Digital risk protection · October 2026 Edition
ZeroFox vs Recorded Future
One of fourteen models named ZeroFox first on the direct prompt; zero named Recorded Future. ZeroFox was named by fourteen of the fourteen models and Recorded Future by thirteen and ZeroFox carries 47 labels and Recorded Future 35, so the shares are not directly comparable.
Named in two categories this edition.
Named in two categories this edition.
First-choice share14%4%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.
Negative rate23%34%Negative labels as a share of the product's labels, 0 to 100.
Rank in category#2#5A position in a field of 11; printed, not drawn.
Labels4735A count; the two differ.
The two percentage rows are drawn on one 0 to 100 track, ZeroFox reading right to left. Rank and label count are printed, not drawn.UpGuard BreachSight was named alongside these two in twelve of the fourteen direct answers. UpGuard BreachSight vs ZeroFox · UpGuard BreachSight vs Recorded Future · ZeroFox vs SOCRadar Extended Threat Intelligence
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the digital risk protection page.
By framing
How many of the fourteen models made each the first choice, per way of asking, and how many argued against it.
ZeroFoxFirst choices, of fourteen modelsRecorded Future
Direct103 against Recorded Future
Paraphrase511 against Recorded Future
Comparative62
Budget-constrained004 against ZeroFox · 4 against Recorded Future
Scale-constrained11
Negative007 against ZeroFox · 4 against Recorded Future
Bars are first choices, 0 to 14 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to fourteen.
Across every category in the October 2026 Edition, ZeroFox and Recorded Future were named in the same answer eighty-eight times, of the 136 answers naming ZeroFox and the 128 naming Recorded Future. In those answers Recorded Future took the first choice nine times and ZeroFox sixteen.
Every model, every framing
The eighty-four answers behind the chart above, one cell each: where ZeroFox and Recorded Future stood in it.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | | | ||||
| GPT-5.4 mini | | | | | ||
| Gemini 3.5 Flash | | | | | ||
| Perplexity Sonar | | |||||
| Grok 4.1 Fast | | | | | | |
| Mistral Small | | | | | ||
| DeepSeek V4 Flash | | | | | | |
| Llama 4 Maverick | | |||||
| Qwen 3.7 Flash | | | | | ||
| Kimi K2 | | | | | ||
| GLM 4.7 FlashX | | | | | ||
| MiniMax M2.5 | | | | |||
| GPT-6 Luna | | | ||||
| Muse Glimmer 30B | | | | |
ZeroFox Recorded Future first choice named as an alternative argued againstblank: not namedEach cell is one answer, ZeroFox on the left and Recorded Future on the right.The direct prompt
The plain question, one answer per model, grouped by where ZeroFox and Recorded Future stood in it.
ZeroFox first, Recorded Future not the choice
1 of 14 modelsRecorded Future was named in the answer but not as the choice, or not at all.GPT-5.4 miniZeroFox alternatives: Bitsight, Proofpoint Digital Risk Protection, SecurityScorecard, UpGuard BreachSight
Neither was the first choice, one was named
9 of 14 modelsThe answer put something else first and named one of the two as an alternative.Gemini 3.5 FlashSOCRadar Extended Threat Intelligence alternatives: Flare, UpGuard BreachSight, ZeroFox
Grok 4.1 FastUpGuard BreachSight alternatives: Rapid7 Threat Command, ZeroFox
Mistral SmallUpGuard BreachSight alternatives: Kaduu, Recorded Future
DeepSeek V4 FlashUpGuard BreachSight alternatives: Netcraft, Rapid7, SOCRadar Extended Threat Intelligence, ZeroFox
Llama 4 MaverickFortra Brand Protection alternatives: Kaduu, Recorded Future, UpGuard BreachSight
Qwen 3.7 FlashRapid7 alternatives: Corvus Logic, Cyberhaven, Recorded Future, ThreatConnect
Kimi K2UpGuard BreachSight alternatives: Fortra Brand Protection, ZeroFox
MiniMax M2.5UpGuard BreachSight alternatives: CrowdStrike Falcon, Group-IB Digital Risk Protection, Recorded Future, ZeroFox
GPT-6 LunaCybelAngel Core alternatives: Bolster, BrandShield, ZeroFox
Neither was named
4 of 14 modelsThe answer made no first choice from these two in this category.Claude Haiku 4.5Cyble Vision alternatives: BlueVoyant Sky, CrowdStrike Falcon, Rapid7 Threat Command, UpGuard BreachSight
Perplexity SonarRapid7 Threat Command, UpGuard BreachSight alternatives: CybelAngel
GLM 4.7 FlashXUpGuard BreachSight alternatives: Bolster
Muse Glimmer 30BUpGuard BreachSight alternatives: CybelAngel
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.
Small business
ZeroFox leads by four points.
ZeroFox4%#5 of 8Recorded Future0%#8 of 8Mid-marketThe figures above
ZeroFox leads by ten points.
ZeroFox14%#2 of 11Recorded Future4%#5 of 11Enterprise
ZeroFox leads by thirteen points.
ZeroFox29%#1 of 9Recorded Future17%#2 of 9What the models said about ZeroFox
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Users frequently report problems with inefficient alerts, slow performance ... and a high volume of false positives.” Mistral Small · negative prompt · hard negative
“What to avoid (If budget is truly limited):- ZeroFox: Median contract value is ~$45,000/year.” DeepSeek V4 Flash · budget prompt · hard negative
“ZeroFox – Multiple User Complaints - False positive overload” Kimi K2 · negative prompt · hard negative
“Broad external-threat coverage spanning brand and domain abuse, social platforms, executive risks... Look closely at ZeroFox.” GPT-6 Luna · comparative prompt · first choice
“If brand, executive, and social media protection with rapid takedowns are your top priorities → ZeroFox” DeepSeek V4 Flash · comparative prompt · first choice
“ZeroFox is highly regarded for its automated threat intelligence, brand defense, and executive protection.” Gemini 3.5 Flash · comparative prompt · first choice
What the models said about Recorded Future
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“What to avoid ... Recorded Future: Quote-based, but generally above $10,000/year.” DeepSeek V4 Flash · budget prompt · hard negative
“Recorded Future is cited as an example of this trade-off: * Weaknesses: * Limited social media monitoring compared to platforms specializing in brand protection” Muse Glimmer 30B · negative prompt · soft negative
“Top-ranked for threat intel and DRP, but complaints include high costs, setup complexity, alert fatigue (less relevant noise), and limited automation” Grok 4.1 Fast · negative prompt · soft negative
“Strong threat intelligence integration, excels at contextualizing exposed data, dark web chatter, and threat actor signals.” Mistral Small · comparative prompt · first choice
“If you want deep threat intelligence context (understanding who is attacking and why) → Recorded Future” DeepSeek V4 Flash · comparative prompt · first choice
“From leaders like Recorded Future (strong intel), ZeroFox (takedowns), Rapid7 (SOC integration).” Grok 4.1 Fast · scale prompt · first choice
Also compared
UpGuard BreachSight vs ZeroFoxUpGuard BreachSight vs Recorded FutureZeroFox vs SOCRadar Extended Threat IntelligenceZeroFox vs BrandShieldZeroFox vs FlareZeroFox vs Rapid7 Threat CommandZeroFox vs Proofpoint Digital Risk ProtectionSOCRadar Extended Threat Intelligence vs Recorded FutureBrandShield vs Recorded FutureRecorded Future vs FlareRecorded Future vs Rapid7 Threat CommandRecorded Future vs Proofpoint Digital Risk ProtectionAll twenty-eight head-to-head pages and the full DRP standing
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.