Try our new research platform with insights from 80,000+ expert users

VirusTotal vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VirusTotal
Ranking in Threat Intelligence Platforms (TIP)
5th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
11
Ranking in other categories
Anti-Malware Tools (4th)
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
8th
Average Rating
8.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (1st)
 

Mindshare comparison

As of March 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of VirusTotal is 3.5%, down from 5.5% compared to the previous year. The mindshare of ZeroFOX is 2.6%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
VirusTotal3.5%
ZeroFOX2.6%
Other93.9%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Chinmay Banerjee - PeerSpot reviewer
Advisor Adtech/Martech/API product/project Engineering at a financial services firm with 10,001+ employees
Helps businesses collect threat data while keeping privacy in mind and apable of detecting, blocking, and removing viruses and malware
There are two gray areas I still need to explore. I have worked with VirusTotal because it easily integrates with over seventy antivirus scanners and blacklisting services. In addition to those there is much scope to improve and add other services or integrations. The areas for improvement are that VirusTotal is not using much AI or generative AI models, while other competitors are starting to build them. For example, VirusTotal's work is based on the setup done by their engineers. If you want to do scanning or protection activities for a specific site, app, or device, that is the area VirusTotal is currently focused on. But other competitors are building AI models that can do things like left-side scanning and provide auto-generated reports. VirusTotal has predefined reports, but there is a lot of manual effort involved. Secondly, the API is very limited if I want to integrate VirusTotal with other applications. They need to build more connectors and provide support for Webhook connectors for the API. If you can't build your own connector, it's always good to have provisions for Webhook setup connectors across platforms. Thirdly, Kaspersky, a competitor of VirusTotal, is using a methodology called "gatekeeper." A gatekeeper is a security system that protects the inside of a building from outside threats. This is the model Kaspersky is currently using. You have your website set up, but the entire army of VirusTotal or Kaspersky is standing guard, protecting you from the first gate itself. Right now, VirusTotal detects threats from your domain, but it is always better to verify inside the domain and protect it from the first level when people or malware are entering. This first level of protection is lacking in VirusTotal right now. The security bridge and protection gate are missing.
AS
Senior Consultant at LTI - Larsen & Toubro Infotech
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the worldwide malware information database."
"The product is easy to use with coding, such as Python or Java, via its API."
"It allows us to see if there have been previous reports on certain indicators of compromise, providing insights from other security professionals."
"VirusTotal provides 95% to 98% accurate information."
"I have never had any problems with stability or bugs while using VirusTotal."
"VirusTotal provides 95% to 98% accurate information."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"It can scan the dark web and find if an email ID has been compromised. This is another area that we have not explored yet."
"I rate ZeroFOX a ten overall."
"ZeroFOX has no language limitations. It can detect many languages."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
 

Cons

"VirusTotal has predefined reports, but there is a lot of manual effort involved."
"VirusTotal is hard to understand because you need to know Google Docs to create queries, and it doesn't have documentation for that."
"I would like to see improvements in the score consistency and accuracy."
"I would like to see an improved user interface and some automation."
"The platform could improve in the areas of endpoints and networks."
"VirusTotal has different versions, and sometimes the parameters of the API are not very clear."
"I would like to see improved correlation with other threat intelligence sources, not just reliant on its own database, to enhance the database of threat intelligence that VirusTotal offers."
"VirusTotal needs better advertisement and promotion, especially in the Middle East, since it is not yet widely recognized or popular in that region."
"ZeroFOX is not configured to grab the information automatically, including the news."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
 

Pricing and Cost Advice

"The pricing is reasonable."
"The pricing is very economical."
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
"VirusTotal is an expensive solution."
Information not available
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
10%
University
8%
Comms Service Provider
8%
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
8%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
What do you like most about ZeroFOX?
The best thing about the tool is that its backend team is pretty good and has a strong engineering team.
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Overview

 

Sample Customers

Information Not Available
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about VirusTotal vs. ZeroFOX and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.