Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Solutions

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Careers at Recorded Future

Contact Us

Express is our free license level for the browser extension. It provides users with high-level indicator data, including dynamic risk scores and the top risk rule subject to Recorded Future’s <a href="http://www.recordedfuture.com/terms-of-use">Terms of Use</a> and other conditions upon sign-up. 

<a href="https://www.recordedfuture.com/license-options/">Paid Recorded Future licenses</a> include the same features of the browser extension. In addition, these licenses provide users with detailed context and evidence about each of the indicators on any webpage.

What are the license options available for Recorded Future’s browser extension?

Risk scores are based on a set of risk rules. Each indicator type has a distinct set of risk rules. 

Recorded Future’s real-time risk scores highlight the severity level associated with the indicator being researched. This helps analysts quickly and confidently reach a verdict or risk assessment for their environment. 

Recorded Future generates risk scores by combining information from across the web, our proprietary data sources, and industry-leading research from our Insikt Group. This includes unstructured text, threat feeds and other technical threat data.

The overall risk score is a number between 0 and 99, determined by which rules are currently triggered. The highest severity level associated with an indicator determines the base score:
<ul>
<li>Very malicious: 90</li>
<li>Malicious: 65</li>
<li>Suspicious: 25</li>
<li>Unusual: 5</li>
</ul>

What is a risk score?

Recorded Future’s risk scores are based on a set of risk rules for each indicator type. Recorded Future’s browser extension has risk rules for the following indicator types:
<ul>
<li>IP address</li>
<li>Domain</li>
<li>URL</li>
<li>Hash</li>
<li>Vulnerability</li>
</ul>

Risk rules are assigned a level of severity, which factors into the overall risk score. These rules continue to evolve as Recorded Future adds data and analytics sources.

What is a risk rule?

<ul>
<li>Prioritizing alerts: Use Recorded Future’s browser extension over security platforms like a SIEM to instantly understand which indicators are highest risk and require further investigation.</li>
<li>Prioritizing vulnerabilities: Use the browser extension over your vulnerability management tool or national vulnerability database to instantly understand which vulnerabilities present the highest risk and require further investigation.</li>
<li>Enhancing malware analysis: Overlay Recorded Future’s risk scores on sandbox reports to instantly understand which indicators pose the highest risk and warrant further investigation.</li>
<li>Reducing research time: Detect threats 10 times faster with transparent context and risk rules.</li>
</ul>

What are the use cases for the Recorded Future Browser Extension?

Users with an Express license are able to view only the top risk rule. Paid users see all risk rulse.

Why can’t I see the other risk rules?

The browser extension works over most web-based pages, including security blogs, PDFs and other local files, SIEMs, vulnerability scanners, and other security technologies. If you come across a site where the browser extension doesn't properly work, please let us know by emailing express at recordedfuture.com.

Where does the browser extension work?

The browser extension is unable to overlay risk scores on Google Sheets.

Where doesn’t the browser extension work?

The Recorded Future browser extension quickly scans any webpage to identify IPs, domains, URLs, hashes, and CVEs. You can choose to display risk scores directly on the page to identify threats and vulnerabilities within a single platform.

Security analysts can use the browser extension in two ways. Overlay risk scores directly on the SIEM page, or view all of the page's indicators within the browser extension to list their indicators in order of highest to lowest risk score.

How do I use the browser extension with my SIEM?

If your organization has a paid Recorded Future account, contact your Intelligence Services consultant or sales representative. 

If your organization does not have a paid Recorded Future account, you can upgrade your browser extension license by <a href="https://go.recordedfuture.com/demo">contacting our sales team</a>.

How do I upgrade my browser extension license from Express to the paid version??

Yes. Recorded Future is GDPR compliant and a member of EU-U.S. <a href="https://www.privacyshield.gov/participant?id=a2zt0000000TSYiAAO&status=Active">Privacy Shield Framework</a>.

Is Recorded Future GDPR compliant?

Users of the Recorded Future browser extension are subject to data collection as outlined in our <a href="https://www.recordedfuture.com/privacy-policy/">Privacy Policy</a>. 

For questions about how we keep your data secure, see our <a href="https://www.recordedfuture.com/faq/security/">security FAQ</a>.

What data does Recorded Future collect?

Yes, Recorded Future adheres to secure coding guidelines (including <a href="https://www.owasp.org/images/0/08/OWASP_SCP_Quick_Reference_Guide_v2.pdf">OWASP Secure Coding Practices</a>) that address common software development vulnerabilities.

Does Recorded Future adhere to secure coding guidelines?

Recorded Future Browser Extension Frequently Asked Questions

FAQ (Browser Extension)

Refine your search

We could not find any results for your search, so why not start with the articles listed below?