I love the comprehensive coverage that SOCRadar Extended Threat Intelligence offers on a single platform. I deeply appreciate the intuitive interface and clear reports that greatly facilitate the understanding and management of critical information. The platform provides complete visibility of the attack surface by identifying exposed assets in the cloud, social networks, and external services, which is essential for comprehensive protection. I also value the tool's proactive prevention capability, as it detects threats before they become serious incidents thanks to its early alerts. Additionally, the dark web monitoring is impressively effective in locating leaked credentials, stolen data, and cybercriminal activities. Finally, the supply chain risk management is excellent, allowing for the effective identification of vulnerabilities in suppliers and third parties. Review collected by and hosted on G2.com.

False positives, information overload, and integration with legacy systems Review collected by and hosted on G2.com.

The information is timely and detailed, and the interface is easy to use. During the 15 days I used it, there was continuous monitoring of the configured equipment or services, alerting about any movement in them. And starting to use it was quick and concise, it has various tools and modules for tracking or searching. Review collected by and hosted on G2.com.

I did not find a disadvantage on the platform. Review collected by and hosted on G2.com.

SOCRadar's unified approach stands out by integrating three key areas of cybersecurity within a single platform, thus avoiding the use of three separate tools. CTI (Cyber Threat Intelligence) allows you to know who is conducting the attacks. EASM (External Attack Surface Management) helps identify vulnerabilities by locating exposed assets. Finally, DRP (Digital Risk Protection) offers brand protection, particularly against fake domains and data leaks. Review collected by and hosted on G2.com.

1 Depth versus breadth of coverage:

Some historical and monolithic CTI platforms have larger and older data archives on very specific attackers or niche regions.

Analyst coverage: Some competitors (more expensive) maintain larger or more specialized teams of human analysts in very targeted languages and geographic areas, which can occasionally offer superior granularity in interpreting local threats.

2 The challenge of integrations with existing tools

Connectors with very specific, proprietary tools or older/legacy security solutions are more complex. Review collected by and hosted on G2.com.

I have been using SOCRadar Extended Threat Intelligence and I find it a very useful tool, especially in the university environment where we are implementing a cybersecurity operations center. It helps me a lot to shorten response times to cybersecurity incidents, providing us with a broader view of what is happening, especially with emerging adversaries using artificial intelligence techniques for attacks. Its ability to perform extensive threat searches within the dark web was a decisive factor in choosing it over other solutions. I believe the main features I value the most are the agent-based ones and real-time detection, which I consider essential for our operations. The setup was very simple, with great assistance from the SOCRadar technical staff, and the proof of concept demonstration was agile and clear. I am so satisfied with its performance that I have already started recommending it to other higher education institutions. Review collected by and hosted on G2.com.

Nothing, everything seems fine to me. Review collected by and hosted on G2.com.

I like how SOCRadar Extended Threat Intelligence is easy to use and configure, as it is quite intuitive for a first start. I really appreciate the substantial improvements I have experienced by being able to identify the most likely users and understand what data is being compromised and from where. I find the metrics it provides valuable, especially in terms of the time and timing of leaks, as well as the identification of the actors behind each of them. The versatility of this tool's radar is impressive, making it one of the most useful options I have evaluated. Additionally, the simplicity of use and the quality of the acquired data allow me to prevent problems before they become a major inconvenience. I consider its ability to provide data that is not easily available elsewhere to be one of its great advantages, and I am very likely to recommend this tool to others. Review collected by and hosted on G2.com.

I don't like that there are redundant and outdated data that keep appearing in SOCRadar Extended Threat Intelligence. These data have already been addressed or corrected, like patched vulnerabilities, but they still keep showing up. This can be confusing and make it seem like certain issues haven't been resolved, negatively affecting my user experience. Review collected by and hosted on G2.com.

It provides excellent visibility across surface and dark web environments, helping identify exposures early. Its contextualized intelligence and attack surface monitoring make it highly practical for proactive threat detection and response. Review collected by and hosted on G2.com.

While SOCRadar provides strong visibility, the platform can feel overwhelming due to the volume of data and alerts. Additionally, some features require fine-tuning to reduce noise and better align with specific organizational environments. Review collected by and hosted on G2.com.

UI / UX, AI/ Intelligence, integrations, Perfromance. Review collected by and hosted on G2.com.

Pricing. Maybe for SMB in Kosovo cannot afford the price. Review collected by and hosted on G2.com.

The dark web monitoring has been a great addition to our toolset. I'm constantly looking at the dark web data SOCRadar provides to us. Review collected by and hosted on G2.com.

The only issue I have is that some of the alerts are duplicated, but I believe this is due to the way we rotate our SSL certificates. Review collected by and hosted on G2.com.

SOCRadar offers a unified and highly effective platform for XTI, with its standout feature being the seamless integration of External Attack Surface Management (EASM), Cyber Threat Intelligence (CTI), and Digital Risk Protection (DRP). The platform excels at automatically discovering and monitoring our external assets, delivering prompt alerts about vulnerabilities and misconfigurations. Its threat intelligence feeds are detailed and context-rich, which has greatly enhanced the efficiency of our security operations by enabling us to prioritize threats that are most relevant to our infrastructure and industry.

The platform itself is easy to use, both navigation and implementation a straightforward process. The exceptional support from their team has been a significant factor in our positive experience. Review collected by and hosted on G2.com.

Core features are incredible but the reporting module could be a little bit more flexible. Review collected by and hosted on G2.com.

This platform helps us understand what’s happening in the outside world regarding our company brand, and it also helps us see how secure our email IDs are. Review collected by and hosted on G2.com.

Not much value so far. We’re getting more false positives and duplicate alerts than useful notifications. Review collected by and hosted on G2.com.