Recorded Future Intelligence Platform
Recorded FutureExternal reviews
147 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Powerful/Resourceful Threat Intelligence Platform with Real-Time Insights
What do you like best about the product?
Recorded Future delivers real-time threat intelligence that integrates smoothly into our security workflows. I especially appreciate the Interactive Sandbox, and the ease of implementation of the Advanced Query Builder, and the platform’s ability to gather intelligence from the dark web — all of which make threat analysis faster and more insightful.
The integration with Anomaly was seamless in our case, and I use the platform daily as a core part of my work.
Also, a big shoutout to our point of contact, John Percic, who is always responsive and helpful whenever we have questions or need guidance.
The integration with Anomaly was seamless in our case, and I use the platform daily as a core part of my work.
Also, a big shoutout to our point of contact, John Percic, who is always responsive and helpful whenever we have questions or need guidance.
What do you dislike about the product?
There are a few areas where the tool could improve. Sometimes, domain-related data is missing from Playbook alerts during ingestion, which is critical since such domains are often linked to organizational fraud. Additionally, the Identity module doesn’t always trigger alerts at the time of a breach, which delays response. In some cases, we’ve also noticed that the threat intelligence data appears slightly delayed compared to other tools we’ve used.
What problems is the product solving and how is that benefiting you?
Recorded Future helps us detect and respond to threats more effectively. It identifies impersonating domains and logo misuse, which are often used in fraud attempts, helping us take action before damage occurs. The platform also monitors for identity breaches, giving us visibility into compromised credentials. These capabilities, along with dark web intelligence and real-time alerts, significantly strengthen our organization’s threat detection and response efforts.
Great Platform
What do you like best about the product?
The platform provides a well-curated list of relevant threat actors tailored to our industry and tech stack. It includes detailed TTPs, making it easier to understand attacker behavior. The various modules are well-structured, and the SecOps functionality stands out by enabling a proactive approach to threat hunting. Overall, it's a valuable tool for improving threat visibility and response.
What do you dislike about the product?
Plugin availability is still limited — for instance, there’s no integration for Qualys yet. Alert tuning needs improvement, as even casual mentions in chatter can trigger alerts. Additionally, the AI-driven reporting lacks accuracy and often falls short of providing actionable insights.
What problems is the product solving and how is that benefiting you?
The platform provides a comprehensive overview of the threat landscape, enabling TI-driven vulnerability management. It also supports proactive threat hunting through the SecOps module. Additionally, it offers detailed TTPs and YARA rules for related malware and ransomware groups, enhancing our ability to detect and respond to emerging threats.
Most comprehensive threat intel provider in the game
What do you like best about the product?
Their data ontology, how they organize their information, is best in class. Its not just about stuffing news blogs into a platform but really breaking the data apart. Their Insikt analyst then turn that data into refined intelligence. Also, their AI Chatbot is the best we have tested as far as getting cyber relevant summaries of incidents and events.
What do you dislike about the product?
I just wish they were a full blown Threat Intel Platform, where you could import other feeds, threat actor reports, and have it be the single pane of glass for analysts.
What problems is the product solving and how is that benefiting you?
Providing quality, organized, and trusted intelligence.
Great overall Threat Intel Platform
What do you like best about the product?
Comprehensive threat intel platform. Customer experience is great, plenty of opportunity to work with RF team for various engagements such as threat briefs and workshops. Dark web monitoring and brand protection are particularly useful for our team.
What do you dislike about the product?
API pricing can be a touch on the expensive side. Module separation can sometimes lead to information being withheld which can be disappointing. Advanced query builder can be a bit clunky at times.
What problems is the product solving and how is that benefiting you?
Dark web monitoring, brand protection and real-time threat intelligence
Great product
What do you like best about the product?
Team has been very helpful and responsive
What do you dislike about the product?
Nothing to note, the team is always there to support
What problems is the product solving and how is that benefiting you?
Helps identify threats that are occuring
My Experience with Recorded Future as a Newbie
What do you like best about the product?
I like best that Recorded Future is very strong and show’s lot’s of detail’s about cyber threat’s, like who’s attacking and how they do it. The graph’s it make’s are nice and help me show my team what’s happening. It make’s me feel like I’m doing important work, even as a new guy in cybersecurity :)
What do you dislike about the product?
I find it hard to learn at first coz there’s so many thing’s in the tool and it feel’s overwhelming. It’s also a bit costly, and sometime’s it show’s wrong alert’s, so we check for nothing.
What problems is the product solving and how is that benefiting you?
Brand and Financial Risks: Threats like typosquatting and phishing can damage brand reputation and cause financial losses. Recorded Future helps identify and mitigate these risks, with customers reporting 51% improved efficiency in taking down typosquatting domains, protecting customer trust and reducing fraud.
Comprehensive and Reliable Cyber Threat Intelligence Platform
What do you like best about the product?
I like how Recorded Future gives clear, real-time threat alerts that help me stay ahead of security issues. It’s easy to understand and saves me time when making quick decisions
What do you dislike about the product?
Sometimes the platform can feel a bit overwhelming with too much information, and it takes time to filter out what’s most important. The user interface could also be more intuitive for new users.
What problems is the product solving and how is that benefiting you?
Recorded Future helps me identify and respond to cyber threats faster by providing real-time threat intelligence from multiple sources. This improves our security posture, reduces incident response time, and helps us make better-informed decisions.
Good
What do you like best about the product?
Best threat intelligence company and cloud enterprise
What do you dislike about the product?
It can improve some its unified interface.
What problems is the product solving and how is that benefiting you?
Its better to manage the service now data
Recorded Future: A Powerful Ally in Threat Intelligence
What do you like best about the product?
What I like best about Recorded Future is how it combines machine-speed intelligence gathering with human expertise, making threat data not just fast but actionable.
The platform’s ability to pull from a vast range of open, closed, and technical sources — and then prioritize threats with clear risk scores — really helps security teams move from reactive to proactive defense.
Plus, the real-time alerts and the way it integrates with other security tools make it feel like a natural extension of a SOC, not just another separate dashboard.
The platform’s ability to pull from a vast range of open, closed, and technical sources — and then prioritize threats with clear risk scores — really helps security teams move from reactive to proactive defense.
Plus, the real-time alerts and the way it integrates with other security tools make it feel like a natural extension of a SOC, not just another separate dashboard.
What do you dislike about the product?
One thing I dislike about Recorded Future is that the platform can sometimes feel overwhelming — especially at first.
Because it pulls from so many sources and generates so much intelligence, it can lead to alert fatigue if it’s not carefully fine-tuned. Also, the cost can be a barrier for smaller teams or companies without big security budgets.
Because it pulls from so many sources and generates so much intelligence, it can lead to alert fatigue if it’s not carefully fine-tuned. Also, the cost can be a barrier for smaller teams or companies without big security budgets.
What problems is the product solving and how is that benefiting you?
Recorded Future is solving the problem of slow, fragmented threat intelligence by providing real-time, centralized insights from thousands of sources across the web, dark web, and technical feeds.
This benefits me (or users) by allowing faster threat detection, better risk prioritization, and more informed decision-making, ultimately reducing the time and effort needed to identify and respond to cyber threats. It turns what used to be a manual, reactive process into a streamlined, proactive strategy.
This benefits me (or users) by allowing faster threat detection, better risk prioritization, and more informed decision-making, ultimately reducing the time and effort needed to identify and respond to cyber threats. It turns what used to be a manual, reactive process into a streamlined, proactive strategy.
Integrating intelligence within systems refines threat detection and provides enriched data insights
What is our primary use case?
Recorded Future is my main threat intelligence platform that provides alerts regarding brand protection, relevant threat actors, threat groups, and intelligence vulnerabilities. I use it for research and threat hunting.
What is most valuable?
The integration of Recorded Future with my SIEM, specifically Splunk SIEM, has been extremely valuable. Having a layer of intelligence within my SIEM that reflects in Recorded Future, and being able to enrich the data at my SIEM, offers various angles that I wouldn't be able to see without it. Recorded Future allows me to maintain very accurate alerts.
What needs improvement?
Their research capabilities and the human aspect should be more effective. The Insikt Group covers a narrow range of areas, which doesn't reflect my needs. Their research should be wider and more in-depth.
For how long have I used the solution?
I have been using Recorded Future for almost six years in my current position, and in my previous work, I used it for two years.
What was my experience with deployment of the solution?
I did not encounter any specific deployment issues.
What do I think about the stability of the solution?
Recorded Future is very stable, with a rating of nine, but sometimes it is a bit slow, possibly due to my region.
What do I think about the scalability of the solution?
I rated its scalability as eight. Being a SaaS, Recorded Future generally does a good job in terms of scalability.
How are customer service and support?
The customer support is frustrating and not efficient. They always request logs and screenshots that seem irrelevant. This leads me to avoid using their help desk.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
Before Recorded Future, I used IntSights, now Rapid7. IntSights was not valuable, outdated, unscalable, and had poor coverage of sources.
How was the initial setup?
The initial setup was somewhat challenging, and I would rate it between five and six. They need to optimize this process in future updates. While starting with the platform takes a few minutes, seeing real benefits and working efficiently takes a couple of weeks.
What about the implementation team?
The deployment involved the SecOps team integrating the API from Recorded Future to my SIEM and myself, the threat intelligence manager.
What's my experience with pricing, setup cost, and licensing?
I am not the person responsible for purchases, but it's known that Recorded Future is expensive, with a personal rating of eight for cost.
Which other solutions did I evaluate?
I evaluated IntSights, Cybersixgill, and Mandiant before choosing Recorded Future, as it was the best among those options.
What other advice do I have?
Overall, I would rate Recorded Future as eight. I don’t have any immediate advice for new users. I need to think more about it.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
showing 1 - 10