- Home
- Digital Risk Protection Software
- ZeroFox Attack Surface Intelligence
ZeroFox Attack Surface Intelligence
Baltimore, Maryland, United States
What it is
ZeroFox Attack Surface Intelligence continuously discovers and prioritizes internet-facing assets across cloud environments, applications, shadow IT and third parties. Its inventory can include domains, IPs, applications, cloud resources, APIs, SaaS exposures and vendor-connected assets. The product combines discovery with real-time threat intelligence and AI remediation guidance. It uses EPSS, CVSS and CISA KEV to help teams prioritize exposures, and visual maps display exposure chains and discovery paths. Monitoring can identify cloud sprawl, misconfigurations and shadow IT across multi-cloud environments, as well as third-party risks beyond a customer's direct control. Connections are available through native connectors, webhooks, syslog and REST APIs; listed integrations include Splunk, Microsoft Sentinel, ServiceNow, Jira and Slack. The Platform API Connector can connect alerts to other tools and request takedowns through an application. The product is offered as a tailored package, with pricing on request. ZeroFox identifies security operations leaders, threat intelligence analysts, CISOs, cloud security engineers and marketing teams among its intended users.
For and against
For
- Continuously discovers internet-facing assets.
- Prioritizes exposures using EPSS, CVSS and CISA KEV.
- Maps exposure chains and discovery paths.
- Lists integrations including Splunk and ServiceNow.
- Includes API connectivity and takedown requests.
Against
- Pricing is available on request.
- The Foundation Bundle lists fixed protection and takedown quantities.
The verdict
ZeroFox Attack Surface Intelligence combines asset discovery, threat context and prioritization across internal and third-party exposures. Pricing requires a request, and the listed Foundation Bundle specifies quantities for protection and takedowns.
Who it suits
It is aimed at teams responsible for security operations, threat intelligence, cloud security or corporate risk, as well as CISOs and marketing teams. Organizations managing third-party or multi-cloud exposure may find its asset coverage relevant.
Plans and prices
Attack Surface Intelligence
Tailored package; request a quote
Read 4 Oct 2026 · zerofox.com
On the record
- API capability
- The Platform API Connector can connect alerts to other tools and request takedowns through an application.zerofox.com · read 4 Oct 2026
- Asset discovery
- It inventories known and unknown assets across domains, IPs, applications, cloud resources, APIs, SaaS exposures, and third-party assets.zerofox.com · read 4 Oct 2026
- Cloud and SaaS
- It detects cloud sprawl, misconfigurations, and shadow IT across multi-cloud environments.zerofox.com · read 4 Oct 2026
- Integrations
- ZeroFox says it connects through native connectors, webhooks, syslog, and REST APIs, and lists integrations including Splunk, Microsoft Sentinel, ServiceNow, Jira, and Slack.zerofox.com · read 4 Oct 2026
- Intended users
- The maker identifies security operations leaders, threat intelligence analysts, CISOs, cloud security engineers, and marketing teams as beneficiaries.zerofox.com · read 4 Oct 2026
- Notable limits
- The pricing page lists a Foundation Bundle with 2 Brand Protection, 10 Domain Protection, and 250 takedowns per year; it also says bundles are not mandatory.zerofox.com · read 4 Oct 2026
- Prioritization
- It uses EPSS, CVSS, and CISA KEV to help teams address high-risk exposures first.zerofox.com · read 4 Oct 2026
- Purpose
- Continuously discovers, prioritizes, and contextualizes internet-facing assets across cloud environments, applications, shadow IT, and third parties.zerofox.com · read 4 Oct 2026
- Security certifications
- ZeroFox states that it holds SOC 2 Type II and UK Cyber Essentials certifications and participates in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.zerofox.com · read 4 Oct 2026
- Support
- The product page advertises 24/7 technical assistance from security experts and customer success managers.zerofox.com · read 4 Oct 2026
- Third-party risk
- The product monitors third-party risks and vendor-connected assets beyond the customer's direct control.zerofox.com · read 4 Oct 2026
- Threat context
- The product fuses asset discovery with real-time threat intelligence and AI remediation guidance.zerofox.com · read 4 Oct 2026
- Trust resources
- Its Trust Center lists the SOC 2 Type II report, a 2026 Cyber Essentials certificate, and security controls including penetration testing and vulnerability monitoring procedures.trust.zerofox.com · read 4 Oct 2026
- Visual mapping
- Visual mapping shows exposure chains and discovery paths.zerofox.com · read 4 Oct 2026
