Recorded Future Intelligence Platform logo

    Recorded Future Intelligence Platform

    Recorded Future arms security teams with the only complete threat intelligence solution powered by patented machine learning to lower risk. Recorded Future can help you find threats 10 times faster, identify 22 percent more threats before impact, and resolve threats 63 percent quicker.

    Ratings and reviews

    4.5
    249 ratings
    2 star
    1 star
    69%
    29%
    2%
    0%
    0%
    3 AWS reviews
    |
    246 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (249)
    Computer & Network Security

    Powerful and Efficient, but the Query Language and Learning Curve Need Simplifying

    Reviewed on Sep 25, 2026
    Review provided by G2
    What do you like best about the product?
    The UI has improved over time, the more minimal it gets, the easier it is to use and navigate. Integrations such as the sandboxing capabilities make work more efficient and secure. Performance is good, though the query language remains hard to keep up with due to its complexity and how it is not as straightforward as variables are named. Pricing is reasonable based on the tool capabilities vs market. Onboarding was supported well with workshops. I have not used the AI tool much, but its recommended workflows are quite helpful in investigating different indicator types.
    What do you dislike about the product?
    The query language is too complex and not aligned with the variable names. Onboarding and continuing to use the platform when you are not on it every day is challenging due to the high knowledge barrier to usage, in conjunction with the changing UI and additional features, it can be hard to navigate.
    What problems is the product solving and how is that benefiting you?
    Recorded future helps quickly assess external exposure of a number of clients, but due to security reasons, most clients are unable to be integrated into RF itself, which restricts a lot of the tool's core functionality and value. The insikt group reports are largely helpful for intelligence production, though a number of news and research items are published too late, and competitors such as feedly have a significant upper hand on OSINT news correlation and analysis.
    KAWSER A.

    Easy-to-Use Threat Intelligence with Powerful AI Insights

    Reviewed on Sep 21, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Recorded Future is easy to use and presents threat intelligence clearly. The platform performs well and integrates with other security tools, which helps with investigations. The threat data and AI-driven insights are useful for quickly understanding risks. Support and onboarding are also helpful.
    What do you dislike about the product?
    The main downside is the cost, as some advanced features can be expensive. The platform can also feel complex at first, with a lot of information to review. Some alerts may need extra investigation, and onboarding can take time before users become fully comfortable with all the features. Reporting and dashboards could also be more customizable for different security teams.
    What problems is the product solving and how is that benefiting you?
    Recorded Future helps us identify threats faster by providing clear intelligence on suspicious IPs, domains, vulnerabilities, and emerging risks. This saves investigation time, improves decision-making, and helps us respond to security incidents more quickly. It also helps us prioritise the most important risks.
    Consulting

    Powerful Threat Intelligence, But Complexity and Info Overload Slow New Users

    Reviewed on Sep 18, 2026
    Review provided by G2
    What do you like best about the product?
    What I like best about Recorded Future is the quality and breadth of its threat intelligence. It brings together information from multiple sources and makes it easy to identify relevant threats, vulnerabilities, malicious activity, and emerging risks. The platform is also useful for supporting proactive security monitoring and threat hunting.
    What do you dislike about the product?
    One potential downside is that the platform can be quite complex, especially for new users, and it may take some time to fully understand and use all of its features. The amount of information available can also be overwhelming, making it sometimes difficult to quickly identify the most relevant intelligence. Better customization and prioritization of information could make the overall user experience even more efficient
    What problems is the product solving and how is that benefiting you?
    It helps me quickly find and understand relevant cybersecurity information without having to search across many different sources. This saves time during daily research and investigations, while giving me a clearer view of potential threats, vulnerabilities, and suspicious activity that may require further attention.
    Verified User

    Exceptional Security, Effortless Setup

    Reviewed on Sep 18, 2026
    Review provided by G2
    What do you like best about the product?
    I really like the security features of Recorded Future, especially its architecture. The overall experience I've had using it has been positive, and I feel satisfied with the safety aspect. Additionally, the initial setup was quite easy, and I appreciate that.
    What do you dislike about the product?
    nil
    What problems is the product solving and how is that benefiting you?
    I use Recorded Future to detect cybersec threats, appreciating its security architecture and customer satisfaction focus.
    Omar L.

    Easy Setup Experience with Recorded Future

    Reviewed on Sep 17, 2026
    Review provided by G2
    What do you like best about the product?
    The setup was extremely easy, with no issues, and anyone can rely on it.
    What do you dislike about the product?
    I think Recorded Future can be improved to provide more accurate answers. I hope it has more data to respond with precise answers instead of responding with any answer without sufficient accuracy.
    What problems is the product solving and how is that benefiting you?
    n/a
    Haftu A.

    Excited for Cybersecurity Potential, a 10/10 Recommendation

    Reviewed on Sep 16, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Recorded Future focuses on cybersecurity, especially in today's world with many scammers and hackers. I plan to use threat intelligence and identity intelligence, as well as threat monitoring.
    What do you dislike about the product?
    No
    What problems is the product solving and how is that benefiting you?
    n/a
    Security and Investigations

    Turns Massive Threat Data Into Clear, Actionable Insights

    Reviewed on Sep 16, 2026
    Review provided by G2
    What do you like best about the product?
    I admire Recorded Future’s ability to bring structure and clarity to high-pressure environments. In security operations, speed and accuracy are everything. Recorded Future excels at taking massive streams of unstructured dark web, network, and threat data and turning them into direct, actionable insights. For someone who loves diving deep into complex technical problems and executing precise solutions, working with a platform that empowers teams to stay ahead of threats is incredible.
    What do you dislike about the product?
    While Recorded Future’s breadth of threat intelligence is incredible, the sheer volume and density of data can initially feel overwhelming for analysts. To extract maximum value without creating alert fatigue, teams have to invest significant time up front into proper integration, rule tuning, and building structured workflows—otherwise, you risk drenching analysts in rich data rather than empowering them with fast, actionable insights.
    What problems is the product solving and how is that benefiting you?
    Recorded Future solves the critical challenge of alert fatigue and signal noise by automatically aggregating data across the surface, deep, and dark web, structuring it through its Intelligence Graph to turn raw data into actionable risk scores. It closes external blind spots by monitoring third-party risk, credential leaks, and brand impersonation, while speeding up incident response so security teams can block threats proactively rather than reacting after a breach occurs.

    For me, this intelligence-driven approach eliminates the burnout of manual threat research, giving me instant context to make fast, confident triage decisions. By stripping away false positives and automating investigative steps, it streamlines my daily workflow and allows me to focus on high-priority operational troubleshooting, system hardening, and resolving critical incidents within SLA.
    Munir Khalid B.

    Exceptional Threat Intelligence and Insights8

    Reviewed on Sep 15, 2026
    Review provided by G2
    What do you like best about the product?
    I really appreciate Recorded Future for its exceptional ability to provide comprehensive threat intelligence, which is crucial for my work in evaluating operational risks and researching digital governance. The platform excels at aggregating complex data into actionable insights, which is incredibly helpful for identifying emerging threats, evaluating infrastructure vulnerabilities, and drafting effective policies. Its real-time intelligence, risk scoring, and automated analysis stand out to me as they allow organizations to prioritize risks and aid in evidence-based decision-making, aligning closely with my interests in risk management and improving institutional accountability. Recorded Future effectively bridges the gap between raw technical data and strategic decision-making, ensuring that governance frameworks are grounded in real-world threat realities and helping to develop more resilient digital infrastructures.
    What do you dislike about the product?
    One area that could potentially be improved is making the platform even more accessible to users who are less familiar with advanced threat intelligence tools. While the depth of intelligence and analytics is valuable, clearer onboarding, guided workflows, and practical use-case examples could make it easier for new users to quickly understand and apply the information. I would also value continued improvements in customization and reporting, particularly for organizations that need to translate complex intelligence into concise risk and compliance reports for senior management. For new users, more guided onboarding, interactive tutorials, step-by-step workflows, a simplified “getting started” dashboard, short explanations of technical terms, and practical examples of how intelligence can support business decisions would be helpful. Customizable report templates and recommended actions based on risk scores could further assist users in transitioning from understanding the information to taking action.
    What problems is the product solving and how is that benefiting you?
    Recorded Future solves information fragmentation by centralizing real-time threat intelligence, making operational audits more accurate and policy recommendations better informed.
    Anonymous

    Effective Threat Intelligence with Room for Improvement

    Reviewed on Sep 09, 2026
    Review provided by G2
    What do you like best about the product?
    I mainly like the unified experience for threat intelligence that Recorded Future offers. It gives me a safe feeling by allowing me to see all threat detections and malware comparisons at once. The collective insights under the threat detection page are nice because I can compare detections in my environment against others to check for global attacks. The setup was fairly easy, despite initial concerns about sharing information. I even think it's a great product, and I would recommend it to someone looking for this type of solution.
    What do you dislike about the product?
    Just somewhat lacking information. Not every malware is the easiest to understand. I feel like the descriptions could be clearer and understanding how it might be used in different contexts can be improved.
    What problems is the product solving and how is that benefiting you?
    Recorded Future delivers a unified threat intelligence experience, showing all threat detections and malware insights. This gives me a comprehensive view of threats, providing a sense of security by seeing everything at once.
    reviewer2847426

    Automated threat enrichment has reduced manual investigations and protects our brand and data leaks

    Reviewed on Jun 12, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Recorded Future is IOC enrichment, dark web monitoring, brand protection, and sandboxing for malware. For investment monitoring, privacy protection, or sandboxing in my day-to-day work, I have our SIEM use cases. Whenever a new alert or SIEM use case is triggered, we automatically take any IOCs, any IPs, any hashes, any domains, any URLs, and feed them into Recorded Future APIs to get IOC enrichment and provide them to the analyst.

    What is most valuable?

    The best features Recorded Future offers are their unlimited IOC enrichment, their sandbox, their brand protection, and their dark web monitoring, which is really good.

    Recorded Future has positively impacted my organization by allowing our analysts to work less on doing IOC enrichments. They don't need to do subscriptions for different providers for sandboxes. We have our own brand protection right now, and we can monitor any leaks that happen proactively. The analyst doesn't need to copy-paste each IOC and URL and domain anymore to their abuse database or VirusTotal; it's automatically provided to them.

    What needs improvement?

    Recorded Future can be improved in terms of their APIs and their integration. Mainly their integration is very difficult, especially with their dark web monitoring notifications and brand protection with anything, as they only support sending emails, which we don't know for sure if they are one hundred percent accurate. If it were possible to do something other than sending email, that would be really helpful, so we can do more automations with it.

    Regarding improvements needed for Recorded Future, more metrics and monitoring of their notifications would be helpful. The learning curve when getting started with Recorded Future is a bit tricky because you don't know what features they have, and their documentation, particularly their API documentation, is not the best. The result you get is not what you see in the UI. You can't connect what you have in the API with what you have in the UI, and there are not many resources about that, so it's a bit tricky and you have to figure it out yourself.

    Recorded Future really integrates poorly with other tools or platforms I use because we have to rely on the email being sent and do the automation based on receiving that email.

    For how long have I used the solution?

    I have been using Recorded Future for a year so far.

    What do I think about the stability of the solution?

    Recorded Future is stable.

    What do I think about the scalability of the solution?

    Recorded Future's scalability is normal, and we don't have limitations with that; it functions strongly.

    How are customer service and support?

    The customer support of Recorded Future is good.

    Which solution did I use previously and why did I switch?

    We did not use a different solution before Recorded Future.

    What was our ROI?

    Regarding the value for money I get from Recorded Future, we don't have numbers for that, but it's useful.

    Which other solutions did I evaluate?

    Before choosing Recorded Future, we asked our business partners for the best out there, and they recommended Recorded Future.

    What other advice do I have?

    If it were possible to do something other than sending email, that would be really helpful, so we can do more automations with it.

    The quality of threat intelligence data provided by Recorded Future is good, but sometimes it's very aggressive; we get some false positives for IOCs, but generally it's good. The user experience and interface of Recorded Future is easy to navigate and use. I am not so satisfied with the frequency and quality of updates or new features from Recorded Future; I would say it's average and normal.

    The documentation and support resources provided by Recorded Future are bad. My advice to others looking into using Recorded Future is to make sure you are ready for that; they don't provide very supportive information, and you will have to figure out your own workarounds. Apart from that, their dark web monitoring and brand protection are good. If you don't need them, then maybe you should look for something else if all you need is just IOC enrichment. I would rate this review an eight out of ten.