Sold by: ZeroFox
Deployed on AWS
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
4.4
Overview
ZeroFox is the external cybersecurity platform that helps security teams discover, validate, and disrupt threats across platforms, people, and locations outside their control.
- Discover: Map your external digital presence, including domains, credentials, and assets, to spot exposure early.
- Validate: AI correlation and expert analysts confirm real threats from 12B+ signals, cutting noise and false positives.
- Disrupt: Act fast with takedowns through ZeroFox's Global Disruption Network, executing 1M+ takedowns a year with a 95% acceptance rate.
The ZeroFox Core Bundle elevates your organization's security by combining advanced, AI-enabled Brand, Domain, and Executive Protection with expanded Takedown services, along with self- and full-service Intelligence capabilities.
What's Included:
- Brand Protection (5)
- Domain Protection (50)
- Executive Protection (10)
- Takedown (500/yr.)
- Intelligence Search (5 seats)
- On-Demand Investigation Credits (5)
- Platform Alerts & Takedown API Connector (1)
- OnWatch Alert (Managed Service)
Brand Protection (5) Monitoring for brand and organizational threats for brands, sub-brands or product line/family across all data sources of surface, deep and dark web. This includes brand impersonation, mentions or breach evidence on non-OSINT channels. Includes monitoring for corporate social accounts for a given brand or product.
Domain Protection (50) Protection for company owned domains/sub-domains through continuous identification and remediation of impersonating domains, trademark infringement, and spoofing against bad actors that trick your customers into providing information and damage your brand. Includes protection for the primary domain for a given brand or product. Each domain protected asset covers all derivative sub-domains for the same primary domain.
Executive Protection (10) Monitoring for high profile executives, employees, or VIPs against account takeover impersonations, sensitive information leakage, doxxing, credential compromise, PII exposure, and cyber-threats. Includes PII Removal for the executive.
Takedown (500/yr.) Takedown and/or disruption actions of any and all applicable impersonating or malicious account/site/content and other terms of service violations from social networks, mobile app stores, paste sites, domains, code shares, and other data sources (excluding deep and dark web). Rapidly Identify and automate the request submission process to remove or block malicious sites and content with end-to-end visibility.
- Takedown malicious & illegal content across social media platforms
- Takedown malicious & illegal domains
- Automated requests to our Global Disruption Network partners for content blocking and attacker campaign disruption
- Full-transparency of takedown status via in-platform experience and managed service team support
Intelligence Search (5 seats) Provides unlimited access to ZeroFox's unique threat intelligence graph, comprising over 12 billion interconnected records. Search across threat actors, indicators, malware, dark web activity, breaking news, and curated intelligence reports. Accelerate investigations and uncover actionable insights by mapping critical relationships in real time, empowering smarter, faster decision-making.
On-Demand Investigations (ODI) (5/yr.) Gain access to teams of intelligence analysts, researchers, and deeply embedded dark web operatives with experience conducting specialized risk assessments, investigations, and engaging with adversaries to curate intelligence specific to you.
Platform Alerts & Takedown API Connector (1) Connect alerts from the ZeroFox platform with your other internal tools and applications to streamline your security programs. Also request takedowns through the API from your application. Customers are entitled to support for integration enablement and ongoing Platform API support and maintenance.
OnWatch Alert
- Platform support for the ZeroFox platform:
- 24x7 Alert Review, Validation and Escalation
- Global SOCs, SOC 2 Type 2 Certified
- Standard Launch and 24x7 Support
- Access to Global Intelligence Collection (GIC)
- Advanced AI Analysis Including Computer Vision, NLP, Image Analysis, Machine Learning, and more
Highlights
- Discover: map your external digital presence (domains, credentials, assets) to spot exposure early
- Validate: AI plus expert analysts confirm real threats from 12B+ signals across 180+ platforms, including the dark web
- Disrupt: 1M+ takedowns a year through the Global Disruption Network, with a 95% acceptance rate
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
ZeroFox Core Bundle | AI-enabled Brand, Domain, and Exec Protection with Takedowns and Intel | $73,500.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Description | Cost/unit |
|---|---|---|
Additional Takedowns | Takedowns beyond the bundle allotment, per takedown | $17.00 |
Dimensions summary
This listing uses a contract model with two pricing dimensions. The ZeroFox Core Bundle is the main package, billed per unit. It combines AI-enabled brand, domain, and executive protection with a set allotment of takedowns and threat intelligence. The Additional Takedowns dimension is a usage add-on, billed per takedown. You use it only when you exceed your bundle's takedown allotment. A takedown counts toward your total once it completes successfully. The bundle sets your baseline coverage, and the add-on lets you scale takedown volume as needed through the contract term.
Top-of-mind questions for buyers
A takedown counts toward your total only once it finishes successfully. Requests that are denied, need more evidence, are already inactive on arrival, or get no provider response do not count. This applies to both your bundle allotment and any Additional Takedowns you purchase.
You can keep submitting takedowns past your annual allotment. The platform notifies you as you near the limit and prompts you to contact your representative. You then purchase Additional Takedowns, billed per takedown, for use through the end of the contract year. Threat response is not blocked.
One Core Bundle unit covers AI-enabled brand, domain, and executive protection. It bundles a set takedown allotment plus threat intelligence search and investigation capabilities. It monitors the surface, deep, and dark web to detect and disrupt impersonations, phishing, and brand abuse across digital channels.
www.zerofox.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Threats don't keep business hours, and neither do we. ZeroFox provides 24/7/365 support by phone at +1 (855) 936-9778 and by email at ask@zerofox.com .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
Access FactSet’s core financials offering seamlessly through Redshift. Incorporate FactSet’s industry-leading data into your workflow.
Core provides Next-Generation Cloud Managed Services that take responsibility for client infrastructure and operations. ZRG's Core CCoE (Cloud Center of Excellence) team guides clients through the process of planning their cloud adoption strategy, migrating workloads, operationalizing those workloads, and then optimizing them for cost and performance.
Customer reviews
Andres A.
Most Effective Partner for Catching Fraudulent Social Posts
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It is the most effective partner in getting fraudulent posts for Social platforms
What do you dislike about the product?
Nothing I dislike about them - they are great partners
What problems is the product solving and how is that benefiting you?
They are taking down fraudulent social posts and websites protecting consumers wallet and our Company's image
Utilities
Proactive Alerts Help Us Catch Negative Mentions Early
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I receive alerts whenever negative mentions of our company are identified online, which gives us an opportunity to investigate and remediate potential issues early. I’d rather know proactively than learn about an issue from a news agency after the fact.
What do you dislike about the product?
There are times when the platform generates alerts that aren’t relevant, so I periodically have to fine-tune the alert settings. For example, I may receive an alert when a new website has a name similar to our company. After review, the site may be completely legitimate, so there would be no basis for a takedown.
What problems is the product solving and how is that benefiting you?
ZeroFox gives us early visibility into potential threats or negative activity involving Cal Water outside of our environment. It alerts us to things like suspicious websites, impersonation, or negative mentions so we can investigate and respond before an issue escalates. The biggest benefit is being proactive rather than finding out about an issue from the media or another third party after the fact.
Retail
ZeroFOX Digital Risk Protection Review
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
Our account representatives are fantastic and have been open to suggestions. We aid in helping evaluate gaps in the tool and the team acknowledges that information.
What do you dislike about the product?
Collection and enforcement across platform providers is limited. We found the sales and implementation process challenging, as capabilities initially represented as available later required additional purchases. This led to repeated discussions and shifting expectations, making it difficult to accurately assess the true cost and functionality of the solution.
What problems is the product solving and how is that benefiting you?
To some degree, the tool has helped us identify and disrupt external digital threats targeting our brand. That includes social media activity, impersonation accounts, counterfeit listings, unauthorized mobile apps, scam websites, and compromised credentials.
Anonymous
Expert-Triaged Threat Intelligence with White-Glove Support
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I like that ZeroFox isn’t just a console full of alerts. Its intelligence and AI filter out noise, and a team of specialists reviews and triages alerts so I’m informed about the threats that really matter. I also appreciate the hands-on support from my dedicated technical account manager. We work closely on tuning, and they address concerns to make sure the product works effectively for me. Setup was very easy: I provided our brand names, ZeroFox did much of the discovery automatically and populated the console, and I was able to get value from the tool almost instantly without spending hours entering information.
What do you dislike about the product?
The only thing I’d improve is making it easier to classify different types of threats in my triage console. Sometimes it’s a little tough to hard-code or set threat types to my preferred categories. Outside of that, I don’t have any other real technical challenges.
What problems is the product solving and how is that benefiting you?
I use ZeroFox to initiate legal takedowns of malicious resources, including fake social media profiles or accounts and domains hosting phishing or other malicious content. It’s one of my main use cases.
Jeff P.
Clear External Threat Visibility, Effortless to Manage
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
I appreciate the visibility ZeroFox provides outside of traditional security tools. It helps me keep an eye on our executives and domains for potential impersonation, malicious activity, and other external threats. That layer of protection helps fill an important gap in our overall security program. The setup and management are super easy and make sense.
What do you dislike about the product?
There is nothing I dislike about the tool. It fills the gaps that I'm looking for it to fill!
What problems is the product solving and how is that benefiting you?
I use ZeroFox to protect our company outside the traditional corporate network.