No more typing reviews! Try our Samantha, our new voice AI agent.

VirusTotal vs ZeroFOX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VirusTotal
Ranking in Threat Intelligence Platforms (TIP)
5th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
10
Ranking in other categories
Anti-Malware Tools (4th)
ZeroFOX
Ranking in Threat Intelligence Platforms (TIP)
8th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (2nd)
 

Mindshare comparison

As of June 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of VirusTotal is 3.6%, down from 5.5% compared to the previous year. The mindshare of ZeroFOX is 2.5%, down from 4.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
VirusTotal3.6%
ZeroFOX2.5%
Other93.9%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

reviewer2588199 - PeerSpot reviewer
Security Specialist at a tech vendor with 10,001+ employees
Improves security alerts and analysis with comprehensive insights
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the category of websites. The addition of a file selection option to analyze files would also enhance the service.
AS
Senior Consultant at LTI - Larsen & Toubro Infotech
Efficiently identify and address online threats with timely alerts and thorough takedown capabilities
The most valuable features are its threat intel platform, which provides the latest trends and indicators of compromise (IOCs) that I can act on. I quickly obtain data, such as leaked email IDs and passwords, from the ZeroFOX portal or the threat intel portal when required. The platform's GUI-based features stand out and provide thorough takedown capabilities for domains, social media accounts, and phishing numbers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It can scan the dark web and find if an email ID has been compromised. This is another area that we have not explored yet."
"It gives detailed information about suspicious IPs, which is one of its most valuable features."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"The product is easy to use with coding, such as Python or Java, via its API."
"It is quite simple for anyone if they just want to check some suspicious URLs."
"VirusTotal provides 95% to 98% accurate information."
"It allows us to see if there have been previous reports on certain indicators of compromise, providing insights from other security professionals."
"The most valuable feature is the worldwide malware information database."
"ZeroFOX has no language limitations. It can detect many languages."
"ZeroFOX is valuable because it enables the detection of chatter on social media without depending on keywords and has no language limitations, as it can detect many languages."
"The best thing about the tool is that its backend team is pretty good and has a strong engineering team."
"I rate ZeroFOX a ten overall."
 

Cons

"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
"The platform could improve in the areas of endpoints and networks."
"There is room for improvement, particularly in making some of the most useful features more accessible in the non-paid version."
"I would like to see improved correlation with other threat intelligence sources, not just reliant on its own database, to enhance the database of threat intelligence that VirusTotal offers."
"VirusTotal is hard to understand because you need to know Google Docs to create queries, and it doesn't have documentation for that."
"There should be room for improvement, particularly in the API side of things."
"I would like to see an improved user interface and some automation."
"VirusTotal has predefined reports, but there is a lot of manual effort involved."
"ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single incident."
"Social media takedowns are a major issue. The takedowns should not take more than two to three hours, but they take more than that."
"ZeroFOX is not configured to grab the information automatically, including the news."
 

Pricing and Cost Advice

"The pricing is reasonable."
"The pricing is very economical."
"VirusTotal is an expensive solution."
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
Information not available
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
16%
Manufacturing Company
11%
Computer Software Company
7%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
What is your experience regarding pricing and costs for ZeroFOX?
Based on my observations, ZeroFOX is moderately priced. It's neither highly expensive nor very cheap. The pricing depends on the licensed services, such as takedowns or dark data services, chosen.
What needs improvement with ZeroFOX?
ZeroFOX needs improvement in handling duplicate alerts. If an alert on a domain, such as abcd.com, has not been addressed or is still in progress, similar new alerts are not combined into a single ...
What is your primary use case for ZeroFOX?
I am working as a consultant for a manufacturing company, where I use ZeroFOX ( /products/zerofox-reviews ) to monitor social media accounts, brand domains, dark web data, and other online assets. ...
 

Also Known As

No data available
LookingGlass Manage Intelligence, VigilanteATI
 

Overview

 

Sample Customers

Information Not Available
Royal Farms, Hootsuite, BAE Systems, True Citrus
Find out what your peers are saying about VirusTotal vs. ZeroFOX and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.