I really appreciate ZeroFox's automated domain impersonation detection and takedown. It helps us eliminate fraudulent supplier clone sites and protects our enterprise client procurement portals. I also like the web credential and compromised account monitoring, which continuously scans for exposed employee and client credentials, giving us early warnings if a compromise occurs. Additionally, the protection offered for our executive and regional sales leads from social media impersonation and targeted spear phishing is crucial. This feature prevents threats that could lead to fraudulent banking updates or invoice modifications to our corporate clients. Overall, managing daily external risk monitoring has been very efficient and effective for our business. Review collected by and hosted on G2.com.

I wish they would improve the custom SOAR API mapping complexity. Right now, integrating threat intelligence feeds into our security operations center dashboard requires custom API field mapping, which is tedious during the initial setup. It would be great if ZeroFox could offer preconfigured SIEM integration connectors and standardized JSON mapping templates for popular tools like Microsoft Sentinel and Splunk. It would make the process much smoother, allowing external threat data to flow into our internal dashboards without the need for manual coding. Review collected by and hosted on G2.com.