SOCRadar Extended Threat Intelligence Reviews

I used SOCRadar Extended Threat Intelligence at my previous company, Gurok Holding, based in Kutahya, for 5 years.

Socradar Cyber Threat Intelligence  Aggregates automated feeds on Indicators of Compromise (IOCs), active cyber campaigns, global ransomware trends, and detailed threat actor profiles ,External Attack Surface Management (EASM) ,Advanced Dark Web Monitoring and finally  Supply Chain Support ...

We integrated our sources, websites, IP addresses, and some sources with SOCRadar Extended Threat Intelligence. We used threat intelligence, vulnerabilities, and monitored and analyzed the current threats and resolve status.

I remember that there was one threat on our web server, and our web server and SOCRadar Extended Threat Intelligence notified us about the threat and vulnerabilities. We resolved it with SOCRadar Extended Threat Intelligence.

Once, one of the IP addresses we were using for email was blacklisted, and Socradar warned us immediately.

We primarily use Azure and Vodafone and onpremise servers for SOCRadar Extended Threat Intelligence.

SOCRadar Extended Threat Intelligence includes dark web intelligence. When you define your VIP addresses such as email or management board email address or some VIP email address, you can see if there is a breach or password or company-related email breaches. This is a very useful feature.

We integrated SOCRadar Extended Threat Intelligence with FortiGate firewall. We have a lot of FortiGate firewall and FortiGate Analyzer and McAfee SIEM, which is now rebranded as Trellix. We integrated these with SOCRadar Extended Threat Intelligence.

The integration with FortiGate and Trellix made our threat response processes faster and more efficient because we are feeding global threat intelligence. It is very useful for SIEM. You can define in McAfee or Trellix SIEM a global threat intelligence source, and you can see a lot of different sources' threats from SOCRadar Extended Threat Intelligence. Because Trellix also has its own threat intelligence source, you can add more threat intelligence from SOCRadar Extended Threat Intelligence. This is very useful.

We utilized the Attack Surface Threat Assessment, ASTA feature. It is very useful. We used Trend Micro Email Gateway, and I also integrated it with SOCRadar Extended Threat Intelligence. It is a very useful feature.

We can save time on a lot of features because with previous solutions, we were unable to see all of the threats in a central point. This was the main problem for us. There are a lot of sources, and you need to look at every source. With SOCRadar Extended Threat Intelligence, you can integrate all of the sources in a central location, and you can see all of the threats. There is also a ticket management system where you can see the problem threat, and you can add comments on what you have done and whether it is resolved or not. This is very useful, especially for management purposes.

It increases your efficiency and speed, allowing you to respond to threats in a timely manner.

You can find out new threats and security incidents with SOCRadar Extended Threat Intelligence. You can see the new vulnerabilities when you are using your products. This is very useful.

SOCRadar Extended Threat Intelligence has improved security in my organization, but there are some problems. Sometimes there are too many alarms, which can become quite tiring.

We have a lot of information infrastructures, and SOCRadar Extended Threat Intelligence has improved our security, but we do experience some alert fatigue. There are a lot of web servers. We also integrated SOCRadar Extended Threat Intelligence with the SIEM. We can see together, and we can see all of the threats and new threats, especially.

If you integrate all internal sources, IP addresses, and services to SOCRadar Extended Threat Intelligence, you can view all of the sources together in a single monitor and area. You can also view all the tickets and vulnerabilities and threats. This is very useful.

I can see that the AI capabilities of SOCRadar Extended Threat Intelligence now seem very limited, but I think that over time, it will be improved.

Sometimes the output of SOCRadar Extended Threat Intelligence is very accurate, but sometimes you need to check whether it is real or not. There are some problems with accuracy.

I have used SOCRadar Extended Threat Intelligence 5 years in Gurok Holding.

SOCRadar Extended Threat Intelligence is very stable.

Threat intelligence scalability of SOCRadar Extended Threat Intelligence is very good. You can resize to any needs. You can add more resources, and this is dependent on the price. There is no problem. You can add 100 IPs or 1,000 IPs. There is no problem.

Customer support for SOCRadar Extended Threat Intelligence is very good. There are some levels: level one, level two, or level three. When you open a ticket, they generally answer immediately.

One time I had a problem and I opened a support ticket for SOCRadar Extended Threat Intelligence. The customer support responded to me in one hour because there was a problem with the SOCRadar GUI. They resolved it in a very quick time.

McAfee Global Threat Intelligence (GTI)  ,McAfee GTI was more focused on its own platform, while Socradar had a much wider range of options.

The initial setup takes time; you need to create a good inventory and prioritize items according to their importance. If your preparation is correct and sufficient, the setup will be quick.

We did it together with the Socradar team.

The primary driver of SOCRadar's ROI is the prevention of major security incidents—such as data breaches, ransomware, and third-party supply chain compromises.You can automate many processes, reduce the number of people involved, and get more accurate results.

Every year, we request the price, from SOCRadar Extended Threat Intelligence. They ask what you have, the source and IP address or domain. We can take our infrastructure and environment and check if there is a new source or something else. They can make a special price for us because we were long-time customers.

I cannot remember whether I evaluated other options before choosing SOCRadar Extended Threat Intelligence. It was a very long time, maybe six or seven years ago.

8

It is a very good tool and very useful.

The tiers and flexible pricing of SOCRadar Extended Threat Intelligence sometimes change because we are a very long customer for SOCRadar. Our company started using SOCRadar Extended Threat Intelligence maybe six or seven years ago. Due to this reason, SOCRadar makes special discounts for us.

I have not utilized the managed takedown services provided by SOCRadar Extended Threat Intelligence. I remember there was some domain related to our services, and we talked about the takedown of the domain. They requested an extra price for this service.

According to me, SOCRadar Extended Threat Intelligence is a very good product with competitive pricing. I rate this review an 8 out of 10.

I use SOCRadar Extended Threat Intelligence for VIP monitoring, CM tool monitoring, and CTI, specifically for early detection systems for our customers. If there is any leakage of customer accounts, we know about it. If there is any information about them on the dark web, we are immediately informed. Overall, I use it for intelligence purposes.

My favorite feature is probably the API and the integration with the CM tool that allows for automated integration. The leak accounts feature is exceptionally valuable, as it provides high visibility to the dark web and hacker forums where we are immediately notified if any account or company within our scope appears. The visibility is quite comprehensive and the response is fast.

Pricing is a problem as I see it. The credit-based model is extremely expensive. If a company does not have at least €70,000 to invest, they tend to avoid the solution because of the cost structure. The issue is not necessarily the pricing itself, but rather the credit-based model. If the pricing were structured as a flat fee of €70,000 or €30,000 with unlimited searches and unlimited credits, I would see much greater value in the solution. However, with the current model, you pay tens of thousands of euros and still have limitations on your searches.

For an MSSP like myself, this is particularly challenging because we have dozens of customers. If we conduct a search for every customer monthly, bi-monthly, or even quarterly, the credits will be depleted by the end of the year or even sooner. The credits can become expendable very quickly, sometimes within a few months. This is the only downside of SOCRadar Extended Threat Intelligence. Otherwise, I believe it is almost the perfect tool for CTI. I consider it the leading CTI tool on the market. There are many others that try to get close to it, but they are not even close.

I have been using SOCRadar Extended Threat Intelligence for a couple of years, not only the advanced version but the whole product.

I have not experienced any stability issues. SOCRadar Extended Threat Intelligence is a very stable tool with no lack of performance. I cannot remember any instance of the system not working or being down. The tool has been perfect in this regard.

SOCRadar Extended Threat Intelligence is very scalable because they use MSSP as their main focus. It is scalable because you can have multiple sources and multiple customers, with everything going through the API. You can have a CM tool that scales with customers across it. However, the pricing prevents greater scalability. From one to ten, I would give it a seven out of ten just because of the pricing, as the pricing structure does not allow you to scale effectively without spending a significant amount of money. In terms of technology, I would give it a ten out of ten.

SOCRadar Extended Threat Intelligence's customer support is definitely strong. I have interacted with not only the sales team but also the customer support and their CTI experts across many companies where I worked and tried to purchase their services. I can tell you they are super fast, super helpful, and they seem to be quite knowledgeable.

I have definitely contacted the technical support and customer support for SOCRadar Extended Threat Intelligence. I have interacted with not only the sales team but also the customer support and their CTI experts across many companies where I worked and tried to purchase their services. They are super fast, super helpful, and they seem to be quite knowledgeable.

If I were to put SOCRadar Extended Threat Intelligence support on a scale from one to ten, ten being the highest, I would give them a solid seven or eight. I would not give them a ten because I did not have much interaction with them. The interactions I had were minimal, but they were quite good.

I have given this review a rating of ten out of ten.

Positive

I have used many alternative solutions. I basically use everything on the market, and when I see new ones, I use them. I use free OSINT tools as well. I use many of them, such as Hudson Rock and other similar ones. Hudson Rock is the one that gets closer, but it is more for infostealers and similar threats. The most complete solution of all, which goes across everything and the entire spectrum, is SOCRadar Extended Threat Intelligence. I use multiple free tools that, when combined, do not give me the same value as SOCRadar Extended Threat Intelligence provides. It is not the same as having ten tools versus having one. SOCRadar Extended Threat Intelligence was quite smart in consolidating all of this into one tool.

The initial setup is fairly easy. SOCRadar Extended Threat Intelligence does the whole work for us, and if we need to add an integration to our CM tools or anything else, it is super easy. They have a quite complete API tool. They have integrations for Palo Alto and other tools, or even for Sentinel, Rapid7, and others. They are really good at this. They have multiple integrations, and the implementation is fairly easy.

One person is enough to work with SOCRadar Extended Threat Intelligence team, such as a threat intelligence specialist who is able to do the job. It is basically easy because they will guide you through it. You do not need more people. You can always have one or two, but one is sufficient. You do not need that many.

I am not using their AI tool. I do not know if they have any AI currently. I did not check it, but every company nowadays has some AI platform or AI integration because it is a new niche. I basically use what they had from before, such as their threat intelligence, their guides, their background research, and their monitoring from Telegram. I do not use anything specifically labeled as AI from them. If they already have it implemented in the core of their solution, then I am using it and did not even know about it. They might have it, but not that I am aware of. I am not using something that is per se AI from them or used before.

I have used the unique dark web sources that SOCRadar Extended Threat Intelligence provides. I use the sources that they give me. Sometimes they provide even the Telegram chats and forums where they conduct their research. They are very transparent about this. We can go there and access the Onion links and everything. I use them, but not very often because when they do the work for me, I do not need to use them that much. However, for curiosity, I sometimes go in and check the sources.

SOCRadar Extended Threat Intelligence offers Takedown services. I have never used them because I never needed the service, as we never had an exposure that would require a takedown service from them. I did use the information once or twice to do it myself. We used the information that we had an impersonating domain and, instead of using their services which again requires credits and is expensive, I did the work myself. I contacted the provider and told them that the impersonation was not authorized, and we handled it ourselves. I never used their service and do not know how good it is. The issue comes down to credits and cost.

I have not used their Identical Phishing workflow for noise minimization capabilities. I have never used that tool because phishing is already integrated within Microsoft Exchange, and Microsoft already has pretty good threat intelligence with it, so we keep it within Microsoft. We mainly use Microsoft, or if we use Google, Google has their own services as well.

Attack Surface Threat Assessment is a really good feature because I can use it to get leads on customers. When I get a customer and input it there as an MSSP, it gives me the attack surface of the customer and their exposure. Again, you need some credits to make a search and complete the process. Before, you needed to ask them personally to add a customer. I believe they changed that so you can go on the fly and add it yourself, but previously you needed to ask them, which was not comfortable. Otherwise, the product itself is good because it gives you a good overview of the company's exposure. It was really good for getting leads. If you have a possible customer lead and input that domain, it will give you more information about the exposure of that possible customer and get you ready to win a new customer, which for me is a very important point when it comes to cybersecurity in MSSPs.

I had many consulting jobs with companies that wanted SOCRadar Extended Threat Intelligence and wanted more details on the operational side. One of the things I tell everyone is the ease of getting started with them because they are super fast, they are technical, and they help. When you pay such an amount of money, they will help you with everything.

SOCRadar Extended Threat Intelligence does not require any maintenance on my end. Everything is being taken care of by them from their API. For example, if you have it on your CM tool, it is taken care of by them. Only if you want to add more customers, you can do it yourself, but otherwise, everything is in the background with them. It is super easy. I do not need to deal with anything. I have never had to do any type of maintenance from my side. Even if I have the free tool or the complete tool, I have never had to do any maintenance.

My main use case for SOCRadar Extended Threat Intelligence is Digital Risk Protection, brand risk monitoring, threat intelligence, supply chain attacks, supply chain monitoring, VIP monitoring, identity intelligence, and geopolitical intelligence.

I can provide a specific example of how I have used SOCRadar Extended Threat Intelligence for one of those use cases. We obtained information regarding a particular threat actor for our customer, and that threat actor was targeting other brands and companies in that particular sector. We notified our customer that this threat actor might pose a risk to them, we recommended they safeguard their defenses, and we started monitoring for that customer. The effort was successful, and we successfully thwarted that cyber threat attack against our customer, saving a significant amount of money that would have been lost as a victim.

I have additional information about my main use case and how I use SOCRadar Extended Threat Intelligence. SOCRadar provides high fidelity, suspicious, and malicious IOCs that we can straightaway input into our security tools and directly block, which is valuable. Instead of scouring the internet or social media platforms for malicious IOCs for weeks or months, which consumes considerable time, I have used SOCRadar Threat Hunting platform. In conducting proactive threat hunts, I use the information about threat actors and their TTPs provided by SOCRadar to perform proactive threat hunts on my customers' environments. We use the information provided by SOCRadar to develop detection mechanisms, which is extremely useful and has proven to be a great success story for our organization.

The best features SOCRadar Extended Threat Intelligence offers include VIP monitoring, which I personally prefer, Digital Risk Protection, Brand Risk Protection, and malware intelligence. Since I am always active in the cyber threat landscape, I proactively monitor geopolitical intelligence that I find very interesting because remaining on the bleeding edge requires understanding the geopolitical landscape. SOCRadar providing geopolitical threat intelligence information is extremely useful, and these modules provide a good level of information.

SOCRadar Extended Threat Intelligence has positively impacted my organization in many ways. For instance, we successfully thwarted a cyber attack against our customer. Internally, it brings considerable motivation toward learning a cyber threat intelligence platform, which itself is a very substantial concept. We learn more about cyber threats and various concepts that I believe we cannot learn independently or would take considerable time. Rather than using a threat intelligence platform that is not SOCRadar Extended Threat Intelligence, I believe you will be able to learn such concepts without difficulties and invest your time into more useful and helpful products to develop your core skills.

Thanks to SOCRadar, we have saved more than $500,000 for our customers by protecting them from cyber attacks. SOCRadar has also saved more than 900 hours of our analysts' time, reducing the Mean Time to Detect, Mean Time to Response, and automating serious tasks within our platform. It has serious capabilities, and we appreciate that.

SOCRadar Extended Threat Intelligence could be improved by implementing an autonomous threat hunting option. I am not certain if this is currently implemented, but I would appreciate seeing that feature. Another improvement would be having SOCRadar perform backend correlation tasks. For example, if there are any objects that have been identified or captured in the platform, there should be some sort of backlink channels or backend connectivity that enhances the investigation and truly saves the analyst's time.

I have been using SOCRadar Extended Threat Intelligence for approximately one and a half to two years.

SOCRadar Extended Threat Intelligence is absolutely stable.

Customer support is absolutely brilliant.

I give customer support a rating of ten because of the quality of investigation, feedback, and the amount of threat intelligence support and takedown requests handled professionally.

We previously used OpenCTI but understood its limitations, particularly as our organization grew. We could not rely on OpenCTI due to the constant need to scale up infrastructure and manage platform availability and security, which consumed more time than focusing on threat intelligence. Therefore, we switched to SOCRadar, trusting it more than relying solely on public data.

I have seen a return on investment since we previously deployed more than six to seven employees to gather intelligence and maintain vigilance on the dark web, but now we use only one or two analysts per shift. The amount of money saved is invaluable, although I cannot provide specific metrics as I do not have that data. Time saved exceeds 900 hours since we started utilizing SOCRadar.

SOCRadar Extended Threat Intelligence earns a rating of ten on a scale of one to ten.

I rate it a ten because of the quality of information that is always delivered when needed, and the support from SOCRadar's internal security team is absolutely brilliant. The high-fidelity information that I rely on as a cyber threat intelligence analyst is what I seek. Ultimately, you want correct information that you can work on and a platform that supports you with overall visibility and extended capabilities. When everything falls into place, that is what makes a platform deserve a score of ten.

Regarding SOCRadar Extended Threat Intelligence's AI capabilities, I believe its accuracy and reliability of output are quite accurate and reliable because most of our customers are satisfied with the services that we provide as a managed security service provider. They have never complained regarding the reporting or metrics we provide or the cyber threats that we address to keep them safe. SOCRadar's AI is absolutely brilliant in terms of creating reports, which is flexible because ultimately you need some form of automation feature that helps you write lengthy reports instead of investing human hours. I would rely on SOCRadar Extended Threat Intelligence's AI capabilities to handle that task and provide automation instead.

Regarding the freemium tiers and flexible pricing offered by SOCRadar, I believe the freemium pricing is invaluable for new companies or startups. At the starting point, when your infrastructure is small and limited, you do not have many users or an external surface to manage. The freemium tier helps you start by providing the hints and information you need to stay updated in the platform. SOCRadar can prove to be an invaluable product for new companies. However, flexible pricing and premium tiers are necessary for organizations that mature and need to reach a certain level where they should pursue enterprise pricing or professional pricing because their external surface expands and they cannot afford to miss costly cyber threats. Regarding its impact on my IT budget planning, SOCRadar does not pose any problems since some cyber threat intelligence platforms are overwhelmingly costly, and you may not always have a budget for your ideal threat intelligence platform.

I have utilized SOCRadar's unique dark web sources, and they significantly impact identifying potential threats early. Our analysts work on dark web sources, and there was a client whose name was leaked in one of the dark web forums. We proactively validated that particular data, which turned out to be a false positive created as a scareware technique by threat actors to extort money or frighten clients. Without SOCRadar, I do not believe we would have discovered the truth and might have faced a real cyber attack, costing us considerably more. SOCRadar has been instrumental in dark web related information and investigations.

We are not currently using SOCRadar's AI-driven solution with the 44 orchestrated tools. However, we are using AI to automate report scheduling.

I have utilized the managed takedown services provided by SOCRadar, and it is absolutely amazing. Ultimately, we do not have to deal with the takedown and manage all the associated hassle; SOCRadar handles everything, allowing us to remain stress-free, which is what matters.

SOCRadar validating its IOC data with input from 35,000 or more global users is very significant for my organization. There are many IOCs from over 35,000 global users providing their input with context. It is essential to have high fidelity IOCs, avoiding falsely flagged IOCs that could put our customers in danger. For my organization and customers, SOCRadar has done a fantastic job in providing high fidelity IOCs because all IOCs I have encountered from SOCRadar are highly suspicious and malicious.

I have utilized the Attack Surface Threat Assessment (ASTA) feature, and I have used it more times than I can count. I discovered more than 1,000 publicly exposed and vulnerable assets that our IT team did not maintain, which were shadow IT devices. Thanks to SOCRadar, we were able to integrate it with our internal security tools and conduct vulnerability assessments, safeguarding those publicly exposed assets.

My advice to organizations looking into using SOCRadar Extended Threat Intelligence is that if you are starting your search for a threat intelligence platform, you can confidently trust and choose SOCRadar. It is an emerging leader in the field of cyber threat intelligence with massive capabilities for growth in the future, providing high fidelity IOCs that you always seek to block on your perimeter devices. It is very cost-effective compared to other threat intelligence platforms, which is a significant advantage since not every organization has a budget for a dedicated threat intelligence platform. Furthermore, its ever-growing capabilities that include threat intelligence, geopolitical events, vulnerability intelligence, identity intelligence, brand risk protection, Digital Risk Protection, malware intelligence, and proactive threat hunting are fantastic. Overall, it is a great product. I give SOCRadar Extended Threat Intelligence an overall review rating of ten.

Regarding the use cases for SOCRadar Extended Threat Intelligence, we made several implementations in dark web monitoring.

Whenever our organization is mentioned in Telegram, dark web monitoring, or social media phishing campaigns, we need a detection alert with some kind of analyst recommendation.

Our analyst will then go through the analysis to check for legitimacy and decide whether to approach for a takedown or handle it as a false positive.

In threat intelligence, we extracted some commercial feeds from SOCRadar Extended Threat Intelligence and made use cases by integrating them with our SIEM, receiving detection alerts when the IP, URL, or domain matched highly reputed domains.

We have used Cyber Threat Intelligence and Dark Web Monitoring modules specifically.

For dark web intelligence, the back-end research being conducted is valuable, but it requires some tuning.

Recently, I explored FortiBlade exposure, and upon release, SOCRadar Extended Threat Intelligence teams gathered information before some market leaders, such as Cybel or Recorded Future threat intelligence.

This is valuable because they captured important details and deployed them on the website.

Dark web sources sometimes generate false positive detection alerts, such as alerts related to BIN cards being data breached, as well as noisy alerts from Telegram about job portals.

However, we haven't experienced any breaches; instead, we received notifications about targeting from dark web mentions in private chat rooms, allowing us to take mitigation steps along with that.

SOCRadar Extended Threat Intelligence validating its IOC data with input from over 35,000 global users is very significant for our finance and NBFC industry, as we receive actionable IOCs related to campaigns and geopolitical events that we mitigate effectively.

For dark web intelligence, the back-end research being conducted is valuable, but it requires some tuning.

Regarding the noise minimization capabilities within the Agentic Phishing workflow, I understand that it lacks an organization-level baseline, and I need the analysis provided from Agentic responses to include a severity level.

The alerts generated for low-severity IOCs present high criticality, leading to unnecessary bombardments of alerts regarding reconnaissance and bot IP addresses.

As for the Attack Surface Threat Assessment feature, we haven't subscribed to it, but I accessed limited information through an open-source version.

It covers threat intelligence and subdomain enumeration, although it prompts for a license after a few alerts.

The actionable insights on breaches are limited, as some alerts are outdated.

I have used SOCRadar Extended Threat Intelligence about seven months ago, up to six months ago.

SOCRadar Extended Threat Intelligence scalability is good for MSSPs and a dedicated enterprise environment, providing features ideal for threat intelligence-based analysis.

When needing to expand, I would rate how well SOCRadar Extended Threat Intelligence adapts to new circumstances as ten.

I haven't utilized much customer support, but whenever I had doubts about the UI—such as needing to mention my organization with typosquatting or requesting more analysis based on triggered rules—I made a ticket, and I received analysis within a day.

The pre-sales team and my manager coordinated directly with customer support, with a designated SPOC for us.

I rate the technical support from SOCRadar Extended Threat Intelligence as nine.

Customer support is crucial. SOCRadar provides IOC-related insights that correlate with recent campaigns and geopolitical tensions, enabling us to understand whether the information suits the financial services or retail sectors.

Before SOCRadar Extended Threat Intelligence, I used CrowdStrike's inbuilt intelligence tool, Recorded Future, and Unit 42 specifically for various threat intelligence needs.

We have used a service provider, NFP.

We proactively blocked the IOCs provided by SOCRadar Extended Threat Intelligence before breaches occurred in other banks and financial industries.

For instance, we were alerted to certain finance-related assets being breached by malware, and we mitigated these IOCs effectively, seeing a very good return on investment.

I am a customer of SOCRadar Extended Threat Intelligence, and we are one of the customers.

What we have used SOCRadar Extended Threat Intelligence for are the intelligence modules.

We haven't used SOCRadar Extended Threat Intelligence takedown service; we rely on another takedown service developed by some IIT team as our internal tool.

These factors are crucial for my choice of SOCRadar Extended Threat Intelligence; we need reliable information to determine whether it is properly enriched, allowing us to analyze the data effectively.

As for the stability and reliability of SOCRadar Extended Threat Intelligence, the IOCs, commercial feeds, APT-based attack patterns, and vulnerability intelligence are all features that we find most reliable, especially when we receive alerts regarding tools related to vulnerability.

I appreciate the R&D team's efforts; regardless of how noisy the data is, we require information for our analysts. I rate this product a ten overall.

My main use case for SOCRadar Extended Threat Intelligence is to obtain the external attack surface report. When I pull the external threat intelligence report, I can see leaked credentials from the dark web and determine whether it is from a recent data breach or how long ago it occurred. If it is recent, I take action regarding those breached credentials, any leaked credentials, and any vulnerabilities identified in my environment based on the threat intelligence report.

It is valuable to understand where I need to focus my organization's efforts from an external point of view, particularly which users are most susceptible to credential breaches.

SOCRadar Extended Threat Intelligence offers the best features, including the latest vulnerabilities available on the platform that help me identify if there are similar products utilized in my environment so I can remediate those vulnerabilities. The intelligence services such as dark web monitoring from SOCRadar have been particularly valuable.

The dark web monitoring feature has helped my team by identifying if any data relating to my organization is being sold on the dark web. Based on that data, I can identify what data was exposed, how it impacts my organization, and what kind of data was breached in that particular dark web marketplace. Based on that information, I can take precautions to protect my organization, employees, and any customer-related data that was compromised, and I will implement remediations according to the data found on the dark web.

SOCRadar Extended Threat Intelligence has positively impacted my organization by reducing the risk score. By monitoring leaked credentials and recently identified vulnerabilities, I am mitigating those vulnerabilities and credential breaches, thereby reducing my organization's risk score.

I have utilized SOCRadar's unique dark web sources, and by monitoring SOCRadar's threat intelligence platform, I can pull reports as soon as possible to address those gaps, which enhances my organization's risk score to a low level.

SOCRadar Extended Threat Intelligence could be improved by providing access through personal emails as well, instead of only offering access through company organization accounts. If I change organizations, I lose that access and must register again with a new company email address.

I have been using SOCRadar Extended Threat Intelligence for around two years.

SOCRadar Extended Threat Intelligence is stable.

SOCRadar Extended Threat Intelligence is scalable, and I can add my threat intelligence from my organization to SOCRadar to match and obtain a single pane of view.

The customer support for SOCRadar Extended Threat Intelligence is great. I would rate the customer support on a scale of one to ten as eight out of ten.

I previously utilized MISP, where I could track my organization's intelligence itself, and I chose it because it is open-source.

I evaluated Recorded Future and CrowdStrike threat intelligence before choosing SOCRadar Extended Threat Intelligence. It depends on different organizations as different threat intelligence platforms focus on their intelligence. For instance, Recorded Future monitors infrastructure-level intelligence more, while CrowdStrike focuses on different kinds of data such as incident response and threats they observe in their solutions. The prices also vary from solution to solution.

SOCRadar threat intelligence provides a rate of return on investment, but I do not have metrics. Currently, I am not taking new SOCRadar services at that level, so I could not provide those metrics.

I think the pricing, setup cost, and licensing for SOCRadar Extended Threat Intelligence are a good deal compared to other threat intelligence platforms such as Recorded Future, which costs too much. I hope SOCRadar premiums are lower than those platforms.

I rate SOCRadar Extended Threat Intelligence as a nine on a scale of one to ten, and this is reflected in my overall review rating of nine.

I chose nine because the platform provides intelligence that is tracked by SOCRadar team from all sources such as the dark web, Telegram, and any other platforms.

Regarding SOCRadar Extended Threat Intelligence's AI capabilities, I hope the SOCRadar team is following the guardrails they consider appropriate for organizations, and I hope it is not visible to outside people what kind of large language models and AI technology SOCRadar utilizes.

I find the accuracy and reliability of SOCRadar Extended Threat Intelligence's output to be better than competing solutions.

I am not utilizing SOCRadar Extended Threat Intelligence due to having separate threat intelligence platforms, as my organization tracks different kinds of threat intelligence and I already have a threat intelligence platform, so I am not purchasing the extra intelligence.

SOCRadar Extended Threat Intelligence is scalable, and I can add my threat intelligence from my organization to SOCRadar to match and obtain a single pane of view.

I would suggest others looking into using SOCRadar Extended Threat Intelligence to utilize the platform and their trainings so that they can use the SOCRadar platform in a much better way.

I am not currently utilizing SOCRadar's AI-driven solution with the forty-four orchestrated tools.

I have not currently utilized the managed takedown services provided by SOCRadar.

I am not certain about the significance of SOCRadar validating its IOC data with input from thirty-five thousand plus global users.

I am not certain about budget planning because I am not part of the IT budget planning team, which relates to my impression of the freemium tiers and flexible pricing offered by SOCRadar.

I primarily use SOCRadar Extended Threat Intelligence for incident response and threat detection.

Apart from threat monitoring and incident response support, SOCRadar Extended Threat Intelligence also helps track threat actor activity, leak credentials, and brand impersonation risk, which are some key features that definitely help the organization to secure everything. Among the features of advanced dark web monitoring, external attack surface management, and brand protection, I rely the most on advanced dark web monitoring, as it helps to identify leaked credentials, sensitive data exposure, and discussions by threat actors related to our organization. This is very useful because it provides early warning about potential security incidents and allows us to take proactive actions such as resetting compromised accounts and strengthening security controls before any attack happens.

SOCRadar Extended Threat Intelligence is a very proactive security providing product in the market, and it helps identify potential threats related to our organization that we currently found. It is a very important product for any organization that works on incident response and IOC correlation.

SOCRadar Extended Threat Intelligence has a positive impact on our organization by improving proactive threat visibility and early risk detection. With features such as dark web monitoring and external attack surface visibility, we can identify potential threats such as leaked credentials, which improves our overall response to threats and strengthens our security posture.

There are many things that could be improved in SOCRadar Extended Threat Intelligence. Firstly, it could benefit from improvements in SIEM SOAR integration, alert customization, and deeper threat context, which are areas for more effective enhancement for SOC teams.

Overall, SOCRadar Extended Threat Intelligence does great things, but one additional area that could be improved is advanced reporting and analysis. This improvement could focus on customizable reporting and dashboards, along with expanded automation and API integration.

SOCRadar Extended Threat Intelligence is definitely stable and provides much better security compared to any other solution.

SOCRadar Extended Threat Intelligence performs well in terms of scalability, offering a cloud-based solution along with on-premises options, allowing organizations to scale up their monitoring capabilities without requiring additional infrastructure.

The customer support for SOCRadar Extended Threat Intelligence is average, as the support team is responsive and knowledgeable, although it takes some time to get responses. It is better compared to other solutions.

Before choosing SOCRadar Extended Threat Intelligence, I evaluated other options, including Recorded Future, CrowdStrike Falcon Intelligence, and Digital Shadow.

Since implementing SOCRadar Extended Threat Intelligence, one of the key outcomes we have noticed is faster threat identification and improved response time, as the platform provides early visibility into potential risks such as credential risks and exposed assets. We have seen an improvement in threat detection speed and investigation efficiency, which helps us identify potential risks much faster compared to when we were not using this tool.

We have seen a positive return on investment from using SOCRadar Extended Threat Intelligence, particularly in time savings in threat investigation and monitoring. The platform aggregates intelligence from multiple sources and provides contextual insights, reducing the manual research required for tasks that previously involved manual dark web searches or correlation across different threat intelligence sources.

My experience with SOCRadar Extended Threat Intelligence concerning pricing, setup cost, and licensing has been generally positive, as the platform offers a flexible pricing model and modular licensing that makes it easier for organizations to scale as their threat intelligence needs grow. The implementation was straightforward because the platform is SaaS-based, requiring minimal infrastructure and allowing quick onboarding.

We have explored the AI-driven solution offered by SOCRadar Extended Threat Intelligence, which includes automated tools designed to assist with threat analysis and intelligence correlation. These features help streamline threat investigations by aggregating intelligence from multiple sources and providing contextual insights, reducing manual effort and improving our threat response speed.

We have utilized the managed takedown services from SOCRadar Extended Threat Intelligence, and they helped us quickly remove phishing sites and brand impersonation domains, improving our ability to mitigate external threats faster and reducing actionable time.

We have utilized the dark web intelligence sources from SOCRadar Extended Threat Intelligence, and they have been quite valuable for early threat detection, as the platform helps monitor dark web forums, marketplaces, and breached data sources where we can find leaked credentials and sensitive information. SOCRadar Extended Threat Intelligence allows us to take proactive remediation actions before they escalate into any incidents.

I would rate this product an eight out of ten.

My main use case for SOCRadar Extended Threat Intelligence is to monitor the attack surface and then to monitor credential leakage and Digital Risk Protection like impersonation domain and impersonation web, and data breach. I also use SOCRadar Extended Threat Intelligence to integrate IOCs to SIEM, to firewall, and to EDR.

One specific example of how I use SOCRadar Extended Threat Intelligence for credential leakage or digital protection is when I receive an alert about password leakage, and from there I can see whose password is leaked and sold on the dark web, and then I can tell the user and ask them to change the password.

I can add that another example is about SOCRadar Extended Threat Intelligence having Attack Surface Management where I can monitor vulnerabilities on our public-facing assets, and SOCRadar Extended Threat Intelligence will scan our assets regularly and report to us if there are vulnerabilities. I can check the vulnerabilities and then fix and patch them as recommended by SOCRadar Extended Threat Intelligence.

Regarding SOCRadar Extended Threat Intelligence's AI capabilities, I believe it has good governance and security since SOCRadar Extended Threat Intelligence has an NDA in place, meaning I trust them to handle our sensitive data.

I have utilized SOCRadar Extended Threat Intelligence's unique dark web sources, which include IOCs such as malicious IPs and domains, and I can integrate these sources into our security tools like SIEM and firewall to identify potential threats early and block them.

I have utilized the managed takedown services provided by SOCRadar Extended Threat Intelligence when there are impersonation cases involving domains, websites, or social media accounts, allowing us to take down malicious accounts or sites.

SOCRadar Extended Threat Intelligence has positively impacted my organization because it provides tools that alert us if there is credential leakage or vulnerabilities on our public-facing assets, and I can also read news about the dark web. SOCRadar Extended Threat Intelligence provides dark web news that helps me learn about industry trends and data breaches other companies face, allowing us to protect our assets.

The best features SOCRadar Extended Threat Intelligence offers are its Threat Intelligence capabilities, which I believe are great, along with many integration supports for third-party tools like EDR, SIEM, and firewall, making it useful to enrich our security tools. SOCRadar Extended Threat Intelligence also has sandboxing tools that are useful for checking if a file attachment is clean or malicious, and if it is malicious, I can see the behavior of the file to take appropriate action, such as blocking the sender. Additionally, the attack surface feature is very good because SOCRadar Extended Threat Intelligence provides risk ratings for our company, allowing us to fix vulnerabilities and address open ports.

The sandboxing tool has helped my team when we have suspicious files, such as email attachments or files downloaded from the internet that we do not know if the source is trusted. We use the sandboxing tools to test the files to check if they are malicious.

Regarding improvements for SOCRadar Extended Threat Intelligence, I believe the integration can be improved, and there should be more regular updates for new IOCs and observable data that exist on the dark web.

About reporting, I need SOCRadar Extended Threat Intelligence to add customizable reporting so I can adjust the content of the reports instead of just using templates.

The reason I give it an 8.5 is that the standout feature is the fast notification regarding data leakage, but the negative aspect is the lack of customizable reporting. Another concern is about credit usage; I need credits to add assets, and there is a limitation, so perhaps SOCRadar Extended Threat Intelligence can remove that limitation.

I started using SOCRadar Extended Threat Intelligence in 2023, approximately three years ago.

SOCRadar Extended Threat Intelligence is stable.

For scalability, I can simply purchase additional credits to increase my asset limits, making it easy to scale my licenses.

The customer support is good, as SOCRadar Extended Threat Intelligence provides 24/7 global support that responds quickly and effectively when I encounter problems.

I would rate the customer support a 9 due to its quality.

Previously, I used Anomali ThreatStream and CTM360. All of them are good, but I switched primarily due to pricing, as Anomali is more expensive. Each tool has its pros and cons; Anomali excels as a Threat Intelligence Platform for correlating multiple threat feeds, while SOCRadar Extended Threat Intelligence is better at Attack Surface management and Digital Risk Protection.

The setup is straightforward, and the licensing is flexible as it uses credits.

I have seen a return on investment because I can prevent data breaches, which would be more costly than the price of SOCRadar Extended Threat Intelligence. It also enhances my security tools when using the IOCs from SOCRadar Extended Threat Intelligence, saving both time and money.

Regarding my experience with pricing, I notice that SOCRadar Extended Threat Intelligence increases the price every year, which I believe is not ideal as it continues to rise. The setup is straightforward, and the licensing is flexible as it uses credits.

Before choosing SOCRadar Extended Threat Intelligence, I evaluated other options, including CTM360 and Anomali.

My advice for others considering SOCRadar Extended Threat Intelligence is to buy the correct amount of licenses since SOCRadar Extended Threat Intelligence is strict regarding licensing. If you purchase credits that cover fewer assets than you have, you will not cover all your assets, which could jeopardize your company's security.

The freemium tier offered by SOCRadar Extended Threat Intelligence is beneficial for exploring its features as you can try it for free before considering purchasing credits for your company.

I believe SOCRadar Extended Threat Intelligence is already good and does not require additional improvements that we have not mentioned. My overall review rating for SOCRadar Extended Threat Intelligence is 8.5 out of 10.

In my current role, I am using SOCRadar Extended Threat Intelligence as a threat intelligence platform to monitor emerging cyber threats and assess their impact on our clients. Every day, I review newly disclosed CVEs, ransomware campaigns, threat actor activities, phishing campaigns, exploited vulnerabilities, and malware trends. I identify whether any of these threats are relevant to our clients by checking the affected technologies, software versions, or exposed assets. If a critical vulnerability or active exploitation is observed, I prepare an advisory containing the CVSS score, affected products, exploitation status, business impact, and recommended mitigation steps. I also enrich indicators such as malicious IPs, domain URLs, and file hashes before sharing them with the SOC team for detection and monitoring. SOCRadar Extended Threat Intelligence is also useful for tracking ransomware groups, threat actor profiles, attack trends, and industry-specific threats, allowing us to proactively inform clients before they become victims.

My primary usage of SOCRadar Extended Threat Intelligence includes threat intelligence to monitor the latest cyber threats, malware campaigns, ransomware attacks, and threat actors, then tracking attacker TTPs using the MITRE ATT&CK framework, then identifying IOCs such as malicious IPs, domain URLs, and file hashes. For example, SOCRadar Extended Threat Intelligence really helps us when a new ransomware group starts targeting the financial sector. Through SOCRadar Extended Threat Intelligence, we can provide intelligence about the group's behavior, IOCs, and then mitigate the issue effectively. The other use case is related to vulnerabilities. We are using SOCRadar Extended Threat Intelligence to track newly disclosed CVEs, then check whether these vulnerabilities are being actively exploited or not in the environment and whether they are affecting the sector of our clients or not. This is very helpful in that case. The third case associated with SOCRadar Extended Threat Intelligence is attack surface management. It helps us to discover internet-facing assets such as websites, servers, IP addresses, and subdomains, then to identify exposed services, misconfigurations, or forgotten assets that attackers could exploit. For example, we have worked on multiple such cases where SOCRadar Extended Threat Intelligence helped us to identify an exposed RDP service on a public IP that should not be accessible from the internet. This helped us to provide effective security posture and improve the security posture of the client successfully. The last use case is Digital Risk Protection. We are using SOCRadar Extended Threat Intelligence to monitor for brand protection or brand impersonation, then detecting phishing websites using the company name or logo, identifying fake mobile applications or fraudulent domains that are targeting our clients or organization.

One example where SOCRadar Extended Threat Intelligence was really very helpful was during the Fortinet SSL VPN vulnerability, which is also known as FortiBleed or FortiOS critical vulnerability. When the advisory was published, SOCRadar Extended Threat Intelligence generated intelligence about the vulnerability, including the affected FortiOS versions, the CVSS score, exploitation status, technical details, and mitigation recommendations. My first step was to review the advisory and understand the impact. I then identified which of our clients were using Fortinet firewalls and checked whether their FortiOS versions were vulnerable or not. Since the vulnerability was being actively exploited, we classified it as high priority. Then I prepared a client advisory that included a summary of the vulnerability, affected FortiOS versions, whether public exploits were available or not, the business impact, and the vendor mitigation and patching recommendations. Along with that, we informed the SOC team to closely monitor FortiGate VPN logs for indicators of compromise, such as unusual SSL VPN logins, then unexpected administrator account creation. Through this, we helped the clients, and we also ensured the clients were advised to patch immediately and review the logs for any signs of compromise.

The features of SOCRadar Extended Threat Intelligence that stand out the most for me are Vulnerability Intelligence, Dark Web Monitoring, Threat Actor Intelligence, IOC Intelligence, and Attack Surface Management because they help us proactively identify and mitigate risk before they become security incidents. Vulnerability Intelligence helps us to track newly disclosed CVEs, understand their severity, determine whether they are being actively exploited or not, and prioritize the patching. Dark Web Monitoring allows us to detect leaked employee credentials, stolen data, ransomware leak posts, and company mentions on underground forums, enabling early response. Threat Actor Intelligence provides insights into attacker groups, their tactics, techniques, and procedures, and recent campaigns, which helps us to understand potential threats targeting our clients. IOC Intelligence enables us to enrich malicious IPs, then domains, URLs, and file hashes and correlate them with known campaigns during investigations. Finally, Attack Surface Management helps us to identify internet-facing assets, exposed services, and misconfigurations so organizations can reduce their attack surface before attackers exploit them. These features are valuable because they allow us to move from a reactive approach to a proactive security posture. Instead of waiting for an alert, we can identify emerging threats, assess them, and assess which clients are affected, issue security advisories, and implement mitigation measures before an incident occurs.

SOCRadar Extended Threat Intelligence has a significant impact on our organization because my organization is providing security as a service to a lot of financial clients, primarily the banking sector. It is really important to us to provide security in both proactive and reactive ways. While working in the SOC particularly, you are entirely based on the reactive approach, where something will trigger, an alert will be there in the SIEM, and then your team will respond. But proactively, the SOC is not that helpful. For the proactive approach, we implemented SOCRadar Extended Threat Intelligence in our organization and started giving dark web monitoring as a service to a lot of our clients. As I mentioned before, many of our clients are based in the banking sector. It is really important to us that we also provide a proactive approach to security and in that way, SOCRadar Extended Threat Intelligence helped us to provide them proactive security. Basically, we monitor if any employee credentials are leaked in the darknet or dark webs and if any confidential data is leaked over the dark web and also monitor if the company name is discussed in the dark web forums and if any confidential data is leaked. In all of that, SOCRadar Extended Threat Intelligence has played a vital role for us. Hence, we continue using SOCRadar Extended Threat Intelligence as our DWM tool.

SOCRadar Extended Threat Intelligence has been a stable platform. During my day-to-day work, it has been consistently available for monitoring vulnerabilities, threat actors, ransomware campaigns, and dark web intelligence. I have not experienced any major stability issues that significantly impacted our operations. The platform delivers timely threat intelligence updates and performs reliably for daily analyst activities. Like any cloud-based platform, there may occasionally be scheduled maintenance or brief service interruptions, but I have not seen these have a significant impact on our workflow.

Overall, SOCRadar Extended Threat Intelligence is a strong platform, but there are a few areas where it could be enhanced. For example, deeper SIEM and EDR integrations to automatically enrich alerts with threat intelligence and reduce manual investigation would be beneficial. The second area for improvement would be more customizable dashboards and reporting so analysts can create reports tailored to different clients and management teams. The third area I think SOCRadar Extended Threat Intelligence can improve is IOC confidence scoring to help analysts quickly prioritize the most credible indicators and reduce false positives.

It has been around 1.6 years that I have been working in cybersecurity and threat hunting and threat intelligence specifically. I started as a SOC analyst in my current organization and then got promoted to the intelligence and hunting side of the security team.

In my experience, SOCRadar Extended Threat Intelligence has been highly scalable. Since it is a cloud-based SaaS platform, it can support organizations of different sizes without requiring any infrastructure management. As our organization monitors multiple clients in an MSSP environment, the platform was able to handle intelligence for different industries and environments simultaneously. We could monitor multiple organizations, then track vulnerabilities, threat actors, ransomware campaigns, and internet-facing assets from a centralized dashboard. Another aspect of its scalability is that it continuously updates threat intelligence feeds and can easily accommodate new clients or assets without major changes to the platform. This makes it suitable for both growing enterprises and MSSPs that need to manage security for multiple customers.

Regarding customer support for SOCRadar Extended Threat Intelligence, it is really active. We have attended multiple meetings with the SOCRadar Extended Threat Intelligence original team, and they were really supportive when we were facing some issues with the integrations of SOCRadar Extended Threat Intelligence feeds in our SIEM tool. At that time, we had a meeting with the support staff. The technical team really helped us in that situation, and we were successfully able to integrate SOCRadar Extended Threat Intelligence with our SIEM tool. I think it is a very good aspect of SOCRadar Extended Threat Intelligence that their customer support is really active over time when we needed them. I rate them highly.

As I mentioned earlier, we were not providing dark web monitoring service. This is the first time we are providing the dark web monitoring service to our clients. SOCRadar Extended Threat Intelligence is our first solution for this service.

Regarding return on investment, SOCRadar Extended Threat Intelligence has really helped us in a positive way. Earlier, our whole team was doing reactive monitoring work, basically in the SOC. After setting up SOCRadar Extended Threat Intelligence as a dark web service, half of the team is working entirely into the dark web operations. This has improved the client's security posture a lot compared to when they were only taking the SOC service. Through SOCRadar Extended Threat Intelligence, we are enabled and we got a chance to provide proactive security to the clients. In that case, SOCRadar Extended Threat Intelligence has really helped us and really helped organizations to make planned decisions about their security posture.

I was not directly involved in the product selection process, so I did not personally evaluate or compare multiple threat platforms before SOCRadar Extended Threat Intelligence was adopted. However, as far as I know, per the information I received from the upper management, we did consider multiple platforms such as Recorded Future, CrowdStrike Falcon Intelligence, Microsoft Defender Threat Intelligence, and Mandiant Threat Intelligence. SOCRadar Extended Threat Intelligence stood out because it offered a combination of threat intelligence, Digital Risk Protection, ASM, and dark web monitoring in one platform, along with an intuitive interface and actionable intelligence that suited our operational requirements.

My advice for others would be positive about SOCRadar Extended Threat Intelligence because as a fresher, I used SOCRadar Extended Threat Intelligence as my first tool in the threat intelligence and dark web monitoring part. It is really easy to use and easy to understand. The features are very good for everyone to understand how dark web monitoring works, how analysts see, and what they are doing regarding the alerts that are generated by SOCRadar Extended Threat Intelligence. It is really easy to understand. The dashboard is very easy to navigate. The options are very familiar, and it really helps anyone to understand what is actually going on the platform. Compared to the other solutions, I would prefer SOCRadar Extended Threat Intelligence as a fresher.

Overall, my final thought about SOCRadar Extended Threat Intelligence is that I had a positive experience with it. It has helped us to move from a reactive to a more proactive security approach by providing timely intelligence of vulnerabilities, threat actors, and other activities of the attackers. I particularly value having threat intelligence and dark web monitoring integrated into a single platform, which streamlines investigations and improves analyst efficiency. While there is always room for improvement, particularly around deeper automation or SIEM or SOAR integrations, I believe SOCRadar Extended Threat Intelligence is a mature and reliable platform that delivers actionable intelligence and helps organizations strengthen their overall security posture. I would rate SOCRadar Extended Threat Intelligence a nine out of ten.

One specific example of how my colleagues used SOCRadar Extended Threat Intelligence involved deep diving into CVE 2021-44228, named the GMD exploit, which is commonly used for backdoor execution on web application Java vulnerabilities. Despite being an old vulnerability, it still runs on the system of a very important vendor in Italy, showcasing how threat actors continue using these methods to exploit systems.

The alert processing assists my team significantly, supported by the software as a service Jira with ticketing triggered by the system, providing a graphical aspect that allows filtering to funnel priorities and understand issues at their core, such as a potential malicious packet reading.

SOCRadar Extended Threat Intelligence has positively impacted my organization by enhancing user experience through right-click options for further analysis. Future improvements may concern simplifying the tool, which is currently already great.

I chose a rating of eight because I feel some adjustments might enhance the user experience. This rating is based on my opinion and my learning curve in understanding these tools, noting that the program's front-end and graphical appearance already meet my expectations.

Considering how supply chain attacks are solved and their devastating impact, I believe that cybersecurity in the coming years will focus on these critical vulnerabilities, highlighted by CVE 2024-3094, which features a backdoor in the XZ library. The SolarWinds attack provides a great example, as it exploited the Orion vulnerability, showing that supply chain security is crucial for a company to understand SLA and inquire about software and updating procedures, as it plays a role in the security of the entire infrastructure.

SOCRadar Extended Threat Intelligence's governance and security through its AI capabilities are impressive, as they aid greatly in CVE understanding and allow for network comprehension of threats, proving to be a formidable tool for open-source intelligence.

The outputs generated by SOCRadar Extended Threat Intelligence are great and intuitive in terms of AI capabilities.

It is significant for my organization that SOCRadar Extended Threat Intelligence validates its IOC data with input from over 35,000 global users, as this ensures a constantly evolving database that keeps pace with growing threats, contributing to SOCRadar Extended Threat Intelligence's excellent reputation.

The remediation process is carried out manually, where analysts thoroughly examine files that might potentially compromise the client's system, as it is primarily the analyst's responsibility to understand each issue better.

I advise others looking into SOCRadar Extended Threat Intelligence to consider it as a great SIEM tool for companies, as it is very effective.

I have no additional thoughts about SOCRadar Extended Threat Intelligence, except to suggest it as a great tool for any company looking to enhance their work. I assigned a rating of eight to this product based on my overall experience.

I prefer SOCRadar Extended Threat Intelligence for multiple use cases, starting from brand protection to assessing the external attack surface of the organizations I provide security solutions for, mainly the public open IP addresses, the ports, and the certificates that have been opened publicly.

When I try to do proof of concepts for my customers, I normally add the domain to SOCRadar Extended Threat Intelligence. Once I add the domain, it normally scans the domain and discovers all the external IP addresses and ports that have been opened. Then it scans from a brand protection perspective such as the bad names that circulate around that particular domain, or any threats targeted towards the open public IP address.

I have covered all the use cases that I get out of SOCRadar Extended Threat Intelligence.

Basically, the results that it gives me as an outcome after I integrate with my domain are impressive. Based on the results, I could also identify the threats that are targeted towards my domain and the bad reputations it has created based on the domain I have added. I also consider social media monitoring, which detects any fake news or bad reputations that have been created.

The main considerations that almost all the companies give are for brand protection because the brand is key for every business. If the brand looks damaged, there will be a business loss. Giving importance to brand protection is important for every organization so they can continue their business with a proper brand.

By integrating SOCRadar Extended Threat Intelligence, I have received many positive impacts. I was able to identify bad reputations that were created and also the publicly open malicious ports or any threats that are targeted towards the public open ports. I was able to stop all those external threats by using this platform.

I was able to eliminate the number of incidents that I received previously with the help of SOCRadar Extended Threat Intelligence. After implementing it, I was able to reduce the number of alerts or incidents I received. It also helped me save brand protection for my customers.

The accuracy and reliability of SOCRadar Extended Threat Intelligence is very high based on the artificial intelligence used. I couldn't find any rollbacks yet, and I am positively happy about the artificial intelligence offered by the platform.

SOCRadar has allowed me to do customization, so I don't think there are additional updates that need to be implemented inside the product. I am satisfied with the product for now.

The accuracy of SOCRadar Extended Threat Intelligence, validated with input from three to five thousand plus global users, is high compared to other threat intelligence. I have used open-source tools to check the results given by SOCRadar Extended Threat Intelligence, and it is mostly accurate. I don't think there is any need for improvement in the results provided by the software platform.

Compared to competitors such as Cyber and ThreatMon, the details provided by SOCRadar Extended Threat Intelligence are very accurate, and I get detailed reports. I don't think there are many improvements needed from SOCRadar's point of view.

Technologies always evolve. Continuous improvement helps all the customers around the world. Ten out of ten means your product is almost accurate, with no need for upgrades or updates in the future. That is why I marked it as eight.

I have used the managed takedown services from SOCRadar Extended Threat Intelligence. The takedown services are very helpful for any organization. Whenever there are specific domains misusing your brand, it is beneficial from the customer's perspective to accurately take down those domains. SOCRadar effectively helps to remove those domains.

I have been using SOCRadar Extended Threat Intelligence for the past six years.

SOCRadar Extended Threat Intelligence is very stable.

The scalability of SOCRadar Extended Threat Intelligence is very impressive. They help me scale the platform as needed, with nothing negative to comment about the scalability.

The customer support from SOCRadar Extended Threat Intelligence is very well articulated. I have access to the support portal, and whenever needed, I can log an incident and receive timely support from their support staff.

Governance and security is another important feature in cybersecurity. I have to ensure SOCRadar Extended Threat Intelligence is used correctly, and I think it should be implemented inside the security operations center and monitored twenty-four seven. By doing this, governance will facilitate a proper cybersecurity posture for all companies.

I would say to any companies that value their brands and want to protect their external attack surface, it is a must to adopt a solution such as SOCRadar Extended Threat Intelligence, which will be very useful for protecting your brand and identifying all malicious IP addresses and URLs targeted towards your domain. Monitoring this platform twenty-four seven will be very beneficial. Anyone using this platform should also consider SOC adoption. I provided a review rating of eight for this product.