ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox is the external cybersecurity platform that helps security teams discover, validate, and disrupt threats across platforms, people, and locations outside their control.
Discover: Map your external digital presence, including domains, credentials, and assets, to spot exposure early.
Validate: AI correlation and expert analysts confirm real threats from 12B+ signals, cutting noise and false positives.
Disrupt: Act fast with takedowns through ZeroFox's Global Disruption Network, executing 1M+ takedowns a year with a 95% acceptance rate.
The ZeroFox Core Bundle elevates your organization's security by combining advanced, AI-enabled Brand, Domain, and Executive Protection with expanded Takedown services, along with self- and full-service Intelligence capabilities.
What's Included:
Brand Protection (5)
Domain Protection (50)
Executive Protection (10)
Takedown (500/yr.)
Intelligence Search (5 seats)
On-Demand Investigation Credits (5)
Platform Alerts & Takedown API Connector (1)
OnWatch Alert (Managed Service)
Brand Protection (5)
Monitoring for brand and organizational threats for brands, sub-brands or product line/family across all data sources of surface, deep and dark web. This includes brand impersonation, mentions or breach evidence on non-OSINT channels. Includes monitoring for corporate social accounts for a given brand or product.
Domain Protection (50)
Protection for company owned domains/sub-domains through continuous identification and remediation of impersonating domains, trademark infringement, and spoofing against bad actors that trick your customers into providing information and damage your brand. Includes protection for the primary domain for a given brand or product. Each domain protected asset covers all derivative sub-domains for the same primary domain.
Executive Protection (10)
Monitoring for high profile executives, employees, or VIPs against account takeover impersonations, sensitive information leakage, doxxing, credential compromise, PII exposure, and cyber-threats. Includes PII Removal for the executive.
Takedown (500/yr.)
Takedown and/or disruption actions of any and all applicable impersonating or malicious account/site/content and other terms of service violations from social networks, mobile app stores, paste sites, domains, code shares, and other data sources (excluding deep and dark web). Rapidly Identify and automate the request submission process to remove or block malicious sites and content with end-to-end visibility.
Takedown malicious & illegal content across social media platforms
Takedown malicious & illegal domains
Automated requests to our Global Disruption Network partners for content blocking and attacker campaign disruption
Full-transparency of takedown status via in-platform experience and managed service team support
Intelligence Search (5 seats)
Provides unlimited access to ZeroFox's unique threat intelligence graph, comprising over 12 billion interconnected records. Search across threat actors, indicators, malware, dark web activity, breaking news, and curated intelligence reports. Accelerate investigations and uncover actionable insights by mapping critical relationships in real time, empowering smarter, faster decision-making.
On-Demand Investigations (ODI) (5/yr.)
Gain access to teams of intelligence analysts, researchers, and deeply embedded dark web operatives with experience conducting specialized risk assessments, investigations, and engaging with adversaries to curate intelligence specific to you.
Platform Alerts & Takedown API Connector (1)
Connect alerts from the ZeroFox platform with your other internal tools and applications to streamline your security programs. Also request takedowns through the API from your application. Customers are entitled to support for integration enablement and ongoing Platform API support and maintenance.
OnWatch Alert
Platform support for the ZeroFox platform:
24x7 Alert Review, Validation and Escalation
Global SOCs, SOC 2 Type 2 Certified
Standard Launch and 24x7 Support
Access to Global Intelligence Collection (GIC)
Advanced AI Analysis Including Computer Vision, NLP, Image Analysis, Machine Learning, and more
Highlights
Discover: map your external digital presence (domains, credentials, assets) to spot exposure early
Validate: AI plus expert analysts confirm real threats from 12B+ signals across 180+ platforms, including the dark web
Disrupt: 1M+ takedowns a year through the Global Disruption Network, with a 95% acceptance rate
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing has two dimensions that work together. The ZeroFox Core Bundle is your base package, billed per unit. It combines AI-enabled brand, domain, and executive protection with threat intelligence and a set allotment of takedowns. Takedowns remove malicious content like phishing sites and fake profiles. The Additional Takedowns dimension lets you buy takedowns beyond that bundle allotment, priced per takedown. You use it only when your usage exceeds what the bundle includes. A takedown counts toward your total only once it is successfully completed.
Top-of-mind questions for buyers
What is included in the ZeroFox Core Bundle unit?
One unit covers AI-enabled brand, domain, and executive protection, plus threat intelligence and a set allotment of takedowns. Takedowns remove malicious content such as phishing sites and fake profiles. Protection monitors your brand, owned domains, and leaders across the surface, deep, and dark web.
What happens to my bill if I exceed the bundle's takedown allotment?
You can keep submitting takedowns after reaching the allotment. The platform notifies you as you near the limit. You then buy Additional Takedowns, billed per takedown, for use through the contract year. A takedown counts only once it completes successfully; denied or inactive requests do not count.
When would I use the Additional Takedowns dimension versus the Core Bundle?
The Core Bundle is your base package with a fixed takedown allotment, billed per unit. Additional Takedowns bill separately, per takedown, and apply only when your usage passes the bundle allotment. Both can appear on the same invoice when you exceed the included amount.
www.zerofox.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Threats don't keep business hours, and neither do we. ZeroFox provides 24/7/365 support by phone at +1 (855) 936-9778 and by email at ask@zerofox.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
ZeroFox delivers external cybersecurity: actionable intelligence to discover, validate, and disrupt threats that live outside your perimeter. Protect your brand, domains, executives, credentials, and physical locations across the surface, deep, and dark web, with AI and human analysts confirming real threats and automated takedowns removing them.
This rapid-deployment package bundles Tanium Core, Endpoint Management, and Risk and Compliance modules into one streamlined solution for faster, more effective implementation.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.