Continuous threat intelligence has improved brand monitoring and protects against leaked credentials
What is our primary use case?
Our main use case for Recorded Future is brand monitoring, reputation, and risk assessment, as it is one of the best tools that combine all three functionalities. We mainly use Recorded Future for our brand monitoring, to maintain our reputation, and for monitoring partner companies. Recorded Future offers scanning of a wide range of the internet, including public sources like various pastebins, GitHub, social media, as well as forums on the dark web. This helps identify if any company assets have been leaked by employees unintentionally, as well as through potential fraudsters. Additionally, it helps us with identifying the severity of vulnerabilities by assessing how many POCs are available or how often certain vulnerabilities are mentioned in related channels.
I can give a specific example of how I have used Recorded Future for brand monitoring and risk assessment. We have been able to identify leaked credentials and close those accounts off. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we could shut off those accounts.
What is most valuable?
The best features of Recorded Future include providing the latest threat reports regarding artifacts, such as IPs, domains, or hashes.
Getting those latest threat reports about artifacts, IPs, domains, or hashes has been advantageous to us in processing artifacts and identifying possible threats in a short period of time. Therefore, we are able to identify threats before they affect our systems and our application. Recorded Future also has the best browser extension that provides real-time information about an artifact and is accurate in identifying malicious domains and APIs.
Some of the best features include searching across multiple sources at the same time, indexing information in real time, and providing dashboards, statistics, and heat maps about certain topics.
Recorded Future has positively impacted our organization as we are able to cover a lot of sources with only this intelligence provider, not having to have specific tools for clear web or social media monitoring. Since the Recorded Future staff is doing the on-demand integration of new sources, we are saving a couple of positions as we do not have to develop our own crawlers. It is possible to integrate the solution with tools such as Splunk, which is really useful in order to obtain KPIs, metrics, and other useful insights for executive members of our company.
What needs improvement?
Some of the areas that need improvement in Recorded Future include email reports that can show unrelated content. Sometimes alerts pop up for articles that have been published years ago but were just recently discovered by Recorded Future.
For the browser extension, since the main purpose is to present information regarding IPs, I think it would be best to provide us with an idea of where the IP originates or some additional information about the organization it belongs to.
API capabilities in Recorded Future are improving, but there are still some features that are missing and some errors that are hard to handle and understand.
The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.
For how long have I used the solution?
I have been using Recorded Future for the past five years and six months.
What do I think about the stability of the solution?
According to my experience, Recorded Future is very stable because I have not seen slow performance.
What do I think about the scalability of the solution?
Recorded Future is highly scalable and can be used by any size of organization.
How are customer service and support?
The customer support for Recorded Future is very responsive and proactive.
Which solution did I use previously and why did I switch?
Previously, we were using VirusTotal, and I use Recorded Future together with VirusTotal to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.
Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.
How was the initial setup?
Recorded Future is deployed in our organization using a hybrid cloud.
What about the implementation team?
I purchased Recorded Future through the AWS Marketplace.
What was our ROI?
We have seen a return on investment as we have been able to identify leaked credentials and close those accounts off easily, thereby improving our security. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we are able to shut those accounts off.
What's my experience with pricing, setup cost, and licensing?
The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.
Which other solutions did I evaluate?
Previously, we were using VirusTotal, and I use Recorded Future together with VirusTotal to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.
Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.
What other advice do I have?
Recorded Future is mainly beneficial to the SOC. As part of the monitoring team, Recorded Future makes the investigation of alarms much easier for me. It can show the reputation of APIs from domains or even hashes, which helps me redirect my focus to potential malicious network activity easily.
Recorded Future is deployed in our organization using a hybrid cloud, and we use AWS as our cloud provider.
My advice for others looking into using Recorded Future is that it makes the investigation of alarms significantly easier and helps redirect focus to potential malicious network activity. I would rate Recorded Future an 8 out of 10.
Recorded Future: Practical Threat Intel for SOC
What do you like best about the product?
We use Recorded Future daily for risk scores, vulnerability intel and threat context.
Instead of checking multiple sources, the platform gives everything in one place, which saves a lot of time during investigations.
The alerts module provides targeted information on the subjects we've set up, allowing us to concentrate on actual risks instead of unnecessary noise.
One unexpected benefit is how much easier it made reporting to management, since the insights are already well explained and easy to share.
What do you dislike about the product?
There are a few areas where Recorded Future could be improved to make day-to-day use smoother.
The UI and dashboards are powerful, but they can feel cluttered at times, especially when I’m trying to quickly spot the most relevant risks during active investigations.
Also, regarding the sandboxing experience, adding clipboard support would be a helpful improvement.
What problems is the product solving and how is that benefiting you?
Recorded Future addresses alert overload and the lack of context. It helps us quickly determine which threats and vulnerabilities actually matter by providing clear risk scores along with real-world context.
As a result, we’ve reduced investigation time, improved prioritization, and enabled our team to respond faster and with more confidence to genuine threats.
Reliable intelligence platform with solid analytical depth
What do you like best about the product?
Best thing about RF is its ability to aggregate, enrich, and correlate intelligence data across multiple sources to support threat analysis and investigative workflows. The correlation logic and analytics support use cases such as threat actor tracking, campaign analysis, and pattern identification across incidents.
What do you dislike about the product?
The initial effort required for setup and tuning to achieve optimal results could be a little time consuming and required skilled resources. Alos, the browser extension could have more feature.
What problems is the product solving and how is that benefiting you?
Recorded Future is solving the challenge of fragmented and context‑poor threat intelligence by centralizing external intelligence and correlating it with security‑relevant data. It helps us move from raw indicators to risk‑based intelligence that is easier to consume during investigations.
The benefit is improved analyst efficiency and better prioritization during triage and response. By providing contextual intelligence around threats, vulnerabilities, and external risk factors, it reduces manual research and supports more informed, intelligence‑driven decisions.
Comprehensive Threat Intel, Slightly Noisy for Brand Monitoring
What do you like best about the product?
I really like Recorded Future because of its API connectivity, which I use to automate some of my workflows. The breadth of sources is impressive, making it a valuable tool for gathering diverse threat intelligence. I also find it easy to use. The initial setup was smooth, and the Recorded Future team was helpful with the setup and handholding process.
What do you dislike about the product?
I think there's too much noise in the alerts, especially with logo mentions. As a financial institution, my logo shows up on many e-commerce sites and pages, which are flagged as alerts even though they're genuine and not abusive. This might be considered logo abuse for other industries, but it's not relevant to us.
What problems is the product solving and how is that benefiting you?
Recorded Future gives me intel on threat campaigns globally and monitors brand mentions in various web spaces. The API connectivity automates workflows, and the brand module helps with logo and domain monitoring, though it can generate noise. It's easy to use with a broad source range.
Comprehensive Coverage Across Modules
What do you like best about the product?
number of modules / areas of coverage, custom research (insikt)
What do you dislike about the product?
buggy, needs refinement, intelligence cards are incomplete and lack linking to osint resources that could fill in missing fields
What problems is the product solving and how is that benefiting you?
We receive daily brand, logo, domain abuse alerts. We also use the threat intel research capabilities.
World-Class Threat Intel with Actionable Insights
What do you like best about the product?
Their Threat Intel is really world-class and provides meaningful insights
What do you dislike about the product?
Sometimes the details on password breaches do not have much context and details.
What problems is the product solving and how is that benefiting you?
Recorded Future solves the problem of detecting and prioritizing cyber threats in real time, benefiting us by enabling faster, smarter security decisions and reducing risk exposure
Comprehensive Solution with Stellar Integration for MSSPs
What do you like best about the product?
I truly value the comprehensive intelligence offerings that Recorded Future provides, including Indicators of Compromise (IOCs), vulnerabilities, and brand intelligence. This platform is renowned in the industry, particularly for its capabilities in providing intel that meets the diverse needs of my customers. I appreciate the multi-tenant environment it offers, allowing a streamlined management process as part of my Managed Security Service Provider (MSSP) base SKUs. Furthermore, I appreciate the ease of use after initial setup, facilitated by the training and certification provided to my technical team. The solution becomes even more attractive with its ability to integrate seamlessly with other platforms, offering compounded value. Recorded Future’s partnership with us is invaluable, and their ongoing enhancements, especially in automation and AI, are compelling. I find the diversity of features—from tech integration to effective attack management and vulnerability intelligence—consistently beneficial for both my operations and my clients. Additionally, the platform’s evolution towards strategic partnerships and the integration of threat intel providing a holistic view is a significant highlight for strategic growth in my organization.
What do you dislike about the product?
Couple of improvements that i assume is being worked upon, threat intel, threat hunting feeds, integrated with the risk recon which is part of Mastercard and with CrowdStrike. This integration process seems to be ongoing, but it is presently not fully realized.
What problems is the product solving and how is that benefiting you?
Recorded Future solves intelligence and vulnerability management, adding value with threat hunting and surface management suitable for MSSP needs, enhancing operations with a multi-tenant platform, best-of-breed solutions, and integration capabilities.
Excellent Threat Intel and AI Features, But Slow Enhancements and High Cost
What do you like best about the product?
Threat Intel coverage, less noise and new features with AI for Autonomus threat operations
What do you dislike about the product?
slow development on enhancement requests, cost
What problems is the product solving and how is that benefiting you?
There are many advantages to this product. It delivers tailored threat intelligence inputs that are actionable and come with minimal noise. Additionally, it offers multiple integrations with our ecosystem, among other benefits.
High Fidelity Tool with Integration Challenges
What do you like best about the product?
I have been using Recorded Future for about four years as a fresh intelligence tool, and I truly enjoy the tool. The fidelity and granularity of Recorded Future stand out remarkably as compared to other threat intelligence platforms. Its detail-oriented nature allows me to gain deep insights into threat actors related to various IOCs, which I find invaluable for my work as a threat analyst. Additionally, I find the GUI of Recorded Future to be significantly more user-friendly than other tools like CrowdStrike or Mandiant, making it much easier for me to navigate and utilize effectively. Moreover, I appreciate the tool's ability to set alerts for potential threats, enabling quick and informed responses to any malicious activities reported on platforms like Telegram. Even though setting up integrations can be tricky, the supportive customer service has made the process manageable. Overall, the ability to search IOCs easily and gather comprehensive information quickly strengthens my ability to defend the company.
What do you dislike about the product?
{"I find setting up integrations quite difficult, especially with Okta. It's confusing to understand what configurations would lock customers out and what keeps them in.","I experience difficulties with the ASM module, mainly due to the company's large scale and the need to segment many domains into different business organizations.","I've noted that the bulk upload functionality for IOCs is lacking. Currently, I have to upload IP addresses one by one, which is time-consuming compared to a bulk upload option.","The AI prediction functionality does not meet expectations, as I find it clunky and sometimes non-functional."}
What problems is the product solving and how is that benefiting you?
Recorded Future helps identify domain threats, offers Telegram alerts for threats, and enables IOC searches, enhancing intelligence gathering. Its GUI is user-friendly, making threat analysis more efficient compared to other platforms.
Essential Tool with Easy Setup and High Utility
What do you like best about the product?
I appreciate how easy it was to set up Recorded Future—it made the initial process straightforward and hassle-free. The software provides valuable insights into the geopolitics around Bonnie Blue, which is crucial for me as it informs me about international travel trends related to this area. This feature particularly stood out, as it helps me track where Bonnie Blue is going to be every week, allowing me to plan visits accordingly. Overall, Recorded Future's ability to deliver timely and pertinent information regarding locations and events is impressive. I even find it compelling enough to consider purchasing a license next year so long as these updates continue. My likelihood to recommend this service to others is extremely high, indicative of my satisfaction with its capabilities.
What do you dislike about the product?
I don't like that Recorded Future cannot provide me with precise future predictions regarding Bonnie Blue's whereabouts two days in advance. This feature would be incredibly useful for planning and would enhance the service significantly.
What problems is the product solving and how is that benefiting you?
Recorded Future provides insights on the geopolitics around Bonnie Blue, helping me track global interest and plan my visits.
