ZeroFox

What the company sells

ZeroFox sells a fused cybersecurity platform that brings intelligence, AI, and cybersecurity experts together in one continuous loop of discovery, validation, and disruption. ZeroFox describes its platform as used for discovering, validating, and disrupting threats across the surface and dark web to social media and marketplaces. ZeroFox fuses cyber threat intelligence, attack surface intelligence, and digital risk protection with AI-driven correlation, expert validation, and takedowns. ZeroFox states that the modern attack surface spans platforms, people, and places that organizations do not control.

ZeroFox pairs AI-powered discovery with 24/7 analyst validation and automated takedowns. In the discovery step, ZeroFox finds, maps, and monitors a digital presence that includes domains, subdomains, IPs, social accounts, exposed credentials, executive profiles, misconfigs, and the real-world locations and events where risk concentrates. In the validation step, ZeroFox combines large-scale automation with human expertise to determine what is real, relevant, and urgent. ZeroFox connects a data graph of 12B+ signals to vet threats in context.

In the disruption step, ZeroFox executes automated, analyst-guided response workflows that change attacker outcomes in the real world. ZeroFox uses its Global Disruption Network and its relationships with platforms, providers, and infrastructure partners to shut down abuse, interrupt campaigns, and suppress repeat activity. ZeroFox says the Global Disruption Network works with ISPs, registrars, hosts, and digital platforms. ZeroFox runs takedown automation through 80+ partnerships and automated takedown channels.

On the intelligence side, ZeroFox fuses Dark Ops, threat channel infiltration, asset fingerprinting, and analyst expertise to deliver finished intelligence. ZeroFox tracks forums, markets, and chats for chatter, access sales, and stolen data. ZeroFox connects 12B signals into insights and forensics to support investigations and threat-informed defense. ZeroFox detects exposed accounts and triggers resets and controls. ZeroFox delivers indicators and finished intel ready for a customer's stack, and its cyber threat intelligence connects to TIP, SIEM, SOAR, and EDR for automated action.

ZeroFox describes Digital Risk Protection as using advanced threat intelligence to safeguard external assets such as brands, domains, and executives from threats originating outside the firewall, across social media, marketplaces, and the surface, deep, and dark web. ZeroFox offers Brand, Domain, Executive, and Social Media Protection. ZeroFox brand protection addresses scams, counterfeit listings, copyright infringement, and brand abuse across digital channels. ZeroFox monitors 180+ digital platforms across social apps, forums, marketplaces, and the deep and dark web. Analysts at ZeroFox verify detections to reduce false positives.

ZeroFox offers an executive protection solution aimed at impersonation, doxxing, and escalating physical threats. ZeroFox detects and removes fake profiles, hijacked accounts, and AI-generated video or audio built to impersonate or discredit executives. ZeroFox uses dual LLM sentiment analysis to track tone and emotion around an executive in real time and flag aggressive or obsessive actors trending toward physical risk. With ZeroFox, a customer uploads an itinerary and ZeroFox maps the route and surfaces threats at every stop.

ZeroFox External Attack Surface Management defines and maps an organization's internet-exposed attack surface, identifying known and unknown assets.

ZeroFox provides its platform as a cloud-based software-as-a service security solution on a subscription basis. ZeroFox provides OnWatch technical support for the platform at the plan level a customer purchases. ZeroFox, Inc. is a Delaware corporation located at 1500 Whetstone Way, Suite 500, Baltimore, MD 21230.^{[1][3][4][5][6][7][8][9][10][11][13][14][15]}

Categories

• Digital risk protection (primary category)
• Threat intelligence
• External attack surface management
• Compare ZeroFox with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Owned by Haveli Investments since 2024^[2][12]

CISO on record

Not yet on our record. Send a verified source

Website

zerofox.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Cyber Threat Intelligence^[1][3][4]

  Finished intelligence built from Dark Ops, threat channel infiltration, asset fingerprinting, and analyst expertise.

  ZeroFox fuses Dark Ops, threat channel infiltration, asset fingerprinting, and analyst expertise to deliver finished intelligence. ZeroFox tracks forums, markets, and chats for chatter, access sales, and stolen data. ZeroFox connects to TIP, SIEM, SOAR, and EDR for automated action.

• Digital Risk Protection^[1][2][4][5]

  Uses threat intelligence to safeguard brands, domains, and executives from threats outside the firewall.

  ZeroFox describes Digital Risk Protection as safeguarding external assets such as brands, domains, and executives across social media, marketplaces, and the surface, deep, and dark web. ZeroFox offers Brand, Domain, Executive, and Social Media Protection.

• HNTR Executive Protection^[10]

  An executive protection solution aimed at impersonation, doxxing, and escalating physical threats.

  ZeroFox detects and removes fake profiles, hijacked accounts, and AI-generated video or audio built to impersonate or discredit executives. ZeroFox tracks dark web forums and marketplaces for exposed home addresses, family details, and leaked executive credentials.

• External Attack Surface Management^[2][14]

  Defines and maps an organization's internet-exposed attack surface, identifying known and unknown assets.

• Mobile App Protection^[14]

  Discovers fraudulent, rogue, or malicious mobile applications impersonating a brand or organization.

• Credit Card Protection^[14]

  Discovers leaked or stolen credit card numbers and PINs for a single Bank Identification Number.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of ZeroFox's categories, then alphabetical. A list from the record, never a ranking.

• On digital risk protection, ZeroFox competes with Flare, BlackCloak, Doppel, Cyble, Flashpoint, Group-IB, Recorded Future, SOCRadar, Charm Security, CYPFER and 13 more.

• On threat intelligence, ZeroFox competes with Cyble, Flashpoint, Group-IB, Recorded Future, SOCRadar, Dataminr, Hold Security, LLC, Overwatch, QuoIntelligence, Cyware and 37 more.

• On external attack surface management, ZeroFox competes with Censys, Attaxion, CyCognito, Hadrian, IONIX, Cyble, Flashpoint, Group-IB, Recorded Future, SOCRadar and 25 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.4 out of 5^[12]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]PlatformZeroFox · zerofox.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Haveli completes acquisition of zerofoxZeroFox · zerofox.com · published May 13, 2024 · Tier A: the company, a regulator or a filing
3. [3]ZeroFox | External Cybersecurity.ZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
4. [4]External Cybersecurity Platform | ZeroFoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
5. [5]ZeroFox Digital Risk ProtectionZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
6. [6]Takedowns | ZeroFoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
7. [7]ZeroFox Intelligence Search | ZeroFoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
8. [8]Compromised Credential Monitoring: Identify credentials leaked onlineZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
9. [9]Physical Security Intelligence (PSI) Software | ZeroFoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
10. [10]Cybersecurity Solutions for Executive Protection | ZerofoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
11. [11]Social Media Security Protection Software | ZeroFoxZeroFox · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
12. [12]ZeroFox Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 30, 2026 · Tier C
13. [13]PII Protect & Removal | ZeroFoxZeroFox · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Pricing | ZeroFoxZeroFox · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]ZeroFox Master Customer Agreement | ZeroFoxZeroFox · published December 16, 2025 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for ZeroFox? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.