AI Indexes
IT AI Index
Index › Security operations › DRP › ZeroFox vs Rapid7 Threat Command
Digital risk protection · October 2026 Edition

ZeroFox vs Rapid7 Threat Command

One of fourteen models named ZeroFox first on the direct prompt; one named Rapid7 Threat Command. ZeroFox was named by fourteen of the fourteen models and Rapid7 Threat Command by seven and ZeroFox carries 47 labels and Rapid7 Threat Command 12, so the shares are not directly comparable.

ZeroFox

accepted challenger

Named in two categories this edition.

Rapid7 Threat Command

accepted challenger

Named in two categories this edition.

First-choice share14%2%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.
Negative rate23%0%Negative labels as a share of the product's labels, 0 to 100.
Rank in category#2#7A position in a field of 11; printed, not drawn.
Labels4712A count; the two differ.
The two percentage rows are drawn on one 0 to 100 track, ZeroFox reading right to left. Rank and label count are printed, not drawn.UpGuard BreachSight was named alongside these two in twelve of the fourteen direct answers. UpGuard BreachSight vs ZeroFox · UpGuard BreachSight vs Rapid7 Threat Command · ZeroFox vs SOCRadar Extended Threat Intelligence

Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the digital risk protection page.

By framing

How many of the fourteen models made each the first choice, per way of asking, and how many argued against it.
ZeroFoxFirst choices, of fourteen modelsRapid7 Threat Command
Direct11
Paraphrase50
Comparative60
Budget-constrained004 against ZeroFox
Scale-constrained10
Negative007 against ZeroFox
Bars are first choices, 0 to 14 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to fourteen.

Every model, every framing

The eighty-four answers behind the chart above, one cell each: where ZeroFox and Rapid7 Threat Command stood in it.
ModelDirectParaphraseComparativeBudget-constrainedScale-constrainedNegative
Claude Haiku 4.5
GPT-5.4 mini
Gemini 3.5 Flash
Perplexity Sonar
Grok 4.1 Fast
Mistral Small
DeepSeek V4 Flash
Llama 4 Maverick
Qwen 3.7 Flash
Kimi K2
GLM 4.7 FlashX
MiniMax M2.5
GPT-6 Luna
Muse Glimmer 30B
ZeroFox Rapid7 Threat Command first choice named as an alternative argued againstblank: not namedEach cell is one answer, ZeroFox on the left and Rapid7 Threat Command on the right.

The direct prompt

The plain question, one answer per model, grouped by where ZeroFox and Rapid7 Threat Command stood in it.

ZeroFox first, Rapid7 Threat Command not the choice

1 of 14 modelsRapid7 Threat Command was named in the answer but not as the choice, or not at all.
GPT-5.4 miniZeroFox alternatives: Bitsight, Proofpoint Digital Risk Protection, SecurityScorecard, UpGuard BreachSight

Rapid7 Threat Command first, ZeroFox not the choice

1 of 14 modelsZeroFox was named in the answer but not as the choice, or not at all.
Perplexity SonarRapid7 Threat Command, UpGuard BreachSight alternatives: CybelAngel

Neither was the first choice, one was named

7 of 14 modelsThe answer put something else first and named one of the two as an alternative.
Claude Haiku 4.5Cyble Vision alternatives: BlueVoyant Sky, CrowdStrike Falcon, Rapid7 Threat Command, UpGuard BreachSight
Gemini 3.5 FlashSOCRadar Extended Threat Intelligence alternatives: Flare, UpGuard BreachSight, ZeroFox
Grok 4.1 FastUpGuard BreachSight alternatives: Rapid7 Threat Command, ZeroFox
DeepSeek V4 FlashUpGuard BreachSight alternatives: Netcraft, Rapid7, SOCRadar Extended Threat Intelligence, ZeroFox
Kimi K2UpGuard BreachSight alternatives: Fortra Brand Protection, ZeroFox
MiniMax M2.5UpGuard BreachSight alternatives: CrowdStrike Falcon, Group-IB Digital Risk Protection, Recorded Future, ZeroFox
GPT-6 LunaCybelAngel Core alternatives: Bolster, BrandShield, ZeroFox

Neither was named

5 of 14 modelsThe answer made no first choice from these two in this category.
Mistral SmallUpGuard BreachSight alternatives: Kaduu, Recorded Future
Llama 4 MaverickFortra Brand Protection alternatives: Kaduu, Recorded Future, UpGuard BreachSight
Qwen 3.7 FlashRapid7 alternatives: Corvus Logic, Cyberhaven, Recorded Future, ThreatConnect
GLM 4.7 FlashXUpGuard BreachSight alternatives: Bolster
Muse Glimmer 30BUpGuard BreachSight alternatives: CybelAngel

Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.
Small business
ZeroFox leads by four points.
ZeroFox4%#5 of 8
Rapid7 Threat Command0%#– of 8
The full small business standing →
Mid-marketThe figures above
ZeroFox leads by twelve points.
ZeroFox14%#2 of 11
Rapid7 Threat Command2%#7 of 11
The full mid-market standing →
Enterprise
ZeroFox leads by twenty-nine points.
ZeroFox29%#1 of 9
Rapid7 Threat Command0%#– of 9
The full enterprise standing →

What the models said about ZeroFox

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.

“Users frequently report problems with inefficient alerts, slow performance ... and a high volume of false positives.” Mistral Small · negative prompt · hard negative
“What to avoid (If budget is truly limited):- ZeroFox: Median contract value is ~$45,000/year.” DeepSeek V4 Flash · budget prompt · hard negative
“ZeroFox – Multiple User Complaints - False positive overload” Kimi K2 · negative prompt · hard negative
“Broad external-threat coverage spanning brand and domain abuse, social platforms, executive risks... Look closely at ZeroFox.” GPT-6 Luna · comparative prompt · first choice
“If brand, executive, and social media protection with rapid takedowns are your top priorities → ZeroFox” DeepSeek V4 Flash · comparative prompt · first choice
“ZeroFox is highly regarded for its automated threat intelligence, brand defense, and executive protection.” Gemini 3.5 Flash · comparative prompt · first choice

What the models said about Rapid7 Threat Command

Every negative label with a quote, up to three, then the highest-weighted positives, up to three. One of one in this category shown.

“the strongest default choice is Rapid7 Threat Command or UpGuard” Perplexity Sonar · direct prompt · first choice
Also compared

Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.