ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox is the external cybersecurity platform that helps security teams discover, validate, and disrupt threats across platforms, people, and locations outside their control.
Discover: Map your external digital presence, including domains, credentials, and assets, to spot exposure early.
Validate: AI correlation and expert analysts confirm real threats from 12B+ signals, cutting noise and false positives.
Disrupt: Act fast with takedowns through ZeroFox's Global Disruption Network, executing 1M+ takedowns a year with a 95% acceptance rate.
The ZeroFox Premium Bundle elevates your organization's security by combining advanced, AI-enabled Brand, Domain, and Executive Protection with expanded Takedown services, and self- and full-service Intelligence capabilities.
What's Included:
Brand Protection (50)
Domain Protection (100)
Executive Protection (100)
Takedown (1,000/yr.)
Intelligence Search (5 seats)
On-Demand Investigation Credits (20)
Platform Alerts & Takedown API Connector (1)
OnWatch Alert (Managed Service)
Brand Protection (50)
Monitoring for brand and organizational threats for brands, sub-brands or product line/family across all data sources of surface, deep and dark web. This includes brand impersonation, mentions or breach evidence on non-OSINT channels. Includes monitoring for corporate social accounts for a given brand or product.
Domain Protection (100)
Protection for company owned domains/sub-domains through continuous identification and remediation of impersonating domains, trademark infringement, and spoofing against bad actors that trick your customers into providing information and damage your brand. Includes protection for the primary domain for a given brand or product. Each domain protected asset covers all derivative sub-domains for the same primary domain.
Executive Protection (100)
Monitoring for high profile executives, employees, or VIPs against account takeover impersonations, sensitive information leakage, doxxing, credential compromise, PII exposure, and cyber-threats. Includes PII Removal for the executive.
Takedown (1,000/yr.)
Takedown and/or disruption actions of any and all applicable impersonating or malicious account/site/content and other terms of service violations from social networks, mobile app stores, paste sites, domains, code shares, and other data sources (excluding deep and dark web). Rapidly Identify and automate the request submission process to remove or block malicious sites and content with end-to-end visibility.
Takedown malicious & illegal content across social media platforms
Takedown malicious & illegal domains
Automated requests to our Global Disruption Network partners for content blocking and attacker campaign disruption
Full-transparency of takedown status via in-platform experience and managed service team support
Intelligence Search (5 seats)
Provides unlimited access to ZeroFox's unique threat intelligence graph, comprising over 12 billion interconnected records. Search across threat actors, indicators, malware, dark web activity, breaking news, and curated intelligence reports. Accelerate investigations and uncover actionable insights by mapping critical relationships in real time, empowering smarter, faster decision-making.
On-Demand Investigations (ODI) (20/yr.)
Gain access to teams of intelligence analysts, researchers, and deeply embedded dark web operatives with experience conducting specialized risk assessments, investigations, and engaging with adversaries to curate intelligence specific to you.
Platform Alerts & Takedown API Connector (1)
Connect alerts from the ZeroFox platform with your other internal tools and applications to streamline your security programs. Also request takedowns through the API from your application. Customers are entitled to support for integration enablement and ongoing Platform API support and maintenance.
OnWatch Alert
Platform support for the ZeroFox platform:
24x7 Alert Review, Validation and Escalation
Global SOCs, SOC 2 Type 2 Certified
Standard Launch and 24x7 Support
Access to Global Intelligence Collection (GIC)
Advanced AI Analysis Including Computer Vision, NLP, Image Analysis, Machine Learning, and more
Highlights
Discover: map your external digital presence (domains, credentials, assets) to spot exposure early
Validate: AI plus expert analysts confirm real threats from 12B+ signals across 180+ platforms, including the dark web
Disrupt: 1M+ takedowns a year through the Global Disruption Network, with a 95% acceptance rate
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing has two pricing dimensions that work together. You buy the ZeroFox Premium Bundle as your base, which protects your asset portfolio and includes threat intel and expert support. The bundle comes with a set allotment of takedowns, where ZeroFox removes malicious content on your behalf. The second dimension, Additional Takedowns, is a usage-based add-on priced per takedown. You draw on it only after you use up the takedowns included in your bundle. A takedown counts toward your total only once it completes successfully.
Top-of-mind questions for buyers
What counts as one takedown for billing purposes?
A takedown counts only once it completes successfully. ZeroFox removes the malicious content on your behalf. Requests that are denied, require more evidence, are already inactive on arrival, or get no response from the provider do not count against your total.
What happens if we use up our bundle takedowns before the contract year ends?
You keep submitting takedowns without interruption. The platform alerts you as you near your allotment. You then purchase Additional Takedowns, priced per takedown, for use through the end of the contract year. These are the usage-based add-on in the pricing table.
Which dimension drives most of my cost — the bundle or additional takedowns?
The Premium Bundle is your base cost and includes a set takedown allotment. Additional Takedowns bill separately, per takedown, only after you exhaust the included amount. For most buyers the bundle dominates. Add-on costs grow only if your takedown volume exceeds what the bundle covers.
www.zerofox.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Threats don't keep business hours, and neither do we. ZeroFox provides 24/7/365 support by phone at +1 (855) 936-9778 and by email at ask@zerofox.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
Everything you need to secure Microsoft 365 email and data. Get AI-powered protection against all email threats, unlimited Microsoft 365 backup, seamless email archiving, security awareness training, and more.
This rapid-deployment package bundles Tanium Core, Endpoint Management, and Risk and Compliance modules into one streamlined solution for faster, more effective implementation.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.