Recorded Future has some important strengths. It has a long history of success in the market and is known for excellent threat intelligence. Its team is skilled at using AI to search for and report on threats. For many years, it was seen as the best in the industry.
Recorded Future Intelligence Platform
Recorded FutureExternal reviews
228 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Cyber Threat Intelligence with Recorded Future Is Great
What do you like best about the product?
As a cyber threat intelligence analyst, I appreciate how quickly I can research vulnerabilities and determine their relevance to my organization. The risk rules triggered for each vulnerability are incredibly helpful in assessing criticality. The sandboxing feature is pretty good for safe exploration of the dark web to find information published by ransomware groups or other malicious actors. There were several instances where I visited ransomware extortion page, that supposedly leaked company data, to check the legitimacy.
What do you dislike about the product?
Both custom and predefined alerts generate lot of false positives. Despite extensive fine-tuning, manual efforts. Human intelligence are often required to filter out these inaccuracie. The tool lacks the capability to identify documents containing sensitive company data. Also pricing is quite expensive, I feel. I would have to agree that there are lot of good than bad. With its few flaws also I would always prefer RF over most of the Tools available.
What problems is the product solving and how is that benefiting you?
It helps in vulnerability research, threat trend analysis, and offering leaked data from darkweb. It helps quickly determine the relevance and criticality of vulnerabilities, understand the broader context of threat campaigns. What I felt is RF is not trying to spoon fed, in terms of giving alerts where you wouldn't have to anything, but rather its giving everything, all capabilities, where you can surf through the informations to identify whats relevant for you.
A Threat intel tool, with a constant new features and good customer service
What do you like best about the product?
Their customer service is best compare to other threat intel platforms
What do you dislike about the product?
the cost of the platform can be a significant barrier for smaller organizations. While the value provided by Recorded Future is substantial, the pricing structure may not be feasible for all budgets
What problems is the product solving and how is that benefiting you?
Recorded Future is addressing several critical problems in the realm of cybersecurity and threat intelligence, and its solutions have provided significant benefits to my organization. Here are some of the key problems it solves and how it benefits us:
Threat Detection and Analysis: Recorded Future excels in aggregating and analyzing vast amounts of data from a multitude of sources, including the dark web, social media, and technical feeds. This real-time threat intelligence allows us to detect and respond to threats much faster, significantly reducing our risk exposure.
Contextual Intelligence: Recorded Future provides rich contextual information about threats, including historical data, related indicators, and threat actor profiles. This comprehensive view helps us make more informed decisions and prioritize our response efforts based on the severity and relevance of the threat.
Automation and Efficiency:The platform's automation capabilities streamline the process of threat detection and analysis. Automated alerts and reports save our team countless hours, allowing us to focus on strategic initiatives rather than getting bogged down in data analysis.
Vulnerability Management: Recorded Future integrates vulnerability intelligence with threat data, helping us prioritize patching and mitigation efforts based on real-world exploitability and threat actor activity. This targeted approach enhances our overall security posture.
Third-Party Risk Management: Recorded Future provides insights into the cyber risk associated with third parties, enabling us to make more informed decisions about our business relationships and take proactive measures to mitigate potential risks.
Strategic Threat Intelligence:The platform offers strategic intelligence reports and trend analysis, helping us anticipate future threats and adapt our security strategies accordingly. This forward-looking approach ensures that we are not just reacting to threats but also preparing for them.
Threat Detection and Analysis: Recorded Future excels in aggregating and analyzing vast amounts of data from a multitude of sources, including the dark web, social media, and technical feeds. This real-time threat intelligence allows us to detect and respond to threats much faster, significantly reducing our risk exposure.
Contextual Intelligence: Recorded Future provides rich contextual information about threats, including historical data, related indicators, and threat actor profiles. This comprehensive view helps us make more informed decisions and prioritize our response efforts based on the severity and relevance of the threat.
Automation and Efficiency:The platform's automation capabilities streamline the process of threat detection and analysis. Automated alerts and reports save our team countless hours, allowing us to focus on strategic initiatives rather than getting bogged down in data analysis.
Vulnerability Management: Recorded Future integrates vulnerability intelligence with threat data, helping us prioritize patching and mitigation efforts based on real-world exploitability and threat actor activity. This targeted approach enhances our overall security posture.
Third-Party Risk Management: Recorded Future provides insights into the cyber risk associated with third parties, enabling us to make more informed decisions about our business relationships and take proactive measures to mitigate potential risks.
Strategic Threat Intelligence:The platform offers strategic intelligence reports and trend analysis, helping us anticipate future threats and adapt our security strategies accordingly. This forward-looking approach ensures that we are not just reacting to threats but also preparing for them.
Recorded Future Threat Intelligence Platform
What do you like best about the product?
The Sandbox is very helpful in analyzing Phishing emails, attachments, and malicious websites. The threat intelligence modules are helpful to get information on companies, programs, current events in information security, and information regarding vulnerabilites.
What do you dislike about the product?
I can't think of anything negative about my experrience with Recorded Future thus far.
What problems is the product solving and how is that benefiting you?
It assists us with Threat Intelligence which improves our security posture. The Sandbox feature is especially helpful, I use it daily.
Comprehensive Insights and verified research from Insikt Group
What do you like best about the product?
Research Group Insikt helps us stay safe by providing trusted Indicators of Compromise (IOCs) for proactive threat hunting. Our carefully checked IOCs help our security team spot potential threats early, keeping defenses strong and improving overall cybersecurity
What do you dislike about the product?
I have not had any bad experiences with Recorded Future
What problems is the product solving and how is that benefiting you?
Strong verified IOCs and curated research that assiats in proactive threat hunts
I am satisfied with Recorded Future
What do you like best about the product?
Daily customized alerts
Threat reports
Customer succès team and support team
Threat reports
Customer succès team and support team
What do you dislike about the product?
Prices and licensing
Request for information
Obfuscation on some sources
Not able to bulk delete within the platform
Request for information
Obfuscation on some sources
Not able to bulk delete within the platform
What problems is the product solving and how is that benefiting you?
Brand protection and third party vendor monitoring
Continuously improving and extremely useful
What do you like best about the product?
I think the client interaction is some of the best out there. We're always working together to increase productivity and create solutions. The product just keeps getting better.
What do you dislike about the product?
I think like any tool there's always a path of getting your scans and integration going. The problem is more on my side but once we work together it gets better.
What problems is the product solving and how is that benefiting you?
It gives insight into new issues every week for us and we are able to track vulnerabilities that appear and disappear. Keeps us proactive.
Has good threat intelligence and uses AI features
What is most valuable?
What needs improvement?
While I don't think the tool is weak, its position isn't as dominant as it once was. Other companies like CrowdStrike and Mandiant are now challenging them in many areas. One downside is that Recorded Future can be complex for customers to use and understand. This isn't easy for clients to navigate.
From my understanding, Mandiant has been offering lower prices on many large client cases over the past year. They've been challenging the pricing model and setup of companies like Recorded Future. This has been difficult for the tool , as they were used to being almost alone in the market. After being bought by Google, Mandiant has gained a lot of power and seems to have more flexibility in pricing.
My main criticism of Recorded Future has been the complexity of its licensing model and the difficulty clients have understanding the different modules. This complexity likely stems from Recorded Future's historical position as a dominant market player, which allowed them to create numerous add-on modules. The pricing for these systems and services is generally quite high.
Initially, these systems required significant manual work, justifying the high costs. However, today, the process is becoming increasingly automated. This puts price pressure on all providers, including Mandiant and others. Despite the challenging market with frequent cyberattacks, I think it will be difficult for these companies to maintain the high prices they've charged in the past.
How are customer service and support?
The solution has a good technical team. It's part of the package that customers buy into. Each client has an account manager and direct access to live customer support. The team responds fast.
What other advice do I have?
I'd still recommend Recorded Future for large organizations, but they must understand the business model and pricing. The quality of Recorded Future, Mandiant, and CrowdStrike seems quite similar, though I'm not a deep technical expert. The choice depends on the customer's needs - not all customers need every feature.
I can't definitively say which is better regarding AI technology as I haven't technically compared them myself. The solution might be advantageous due to their extensive experience in the area. However, with Google's resources behind Mandiant, they likely have significant capabilities, too. Google's resources are probably on par with Microsoft's, so they could easily ramp up their technology if needed.
When discussing AI in these threat intelligence setups, clarifying what we mean is important. Often, it's a system of rules analyzing abnormalities and triggering actions. I frequently ask what people mean by AI in different contexts because it often comes down to rules: if certain events occur or parameters are exceeded, what actions should be taken? These systems analyze data in real-time and feed it to the Security Operations Center to create a more efficient setup with fewer false positives.
False positives are a major challenge, especially for smaller companies. If they don't have well-trained IT staff, dealing with numerous false positives can be more trouble than it's worth. I've seen smaller organizations struggle with this - sometimes, it's almost better for them not to have these systems if they can't understand and manage them effectively.
I rate the overall product as nine out of ten.
Integrates well with other security solutions and can be customized easily
What is most valuable?
Recorded Future integrates well with other security solutions in a security stack. It is one of the best things you can spend your money on to obtain better results that are more tailored to your organization.
From the feedback I've received from my clients, the most valuable feature is the ability to personalize the solution. The ability to have a customized dashboard makes it easy for leadership and management to obtain details. Intelligence analysts or security engineers care about the actions and results, whereas the leadership care about graphs and reports. Recorded Future helps my clients create reports and also determine how the intelligence that is generated is consumed. They can easily show the benefits to the leadership without them having to invest 10 hours a week into transferring numbers into a graph or into creating reports.
What needs improvement?
At present, my clients need to be trained by me or another organization on how to use Recorded Future and how to get the best out of it as an analyst, engineer, and administrator. It would be better if clients could directly learn these things without having to go through me or other organizations.
For how long have I used the solution?
I've been using Recorded Future for three years. I have worked with it deployed both on-premises and on AWS cloud.
What do I think about the stability of the solution?
The uptime of the solution is great. I've encountered only a few situations in the past where I needed to use Recorded Future and it wasn't immediately accessible. However, I was able to access it after about three hours.
What do I think about the scalability of the solution?
It's definitely scalable.
How are customer service and support?
My experience with technical support has been okay.
How was the initial setup?
I found the initial setup to be easy. On-premises deployments take a few hours, and cloud deployments may take longer. Depending on the client and their level of expertise, the integration of the solution may taka a few months to two years.
What about the implementation team?
I usually deploy the solution myself for my clients.
What's my experience with pricing, setup cost, and licensing?
The biggest disadvantage of Recorded Future is the cost here in Eastern Europe. The solution is correctly priced for big companies who have the money to invest in such solutions. Also, the solution is useless on its own, which means that you have to invest in other solutions with which Recorded Future can be integrated.
At present, Recorded Future can cost 60,000 euros per year. I am able to offer my clients a 5% to 10% discount, but in this region, the cost is still prohibitive even with the discount.
If Recorded Future were more flexible in terms of price, there would be better sales opportunities in Europe and Eastern Europe, in particular, because we have more small- and medium-sized companies here.
What other advice do I have?
Recorded Future is a great tool overall for threat intelligence. I think it's one of the best to add to an organization's security stack. However, the licensing costs are extremely high for small- to medium-sized companies. As such, I would rate it at nine on a scale from one to ten, with one being the worst and ten being the best.
Good and organized by modules
What do you like best about the product?
Recorded Future returns very useful and actionable information about CTI
Easy to use and good training path
Easy to use and good training path
What do you dislike about the product?
There is no weakness point to notify to the end user
What problems is the product solving and how is that benefiting you?
We use it as a cyber threat intelligence solution, able to detect for example non mainstream mentions of the domain name, brand abuse, fake app detection and so on, to finally remediate the event
Recommendations to others considering the product:
We made a PoC of several CTI products, I recomend to do the same and choose the solution that best fits the customer needs
Detecting Threats Before They Reach Your Organization
What do you like best about the product?
The ability to detect threats in an easy to navigate you UI. The tool allows users to configure and use the platform with a very short learning curve.
What do you dislike about the product?
The cost associated with the tool sometimes is not cheap in terms of small businesses to begin using the platform. The UX design could always get a little bit better as well.
What problems is the product solving and how is that benefiting you?
The ability to use keywords on searches in chat rooms on the deep web is fundamental to any business who wants to protect themselves against looming threats. This allows users to better manage patches to a system and protect against threats
Recommendations to others considering the product:
Not too many better solutions out there to prevent threats and identify those threats that exist in the dark web
showing 91 - 100