---
title: ZeroFox Reviews
meta_title: 'ZeroFox Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 157 reviews by the users' company size, role or industry
  to find out how ZeroFox works for a business like yours.
aggregate_rating:
  rating_value: 4.4
  review_count: 157
  scale: '5'
date_modified: '2026-07-20'
parent_category:
  name: System Security
  url: https://www.g2.com/categories/system-security
---

# ZeroFox Reviews
**Vendor:** ZeroFox  
**Category:** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence)  
**Average Rating:** 4.4/5.0  
**Total Reviews:** 157
## About ZeroFox
ZeroFox is the solution used to illuminate threat actor intent, mitigate threats and exposures, remove threats from the internet, and preemptively safeguard your reputation. ZeroFox uniquely fuses the core capabilities of Cyber Threat Intelligence, Brand and Domain Protection, Attack Surface Intelligence, Executive Protection and Physical Security Intelligence in one platform packed with intelligence you’ll actually use. ZeroFox defends your business from the everyday attacks that impact revenue, erode trust, and frustrate teams by: Discovering exposed assets, brands, domains, accounts, and emerging threats Validating the risks that matter most to you and your digital estate Disrupting attacks before they harm your business, your customers, and your people Our continuous cycle—Discover, Validate, Disrupt—delivers outcomes and helps organizations achieve deeper threat contextualization, faster detection and response times, and longer-term cost savings by anticipating, understanding, and mitigating external digital threats at scale. Join thousands of customers, including some of the largest public sector organizations and leaders in finance, media, technology, retail, and healthcare, and let ZeroFox deliver timely, personal, and usable intelligence so you can stay ahead of what’s next and reclaim what’s right.



## ZeroFox Pros & Cons
**What users like:**

- Users find ZeroFox to be very **user-friendly** , appreciating its smooth onboarding and effective brand protection. (35 reviews)
- Users appreciate the **effective brand protection** of ZeroFox, highlighting its ability to identify and combat scam sites efficiently. (32 reviews)
- Users value the **real-time threat detection** of ZeroFox, enhancing their security awareness across various digital platforms. (28 reviews)
- Users appreciate the **quick and effective alert notifications** from ZeroFox, enhancing daily operational efficiency and responsiveness. (23 reviews)
- Users value the **quick and effective alerts** from ZeroFox, enhancing daily operations and reducing false positives. (22 reviews)
- Users value ZeroFox for its **effective scam site detection** , significantly enhancing their security against threats. (22 reviews)
- Users commend the **responsive and attentive customer support** of ZeroFox, enhancing their experience and satisfaction. (21 reviews)
- Users value the **efficient monitoring** and takedown features of ZeroFox, ensuring brand safety and ease of use. (20 reviews)
- Analytics (19 reviews)
- Detection Efficiency (17 reviews)

**What users dislike:**

- Users are frustrated with the **inefficient alerts** of ZeroFox, experiencing delays in takedown processing and incomplete actions. (24 reviews)
- Users find the **repetitive false alerts** cumbersome, requiring time-consuming manual reviews that disrupt efficiency. (16 reviews)
- Users experience **slow performance** with ZeroFox, including delays in alert reporting and UI loading times. (14 reviews)
- Users experience **false positive alerts** with ZeroFox, leading to time-consuming manual reviews and frustration in monitoring. (12 reviews)
- Users experience issues with the **inefficient alert system** , facing delays and false positives that hinder timely responses. (11 reviews)
- Users find the **excessive notifications** from ZeroFox overwhelming, complicating the prioritization of genuine threats. (10 reviews)
- Users find the **inadequate reporting** features of ZeroFox limiting and desire more detailed analytics options. (10 reviews)
- Limited Customization (9 reviews)
- Users note **missing features** in ZeroFox, highlighting issues with alert noise, customization, and unreliable takedown success. (9 reviews)
- Users face **integration issues** with ZeroFox, particularly around email and other security tool configurations. (7 reviews)

## ZeroFox Reviews
  ### 1. ZeroFox Unifies External Threat Intelligence for Faster Detection and Takedowns

**Rating:** 5.0/5.0 stars

**Reviewed by:** NITIN W. | Threat Hunter, Financial Services, Enterprise (> 1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

The standout feature for us is ZeroFox’s external threat intelligence and its automated brand protection capabilities. In particular, the platform is very strong at identifying rogue domain registrations and look-alike social media profiles that target our organization. Rather than having our team manually hunt down these phishing risks, the alerting engine flags them right away using high-fidelity indicators. The biggest value-add, though, is the managed takedown service. Having a built-in mechanism where ZeroFox handles the legal and technical heavy lifting to remove malicious infrastructure saves our security team hours of paperwork and weekly back-and-forth, and it directly lowers our mean time to remediation (MTTR).

**What do you dislike about ZeroFox?**

The platform can sometimes produce a lot of noise and false positives, especially during the initial setup of keyword monitoring for brand protection or executive profiles. Common names and generic terms may trigger frequent alerts that still need manual triage, which can temporarily stretch a small analyst team. Although the rules can be refined over time and the AI filtering does help, the early optimization period takes a meaningful time investment to bring alerting down to a consistently accurate baseline.

**What problems is ZeroFox solving and how is that benefiting you?**

The primary problem ZeroFox solves for us is the proliferation of external threat vectors—especially fraudulent domain registrations and brand impersonation on social media. Before implementing the platform, identifying copycat sites and phishing infrastructure targeting our customers relied on highly manual search workflows, followed by a slow and painful process to initiate takedowns. ZeroFox automates detection of these look-alike assets and manages the full takedown process on our behalf. As a result, we’ve significantly reduced our mean time to remediation (MTTR), better protected our digital brand reputation, and freed up our security analysts to focus on internal infrastructure instead of chasing external threat actors.

  ### 2. Versatile Brand Protection with Contract Renewal Challenges

**Rating:** 3.0/5.0 stars

**Reviewed by:** Joseph F. | VP, Chief Information Security Officer, Enterprise (> 1000 emp.)

**Reviewed Date:** April 17, 2026

**What do you like best about ZeroFox?**

I like ZeroFox for its easy-to-navigate consolidated dashboard and the customizable functionality that's all in one place. The ability to scan social media is a nice feature for us, despite our social media teams using a different solution. I find the price of the solution to be on par with the industry. I also appreciated the easier takedown process with ZeroFox and the potential for better integration into our ecosystem. Setting up ZeroFox was straightforward, aligning well with our cloud-only infrastructure as it didn't require deploying hardware, and there were no agents or software configurations needed, making it a fairly easy and intuitive experience.

**What do you dislike about ZeroFox?**

It's unclear when an automatic takedown is in process versus having to initiate a takedown. The request to submit evidence, sometimes when the takedown is for intellectual property, puzzles the team, and this isn't all the time making it difficult to predict. The contract terms for auto renewal are terrible, which has negatively impacted our perspective, especially during the renewal process. Because of these concerns, we're hesitant to expand our use of ZeroFox despite its potential.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for brand protection, scanning for fake websites and apps to prevent fraud and brand confusion, and tracking social media and executives. It helps us by processing takedowns when needed.

  ### 3. ZeroFox Feels Like a True Partner—Intuitive Platform with Actionable Alerts

**Rating:** 5.0/5.0 stars

**Reviewed by:** Nathalie S. | Strategic Threat Intelligence, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 20, 2026

**What do you like best about ZeroFox?**

What I value most about ZeroFox is the partnership. The support and technical account teams feel like an extension of our own team and are consistently invested in our success. The platform is intuitive and easy for new users to learn, and the findings provide confidence that we're proactively protecting our assets and monitoring the right threats. The majority of escalated alerts are relevant, actionable, and worth our team's attention. The new AI features integration with the intelligence and reporting make it easier to sift through all the data.

**What do you dislike about ZeroFox?**

I don’t have any dislikes when it comes to ZeroFox or their team. We’ve been happy working with them over the past five years, and the experience has been consistently positive.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps us ensure that our brands, domains, physical security, and executives are protected. It gives us visibility and insight we wouldn’t normally have, which allows us to maintain a proactive, vigilant stance.

  ### 4. Time-Saving Alerts but Costly with Limitations

**Rating:** 2.0/5.0 stars

**Reviewed by:** Kevin V. | Social Media and Online Reputation Specialist, Enterprise (> 1000 emp.)

**Reviewed Date:** October 31, 2025

**What do you like best about ZeroFox?**

I like that ZeroFox gets a lot of alerts, and they have a team that combs through all the noise and escalates the alerts that are most relevant and need my team's attention. This is a big time saver. It's also a pretty easy program to learn with an easy user interface. I appreciate that if we come across some content we would like to submit to a social media network to take down, it's possible to email the ZeroFox team, and they will enter that content as an alert and be able to submit a takedown request even if their system originally missed it.

**What do you dislike about ZeroFox?**

Unfortunately, the security alerts are not filtered out by ZeroFox's team, and we get a lot of noise that's not relevant to our business. Also, the takedowns are a great concept in theory, but they often take quite a while to be successful, and a high percentage of them are never actually taken down. The promise is to clean up threatening accounts and posts for the brand, but in reality, some content we want removed doesn't get taken down. The initial setup wasn't as easy as I would have liked, with calibration issues on escalated alerts leading to irrelevant escalations. Lastly, ZeroFox is a fairly expensive platform, and it's tied heavily to the platform formerly known as Twitter, which isn't as mainstream now. There are limitations with other platforms like LinkedIn and TikTok, which ZeroFox cites as API limitations, but this means missing out on information we'd like to be alerted on.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox to monitor impersonation accounts and fake websites. It saves my team time by filtering relevant alerts and providing a user-friendly interface. We also get security alerts for physical locations and leaders. The takedown requests are also helpful in addressing threats.

  ### 5. Unique Threat Hunting That Takes Pressure Off Analysts

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 14, 2026

**What do you like best about ZeroFox?**

What makes it unique is what it delivers: I haven’t heard of any other product that does what Zerofox does. It takes a lot of the pressure off an analyst when it comes to blue-team activities and proactive threat hunting.

**What do you dislike about ZeroFox?**

Its rigidity around policy configurations, along with the rules layout and logic, can feel a bit overwhelming. Also, the ability to handle integrations isn’t in the customer’s hands; you have to log a ticket just to initiate or update a third-party integration, which can add unnecessary time.

**What problems is ZeroFox solving and how is that benefiting you?**

It solves problems on many levels, especially with its ability to monitor the dark web and credential dumps. Setting up and maintaining those feeds can be difficult, but the way it handles it feels easy and straightforward. On top of that, the brand monitoring is incredible when it comes to scanning domains, profiles, and more. It’s an amazing feature that helps me proactively monitor many security aspects.

  ### 6. ZeroFox Fills the Gap Traditional Security Tools Miss

**Rating:** 5.0/5.0 stars

**Reviewed by:** dhananji s. | Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** October 31, 2025

**What do you like best about ZeroFox?**

One of the new and most impactful aspects I appreciate about ZeroFox is how it delivers actionable external threat intelligence rather than just raw indicators. The platform effectively combines AI-driven monitoring with human analyst validation to identify real threats across social media, surface web, deep web, and dark web sources. This approach significantly reduces noise and false positives, which is extremely valuable for SOC teams working under time constraints. ZeroFox’s ability to detect phishing campaigns, brand impersonation activities, leaked credentials, and early threat‑actor discussions allows analysts to move from reactive response to proactive defense.
From a SOC operations standpoint, I particularly like how ZeroFox provides strong contextual enrichment clearly linking suspicious activity to adversary intent, targeted assets, and potential business impact. This context makes investigations faster and more effective, especially during high‑severity incidents involving phishing, account compromise, or data leakage. Additionally, its seamless integration with SIEM and SOAR platforms supports automated workflows such as alert ingestion, correlation, and response actions, which helps improve overall detection efficiency and incident response timelines. Overall, ZeroFox strengthens digital risk protection by extending security visibility beyond the traditional perimeter and empowering SOC analysts with intelligence that is practical, prioritized, and ready for action.

**What do you dislike about ZeroFox?**

While ZeroFox is a very strong platform for external threat intelligence and digital risk protection, there are a few areas where it could be further improved from a SOC analyst’s perspective. One key area is alert prioritization and customization. Although ZeroFox already reduces noise through analyst validation, giving SOC teams more granular control over alert thresholds, severity scoring, and use‑case‑based filtering would help align alerts more closely with specific organizational risk priorities and reduce additional triage effort during peak hours.
Another improvement area is deeper integration visibility with SIEM and SOAR tools. While ZeroFox integrates well with platforms like Microsoft Sentinel and other security stacks, enhanced out‑of‑the‑box correlation dashboards and clearer mapping between external intelligence and internal telemetry would make investigations even faster and more intuitive for analysts handling incidents end‑to‑end.
Additionally, expanding guided investigation workflows and SOC‑focused playbooks within the platform could further support junior analysts and new team members. More scenario‑based recommendations tied to phishing campaigns, credential leaks, or dark web chatter would help speed up response and ensure consistent investigation quality across shifts. Overall, these enhancements would further strengthen ZeroFox’s usability and operational efficiency for SOC teams without changing its already strong intelligence foundation.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox is addressing a critical gap that our traditional security stack simply wasn’t built to cover: external threats that exist outside our perimeter. Firewalls, endpoint tools, and SIEMs do a great job protecting what’s inside, but they provide limited visibility into what’s happening on social media, the open and dark web, or across lookalike domains targeting our brand and executives. ZeroFox gives us that visibility in a centralized, actionable way.

Brand and Executive Protection: One of the biggest issues it solves for us is impersonation—fake social media profiles, spoofed domains, and fraudulent accounts posing as our executives or the firm itself. ZeroFox identifies these quickly and, through its managed takedown service, manages remediation end-to-end. This has saved our team a significant amount of time that would otherwise be spent coordinating directly with platforms and registrars.

Phishing and Domain Threats: The platform continuously monitors for newly registered lookalike domains and phishing infrastructure. Catching these early—often before they go live—helps us stay ahead of potential attacks targeting our employees, clients, or partners.

Dark Web and Credential Exposure: ZeroFox’s dark web intelligence, powered by the Dark Ops team, surfaces leaked credentials, insider chatter, and threat actor activity that’s relevant to us. This feeds directly into our incident response and threat hunting workflows, helping us act on risks before they escalate.

Operational Efficiency (UI/UX + Integrations): By consolidating these external threat categories into a single platform and integrating with our SIEM and ticketing tools, ZeroFox reduces the need for analysts to pivot between multiple consoles. The result is faster triage, smoother workflows, and less alert fatigue.

AI / Intelligence: The combination of AI-driven detection and human-curated intelligence gives us both scale and quality. We’re not just receiving raw data—we’re getting context, attribution, and actionable insights that help us prioritize response efforts.

ROI and Business Impact: The benefits are tangible. We’ve significantly reduced the time spent on manual takedowns, improved our response time to brand and executive threats, and strengthened our overall external attack surface posture. For a firm where reputation, client trust, and executive safety are paramount, that value is hard to overstate.

Support / Onboarding: The ZeroFox team has been a true partner throughout—helping us tune the platform, interpret findings, and continuously improve how we use it. That partnership has amplified the value we get from the tool itself.

In short, ZeroFox helps us see and respond to threats we otherwise wouldn’t even know existed, and it’s had a direct, measurable impact on reducing our external risk.

  ### 7. ZeroFox Makes Alert Prioritization Easy, Backed by Fantastic Support

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

ZeroFox does a great job prioritizing alerts, which makes it easy to tackle the most important work first. The rules and prioritization settings are easy to customize to match our needs, and the support team has been fantastic.

**What do you dislike about ZeroFox?**

There can be some false positives with parked domains, which get flagged even though they can't actually be taken down — this adds some noise to the alerts. Takedowns can also take some time to complete; some resolve within 48 hours, while others can take weeks.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox has helped us identify domain impersonations, phishing sites, and a wide range of digital threats, allowing us to respond quickly and protect our company's image and reputation. It gives us visibility into risks we wouldn't otherwise catch, and helps us stay ahead of issues before they can cause real damage to our brand or customers.

  ### 8. Best-in-Class Detection of Malicious Sites and Meta Ads, with Fast Alerts

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kyle G. | Security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

It has the best ability to detect malicious sites and meta ads, which is very important for a hospitality company. Their turnaround on these alerts is also fast.

**What do you dislike about ZeroFox?**

The only thing I have a problem with is the lack of nuance in the alert alerting. I get the same level of alerting if I see a malicous Meta alert, or an exposed password from 6 years ago

**What problems is ZeroFox solving and how is that benefiting you?**

Zerofox UI is easy to navigate, so I dont have to spend to much time moving around the platform to get the info I need once it was all setup

  ### 9. 24/7 Monitoring and Reporting That Saves Us Time

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Entertainment | Small-Business (50 or fewer emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

The 24/7 monitoring and reporting has saved us a significant amount of time as we no longer have to do manual searches or handle reporting/following up with individual platforms.

**What do you dislike about ZeroFox?**

Onboarding took quite a bit of time as our customer service reps kept changing which made the process quite frustrating.

**What problems is ZeroFox solving and how is that benefiting you?**

We were dealing with a significant number of scammers impersonating our clients across social media, and the manual searching and reporting was taking up a lot of time every day, with spotty success when it came to removals. ZeroFox has helped us get on top of the problem through automation, along with the support of their customer success team. They’ve adapted as the scams have changed, so we consistently feel ahead of the game, and the platform provides meaningful insights into trends and analytics.

  ### 10. user experience

**Rating:** 5.0/5.0 stars

**Reviewed by:** Enzo M. | technical leader, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

I like that it has an app and that I can see the alerts from anywhere. I also like that it is easy to learn and offers multiple ways of integration; for example, I have it quickly integrated with SLACK.

**What do you dislike about ZeroFox?**

The reports do not generate value for me, I think it is necessary to improve them, just like the queries, there is no ticket management or any way to group two or more alerts.

**What problems is ZeroFox solving and how is that benefiting you?**

it helps me reduce research times across multiple sources and from one click you can request a takedown

  ### 11. Powerful Monitoring & Alerting with Responsive Support

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Utilities | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

Features, monitoring and alerting, ability to submit feedback to support, support responsivness

**What do you dislike about ZeroFox?**

Plentiful knowledge base documentation, sometimes hard to find specific item

Some of the rules that scan for info that alerts are generated for return useless info (i.e. comped creds with blank passwords)- there is ability to refine this I believe

**What problems is ZeroFox solving and how is that benefiting you?**

Looking for a sandbox solution, ZF began to offer one through a partnership with Polyswarm.  Product is included with current license and not additional charge incurred.

Executive protection to include PII removal- protection was already included that allowed for monitoring and alerting on social platforms.  PII removal added for very nominal fee.  This allowed us to have those services within ZF console and not need another solution.

  ### 12. ZeroFox: Powerful Digital Risk Detection, Requires Tuning and correct configuration.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.)

**Reviewed Date:** April 18, 2026

**What do you like best about ZeroFox?**

ZeroFox excels at proactively detecting and disrupting digital threats across social, surface, and dark web channels, giving security teams timely, actionable intelligence before incidents escalate.

Its strong integrations and automated takedown capabilities help turn insights into rapid remediation, reducing risk and shortening response times for organizations.

Performance is good as it detects pages registered like 24 hours ago and AI plays a important role for this.

The UI/UX is easy to understand and use, and the support team responds within a good timeframe to the questions I’ve raised.

**What do you dislike about ZeroFox?**

ZeroFox can generate false positives and noisy alerts that require significant tuning and analyst time to manage effectively.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox detects and disrupts external digital threats across social, surface, and dark web channels—protecting brand, executive, and customer exposure while uncovering phishing, fraud, and data leaks.
That gives my incident response team timely, contextual intelligence and automated remediation options, speeding detection-to-containment and reducing overall risk.

  ### 13. ZeroFox: A Trusted Solution for External Threat Monitoring and Takedowns

**Rating:** 5.0/5.0 stars

**Reviewed by:** Prateek B. | Sr. Security Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 17, 2026

**What do you like best about ZeroFox?**

After three years of continuous use, we view ZeroFox not just as a tool, but as a trusted cybersecurity partner. Its unified approach to external threat intelligence, brand protection, and rapid disruption has delivered tangible value by reducing risk, protecting reputation, and improving operational efficiency. For organizations seeking robust protection against modern digital threats—especially those targeting brands, executives, and customers—ZeroFox stands out as a mature, effective, and future‑ready solution.

As threat actors increasingly target brands, executives, and customers across social media, domains, and the open, deep, and dark web, ZeroFox has proven itself to be a reliable, forward‑thinking, and highly capable platform for external cybersecurity

**What do you dislike about ZeroFox?**

While ZeroFox delivers strong external threat visibility, the volume of alerts can occasionally be overwhelming and requires ongoing tuning to reduce noise and focus on the most critical risks. Some advanced workflows and customization options have a learning curve, which can slow efficiency for smaller or lean security teams. Additionally, as an enterprise‑grade platform, the cost and feature depth may feel heavier than necessary for organizations with more limited or narrowly scoped use cases.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps us address the problem of external threats that sit completely outside traditional security controls, particularly brand impersonation, phishing infrastructure, and exposed data on the dark web. The biggest benefit has been its takedown capability—ZeroFox consistently identifies fake social media accounts, phishing domains, and scam pages impersonating our brand and works directly with platforms, registrars, and hosting providers to remove them quickly. This has materially reduced customer‑facing fraud and limited the window of opportunity for attackers, which is critical for protecting brand trust and preventing downstream incidents.

  ### 14. Effortless Domain Protection with Responsive Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

I find ZeroFox very easy to use, especially appreciating the feature that allows us to click a single button to contact a registrar to take down an impersonated domain. This domain takedown feature is what we value the most as it addresses our main concern of brand protection. Another aspect I like is the responsive support, which has been very helpful. The initial setup was also incredibly easy; we were able to set it up in probably an hour with our representative.

**What do you dislike about ZeroFox?**

I find there could be more customizable report options. The old reporting section had limited report types available. It appears they just updated the report section with a new AI feature to ask it for certain data, so my comment about more customizable reports might no longer be valid.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps us monitor and take down impersonations of our domains and employees. It's very easy to use, with responsive support and a helpful domain takedown feature, which was our main concern when looking for a brand protection platform.

  ### 15. Top-Cutting Edge Social Media Security Solution

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

I like that ZeroFox is the top in our industry for handling social media monitoring and taking down fraudulent accounts. They use some of the most state-of-the-art technology, which makes tackling these problems efficient. I also appreciate that they offer a portfolio of other security solutions, such as monitoring and requesting takedown of fake social media profiles, and additional features like PII detection, information loss protection, and executive protection. This comprehensive range of security solutions ensures we are well-protected against various threats. Additionally, any adjustments to the system have made sense and have been very easy to implement.

**What do you dislike about ZeroFox?**

Sometimes we have issues with WhatsApp in getting those profiles taken down, and I know it has to do more with the profile itself and the end-to-end encryption. ZeroFox has helped explain to our leadership why that's problematic, but it would be great to have a higher takedown rate.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for social media monitoring and takedown of fraudulent accounts. It solves the problem of fake accounts affecting our brand and executives with 24-hour monitoring, so we don't need to cover all hours. It also provides PII detection and executive protection.

  ### 16. Highly Effective Security Tool with Room for Improvement

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

I use ZeroFox to help detect and takedown alerts on impersonations, domain and youtube anti-piracy, and social media alerts with my executives and talent. It helps protect executives from online security threats, which in turn protects our business. I like the automations of the alerts populating and how intuitive it is. I value the automatic takedown services that minimize the noise from the many alerts we receive, allowing me to focus on severe threats. These services significantly reduce the manual effort required to identify, submit, and track abusive content. From an operational perspective, automating routine takedowns allows us to focus our time on higher-risk investigations and threat assessments rather than administrative work.

**What do you dislike about ZeroFox?**

The takedown time could be improved, as there are multiple times where the takedowns take several weeks for the provider to respond. It would be helpful if more specific reasons were provided for why the provider is failing to take down content. More proactive communication would help us better manage stakeholder expectations, such as providing more detailed status updates explaining why a takedown is delayed. Offering estimated timelines or expected next steps whenever possible, even if exact completion dates cannot be provided, would be beneficial. Also, providing recommendations for alternative mitigation measures when a takedown is unlikely to succeed or is expected to take longer would be useful.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox to detect and takedown alerts on impersonations and threats. It protects executives from online security threats, which safeguards our business. Automatic takedown services reduce manual effort and allow focus on severe threats, making operations more efficient.

  ### 17. ZeroFox has streamlined our external threat monitoring and boosted our incident response times.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Tonnika R. | IT Security Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 30, 2025

**What do you like best about ZeroFox?**

Its ability to detect and remediate brand impersonations and account takeovers in real time is impressive. The dashboard is user-friendly, and the alerts are actionable and easy to prioritize. ZeroFox significantly enhances our digital risk protection by offering proactive threat intelligence across social media, surface web, and dark web sources. The automation features reduce manual workloads and improve response time, making it a solid tool for staying ahead of external threats.

**What do you dislike about ZeroFox?**

Occasional alert noise can lead to extra triage time, and deeper customization of policies could be more intuitive. Additionally, integrating with other security platforms sometimes requires manual configurations that could be smoother

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox addresses the challenge of identifying and mitigating digital threats in real time. It helps detect impersonation attempts, phishing attacks, and unauthorized use of our brand assets across social media and web platforms. The proactive alerts allow us to neutralize risks before they escalate, preserving our reputation and customer trust.
What business problems is ZeroFox helping you solve?
- Reducing brand impersonation that could lead to fraud or data breaches
- Minimizing the impact of account takeover attempts on social media
- Saving time and resources with automated threat detection
- Enhancing compliance and reporting for security operations

  ### 18. Effective Scam Monitoring with Room for Improvements

**Rating:** 4.0/5.0 stars

**Reviewed by:** Yelen M. | Marketing Associate

**Reviewed Date:** April 21, 2026

**What do you like best about ZeroFox?**

I like that ZeroFox makes it easy to track potential threats and scams that could damage our company's name. The status feature of the platform is really clear, showing if an issue is new, reopened, or if a takedown was requested, accepted, or denied, which helps me manage the issues efficiently. My former account manager, Larissa, was very attentive, and typically, both account managers and the platform escalate relevant issues, which reduces my work. Also, the initial setup was straightforward since we received regular updates via an Excel file from our account manager.

**What do you dislike about ZeroFox?**

It's often repetitive because the same issues from the past are reopened. And also disappointing when registrars don't accept the takedown but there's nothing much we can do about it. When there's a reopened issue, we'd appreciate more clarity on why an issue was closed initially and why it was reopened, more intelligence in the platform regarding false positives and to continue disregarding false positives for future scans. Another complexity has been to delimit and update the list of whitelisted domains.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox to monitor web pages, track potential scams, and request takedowns, which makes tracking threats easy and reduces my workload by escalating relevant issues.

  ### 19. Comprehensive, Easy-to-Use Brand Protection with Strong Service and Onboarding

**Rating:** 4.0/5.0 stars

**Reviewed by:** Andrea P. | Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 04, 2026

**What do you like best about ZeroFox?**

What I like best about ZeroFox is how comprehensive yet straightforward it is to use for brand protection. It covers the full workflow end-to-end — from phishing website detection and submitting takedown requests, to dark web monitoring for potential data leaks — without being overly complex to operate day to day.

I also appreciate the level of service from their team. The launch/onboarding configuration was well handled, and the recurring check-in meetings are genuinely useful. They actively listen to customer feedback and it’s clear they take it seriously.

**What do you dislike about ZeroFox?**

What I dislike is mostly around some usability and customization details. Access control could be more granular, especially RBAC and visibility controls, so different teams can be limited to only the assets or alert types relevant to them (for example, allowing marketing to view impersonation-related alerts without access to data leak or dark web monitoring). Today, achieving that kind of separation can require duplicating configurations, which adds unnecessary overhead.

Alert search and day-to-day alert handling could also be improved to make investigation and triage faster. Reporting could also be stronger, particularly around more customizable customer reports (e.g., filtering and trending by geolocation and industry, and risk scoring based on alerts and monitored assets).

Finally, the physical security module feels very US-oriented and would benefit from stronger coverage and relevance for European organizations. Overall these are smaller details, but addressing them would make the platform even better.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox is helping us protect our brand and reduce exposure to external threats by detecting and responding to impersonation and fraud at scale. It supports takedowns for phishing websites and malicious infrastructure, including suspicious email addresses and phone numbers used for CEO fraud and other social engineering attempts. It also provides dark web monitoring to identify potential data leaks, not only for our organization but also for key vendors, to ensure our data isn’t being exposed through third parties.

Overall, it helps us mitigate fraud risk and reduce potential reputation damage by giving us visibility into brand abuse and enabling faster response and takedown actions.

  ### 20. Reliable Intel and Takedown Precision, Needs Automation

**Rating:** 4.5/5.0 stars

**Reviewed by:** Rodolfo C. | Enterprise (> 1000 emp.)

**Reviewed Date:** April 21, 2026

**What do you like best about ZeroFox?**

I like using ZeroFox for intelligence research because it helps maintain awareness, especially for a CTI analyst. It provides visibility on things that we're not getting from other vendors and delivers reports in a timely manner. I also appreciate the ability to check for chatters in the underground world, the functionality to takedown domains trying to impersonate our company, and staying informed on the latest campaigns or intel. The ZeroFox Intelligence Research really stands out for me.

**What do you dislike about ZeroFox?**

I don't like that the takedowns feature is not automated and grab the evidence by itself instead of asking for proof from the client. Implementing an automation for takedowns where it does the research on its own would be better. CrowdStrike is already doing that.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for intel reports, takedown domains, and checking dark web postings. It solves problems by detecting underground chatter, impersonation domains, and updating on latest campaigns, providing timely visibility not available from other vendors.

  ### 21. A Powerful and Proactive Digital Risk Protection Partner

**Rating:** 5.0/5.0 stars

**Reviewed by:** Guru Charan K. | Security delivery analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** October 30, 2025

**What do you like best about ZeroFox?**

The platform's ease of use is a major highlight; the dashboard is incredibly intuitive, allowing us to quickly assess our external risk posture without a steep learning curve. This simplicity encourages high adoption, and it has become a tool we rely on with high frequency of use - it's integrated into our security team's daily operational checks.

The ease of implementation was also impressive. We were up and running in less than a day, with our core assets configured and alerts flowing in. It also offers great ease of integration; we've connected it to our SIEM via its API, which allows us to correlate external threat data with our internal logs for a more unified security view.

The sheer number of features is comprehensive. We get immense value from the automated takedown services for phishing sites and the proactive intelligence on fraudulent domains and executive impersonations.

Finally, the customer support has been excellent. On the few occasions we've needed assistance - once to help fine-tune a complex alerting rule - our account manager was responsive, knowledgeable, and provided a clear resolution quickly. It's a complete package that delivers tangible results.

**What do you dislike about ZeroFox?**

While the platform is powerful, the initial volume of alerts can feel a bit overwhelming until everything is properly tuned. In our first couple of weeks, we saw a noticeable number of false positives, which meant extra manual review along with ongoing rule tweaks and adjustments.

Also, although the main dashboard is easy to use, I think the reporting module could offer more flexibility. I’d like to be able to create more granular, bespoke reports directly in the UI, rather than exporting raw data and manipulating it elsewhere. Strengthening the advanced alert-filtering logic as well (for example, supporting multi-conditional rules) would be a welcome improvement and would help us narrow in on the most critical threats even faster.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox is solving the critical problem of external attack surface management and brand protection for our organization. Before implementing it, our team spent significant manual hours searching for brand abuse, look-alike domains used for phishing, and social media impersonations. This process was reactive and inefficient.
Now, ZeroFox automates this entire discovery process. It has directly benefited us by:
Reducing Risk: We've successfully identified and initiated takedowns of dozens of malicious domains and social media profiles targeting our brand and employees before they could be weaponized in a large-scale phishing campaign.
Increasing Efficiency: It has freed up at least 10-15 hours of analyst time per week. That time is now reallocated from manual searching to strategic threat analysis and incident response.
Providing Actionable Intelligence: The alerts aren't just noise; they provide context that helps us understand the evolving threat landscape and protect our digital footprint proactively.

  ### 22. ZeroFox Streamlines High-Volume Takedowns with Best-in-Class Automation

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Non-Profit Organization Management | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

ZeroFox takedown capabilities are second to none. We have a high volume of takedown requests and the automated process is streamlined and effective.

**What do you dislike about ZeroFox?**

There may be risk with future renewals as they are moving a few SKUs away from unlimited quantity. However, the account executive is transparent with the change as we move closer to renewal.

**What problems is ZeroFox solving and how is that benefiting you?**

We’re a brand that receives a lot of mentions, and we often get mixed in with similarly named organizations in reporting. ZeroFox’s triage process helps surface what’s actually relevant to our organization, which frees up valuable time and human resources on my end instead of having to sort through false positives.

  ### 23. Great for Takedowns

**Rating:** 4.0/5.0 stars

**Reviewed by:** Folakunmi A. | Security Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** April 20, 2026

**What do you like best about ZeroFox?**

I love the account takedown feature in ZeroFox. I also like the domain takedown tool, which is pretty handy. Additionally, I appreciate that it helps take down apps masking my own from the Play Store and Cloud Store. Another feature I love is the intro it gives into the dark web, especially if any customer data or organizational data is being sold there. It's a very beautiful capability. The initial setup of ZeroFox was quite easy and straightforward.

**What do you dislike about ZeroFox?**

I would say for users with infected hosts and users with compromised credentials, sometimes we get some behind alerts in the sense that we don't get to see the URL. You're saying you're having a compromised credential, but you don't even know the domain at which this compromised credential is for. Then two, sometimes we don't get enough visibility into the dark web alerts. We just see the Telegram alert and think it can be done better in that aspect.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for account and domain takedown, and it helps with feeds from social platforms. I love its takedown capability for unauthorized apps and intro to the dark web, which alerts me if organization data is sold.

  ### 24. Efficient Brand Protection, Could Improve Discovery

**Rating:** 4.0/5.0 stars

**Reviewed by:** Bachar Y. | Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 17, 2026

**What do you like best about ZeroFox?**

I find ZeroFox to be doing good, especially the tool and the search feature, which help in shutting down malicious websites. The response from the portal is also good, and the integration makes it nice and easy to submit a request. The integration with our SSO environment makes submitting a ticket very easy; you just copy the website or URL and submit the follow-up. Furthermore, the platform is accessible from an iPad, phone, or portal, which makes it easy to reach and submit the environment. Scanning or searching for the public website is also helpful.

**What do you dislike about ZeroFox?**

The Discovery sometimes is not good. I don't know because maybe it's very big. And maybe it's consuming a lot of the Internet because nowadays, the new AI tools, it's always nowadays instead of ZeroFox discover the website or the patent, we are getting information from our client or somebody from legal to department that we have discover a site. So that should be something in ZeroFox to be able to do more discovery and depend on what we give the name, the patent, and all these things.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox to submit tickets for shutting down sites or social media accounts that infringe on our information. It streamlines identifying malicious websites and is easy to use with SSO integration, making submitting requests or follow-ups straightforward.

  ### 25. Comprehensive Threat Intelligence with Room for Improvement

**Rating:** 4.0/5.0 stars

**Reviewed by:** Ahmad  H. | Cyber Security Associate, Enterprise (> 1000 emp.)

**Reviewed Date:** April 17, 2026

**What do you like best about ZeroFox?**

I use ZeroFox at my job mainly for brand insight, threat intel, and brand image protection. I appreciate that it helps me look out for possible threat leads and close any gaps visible to threat actors publicly. I like that I can look through frequently updated databases and breaches, meaning I never miss out on any recent activity related to both publicly and privately held breaches. I also really appreciate having a team that handles all the nitty gritty stuff, like legal work and going back and forth with companies and platforms. The initial setup was rather simple—just identifying our assets, providing asset details, and handling escalations and submissions.

**What do you dislike about ZeroFox?**

I really think the intelligence search needs to be revamped to include more filters and more parameters. For example, you should be able to select a specific time range or a date range. You should be able to expand each indexed item and view all the parameters in detail.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for brand insight and threat intel. It helps me identify threat leads and close gaps visible to threat actors, protecting our brand image.

  ### 26. Centralized Monitoring, But Late Notifications

**Rating:** 4.0/5.0 stars

**Reviewed by:** Lizeth Yanira G. | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 18, 2026

**What do you like best about ZeroFox?**

What I like most about ZeroFox is the ability to centralize brand monitoring across multiple sources, which greatly facilitates the identification of potential threats without having to constantly perform manual searches. I also highlight the quality of some findings, especially in matters of brand impersonation and suspicious domains. Additionally, the initial setup of ZeroFox was very easy.

**What do you dislike about ZeroFox?**

I have noticed that on certain occasions the detection and notification of findings is not as timely as expected, which can affect response capability. You could improve by optimizing the frequency of scans on critical sources and perhaps incorporating near real-time alerts or lower latency for certain types of high-priority findings.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox centralizes threat monitoring such as impersonations and brand misuse, allowing me to identify risks without manual searches and offering quality in findings of suspicious domains.

  ### 27. Effective Dark Web Monitoring with User-Friendly Interface

**Rating:** 4.0/5.0 stars

**Reviewed by:** Kyle J. | IT Security Officer Assistant, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 30, 2025

**What do you like best about ZeroFox?**

I like ZeroFox because of its ease of use, which makes it very user-friendly. One of my favorite features is the alerts tab, providing very detailed information on potential threats we observe. This feature keeps us aware of threats aimed at our institution and makes investigating or elevating alerts quite straightforward.

**What do you dislike about ZeroFox?**

I have issues with the AI aspect of ZeroFox, especially in determining the legitimacy of some alerts, like domain analysis. I've noticed these are mainly false positives. I think they rely too much on potential typosquat or substring aspects without accurately comparing potential reported sites to our institution's own.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for dark web monitoring, solving hidden cyber threats and data exposure issues. I like the ease of use and detailed alerts on potential threats, keeping us aware and simplifying investigations.

  ### 28. Timely Alerts Bolster Our Security

**Rating:** 4.5/5.0 stars

**Reviewed by:** Karl J. | Electronic Services, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 20, 2026

**What do you like best about ZeroFox?**

I like how the alerts from ZeroFox are timely. They've allowed us to block and replace reported cards before they are used for fraud. Also, providing the card BINs during the initial setup was easy to accomplish.

**What do you dislike about ZeroFox?**

It would be great if different alert emails could be targeted to specific user groups. Not every user needs to receive an alert notification when a request to remove a listed card is still pending or in process. Some users need to only act on the card being reported initially and do not need to be concerned with the follow-up that ZeroFox is doing on our behalf.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for reviewing card numbers found on the dark web. It helps locate compromised cards and allows us to block and replace them before fraud occurs, thanks to timely alerts.

  ### 29. Comprehensive Threat Monitoring with Ease of Use

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

I like its visibility into just about every social media platform and being able to identify problems before they become real issues. The visibility lets us see across many social media platforms and do it all at once without us having an account on those sites. The platform is super easy to use. I also appreciate getting notifications on the lists I built out. Our tech rep Sam Alley has really helped me out and helped me set up all my initial lists.

**What do you dislike about ZeroFox?**

I cant think of anything.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox provides visibility into threats without needing multiple accounts. I can monitor social media platforms and identify threats before they become real issues. It's easy to use, allows for protective intelligence, and sends notifications based on lists I create.

  ### 30. ZeroFOX review

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Consumer Goods | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 28, 2023

**What do you like best about ZeroFox?**

ZeroFox is able to gather sites and social media accounts globally and allow us to view the different accounts in multiple countries in one platform.

**What do you dislike about ZeroFox?**

It would be great to be able to add additional filters/conditions to sort through the alerts.

**What problems is ZeroFox solving and how is that benefiting you?**

It is difficult to be able to gather sites/social media accounts from the different countries as we manufacture, sell, and market our branded products with global presence.  However, ZeroFox is able to alert us on the existing accounts in the different sites/social media accounts across the world.

  ### 31. Responsive Support That Always Works With Us

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Utilities | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

Support is responsive and consistently willing to work with me on my requests. That’s been true both with the account managers and when I reach out through the general support email. ZeroFox's expertise, support, and remediation assistance have provided more than enough value to justify the price.

**What do you dislike about ZeroFox?**

There is duplicate data across alerts, and it takes a significant level of effort to filter out false positives using policy rules.

**What problems is ZeroFox solving and how is that benefiting you?**

Awareness of both cyber and physical security threats that exist on platforms not monitored by other tools.

  ### 32. User-Friendly Platform with Comprehensive Social and Web Coverage

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Apparel & Fashion | Enterprise (> 1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

The platform is user-friendly, categorizes alerts to prioritize those that are high-risk, and offers comprehensive coverage across social platforms and the web.

**What do you dislike about ZeroFox?**

Some takedowns require more time to be removed from the web, but I believe this is normal when the site is hosted in a different country, and the timeline is acceptable compared to other platforms.

**What problems is ZeroFox solving and how is that benefiting you?**

In my role, I oversee our websites and social accounts; Zerfox has helped us remove numerous fraudulent websites that were attempting to scam our customers.

  ### 33. Effective Web Threat Monitoring for Our Brand

**Rating:** 4.0/5.0 stars

**Reviewed by:** Joe H. | GSOC Operator, Enterprise (> 1000 emp.)

**Reviewed Date:** April 21, 2026

**What do you like best about ZeroFox?**

I appreciate the ability to monitor the web for concerning threats related to someone in our company or to the 3M brand.

**What do you dislike about ZeroFox?**

At times, the ability to take down things feels questionable.

**What problems is ZeroFox solving and how is that benefiting you?**

The ability to monitor our executives/assets at a high level.

  ### 34. Effortless Threat Management and Takedown Assurance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Shammy R. | Security Lead, Enterprise (> 1000 emp.)

**Reviewed Date:** October 30, 2025

**What do you like best about ZeroFox?**

I like ZeroFox for its ease of usage and takedown assurance. Their UI and alert management configuration are very good, making it easy to navigate alerts, update, and follow up on cases. I find the feature of adding threats to a watchlist to be very helpful. The alert management allows me to easily look back at old alerts and filter down by attributes, which helps in tracking particular cases well. The configuration is straightforward, which made the initial setup not complex.

**What do you dislike about ZeroFox?**

NA

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for submitting takedown requests for fake profiles, getting a summary of recent breaches, and discovering new attack trends. It helps with social media takedowns, provides threat intelligence feeds, and offers an easy-to-use alert management system.

  ### 35. Intuitive Information Layout, but the Takedown Submission Process Is Too Complex

**Rating:** 3.5/5.0 stars

**Reviewed by:** Paul M. | Security Engineer 2, Enterprise (> 1000 emp.)

**Reviewed Date:** April 20, 2026

**What do you like best about ZeroFox?**

The way the information is present is very intuitive and easy to follow.

**What do you dislike about ZeroFox?**

The submission process to take something down, there seems to be a lot of steps required to get what is needed. Wish there was a way to make it easier, seems like if something is being flagged by one of our perimeters, it should be successful when trying to do a take down.

**What problems is ZeroFox solving and how is that benefiting you?**

Dark web monitoring, not something we are able to do on a small team with limited resources.

  ### 36. Easy to Use, Detailed Alerts, and Fast, Knowledgeable Support

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.)

**Reviewed Date:** July 16, 2026

**What do you like best about ZeroFox?**

I really appreciate the ease of use and the level of detail included with the alerts. I’ve also worked with support many times, and they’re consistently fast and very knowledgeable. Yes.  For the service that it performs I feel that it is worth the price

**What do you dislike about ZeroFox?**

We receive a lot of duplicate credit card alerts from the dark web. It would be helpful to have a way to avoid being notified about the same cards repeatedly. So far, I haven’t been able to find a reliable method to prevent these duplications across the environment.

**What problems is ZeroFox solving and how is that benefiting you?**

Take downs on phishing domains has been the main reason we purchased the product.  It has helped us in this area.

  ### 37. Effective Threat Scanning with Takedown Challenges

**Rating:** 3.0/5.0 stars

**Reviewed by:** Jeremy C. | Vice President & Digital Experience Officer, Banking, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 12, 2026

**What do you like best about ZeroFox?**

I like how ZeroFox thoroughly scans the web and dark web for threats, ensuring a broad coverage. They provide a lot of configuration options to get good results, which helps tailor the product to our specific needs. The process of taking down spoofed websites is valuable for protecting the bank and our customers from fraud, as it ensures that fake sites are removed promptly. The initial setup was pretty easy, which made integrating ZeroFox into our workflow smoother.

**What do you dislike about ZeroFox?**

They make it difficult to actually take some sites down sometimes. They are always asking for more evidence, when the site is clearly fraudulent. For example, they alerted me to a fraudulent site that was loading a beacon from our webpage, which meant it is fake and copied. The URL is also phishy. I ask them to take it down and they ask for more evidence, when there is nothing else that could possibly be provided. It is not us, it is clearly not us, and it is loading the beacon ZeroFox placed to identify these fake sites, and they ask for more evidence. Kinda silly.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for external threat monitoring, brand protection, and takedown of threats. It scans the web, dark web, and social media for threats like fake profiles and spoofed sites, alerting us to take action. This helps protect the bank and our customers.

  ### 38. Enhances Security with Proactive Alert Systems

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User

**Reviewed Date:** February 11, 2026

**What do you like best about ZeroFox?**

I like that alerts are escalated manually by ZeroFox analysts, but also brought to our attention with the ZeroFox GPT service which automates the escalation process and provides quick remediation advice. By escalating alerts to our team, we can quickly identify the core issues that we need to remediate without having to dig through hundreds of potential alerts and risk missing critical issues through manual analyst review. We had issues with the quality of alerts provided by Recorded Future, which thankfully seems to be solved with ZeroFox.

**What do you dislike about ZeroFox?**

At times ZeroFox can miss alerts or delay reporting alerts which we feel should have been raised to us quicker. We have noticed that some services offer weaker detection than others without manually tuning detection criteria, but overall the detection rate is acceptable. From what I have heard from the team responsible for the setup of ZeroFox there were an excess of false positive alerts when the tool was originally deployed. Tuning the software has taken a long time to get right.

**What problems is ZeroFox solving and how is that benefiting you?**

We use ZeroFox for brand protection, threat identification, and safeguarding personal information. It helps prevent phishing, impersonation, and alerts us to critical issues quickly without manual review, which improves our response time.

  ### 39. Intuitive Dashboard and Clear Threat Notifications at a Glance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Eli H. | Jr. Information Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 17, 2026

**What do you like best about ZeroFox?**

Deep web threats are brought together in an easy-to-read notification email, which makes them simple to review at a glance. Navigating through the dashboard feels intuitive and smooth.

**What do you dislike about ZeroFox?**

Very minimal issues. Mostly cosmetic. For example, the lack of an easy to toggle dark mode switch on the home screen.

**What problems is ZeroFox solving and how is that benefiting you?**

For my particular company, bringing potential member PII including BINs, account numbers, usernames, and password leaks, helps me do my job faster and focus on issues that only require my intervention.

  ### 40. Effortless Protection Against Online Threats

**Rating:** 5.0/5.0 stars

**Reviewed by:** Rhema P.

**Reviewed Date:** February 10, 2026

**What do you like best about ZeroFox?**

I love the ease of the platform and the transparency with reporting on ZeroFox. I'm able to follow up on individual use cases using specific alert numbers that are easy to find in the platform. Monitoring social media for impersonators and scams cuts out a bulk of our manual labor efforts. They auto-report alerts for us, which speeds up takedown time and relieves us from having to fill out individual takedown request forms. I also like how I can view numbers and trends in our alerting, which helps us adjust our settings as trends shift to have the most coverage at all times.

**What do you dislike about ZeroFox?**

It was a bit bumpy the first 3 months, but was very easy after some communication issues were resolved.

**What problems is ZeroFox solving and how is that benefiting you?**

We needed protection for our artists and brands from online impersonators. It monitors social media for scams, reduces manual labor by auto-reporting alerts, and speeds up takedown time by eliminating individual request forms.

  ### 41. Robust Brand Protection with Room for Improvement

**Rating:** 5.0/5.0 stars

**Reviewed by:** Javid H. | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 06, 2026

**What do you like best about ZeroFox?**

I am very much pleased with ZeroFox, especially in terms of brand protection and darkweb scrubbing. The platform excels at scrubbing the internet for brand and domain-related threats, giving us valuable intel from the dark web regarding things like our bank identification numbers for credit cards and debit cards. This advance knowledge helps us act swiftly to protect our customers and assets. I really appreciate the dashboard for presenting issues clearly, and the supportive role of the ZeroFox team in verifying items and escalating necessary actions. The takedown and disruption tools are significant for us, effectively handling malicious websites and protecting our brand. We have not experienced any issues or complaints and look forward to seeing further improvements as time goes on. I am really satisfied with the initial setup as well; it was seamless and insightful, with a knowledgeable support team. Overall, ZeroFox is a great platform that meets our diverse needs all in one space.

**What do you dislike about ZeroFox?**

I find that it takes a while for websites to be taken down. Even in some cases, I have documented where a request was made to take down a malicious site. While I know that some aspects of the takedown process involve the site registrar or host acceptance, I think it takes in excess of forty-eight hours to have a site killed. That should be improved to make it more efficient and reduce the risk of exposure to our customers and organization.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps us with brand protection and scrubbing the Internet and dark web as well as domain protection, giving us early intel on threats. It effectively takes down malicious websites and provides data on potential compromises, helping us protect our assets and respond timely to threats.

  ### 42. Effortless Setup, Exceptional Support

**Rating:** 4.5/5.0 stars

**Reviewed by:** Emily O. | Enterprise (> 1000 emp.)

**Reviewed Date:** May 05, 2026

**What do you like best about ZeroFox?**

I like that ZeroFox is easy to use and navigate, which saves us time. I also appreciate our amazing customer support managers who contribute to our positive experience with the platform. The initial setup of ZeroFox was very easy, and I find the platform helpful for protecting our brands, executives, and locations. It helps us know what's going on faster.

**What do you dislike about ZeroFox?**

I wish the mobile app / mobile phone viewing was better.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for protecting our brands, executives, and locations. It helps us know what's going on faster and saves us time. The platform is easy to use, navigate, and the customer support is amazing.

  ### 43. Robust Protection and User-Friendly Interface

**Rating:** 5.0/5.0 stars

**Reviewed by:** Hoeun K. | Information Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 04, 2026

**What do you like best about ZeroFox?**

I appreciate ZeroFox's Platform module for being user-friendly and integrated with AI enhancements via Tags, which help AI learn the behavior of alerts to reduce false positives and alert fatigue. I also enjoy the convenience of communicating directly with the support team right from my email, which makes for faster progress without needing to open up a ticket elsewhere. Additionally, I like how easy the initial setup of ZeroFox was.

**What do you dislike about ZeroFox?**

The only feedback or perhaps a future roadmap to include options to be able to whitelist users listed in the affected alert from showing up since they don't actually exist in our system to avoid multiple manual labor to repeat detail information to be validated each escalated alert.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox sends email notifications for updates on takedowns, daily reports on ongoing efforts, and alerts on breaches, helping protect our domains and branding. It escalates alerts for potential user account issues with high-level recommendations.

  ### 44. Efficient Brand Protection with Room for Alert Improvement

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** July 29, 2025

**What do you like best about ZeroFox?**

I like ZeroFox because it saves hours on the takedown process for infringements or phishing IOCs. Once we confirm a real phishing or infringement alert, all we need to do is send the information to the ZeroFox team, and they take care of the takedown processes. I also find the setup to be straightforward with a friendly user interface.

**What do you dislike about ZeroFox?**

I get lots of false positive alerts triggered by simple keyword searches or monitoring. It would be better if ZeroFox could improve their detection methodology.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for brand protection, detecting phishing and infringements earlier, and monitoring the dark web. It saves hours on takedown processes by handling confirmed alerts efficiently.

  ### 45. ZeroFox Shines on External Attack Surface and Digital Risk Protection

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.)

**Reviewed Date:** April 20, 2026

**What do you like best about ZeroFox?**

ZeroFox’s main appeal is that it genuinely focuses on the external attack surface and social media/digital risk—areas most companies tend to overlook until something goes wrong, like someone impersonating their CEO on Twitter and asking for gift cards.

**What do you dislike about ZeroFox?**

ZeroFox offers helpful visibility into external threats and supports automated takedowns, but it’s held back by noisy alerts and coverage that can feel incomplete. To get real value from it, we’ve found it requires substantial tuning as well as meaningful integration effort before it becomes truly effective.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps us detect and stop external threats like phishing and brand impersonation early, reducing fraud risk and protecting both our users and our reputation.

  ### 46. Timely, Responsive Support from the Zerofox Team

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Apparel & Fashion | Enterprise (> 1000 emp.)

**Reviewed Date:** July 17, 2026

**What do you like best about ZeroFox?**

The timely responses from the Zerofox team.

**What do you dislike about ZeroFox?**

The reporting tool doesn't provide meaningful insights.

**What problems is ZeroFox solving and how is that benefiting you?**

Zerofox aids our brand protection program by identifying high-profile infringing domains and social media pages, which are often flagged by our executive leadership team. It's a relief when I jump into the portal and see they have already been scraped into the platform and that the takedown is already in progress.

  ### 47. Strengthens Security and Provides Expert Support

**Rating:** 4.5/5.0 stars

**Reviewed by:** Tara D. | Enterprise (> 1000 emp.)

**Reviewed Date:** April 20, 2026

**What do you like best about ZeroFox?**

I use ZeroFox to help defend our business against online threat actors, and they are instrumental in strengthening our team's bandwidth through expert support. I appreciate how they provide tangible confirmation that our security controls are working, which helps maintain organizational credibility. The service confirms the existence of digital risks and helps reduce the time to stop these threats. I'm very satisfied with ZeroFox, and I find the team very personable and hardworking.

**What do you dislike about ZeroFox?**

I wish I had more time to refine the insights we provide

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox helps defend against online threats, strengthens our team with expert support, confirms our security controls, and reduces time to stop threats.

  ### 48. User-Friendly, Feature-Rich Threat Detection with Excellent Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Gajjala R. | Cyber Security Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** October 31, 2025

**What do you like best about ZeroFox?**

ZeroFox is extremely user-friendly with an intuitive interface, making it easy for both technical and non-technical users to navigate. The wide range of features, from real-time threat detection to automated remediation, allows us to address multiple security needs in one platform. Implementation was straightforward, and integration with our existing systems was seamless, enabling a smooth onboarding process. Customer support has been responsive and knowledgeable, providing quick resolution to any questions. The platform’s frequent use in our daily operations ensures we are constantly monitoring and protecting against external threats, which strengthens our security posture

**What do you dislike about ZeroFox?**

Occasionally, the platform produces false positives that need to be manually reviewed, which can take up a significant amount of time. Furthermore, some of the advanced reporting features would benefit from greater customization options to better address our unique operational and compliance requirements.

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox effectively addresses the critical challenge of safeguarding our organization against external digital threats, including phishing attacks, brand impersonation, and malicious domain activity. With its continuous monitoring of social media, websites, and other external channels, the platform detects and alerts us in real time, enabling a swift response before problems escalate. Its seamless integration with our existing systems helps streamline workflows, and the user-friendly interface ensures that both security teams and other stakeholders can promptly act on the actionable intelligence provided. This proactive approach to threat detection has greatly reduced our exposure to reputational and financial risks, ultimately enhancing our overall security posture.

  ### 49. A Smart and Reliable Platform for Digital Risk Protection

**Rating:** 5.0/5.0 stars

**Reviewed by:** Samikari D. | SOC analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** November 03, 2025

**What do you like best about ZeroFox?**

What I appreciate most about ZeroFox is its proactive approach to digital threat intelligence. The platform is very intuitive and provides real-time alerts that help us stay ahead of potential risks across social media, surface, deep, and dark web. The automated takedown feature is especially useful—it saves a lot of manual effort and ensures threats are addressed quickly. The dashboard is clean and easy to navigate, making it simple to monitor and respond to incidents efficiently.

**What do you dislike about ZeroFox?**

While ZeroFox is a powerful tool, I feel there’s room for improvement in terms of integration with other security platforms. Sometimes the customization options for alerts and reports can be a bit limited, and having more flexibility there would make it even more effective. Also, initial setup and tuning might require some time and support, especially for new users

**What problems is ZeroFox solving and how is that benefiting you?**

ZeroFox is helping us tackle the growing challenge of external threats across social media, surface, deep, and dark web. It identifies impersonations, phishing attempts, data leaks, and brand abuse in real time, which is crucial for maintaining our organization’s reputation and security posture. The automated takedown capabilities are a major benefit—they reduce manual workload and ensure faster response to threats. For someone in a SOC role like mine, it adds a layer of external threat intelligence that complements internal monitoring tools, helping us build a more complete and proactive defense strategy.

  ### 50. High-Fidelity Alerts and Excellent Support with ZeroFOX

**Rating:** 4.5/5.0 stars

**Reviewed by:** Bhavani Shankar P. | Security Operation Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** October 30, 2025

**What do you like best about ZeroFox?**

I appreciate ZeroFox for its ability to solve critical problems related to impersonation attempts on valuable assets, helping us reduce potential lawsuits and prevent fraudulent activities. I find it incredibly valuable how ZeroFox can gather and identify impersonation of high-value targets from platforms like Facebook, YouTube, and TikTok, thereby saving us from legal complications and protecting stakeholders from fraudulent emails and interactions. I am very impressed by the high fidelity of alerts generated by ZeroFox, which predominantly report true positives with very few false positives. Its capability to distinguish between parody and fraudulent accounts where other products fail is remarkable. The features offered by ZeroFox, such as brand impersonation detection and the ability to take down fraudulent profiles with a simple request without needing to approach social media platforms, are extremely beneficial. The prompt and self-explanatory support for alert management is another aspect that stands out and simplifies our workflow considerably. Moreover, the integration with Jira Service Management is seamless, allowing us to manage alerts and investigations efficiently.

**What do you dislike about ZeroFox?**

I dislike the outdated interface design of ZeroFox. It feels old when compared to the modern user interfaces we see from other vendors and software types. Updating it to a more modern or retro style could enhance the user experience and increase motivation as we use it daily.

**What problems is ZeroFox solving and how is that benefiting you?**

I use ZeroFox for identifying and taking down impersonation attempts on valuable assets, reducing potential lawsuits and preventing fraud, which streamlines our response to threats efficiently.


## ZeroFox Discussions
  - [Who owns ZeroFox?](https://www.g2.com/discussions/who-owns-zerofox) - 1 comment
  - [How much does ZeroFox cost?](https://www.g2.com/discussions/how-much-does-zerofox-cost) - 1 comment
  - [Is ZeroFox safe?](https://www.g2.com/discussions/is-zerofox-safe) - 1 comment

- [View ZeroFox pricing details and edition comparison](https://www.g2.com/products/zerofox/reviews?section=pricing&secure%5Bexpires_at%5D=2026-07-20+22%3A51%3A40+-0500&secure%5Bsession_id%5D=129ede82-19e5-4838-99a3-06baf330634f&secure%5Btoken%5D=95696a8906f6d4862222b1e38d1494191d66af9defd928b74d28112cebe7832a&format=llm_user)
## ZeroFox Integrations
  - [Crisis24](https://www.g2.com/products/crisis24/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Elastic Stack](https://www.g2.com/products/elastic-stack/reviews)
  - [Exabeam New-Scale Platform](https://www.g2.com/products/exabeam-exabeam-new-scale-platform/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews)
  - [Liferaft](https://www.g2.com/products/liferaft/reviews)
  - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews)
  - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews)
  - [Microsoft Defender XDR](https://www.g2.com/products/microsoft-defender-xdr/reviews)
  - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews)
  - [Microsoft SharePoint](https://www.g2.com/products/microsoft-sharepoint/reviews)
  - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Splunk Enterprise](https://www.g2.com/products/splunk-enterprise/reviews)
  - [Tines](https://www.g2.com/products/tines/reviews)
  - [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews)

## ZeroFox Features
**Detection**
- Bot Mitigation
- Real-Time Monitoring
- Alerts

**Identification**
- Monitoring
- Violations

**Risk Analysis**
- Risk Scoring
- Reporting
- Risk-Prioritization

**Functionality**
- Monitoring - Deep Web
- Monitoring - Dark Web
- Analysis
- Ticketing
- Simple Search
- Leak Source
- Centralized Dashboard
- Real-Time Alerts

**Functionality**
- Detection
- Media type

**Vulnerability Management - Digital Risk Protection (DRP) Platforms**
- Vulnerability Assessment
- Digital Footprint Mapping
- Fraud Detection
- Data Leak Detection
- Anti-Counterfeiting
- Brand Protection

**Orchestration**
- Security Workflow Automation
- Deployment
- Sandboxing

**Analysis **
- Intelligence Reporting
- Incident Reports

**Enforcement**
- Communication
- Plans
- Track

**Vulnerability Assesment**
- Vulnerability Intelligence
- Contextual Data
- Dashboards

**Incident Response Digital Risk Protection (DRP) Platforms**
- Threat Remediation
- Automated Reponses
- Incident Response Capabilities

**Information**
- Proactive Alerts
- Malware Detection
- Intelligence Reports

**Automation**
- Automated Remediation
- Workflow Automation
- Security Testing
- Test Automation

**Reporting and Analytics - Digital Risk Protection (DRP) Platforms**
- Threat Trends Analysis
- Risk Assessment Reports
- Customizable Dashboards

**Personalization**
- Security Validation
- Dynamic/Code Analysis

**Agentic AI - Fraud Detection**
- Cross-system Integration
- Adaptive Learning
- Decision Making

**Generative AI**
- AI Text Summarization
- Generate Attack Scenarios
- Generate Threat Detection Rules
- Generate Threat Summaries

**Agentic AI - Threat Intelligence**
- Autonomous Task Execution
- Multi-step Planning
- Proactive Assistance
- Decision Making

## Top ZeroFox Alternatives
  - [Recorded Future](https://www.g2.com/products/recorded-future/reviews) - 4.6/5.0 (225 reviews)
  - [Check Point Exposure Management](https://www.g2.com/products/check-point-exposure-management/reviews) - 4.6/5.0 (169 reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (417 reviews)