniques they are using. RF gives us a lot of intel to hunt for adversary behavior in our environment
Umesh M.
Powerful/Resourceful Threat Intelligence Platform with Real-Time Insights
Reviewed on Jul 16, 2025
Review provided by G2
What do you like best about the product?
Recorded Future delivers real-time threat intelligence that integrates smoothly into our security workflows. I especially appreciate the Interactive Sandbox, and the ease of implementation of the Advanced Query Builder, and the platform’s ability to gather intelligence from the dark web — all of which make threat analysis faster and more insightful.
The integration with Anomaly was seamless in our case, and I use the platform daily as a core part of my work.
Also, a big shoutout to our point of contact, John Percic, who is always responsive and helpful whenever we have questions or need guidance.
The integration with Anomaly was seamless in our case, and I use the platform daily as a core part of my work.
Also, a big shoutout to our point of contact, John Percic, who is always responsive and helpful whenever we have questions or need guidance.
What do you dislike about the product?
There are a few areas where the tool could improve. Sometimes, domain-related data is missing from Playbook alerts during ingestion, which is critical since such domains are often linked to organizational fraud. Additionally, the Identity module doesn’t always trigger alerts at the time of a breach, which delays response. In some cases, we’ve also noticed that the threat intelligence data appears slightly delayed compared to other tools we’ve used.
What problems is the product solving and how is that benefiting you?
Recorded Future helps us detect and respond to threats more effectively. It identifies impersonating domains and logo misuse, which are often used in fraud attempts, helping us take action before damage occurs. The platform also monitors for identity breaches, giving us visibility into compromised credentials. These capabilities, along with dark web intelligence and real-time alerts, significantly strengthen our organization’s threat detection and response efforts.
Financial Services
Great Platform
Reviewed on Jul 15, 2025
Review provided by G2
What do you like best about the product?
The platform provides a well-curated list of relevant threat actors tailored to our industry and tech stack. It includes detailed TTPs, making it easier to understand attacker behavior. The various modules are well-structured, and the SecOps functionality stands out by enabling a proactive approach to threat hunting. Overall, it's a valuable tool for improving threat visibility and response.
What do you dislike about the product?
Plugin availability is still limited — for instance, there’s no integration for Qualys yet. Alert tuning needs improvement, as even casual mentions in chatter can trigger alerts. Additionally, the AI-driven reporting lacks accuracy and often falls short of providing actionable insights.
What problems is the product solving and how is that benefiting you?
The platform provides a comprehensive overview of the threat landscape, enabling TI-driven vulnerability management. It also supports proactive threat hunting through the SecOps module. Additionally, it offers detailed TTPs and YARA rules for related malware and ransomware groups, enhancing our ability to detect and respond to emerging threats.
Ryan M.
Manager of Cyber Threat Intelligence
Reviewed on Jul 14, 2025
Review provided by G2
What do you like best about the product?
I find the Threat Module to be very helpful in giving my organization the ability to identify potential threats. Recorded Future also provides us with the tools, information, and direction on taking proactive actions against those threats to better protect the organization. As a traditional Threat Intelligence Platform, it meets or exceeds every expectation that I have.
What do you dislike about the product?
There are very few downsides to using Recorded Future. The only downside that my organization has observed is that the online portal is rather difficult to navigate and the advanced searching capabilities are hard to begin using as well. This has been mitigated by free leaning resources, certifications, and demos by Recorded Future though.
What problems is the product solving and how is that benefiting you?
Recorded Future is solving the problem that every Cyber Security team should be concerned with: who is likely to attack me. We refer to this as an Intelligence Requirement (IR) and it is one of the most important questions we can ask in order to protect our organization. Their methods of making that determination are what sets them apart from other Threat Intelligence providers.
Oil & Energy
Most comprehensive threat intel provider in the game
Reviewed on Jul 14, 2025
Review provided by G2
What do you like best about the product?
Their data ontology, how they organize their information, is best in class. Its not just about stuffing news blogs into a platform but really breaking the data apart. Their Insikt analyst then turn that data into refined intelligence. Also, their AI Chatbot is the best we have tested as far as getting cyber relevant summaries of incidents and events.
What do you dislike about the product?
I just wish they were a full blown Threat Intel Platform, where you could import other feeds, threat actor reports, and have it be the single pane of glass for analysts.
What problems is the product solving and how is that benefiting you?
Providing quality, organized, and trusted intelligence.