ZeroFox

ZeroFox provides external cybersecurity through its HNTR platform, covering cyber threat intelligence, brand and domain protection, executive and VIP protection, physical security intelligence and attack surface intelligence. The vendor describes a continuous loop of discovery, validation and disruption combining intelligence, AI and human analysts.

Treating brand protection and physical security as the same discipline is the distinguishing position, and there is a real argument for it. The signals that precede a physical threat to an executive appear in the same places as brand impersonation: social platforms, forums and the dark web. An organisation monitoring one and not the other is watching the same sources twice with two vendors, or once and missing half of what matters.

Validation as an explicit step is what separates this from a monitoring feed. Raw external signals produce enormous false positive volume, and a security team handed unvalidated alerts stops reading them, which is worse than not having them.

Executive protection is the capability worth understanding before buying. It covers a small number of individuals whose exposure is disproportionate, and the personal data involved makes it a sensitive programme to run.