ZeroFox

ZeroFox monitors external channels such as social platforms and the dark web for threats to organisations. It combines AI-assisted detection with human analysis and enforcement workflows for impersonation, fraud, and other digital risks.

ZeroFox presents bundled offerings (Foundation, Core, Premium, Executive) with documented included quantities (assets, takedowns, seats) but does not publish per-bundle prices on the linked pages. Each bundle shows a "Request Pricing" call-to-action.

Is ZeroFox right for you?

Good for

  • Security teams needing an external threat-intelligence and disruption service that combines AI signal processing with analyst validation and takedown workflows integrated into SIEM, SOAR, or EDR.
  • Combines AI-driven automation with analysts to validate signals and reduce false positives.
  • Processes very large telemetry sets and produces integrated alerts and evidence for action.

Keep in mind

  • Public per-bundle pricing is not published; pricing requires vendor engagement via "Request Pricing."
  • Vendor documentation does not enumerate the underlying AI model types, training data, or explainability details.
  • If takedown assistance is essential, confirm covered platforms, evidence requirements, and enforcement responsibilities.

Choose a plan for your work.

ZeroFox presents bundled offerings (Foundation, Core, Premium, Executive) with documented included quantities (assets, takedowns, seats) but does not publish per-bundle prices on the linked pages. Each bundle shows a "Request Pricing" call-to-action.

Explore plans

Pricing and plan limits

The linked official pages do not list plan prices. Pricing is available through the vendor's sales process via the "Request Pricing" flow on the pricing page.

Confirm access with ZeroFox

ZeroFox presents bundled offerings (Foundation, Core, Premium, Executive) with documented included quantities (assets, takedowns, seats) but does not publish per-bundle prices on the linked pages. Each bundle shows a "Request Pricing" call-to-action.

See plans on ZeroFox
More about capabilities and limits

Documented strengths

Combines AI-driven automation with analysts to validate signals and reduce false positives.ZeroFox | External Cybersecurity.

Processes very large telemetry sets and produces integrated alerts and evidence for action.ZeroFox | External Cybersecurity.

Provides integrations to security tooling and automated response workflows (SIEM, SOAR, EDR) and takedown APIs.ZeroFox | External Cybersecurity.Pricing | ZeroFox

Limitations to consider

Public per-bundle pricing is not published; pricing requires vendor engagement via "Request Pricing."Pricing | ZeroFox

Vendor documentation does not enumerate the underlying AI model types, training data, or explainability details.About | ZeroFox

Choosing a plan

Engage ZeroFox sales to get a bundle breakdown, then run a scoped pilot that validates signal volume handling, analyst validation cadence, and integration to your SIEM/SOAR/EDR connectors.

Based on the linked product documentation.

Official sources

ZeroFox | External Cybersecurity.Pricing | ZeroFoxAbout | ZeroFox

Alternatives to ZeroFox

Choose around the work you need to do.

BrandShield

Compare BrandShield for this workflow: brand and security teams tracking and removing external brand abuse (phishing, impersonation, counterfeit listings) across public channels and AI platforms.

Explore

CloudSEK

Compare CloudSEK for this workflow: security teams needing AI-native attack-surface discovery and agent-driven attack-path validation for AI infrastructure and external exposures.

Explore