No more typing reviews! Try our Samantha, our new voice AI agent.

ThreatQ vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ThreatQ
Ranking in Threat Intelligence Platforms (TIP)
23rd
Average Rating
7.0
Reviews Sentiment
6.6
Number of Reviews
2
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (25th)
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
6th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (1st)
 

Mindshare comparison

As of May 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of ThreatQ is 1.9%, down from 2.7% compared to the previous year. The mindshare of ZeroFOX is 2.5%, down from 4.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
ZeroFOX2.5%
ThreatQ1.9%
Other95.6%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Yasir Akram - PeerSpot reviewer
Software Engineer at Freelancer
Good reporting and pretty stable but needs to be simpler to use
The support team of ThreatQ set up a VM on our VPN, which was SlashNext's private VPN. Then we just initiated some system calls and ThreatQ provided us the configuration file with our settings (like our email, our API key, our URL, our category, etc.). They set up a VM on our private VPN cloud. And then they provided us the configuration file in which we just entered our details like our company URL, our API category, and API keys et cetera. We could just add it on the configuration file. We just uploaded it to the ThreatQ server. After running the system calls, we just initiated the ThreatQ and then performed tasks on the UI, such as categorizing the reports. If we only wanted the report for phishing, then we just manipulated the data on the UI and just extracted the reports. That's all. The deployment was complex. We used high hardware specifications. I don't remember the exact specifications, however, I recall them being high. There were some services that had some compatibility errors. That's why we had our VMs - to make sure that the customer would not face any errors. Everything's deployed with high specifications and custom specifications. That was the biggest challenge for us - to deploy on the customer VMs. On average, deployment takes 15-20 minutes if it's deployed without any errors. I was with one of the NetOps network admin during deployment. We were only two people and we just deployed and installed all services and we executed the deployment.
AS
Senior Consultant at LTI - Larsen & Toubro Infotech
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The reporting services are great, and if you have customers that just visit a URL you can see the result, including why it's blocked, how it's blocked, and how the URL was first recognized as malicious."
"The reporting services are great. With reporting services, if you have customers that just visit a URL you can see the result - including why it's blocked and how and how the URL was first recognized as malicious."
"Integrating the solution with our existing security tools and workflows was easy."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
"ZeroFOX is valuable because it enables the detection of chatter on social media without depending on keywords and has no language limitations, as it can detect many languages."
"ZeroFOX has no language limitations. It can detect many languages."
"I rate ZeroFOX a ten overall."
 

Cons

"The solution should be simpler for the end-user in terms of reporting and navigating the product."
"The tool is not user-friendly."
"The solution should be simpler for the end-user in terms of reporting and navigating the product."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours, but they take more than that."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours."
"ZeroFOX is not configured to grab the information automatically, including the news."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
893,221 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Manufacturing Company
9%
Educational Organization
7%
Healthcare Company
7%
Financial Services Firm
17%
Manufacturing Company
10%
Computer Software Company
7%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
What is your primary use case for ZeroFOX?
I am working as a consultant for a manufacturing company, where I use ZeroFOX ( /products/zerofox-reviews ) to monitor social media accounts, brand domains, dark web data, and other online assets. ...
 

Comparisons

 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Overview

 

Sample Customers

Radar, Bitdefender, Crowdstrike, FireEye, IBM Security
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about ThreatQ vs. ZeroFOX and other solutions. Updated: April 2026.
893,221 professionals have used our research since 2012.