ZeroFox Dark Web Intelligence
Continuous monitoring of criminal forums, marketplaces, and encrypted channels.
At a glance
- Editor score6.0 / 10
- PricingPricing on request
- Best forEnterprise security teams needing managed intelligence
- Founded2013 · Baltimore, Maryland, United States
- Facts checked22 Sep 2026
Where it wins
- Monitors credentials, ransomware activity, access brokers, and pre-attack chatter
- Analyst-validated alerts with profiling, curated intelligence, and escalation
- Integrates with 15 SIEM, SOAR, ITSM, and threat intelligence tools
Where it doesn't
- Pricing requires a conversation with ZeroFox
- Designed for organizations rather than consumer identity monitoring
- Managed coverage and briefing cadence vary by selected tier
Our verdict on ZeroFox Dark Web Intelligence
ZeroFox Dark Web Intelligence is an enterprise cybersecurity service for CTI analysts, SOC teams, incident responders, fraud investigators, and security leaders. It monitors criminal forums, dark web marketplaces, Telegram channels, encrypted platforms, paste sites, and ransomware leak sites for credential exposure, access sales, stolen data, attack planning, and threat-actor activity. Coverage includes employee and customer credentials, corporate domains, VPN, RDP and SSO credentials, proprietary documents, source code, customer databases, sensitive files, PII, breach dumps, and ransomware leak data. The service is available through web and API access, with both intelligence feeds and managed Dark Ops packages.
Its strongest fit is an organization that needs more than exposure alerts. ZeroFox combines covert Dark Ops operatives, analyst validation, threat-actor profiling, relationship mapping, curated analyst reports, finished intelligence, and escalation. The published capabilities also include credential reset, breach containment, asset recovery, and response workflows. Monitoring extends to initial access brokers, corporate VPN, RDP and SSO credentials, pre-attack chatter, and ransomware targeting. That breadth supports security teams investigating external threats across several intelligence and response use cases rather than a narrow credential-monitoring program.
Platform fit is a practical consideration. Listed integrations include Splunk, Microsoft Sentinel, ServiceNow, Slack, Microsoft Teams, Anomali, ArcSight, Fortinet, FreshService, Google SecOps, IBM QRadar, Rapid7, Securonix, ThreatQuotient, and Tines. The Deep & Dark Web Intelligence Feeds plan adds coverage across Telegram, Discord, encrypted apps, marketplaces, and invite-only forums, with integrations for threat intelligence platforms, SIEM/SOAR, and ITSM tools. Managed Dark Ops tiers range from weekly Key Incidents and one wholly-owned brand in Essential to twice-weekly incidents and three brands in Premium, while Elite covers five brands and eight monthly reach-backs. Choose it for managed enterprise intelligence and remediation support; consumer users and teams seeking simple public pricing should look elsewhere.
ZeroFox Dark Web Intelligence pricing
All 4 ZeroFox Dark Web Intelligence plans and prices →
ZeroFox Dark Web Intelligence fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Monitoring sources | Not verified |
| Personal monitoring | Yes |
| Business monitoring | Yes |
| Monitored data types | employee credentials; customer credentials; corporate domains; VPN credentials; RDP credentials; SSO credentials; proprietary documents; source code; customer databases; sensitive files; PII; breach dumps; ransomware leak data |
| Remediation support | Yes |
| Family monitoring | Not verified |
| Included identities | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2, GDPR |
| Support | Email, Phone, Tickets, Docs · 24/7 |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 150+ integrations: Splunk, Microsoft Sentinel, ServiceNow, Slack, Microsoft Teams, Anomali … See all → |
| Pricing | Pricing on request (source) |
| Website | zerofox.com |
| Facts checked | 22 Sep 2026 |
ZeroFox Dark Web Intelligence integrations
ZeroFox Dark Web Intelligence lists 150+ integrations on its own site — the 20 named here are the ones its pages call out.
- Splunk
- Microsoft Sentinel
- ServiceNow
- Slack
- Microsoft Teams
- Anomali
- ArcSight
- Fortinet
- FreshService
- Google SecOps
- IBM QRadar
- Rapid7
- Securonix
- ThreatQuotient
- Tines
- Torq
- Zendesk
- REST APIs
- Syslog
- Webhooks
See all ZeroFox Dark Web Intelligence integrations →
Alternatives to ZeroFox Dark Web Intelligence
- Jsmon Dark Web MonitoringBroad dark-web monitoring with AI matching, response workflows, and API access.7.0
- Deepinfo Dark Web MonitoringA deep-monitoring service for teams that need search, context, and security-workflow integrations.—
- RiskProfiler KnyXBroad dark-web exposure intelligence with AI prioritization and security workflow routing.—
See all ZeroFox Dark Web Intelligence alternatives →
ZeroFox Dark Web Intelligence vs the competition
- ZeroFox Dark Web Intelligence vs Jsmon Dark Web Monitoring
- ZeroFox Dark Web Intelligence vs Deepinfo Dark Web Monitoring
- ZeroFox Dark Web Intelligence vs RiskProfiler KnyX
- ZeroFox Dark Web Intelligence vs Flare
- ZeroFox Dark Web Intelligence vs Breachsense
- ZeroFox Dark Web Intelligence vs DARKX
Compare ZeroFox Dark Web Intelligence with any tool side by side →
Used ZeroFox Dark Web Intelligence? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ZeroFox Dark Web Intelligence for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ZeroFox Dark Web Intelligence is listed in our Dark Web Monitoring Services directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/zerofox-dark-web-intelligence/"><img src="https://www.itechguides.com/best/badge/zerofox-dark-web-intelligence.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Guides on dark web monitoring services
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.