Recorded Future Intelligence Cloud vs. UpGuard Vendor Risk

If you want a platform that is covering thousands of sources, and that includes deep, dark web, clear web forums, blogs, newspapers, social media networks, etc. Recorded Future is the most complete solution that I have seen. On the other hand, if you are looking for a really advanced platform with lot of human added value, research papers, advanced investigations, etc. Recorded Future might not be the ideal solution.

Incentivized

UpGuard Vendor Risk is great when we need a quick view of a vendor’s external security posture, especially during fast-paced onboarding. It’s also very useful for continuous monitoring with visibility into changes at Vendor's side without repeatedly chasing vendors for updates. The only scenario it is not very helpful, is small vendors / start ups that dont have an external footprint, but in that case the questionnaire's can be used.

Incentivized

• Gives latest threat reports regarding an artifact (IP, domain or hash).
• Browser extension provides a real-time information about an artifact.
• Accurate in identifying malicious domains and IPs.

Incentivized

• Helped us automate our vendor risk questionnaires
• Helps us continuously monitor our high-risk vendors
• All vendor risk data is in one place, organized by risk level, criticality, and status

Incentivized

• E-Mail reports can show unrelated content, especially sometimes you'll see alerts popping up for articles which have been published years ago but for some reason were just recently discovered by RF.
• Yara rules from their insikt blog sometimes are not syntactically correct and need to be manually edited to actually work. There's some proper QA missing.
• Their global and 3rd party risk reports could be more tailored towards the industries of their client. There is entries for totally unrelated security incidents. Of course a global list aims to find incidents on a global view, but it doesn't add much value at that point.

Incentivized

• Integration with GRC systems, ticketing platforms could be stronger
• More configurable dashboards will be helpful

Incentivized

It gives overall risk visibility into our supply chain

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

We’ve evaluated other third-party security rating platforms, including those which focus heavily on questionnaires, self-assessments, and point-in-time reviews.
UpGuard's usp is continuous monitoring and external risk visibility, automated questionnaires, which reduced our reliance on manual follow-ups. That said, most tools in this space still need to be complemented with internal reviews and contract-level risk assessments, depending on the vendor and use case.

Incentivized

• Recorded Future crashes my web browser in cases I have to open a web page containing hundreds of IPs. A quick disable feature for a particular tab would be beneficial for someone like me.

Incentivized

• reduce the time and effort spent on vendor due diligence
• it has improved our ability to identify higher-risk vendors early and focus remediation efforts where they matter most, rather than treating all vendors the same
• more informed risk decisions

Incentivized