Flexible Access to
Threat Intelligence

The Recorded Future platform is a modular solution designed for organizations to customize and adapt the solution to meet their own unique needs. Three unique user licenses allow clients to access Recorded Future’s threat intelligence at the level that is right for them.

EXPRESS CORE ADVANCED
Browser Extension
Real-Time Risk Scores

Updated in real time for fast prioritization of threats
Risk Rules and Evidence

Reasoning behind scores with access to original sources
Create Analyst Notes

Create Analyst Notes by highlighting text on a page you are visiting
Portal
Home Screen

Home screen of the Portal provides a single source for the latest threats, intelligence headlines, and prioritized alerts
Express Intelligence Cards

Abbreviated Intelligence Cards for IPs, Domains, Hashes, and Vulnerabilities
Core Intelligence Cards

Full Intelligence Cards for IPs, Domains, Hashes, Vulnerabilities, URLs, Email Addresses, Threat Actors, and Malware
All Intelligence Cards

Over one billion full Intelligence Cards, including Usernames, Malware Categories, Attack Vectors, and more
Quick Search

Look up any IOC to reveal real-time intelligence
Threat Views

Real-time threat intelligence in concise, single-view dashboards
Analyst Notes

The ability to add your own intelligence and comments directly to Intelligence Cards
Insikt Group Research

Expert Intelligence from Recorded Future’s analyst team, Insikt Group
Critical Alerts

Receive alerts in real time on threats to your brand (including typosquatting), infrastructure risk, vulnerabilities in the tech stack, and trending industry threats
Unlimited Alerts

Supports the creation of custom alerts on specific focus areas for a broader security team
Advanced Query Builder

Create custom queries for investigative or advanced threat research
Analysis Views (Table, Timeline, Map, Source Map, Feed)

Custom visualizations for search refinement and sharing with stakeholders
Mobile App
Access Intelligence Cards, Insikt Group Research, Analyst on Demand reports (if purchased), Analyst Notes, and Cyber News. View all of your enterprise’s alerts and receive push notifications for the alerting rules you choose
EXPRESS CORE ADVANCED
EXPRESS CORE ADVANCED
Real-Time Risk Scores

Updated in real time for fast prioritization of threats
Risk Rules and Evidence

Reasoning behind scores with access to original sources
Create Analyst Notes

Create Analyst Notes by highlighting text on a page you are visiting
Home Screen

Home screen of the Portal provides a single source for the latest threats, intelligence headlines, and prioritized alerts
Express Intelligence Cards

Abbreviated Intelligence Cards for IPs, Domains, Hashes, and Vulnerabilities
Core Intelligence Cards

Full Intelligence Cards for IPs, Domains, Hashes, Vulnerabilities, URLs, Email Addresses, Threat Actors, and Malware
All Intelligence Cards

Over one billion full Intelligence Cards, including Usernames, Malware Categories, Attack Vectors, and more
Quick Search

Look up any IOC to reveal real-time intelligence
Threat Views

Real-time threat intelligence in concise, single-view dashboards
Analyst Notes

The ability to add your own intelligence and comments directly to Intelligence Cards
Insikt Group Research

Expert Intelligence from Recorded Future’s analyst team, Insikt Group
Critical Alerts

Receive alerts in real time on threats to your brand (including typosquatting), infrastructure risk, vulnerabilities in the tech stack, and trending industry threats
Unlimited Alerts

Supports the creation of custom alerts on specific focus areas for a broader security team
Advanced Query Builder

Create custom queries for investigative or advanced threat research
Analysis Views (Table, Timeline, Map, Source Map, Feed)

Custom visualizations for search refinement and sharing with stakeholders
Mobile App

Access Intelligence Cards, Insikt Group Research, Analyst on Demand reports (if purchased), Analyst Notes, and Cyber News. View all of your enterprise’s alerts and receive push notifications for the alerting rules you choose
EXPRESS CORE ADVANCED

Valuable Add-On Options

In addition to portal access, organizations can add on modules to integrate threat intelligence into their environment and address specific use cases.

Connect Integration

Integrate threat intelligence into your security solutions including SIEM, SOAR, ticketing, incident response, and more.

Learn more
Third-Party Risk

Consolidated intelligence on companies including risks to infrastructure as well as references to cyberattacks or from dark web sources — valuable for assessing the mitigating risks from the partner ecosystem.

Learn more
Analyst on Demand Services

Deep-dive analysis on a particular topic requested by the client. Delivered in single reports or on-going weekly analysis.

Learn more
Fusion

Integrate internal and proprietary threat intelligence into the platform for a consolidated view and customize threat feeds for targeted correlation and alerting.

Learn more
Takedown Services

Initiate and execute the takedown of fraudulent domains or social media accounts directly from the platform.

Learn more
Managed Services

Dedicated threat intelligence experts to alleviate your resource constraints and manage your alerts after-hours to maximize the value of your existing investment.

Learn more

Get Started

We arm more than 40,000 security professionals across 22 industries and six continents with threat intelligence to reduce their cyber risk. Get started with real-time intelligence today.