ZeroFox
Brand protection software
Threat intelligence software
Disinformation detection tools
Risk-based vulnerability management software
Dark web monitoring tools
Fraud detection software
System security software
Digital risk protection (DRP) platforms
Risk assessment software
Vulnerability management software
Web security software
E-commerce software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if ZeroFox and its alternatives fit your requirements.
Contact the product provider
Free Trial
Free version unavailable
Small
Medium
Large
- Media and communications
- Real estate and property management
- Accommodation and food services
What is ZeroFox
ZeroFox is a digital risk protection platform focused on identifying and responding to external threats that target an organization’s people, brand, and digital presence. It is used by security operations, threat intelligence, and brand protection teams to monitor open web, social platforms, app stores, and other external sources for impersonation, phishing, fraud, and disinformation activity. The product combines automated detection with workflows for investigation and takedown/response actions. It is typically deployed to reduce exposure from brand abuse and external attack infrastructure rather than to manage internal endpoint or network controls.
Broad external threat coverage
ZeroFox is designed to monitor multiple external channels where brand abuse and social engineering commonly occur, including social media, domains, and other public-facing surfaces. This supports use cases such as executive impersonation, fraudulent accounts, and phishing lures that leverage brand assets. Compared with tools that focus mainly on marketplace or pricing intelligence, it is oriented toward security-driven external threat detection. The breadth helps consolidate monitoring that might otherwise require separate point tools.
Takedown and response workflows
The platform includes case management-style workflows to triage findings, document investigations, and track remediation actions. It supports response activities such as reporting and takedown processes for impersonation accounts or malicious content, depending on the channel and applicable policies. This operational focus can reduce manual coordination across security, legal, and brand teams. It is useful for organizations that need repeatable processes rather than ad hoc reporting.
Threat intelligence context
ZeroFox provides context around observed campaigns and adversary infrastructure to help analysts prioritize and understand risk. This can include enrichment that links indicators (e.g., domains, handles, content) to known tactics and patterns. The intelligence orientation differentiates it from brand protection tools that primarily emphasize counterfeit or marketplace enforcement. It supports SOC and threat intel teams that need actionable external signals.
Not a full VM platform
Although it can surface external exposures and risky internet-facing artifacts, it is not a replacement for internal vulnerability scanning and patch-centric vulnerability management programs. Organizations typically still require dedicated tools for asset discovery, authenticated scanning, and remediation tracking across endpoints and servers. Positioning it as a vulnerability management system can create gaps in coverage. It fits best as a complement focused on external digital risk.
Source and platform dependencies
Coverage depth can depend on data access and enforcement mechanisms of third-party platforms (e.g., social networks and content hosts). Changes to platform APIs, reporting processes, or regional policies can affect detection fidelity and takedown speed. Some remediation outcomes may require additional customer involvement (legal, brand approvals, or platform-specific evidence). This is common across DRP tools but remains an operational constraint.
Tuning and analyst effort required
External monitoring can generate false positives or low-priority alerts, especially for common brand terms and executive names. Teams often need to tune keywords, entities, and escalation rules to align alerts with real risk. Without clear workflows and ownership, alert queues can become noisy. Smaller teams may find ongoing triage effort challenging without managed services or dedicated analysts.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| Foundation Bundle | Request Pricing | Brand Protection (2), Domain Protection (10), Takedowns (250/yr), Platform Alerts & Takedown API Connector (1), OnWatch Alert (1). Add Professional Services available. |
| Core Bundle | Request Pricing | Brand Protection (5), Domain Protection (50), Executive Protection (10), Takedowns (500/yr), Intelligence Search (5 seats), On-Demand Investigations (5/yr), Platform Alerts & Takedown API Connector (1), OnWatch Alert (1). |
| Premium Bundle | Request Pricing | Brand Protection (50), Domain Protection (100), Executive Protection (100), Takedowns (1,000/yr), Intelligence Search (5 seats), On-Demand Investigations (20/yr), Platform Alerts & Takedown API Connector (1), OnWatch Alert (Managed Service). |
| Executive Bundle | Request Pricing | Executive Protection Essentials (10), Executive Protection Premium (5), Takedowns (100/yr), CEO Executive Threat Assessments (12 ODI/yr), Platform Alerts & Takedown API Connector (1), OnWatch Alert (Managed Service). |
Additional add-ons and bundles (pricing by request): Executive Impersonation, Compromised Credentials, Doxxing Monitoring, Exposed Personal Information, Physical Threats, External Attack Surface Management (EASM), Corporate Social Account Content Remediation, Exposed Payment Cards Protection, Mobile App Protection, Third Party Monitoring, Threat & Intelligence Feeds (Network & Vulnerability, Identity & Fraud, Deep & Dark Web), Managed Dark Ops (Essential/Premium/Elite), PSI (Essential/Premium), ZeroFox UDRP (WIPO filings), OnWatch Expert and other professional/managed services. Pricing page lists features and allotments for each bundle but does not publish dollar amounts; it directs visitors to “Request Pricing.”
Seller details
ZeroFox, Inc.
Baltimore, Maryland, USA
2013
Private
https://www.zerofox.com/
https://x.com/ZeroFOX
https://www.linkedin.com/company/zerofox/
