G2

Verified User in Financial Services

Small-Business (50 or fewer emp.)

9/30/2026

"Easy-to-Use Platform with Great Sources, Alerts, and AI-Generated Reports"

4.5/5

What do you like best about Recorded Future?

good sources and quite easy to use AQB. good overview of the situation in the plafrom. like the AI o generate ad-gock report and investigate new and hot toppic. Good alartin and easy to work as a team in the platform.

like the sandbox, qorks quite good and possible to get the pcap, but should be nice if you also can dectrype ssl Review collected by and hosted on G2.com.

What do you dislike about Recorded Future?

Limited WHOIS information compared to other intelligence platforms. Limited Passive DNS (pDNS) coverage and historical visibility. Malware analysis results sometimes lack the true source or origin details, which can be critical for understanding infection vectors and attribution. The macOS sandbox does not consistently handle certain zsh-based malware samples, leading to incomplete analysis results. It is not currently possible to search intelligence sources such as Docker containers/images for indicators, strings, or artefacts of interest, similar to the way source code repositories can be searched. When researching a subject, indicator, or threat actor, it would be valuable to automatically identify and surface any related alerts already present in the platform to improve analyst workflow and reduce investigation time.

Overall: Recorded Future provides strong threat intelligence coverage, but improvements in enrichment data (WHOIS/pDNS), malware analysis transparency, search capabilities across additional data sources, and tighter integration between investigations and existing alerts would significantly enhance the analyst experience. Review collected by and hosted on G2.com.

What problems is Recorded Future solving and how is that benefiting you?

Well-tuned alerting has helped reduce manual monitoring efforts and saved investigation time by surfacing relevant threats and activity more quickly. The platform makes it easy to search and monitor discussions across forums and Telegram channels, providing valuable threat intelligence that would otherwise be time-consuming to collect manually. The sandbox is useful for obtaining an initial assessment of suspicious files and URLs, helping to quickly determine whether further investigation is required. Integrations with security tools have helped automate IOC sweeps across SIEM logs, improving detection efficiency and reducing manual analyst workload. The ability to correlate threat intelligence with internal security events has improved triage and prioritization of potential threats.

Overall: Recorded Future helps streamline threat intelligence collection, accelerate initial analysis of suspicious artifacts, and automate parts of the investigation process, allowing analysts to focus on higher-value activities. Review collected by and hosted on G2.com.