OFFICIAL PARTNER · CYBER BOOST

ZeroFox

Name: ZeroFox
Brand: ZeroFox

External Cybersecurity Platform

ZeroFox protects what lies beyond the perimeter: the external attack surface, your brand, domains and executives. It covers EASM, Digital Risk Protection, Threat Intelligence and automated takedowns of phishing and fakes.

EASMDigital Risk ProtectionThreat IntelligenceTakedowns

Request a demo See the modules

KEY FACTS

24/7

monitoring and response

Auto

takedowns of phishing and fakes

Web→Dark

surface/deep/dark coverage

2013

year founded (USA)

External cybersecurity beyond the perimeter

PRODUCTS AND MODULES

What the platform includes.

ZeroFox combines external threat detection, analytics and response in a single cloud platform.

EASM

Attack Surface Mgmt

Discovery and monitoring of external assets: domains, subdomains, IPs, exposed services and shadow IT.

DRP

Digital Risk Protection

Monitoring of threats to your brand, executives and data on social media and across the surface, deep and dark web.

Threat Intel

Threat Intelligence

Threat intelligence: indicators of compromise, credential leaks, attacker chats.

Takedowns

Adversary Disruption

Automated takedown requests for phishing domains, fake accounts and content.

Brand

Brand Protection

Brand protection against counterfeits, fake apps, phishing and trademark infringement.

Domains

Domain Protection

Detection of typosquatting and lookalike domains, monitoring of new registrations.

Dark Ops

Dark Web Monitoring

Access to closed forums and marketplaces to track mentions of your organization.

Breach

Compromised Credentials

Detection of leaked employee and customer credentials in public dumps.

Physical

Physical Security Intel

Geospatial threat intelligence for facilities, events and executives.

CAPABILITIES

Key capabilities.

Asset discovery

A complete map of the external attack surface: domains, IPs, services, clouds and forgotten assets.

Digital Risk Protection

Monitoring of your brand, domains and executives on social media and the dark web.

Automated takedowns

One-click takedown requests for phishing, fake accounts and counterfeit apps.

Dark web intelligence

Coverage of the surface, deep and dark web: forums, marketplaces and attackers’ Telegram channels.

Credential leaks

Early detection of compromised employee and customer logins.

Protecting executives

VIP monitoring: impersonation, doxxing and physical threats to top management.

24/7 SOC service

Round-the-clock monitoring and response by a team of ZeroFox analysts.

API and integrations

Sending indicators and alerts to SIEM/SOAR through an open API and ready-made connectors.

USE CASES

Who uses ZeroFox and how.

Banks and finance

Fighting phishing clones of internet banking sites and fake mobile apps.

Brand protection

Detection and removal of fake accounts, fake promotions and trademark infringements.

Public sector

Monitoring of disinformation, fake government service portals and threats to officials.

VIP protection

Monitoring of threats to top management: impersonation, doxxing, physical security.

EASM inventory

Finding untracked external assets and shadow IT before attackers do.

Strengthening the SOC

Feeding external threat intelligence into SIEM/SOAR to enrich and prioritize alerts.

24/7

monitoring and response

Auto

takedowns of phishing and fakes

Web→Dark

surface/deep/dark coverage

2013

year founded (USA)

INTEGRATIONS

Tools ZeroFox works with.

SIEM AND SOAR

SplunkMicrosoft SentinelIBM QRadarCortex XSOAR

ITSM AND NOTIFICATIONS

ServiceNowJiraSlackMicrosoft Teams

THREAT INTEL

STIX / TAXIIMISPVirusTotal

DELIVERY

REST APIWebhooksEmail alerts

COMPARING MODULES

Which module to choose.

Capability	EASM	DRP	Threat Intel
External asset discovery	✓	Partially	-
Brand and social media monitoring	-	✓	-
Phishing / fake takedowns	-	✓	On request
Dark web intelligence	-	✓	✓
Indicator (IOC) feed	Assets	Brand threats	✓
Delivery model	SaaS	SaaS	SaaS / Feed

The modules you get, and what each one covers, depend on your plan. Ask CYBER BOOST for the exact configuration.

FAQ

Frequently asked questions

How is ZeroFox different from a classic SIEM?

A SIEM analyzes events inside your infrastructure. ZeroFox looks at what lies beyond the perimeter: your brand, domains, social media, the dark web and the external attack surface. The two complement each other. ZeroFox sends external indicators to the SIEM.

How do takedowns work?

ZeroFox automatically prepares requests to remove phishing domains, fake accounts and counterfeit content and sends them to providers and platforms. It tracks each request until the content is actually removed.

Do I need to install agents?

No. ZeroFox is a cloud SaaS platform. It monitors external assets and threats without any agents on the customer’s infrastructure.

Who deploys and supports ZeroFox in Uzbekistan?

CYBER BOOST is the official partner. We supply and configure ZeroFox, train your team and provide technical support in Russian and Uzbek.

← All vendors: SecOps · SIEM · SOAR