Our main use case for Recorded Future is brand monitoring, reputation, and risk assessment, as it is one of the best tools that combine all three functionalities. We mainly use Recorded Future for our brand monitoring, to maintain our reputation, and for monitoring partner companies. Recorded Future offers scanning of a wide range of the internet, including public sources like various pastebins, GitHub, social media, as well as forums on the dark web. This helps identify if any company assets have been leaked by employees unintentionally, as well as through potential fraudsters. Additionally, it helps us with identifying the severity of vulnerabilities by assessing how many POCs are available or how often certain vulnerabilities are mentioned in related channels.

I can give a specific example of how I have used Recorded Future for brand monitoring and risk assessment. We have been able to identify leaked credentials and close those accounts off. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we could shut off those accounts.

The best features of Recorded Future include providing the latest threat reports regarding artifacts, such as IPs, domains, or hashes.

Getting those latest threat reports about artifacts, IPs, domains, or hashes has been advantageous to us in processing artifacts and identifying possible threats in a short period of time. Therefore, we are able to identify threats before they affect our systems and our application. Recorded Future also has the best browser extension that provides real-time information about an artifact and is accurate in identifying malicious domains and APIs.

Some of the best features include searching across multiple sources at the same time, indexing information in real time, and providing dashboards, statistics, and heat maps about certain topics.

Recorded Future has positively impacted our organization as we are able to cover a lot of sources with only this intelligence provider, not having to have specific tools for clear web or social media monitoring. Since the Recorded Future staff is doing the on-demand integration of new sources, we are saving a couple of positions as we do not have to develop our own crawlers. It is possible to integrate the solution with tools such as Splunk, which is really useful in order to obtain KPIs, metrics, and other useful insights for executive members of our company.

Some of the areas that need improvement in Recorded Future include email reports that can show unrelated content. Sometimes alerts pop up for articles that have been published years ago but were just recently discovered by Recorded Future.

For the browser extension, since the main purpose is to present information regarding IPs, I think it would be best to provide us with an idea of where the IP originates or some additional information about the organization it belongs to.

API capabilities in Recorded Future are improving, but there are still some features that are missing and some errors that are hard to handle and understand.

The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.

I have been using Recorded Future for the past five years and six months.

According to my experience, Recorded Future is very stable because I have not seen slow performance.

Recorded Future is highly scalable and can be used by any size of organization.

The customer support for Recorded Future is very responsive and proactive.

Previously, we were using VirusTotal, and I use Recorded Future together with VirusTotal to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.

Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.

Recorded Future is deployed in our organization using a hybrid cloud.

I purchased Recorded Future through the AWS Marketplace.

We have seen a return on investment as we have been able to identify leaked credentials and close those accounts off easily, thereby improving our security. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we are able to shut those accounts off.

The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.

Previously, we were using VirusTotal, and I use Recorded Future together with VirusTotal to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.

Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.

Recorded Future is mainly beneficial to the SOC. As part of the monitoring team, Recorded Future makes the investigation of alarms much easier for me. It can show the reputation of APIs from domains or even hashes, which helps me redirect my focus to potential malicious network activity easily.

Recorded Future is deployed in our organization using a hybrid cloud, and we use AWS as our cloud provider.

My advice for others looking into using Recorded Future is that it makes the investigation of alarms significantly easier and helps redirect focus to potential malicious network activity. I would rate Recorded Future an 8 out of 10.

Recorded Future integrates well with other security solutions in a security stack. It is one of the best things you can spend your money on to obtain better results that are more tailored to your organization.

From the feedback I've received from my clients, the most valuable feature is the ability to personalize the solution. The ability to have a customized dashboard makes it easy for leadership and management to obtain details. Intelligence analysts or security engineers care about the actions and results, whereas the leadership care about graphs and reports. Recorded Future helps my clients create reports and also determine how the intelligence that is generated is consumed. They can easily show the benefits to the leadership without them having to invest 10 hours a week into transferring numbers into a graph or into creating reports.

At present, my clients need to be trained by me or another organization on how to use Recorded Future and how to get the best out of it as an analyst, engineer, and administrator. It would be better if clients could directly learn these things without having to go through me or other organizations.

I've been using Recorded Future for three years. I have worked with it deployed both on-premises and on AWS cloud.

The uptime of the solution is great. I've encountered only a few situations in the past where I needed to use Recorded Future and it wasn't immediately accessible. However, I was able to access it after about three hours.

It's definitely scalable.

My experience with technical support has been okay.

I found the initial setup to be easy. On-premises deployments take a few hours, and cloud deployments may take longer. Depending on the client and their level of expertise, the integration of the solution may taka a few months to two years.

I usually deploy the solution myself for my clients.

The biggest disadvantage of Recorded Future is the cost here in Eastern Europe. The solution is correctly priced for big companies who have the money to invest in such solutions. Also, the solution is useless on its own, which means that you have to invest in other solutions with which Recorded Future can be integrated.

At present, Recorded Future can cost 60,000 euros per year. I am able to offer my clients a 5% to 10% discount, but in this region, the cost is still prohibitive even with the discount.

If Recorded Future were more flexible in terms of price, there would be better sales opportunities in Europe and Eastern Europe, in particular, because we have more small- and medium-sized companies here.

Recorded Future is a great tool overall for threat intelligence. I think it's one of the best to add to an organization's security stack. However, the licensing costs are extremely high for small- to medium-sized companies. As such, I would rate it at nine on a scale from one to ten, with one being the worst and ten being the best.