Index › IT › Security operations › DRP › ZeroFox vs Recorded Future Digital Risk Protection
Digital risk protection · November 2026 Edition

ZeroFox vs Recorded Future Digital Risk Protection

Two of fourteen models named ZeroFox first on the direct prompt; zero named Recorded Future Digital Risk Protection. Both were named by all fourteen models and ZeroFox carries 60 labels and Recorded Future Digital Risk Protection 46, so the shares are not directly comparable.

ZeroFox

criticized challenger

Named in one category this edition.

Named in one category this edition.

First-choice share18%2%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.
Negative rate30%33%Negative labels as a share of the product's labels, 0 to 100.
Rank in category#2#6A position in a field of 13; printed, not drawn.
Labels6046A count; the two differ.
The two percentage rows are drawn on one 0 to 100 track, ZeroFox reading right to left. Rank and label count are printed, not drawn.SOCRadar Extended Threat Intelligence was named alongside these two in ten of the fourteen direct answers. SOCRadar Extended Threat Intelligence vs ZeroFox · SOCRadar Extended Threat Intelligence vs Recorded Future Digital Risk Protection · ZeroFox vs Flare

Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the digital risk protection page.

By framing

How many of the fourteen models made each the first choice, per way of asking, and how many argued against it.
ZeroFoxFirst choices, of fourteen modelsRecorded Future Digital Risk Protection
Direct202 against ZeroFox · 2 against Recorded Future Digital Risk Protection
Paraphrase511 against ZeroFox · 3 against Recorded Future Digital Risk Protection
Comparative63
Budget-constrained106 against ZeroFox · 5 against Recorded Future Digital Risk Protection
Scale-constrained00
Negative009 against ZeroFox · 5 against Recorded Future Digital Risk Protection
Bars are first choices, 0 to 14 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to fourteen.

Across every category in the November 2026 Edition, ZeroFox and Recorded Future Digital Risk Protection were named in the same answer 127 times, of the 179 answers naming ZeroFox and the 138 naming Recorded Future Digital Risk Protection. In those answers Recorded Future Digital Risk Protection took the first choice sixteen times and ZeroFox twenty-four.

Every model, every framing

The eighty-four answers behind the chart above, one cell each: where ZeroFox and Recorded Future Digital Risk Protection stood in it.
ModelDirectParaphraseComparativeBudget-constrainedScale-constrainedNegative
Claude Haiku 4.5
GPT-5.4 mini
Gemini 3.5 Flash
Perplexity Sonar
Grok 4.20
Mistral Small
DeepSeek V4 Flash
Llama 4 Maverick
Qwen 3.7 Flash
Kimi K2
GLM 4.7 FlashX
MiniMax M2.5
GPT-6 Luna
Muse Glimmer 30B
ZeroFox Recorded Future Digital Risk Protection first choice named as an alternative argued againstblank: not namedEach cell is one answer, ZeroFox on the left and Recorded Future Digital Risk Protection on the right.

The direct prompt

The plain question, one answer per model, grouped by where ZeroFox and Recorded Future Digital Risk Protection stood in it.

ZeroFox first, Recorded Future Digital Risk Protection an alternative

2 of 14 modelsRecorded Future Digital Risk Protection was named in the answer but not as the choice, or not at all.
Mistral SmallZeroFox alternatives: Cyberint, Rapid7 Threat Command, Recorded Future Digital Risk Protection, SOCRadar Extended Threat Intelligence
GLM 4.7 FlashXZeroFox alternatives: Doppel, Recorded Future Digital Risk Protection, UpGuard BreachSight

Neither was the first choice, one was named

6 of 14 modelsThe answer put something else first and named one of the two as an alternative.
GPT-5.4 miniSOCRadar Extended Threat Intelligence alternatives: Doppel, Recorded Future Digital Risk Protection
Gemini 3.5 FlashFlare alternatives: Bolster, Rapid7 Threat Command, SOCRadar Extended Threat Intelligence, ZeroFox
Perplexity SonarUpGuard BreachSight alternatives: BlueVoyant Sky: DRP, Fortra Digital Risk Protection, Netcraft Digital Risk Protection Platform, Rapid7 Threat Command, Recorded Future Digital Risk Protection, ReliaQuest Digital Shadows, ZeroFox
DeepSeek V4 FlashSOCRadar Extended Threat Intelligence alternatives: ZeroFox
Kimi K2CTM360, SOCRadar Extended Threat Intelligence alternatives: CrowdStrike Falcon Intelligence, Fortra Brand Protection, ZeroFox
MiniMax M2.5SOCRadar Extended Threat Intelligence alternatives: Microsoft Defender for Cloud, UpGuard BreachSight, ZeroFox

Neither was named

6 of 14 modelsThe answer made no first choice from these two in this category.
Claude Haiku 4.5Cyble Vision alternatives: BlueVoyant Sky: DRP, CrowdStrike Falcon Intelligence, SOCRadar Extended Threat Intelligence, UpGuard BreachSight
Grok 4.20SOCRadar Extended Threat Intelligence alternatives: Cyble Vision
Llama 4 Maverickno first choice
Qwen 3.7 FlashUpGuard BreachSight alternatives: Cyble Vision
GPT-6 LunaSOCRadar Extended Threat Intelligence alternatives: Bolster, Fortra Brand Protection
Muse Glimmer 30BSOCRadar Extended Threat Intelligence alternatives: CloudSEK XVigil, Cyberint

Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.
Small business
ZeroFox leads by four points.
ZeroFox4%#5 of 10
Recorded Future Digital Risk Protection0%#10 of 10
The full small business standing →
Mid-marketThe figures above
ZeroFox leads by sixteen points.
ZeroFox18%#2 of 13
Recorded Future Digital Risk Protection2%#6 of 13
The full mid-market standing →
Enterprise
ZeroFox leads by sixteen points.
ZeroFox37%#1 of 11
Recorded Future Digital Risk Protection22%#2 of 11
The full enterprise standing →

What the models said about ZeroFox

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.

“Avoid: Enterprise-only DRP tools (like ZeroFox or Recorded Future) unless you have a dedicated security budget of $100,000+ per year.” GLM 4.7 FlashX · budget prompt · hard negative
“Avoid for Tight Budgets: Enterprise-heavy options like Recorded Future, ZeroFox, or Rapid7 often start at $20,000–$50,000+/year” Grok 4.20 · budget prompt · hard negative
“ZeroFox - mentioned as having a high negative rate and being criticized for its focus on visibility rather than disruption.” Llama 4 Maverick · negative prompt · hard negative
“Strong for brand and executive threat coverage across social media and external platforms, suitable for SMB through enterprise with modular options.” Mistral Small · direct prompt · first choice
“ZeroFox is widely recognized for its deep coverage across social media, mobile app stores, and digital channels.” Gemini 3.5 Flash · comparative prompt · first choice
“Choose ZeroFox if impersonation, executive threats, social media, or brand abuse are priorities.” Perplexity Sonar · comparative prompt · first choice

What the models said about Recorded Future Digital Risk Protection

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.

“What to Avoid - Recorded Future and ZeroFox are excellent but are built for enterprise budgets” Kimi K2 · budget prompt · hard negative
“Recorded Future - mentioned as being a "criticized challenger" and having a high negative rate.” Llama 4 Maverick · negative prompt · hard negative
“Avoid for Tight Budgets: Enterprise-heavy options like Recorded Future” Grok 4.20 · budget prompt · hard negative
“Recorded Future is widely considered the leader in threat intelligence. They have the broadest data sources” Qwen 3.7 Flash · paraphrase prompt · first choice
“If you need deep intel and context, go with Recorded Future or CloudSEK XVigil.” GLM 4.7 FlashX · comparative prompt · first choice
“positions itself as the most comprehensive DRP platform for large enterprises” MiniMax M2.5 · comparative prompt · first choice
Also compared

Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.