Recorded Future Intelligence Cloud vs. Webroot Endpoint Protection

If you want a platform that is covering thousands of sources, and that includes deep, dark web, clear web forums, blogs, newspapers, social media networks, etc. Recorded Future is the most complete solution that I have seen. On the other hand, if you are looking for a really advanced platform with lot of human added value, research papers, advanced investigations, etc. Recorded Future might not be the ideal solution.

Incentivized

The software tends to do a good job of basic protection but is not the best for larger clients and is not as powerful as some others offered on the market today. The support is not the best either, have had a hard time getting assistance in the past trying to resolve issues.

Incentivized

• Gives latest threat reports regarding an artifact (IP, domain or hash).
• Browser extension provides a real-time information about an artifact.
• Accurate in identifying malicious domains and IPs.

Incentivized

• It is very light weight and does not tax the computers resources
• Has a quick scan and does not take forevere when scanning
• It's central management on the web makes it easy to use and gives tons of control for Admins

Incentivized

• E-Mail reports can show unrelated content, especially sometimes you'll see alerts popping up for articles which have been published years ago but for some reason were just recently discovered by RF.
• Yara rules from their insikt blog sometimes are not syntactically correct and need to be manually edited to actually work. There's some proper QA missing.
• Their global and 3rd party risk reports could be more tailored towards the industries of their client. There is entries for totally unrelated security incidents. Of course a global list aims to find incidents on a global view, but it doesn't add much value at that point.

Incentivized

• There are several configuration options for both end-point and DNS protection. Would like a more simple way to understand and validate settings.
• Support is heavily video or FAQ based although you can submit a Support Ticket. Would like more availability to an actual support engineer.
• Overtime you can forget how to change setting - a refresher course would be nice, especially as new features are added to the solution.

Incentivized

It has proven successful so far in our environment for controlling malware/virus outbreaks.

Incentivized

Like I said before, sometimes I can't find what I need to change a setting.

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

Support has been reliable up to this point. A request can easily be generated via the console and support responding in a reasonable time. We have not had any major issues other than the basic agents not communicating with the console and the like.

Incentivized

I had some difficulties with remote users. I ended up needing to open a remote tech support session and finish the process. Other than a few speed bumps, I was impressed with the engineering of the install. Because of time differences, I was done installing in two days. The cost, per license, could be less.

Incentivized

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

We found other products to be able to detect malware and malicious URL's better than Webroot Endpoint Protection. Thus, we moved away from Webroot Endpoint Protection. Also, over the years, there were at least 2 big mistakes by Webroot, where our business applications were flagged as malicious as a false positive. Webroot did a public apology, but those mistakes were highly disruptive.

Incentivized

• Recorded Future crashes my web browser in cases I have to open a web page containing hundreds of IPs. A quick disable feature for a particular tab would be beneficial for someone like me.

Incentivized

• The licenses are pretty expensive but less costly than an actual malware infestation.
• We have tremendous peace of mind knowing that our machines and communications are secure.
• Our IT consultants are a little more involved in day-to-day management than they were before deploying Webroot Endpoint Protection, which means an increase in cost, but again this is a fair price to pay for protection against Internet threats.

Incentivized