Mature CTI teams (3+ dedicated analysts) and enterprise SOCs needing the broadest commercial intel coverage and strongest analyst tooling across multiple use cases.
Small security teams without dedicated CTI capacity, organizations needing transparent pricing, or buyers concerned about Mastercard-driven strategy shifts.
Is Recorded Future a trustworthy vendor?
- 2024-09-12Mastercard announced $2.65B acquisition of Recorded Future
- 2025-02-04Mastercard acquisition closed; product strategy still being clarified
- 2025-11-18Customers report reduced roadmap transparency through transition
What 320 reviews actually say
Synthesized from G2, Capterra, Reddit, Trustpilot. Patterns >15% prevalence shown.
Praise patterns
- Broadest source coverage in commercial intel87% →
- Insikt Group research consistently high quality78% →
- Strong analyst tooling and pivots71% →
- Mature SIEM and SOAR integrations64% →
Complaint patterns
- Pricing opaque and largely module-stacked71% →
- Mastercard strategy direction unclear to customers47% ↑
- Intel volume overwhelms small teams without tuning51% →
- Multi-year contracts with escalators standard41% →
What buyers actually pay
96 anonymized deal disclosures · last updated 2026-05-01
| Company size | Median annual |
|---|---|
| 500-2,000 employees | $144,000 |
| 2,000-10,000 employees | $420,000 |
| 10,000+ employees | $980,000 |
Auto-verified certifications
Editorial: Strengths
- Broadest source coverage across open, dark, and technical web
- Insikt Group analyst team produces high-signal proprietary research
- Strong analyst workflow tooling with intelligence cards and pivots
- Mature integrations across SIEM, SOAR, EDR, vulnerability management
- Modular intelligence modules (SecOps, Brand, Identity, Geopolitical, Third-Party)
- Strong API for custom enrichment pipelines
- Recognized leader across analyst rankings for multiple years
Editorial: Weaknesses
- Mastercard acquisition (closed Q1 2025) creates strategy uncertainty
- Pricing among the highest in category and largely opaque
- Module-based pricing means full-platform TCO escalates fast
- Multi-year contracts and price escalators are standard
- Volume of intel can overwhelm small CTI teams without tuning
- Some customers report post-acquisition reduction in roadmap transparency
Key features & integrations
- +Intelligence Cards (per-IOC, vuln, threat actor)
- +Insikt Group proprietary research
- +SecOps Intelligence module
- +Brand Intelligence (typosquats, phishing kits)
- +Identity Intelligence (credential exposure)
- +Vulnerability Intelligence with risk scoring
- +Geopolitical and Third-Party Risk modules
- +Threat Intelligence Graph
- +API and SDK
- +STIX/TAXII export
Read our full ranking of Threat Intelligence Software
Recorded Future ranks #1 in our editorial review of 10 threat intelligence software platforms. The deep-dive covers methodology, comparison tables, decision matrix, migration scoring, and FAQs.
Read the full rankingClosest alternatives in Threat Intelligence Software
Contribute your verified deal price
Pricing in B2B software is opaque because vendors want it that way. Verified buyer prices fix that, anonymously. Share what you actually paid for Recorded Future; we’ll add it to the verified pricing dataset on this page (with company size band only, no identifying details).
Submit anonymously