Recorded Future
Recorded Future provides AI-driven threat intelligence for enterprises, governments, and security teams, unifying cyber, fraud, brand, and third-party risk on its Intelligence Graph® platform. It is a wholly-owned Mastercard subsidiary serving 1,900+ customers across 80+ countries.
- Company typePrivate
- Founded2009
- HeadquartersSomerville, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What Recorded Future does
Recorded Future is an AI-driven threat intelligence platform serving large enterprises, governments, and security teams across more than 80 countries. Its core asset is the Intelligence Graph®, an AI- and NLP-driven ontology and event graph that indexes data from over one million global sources, maintains 200+ billion nodes and 50+ billion entities, and powers nine specialized intelligence modules covering Threat Intelligence, Brand Intelligence, Identity Intelligence, Payment Fraud Intelligence, Vulnerability Intelligence, Third-Party Intelligence, Geopolitical Intelligence, Attack Surface Intelligence, and SecOps Intelligence. Underpinning platform capabilities include Collective Insights® (correlating internal EDR/SIEM/SOAR telemetry with external intelligence), Recorded Future AI (AI Sessions, AI Insights, AI Report Creation, and an MCP server), and Autonomous Threat Operations (ATO), an AI-driven 24/7 threat-hunting and response capability that integrates natively with Microsoft Defender XDR, Microsoft Sentinel, Splunk, CrowdStrike XDR & NGSIEM, Google SecOps, SentinelOne, Zscaler, and Palo Alto NGFW.
Recorded Future firmographics
Firmographics- Name
- Recorded Future
- Legal name
- RF Ultimate Parent, Inc.
- Website
- https://recordedfuture.com
- Company type
- Private
- Founded year
- 2009
- Operating status
- Acquired
- Headcount range
- 1,001–5,000 employees
- Short description
- Recorded Future provides AI-driven threat intelligence for enterprises, governments, and security teams, unifying cyber, fraud, brand, and third-party risk on its Intelligence Graph® platform. It is a wholly-owned Mastercard subsidiary serving 1,900+ customers across 80+ countries.
- Ownership category
- akta.pro rank
Recorded Future industry classification
Industry- Product category
- Threat Intelligence Software
- akta.pro primary industry
- Vulnerability Intelligence & Exploit Prediction (HDADAHAI)
- akta.pro secondary industries
- Threat Intelligence Services (BPAEADAC), Exposure Analytics & Risk-Based Prioritization (RBVM) (HDADAHAF)
Keywords
Where Recorded Future is headquartered
LocationHeadquarters
- HQ city
- Somerville
- HQ country
- United States
- HQ region
- North America
Offices8 records
Markets served
Recorded Future business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Platform subscriptions (tiered packages): Tiered subscription packages — Core, Professional, and Elite — bundled around four solution areas (Cyber Operations, Digital Risk Protection, Third-Party Risk, Payment Fraud); Autonomous Threat Operations is included with Professional and Elite packages and offered as an add-on for Core.
- Managed and Intelligence Services: Professional and managed services including Managed Monitoring, Intelligence Services (integration and advisory), and Analyst on Demand — recurring and project-based engagements that extend customer security teams and provide custom intelligence deliverables.
- Training and enablement programs: Recorded Future University training courses and onboarding/enablement programs sold as part of customer journeys and partner enablement.
- Embedded intelligence inside parent products (Mastercard): Recorded Future intelligence is embedded into Mastercard's products and services (e.g., Mastercard Threat Intelligence, RiskRecon capabilities, CyberShield partnership with Wipro), generating inter-company revenue and joint offerings such as payment fraud skimmer intelligence and brand monitoring.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Core package — foundational Recorded Future intelligence platform access; ATO available as add-on. |
| Subscription | Multi-year contract | Professional package — adds Autonomous Threat Operations as included capability. |
| Subscription | Multi-year contract | Elite package — top-tier offering with full ATO and bundled expert services. |
| Other | Annual | Enterprise add-on solutions — Digital Risk Protection, Third-Party Risk, Payment Fraud Intelligence. |
| Freemium | — | Free tools and on-demand demos — prospect-facing free tier. |
Go-to-market motion4 records
Distribution channels7 records
Marketing channels11 records
Recorded Future product offering
Product offeringCore offering
Recorded Future provides an AI-driven threat intelligence platform built on the Intelligence Graph®, which ingests and correlates data from over one million sources to deliver real-time intelligence on threat actors, malware, vulnerabilities, and adversary infrastructure. The platform is organized around four solution areas — Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud — and powers specialized modules (Threat, Brand, Identity, Vulnerability, Geopolitical, Attack Surface, SecOps Intelligence) plus an Autonomous Threat Operations capability for AI-driven 24/7 threat hunting and response.
Product overview
Recorded Future offers a platform-plus-modules architecture organized around four solutions (Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud), all unified by the Intelligence Graph® — the AI-driven core that indexes over 1 million sources and correlates threat actors, campaigns, malware, infrastructure, and vulnerabilities. Underpinning platform capabilities include Collective Insights®, Recorded Future AI (with AI Sessions, AI Report Creation, AI Insights, agents, and MCP server), and Integrations and APIs that connect to SIEM, SOAR, EDR, IAM, and vulnerability management tools. The platform powers nine specialized intelligence modules including Threat Intelligence, Brand Intelligence, Identity Intelligence, Payment Fraud Intelligence, Vulnerability Intelligence, Third-Party Intelligence, Geopolitical Intelligence, Attack Surface Intelligence, and SecOps Intelligence. Extended capabilities include Autonomous Threat Operations for 24/7 AI-powered threat hunting, Private Sandbox for malware detonation, External Identity, VIP Credential Monitoring, and Executive Protection.
Differentiator
Problem solved
Functional benefit
Brands
- The Record: Recorded Future's owned cybersecurity news publication, delivered as 'The Record by Recorded Future LLC' and published at therecord.media, providing news, podcasts, and the Cyber Daily newsletter.
- Insikt Group
Products and services
- Recorded Future Intelligence Platform
- Intelligence Graph
Quantifiable outcome
- 73% increase in visibility into threats; 65% faster threat identification; 64% improved understanding of threat landscape
- +14 more outcomes
Companies that use Recorded Future
Customer profileNamed customers21 records
Segments10 records
Ideal customer profiles4 records
Recorded Future technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration13 records
AI capability11 records
Feature8 records
Recorded Future partnerships and signals
Strategic signalPartnerships
22 partnerships are on record, tiered flagship, minor and core.
- Wipro LimitedflagshipStrategic partnership to launch a Managed Threat Intelligence and Brand Monitoring service within Wipro's MSSP portfolio under its CyberShieldSM offering. Integrates Recorded Future's AI-powered threat intelligence into Wipro's security operations, threat hunting, and digital risk protection workflows at enterprise scale. Wipro plans to use the platform internally and offer joint solutions globally.
- Cloudflare (via Mastercard partnership)minorCloudflare and Mastercard announced a strategic partnership in February 2026 to develop cybersecurity tools including attack surface monitoring, real-time cyber posture assessment, and risk mitigation; Recorded Future's intelligence is embedded via Mastercard Threat Intelligence and RiskRecon capabilities.
- TenableflagshipFounding ecosystem partner in Tenable's Open Partner Exchange Network (OPEN). Recorded Future AI integrates with Tenable One via a new Open Connector enabling bi-directional data exchange across 330+ validated integrations, unifying external threat intelligence with exposure management.
- BitsightflagshipFounding ecosystem partner alongside Recorded Future and Splunk in Tenable's OPEN ecosystem, contributing external intelligence and telemetry to enable coordinated remediation across security environments.
- SplunkflagshipEcosystem partner in Tenable's OPEN ecosystem contributing intelligence and telemetry; Recorded Future also has deep native integration with Splunk SIEM/SOAR and supports launching autonomous threat hunts from Splunk.
- Tenable (Watch List connector)coreAutomatic Watch List connector with Tenable Vulnerability Management keeps Recorded Future vulnerability Watch Lists continuously synchronized with scan data from Tenable.
- Qualys (Watch List connector)coreAutomatic Watch List connector with Qualys VMDR keeps Recorded Future vulnerability Watch Lists continuously synchronized with Qualys scan data.
- Okta / Microsoft Identity (identity automation)corePre-built integrations enable automated password resets with Microsoft Identity or Okta triggered by Recorded Future identity/credential alerts (e.g., 7-Eleven's SOAR playbook processing 330+ identity alerts).
- eMerge Americas (Title Partner sponsorship)coreRecorded Future (with Mastercard) is a Title Partner of eMerge Americas 2026 in Miami, leveraging the conference to highlight South Florida as a global security, fintech, and innovation hub and to engage security leadership buyers.
- CYBERAcorePartnership to integrate CYBERA's Money Mule Intelligence into the Recorded Future Platform, enabling fraud teams at banks to detect scam-linked mule accounts before funds are transferred. Addresses U.S. Authorized Push Payment fraud projected to grow from $8.3B in 2024 to nearly $15B by 2028.
- CrowdStrikecoreRecorded Future's Autonomous Threat Operations integrates natively with CrowdStrike Falcon XDR and NGSIEM, enabling customers to push continuously validated malicious indicators and run autonomous threat hunts directly within the Falcon platform.
- Microsoft (Microsoft Defender XDR and Microsoft Sentinel)flagshipNative integration of Autonomous Threat Operations with Microsoft Defender XDR and Microsoft Sentinel enables automated threat intelligence enrichment, password reset actions, and threat hunting inside the Microsoft security stack.
- Google SecOpscoreAutonomous Threat Operations integrates natively with Google SecOps (formerly Chronicle) to push continuously validated malicious indicators and enable threat hunting and response across Google's security operations platform.
- SentinelOnecoreAutonomous Threat Operations integrates natively with SentinelOne's XDR platform to enable automated threat hunting and intelligence-driven prevention.
- ZscalercoreAutonomous Threat Operations integrates with Zscaler for intelligence-led prevention and threat hunting across Zscaler's zero-trust platform.
- Palo Alto Networks (NGFW)coreAutonomous Threat Operations integrates natively with Palo Alto Networks Next-Generation Firewall (NGFW) for automated prevention of malicious network traffic.
- Exabeam (Scottish tech ecosystem mention)coreExabeam and Recorded Future strategic partnership referenced in November 2025 Scottish tech sector coverage.
- ExabeamcoreStrategic partnership to integrate Recorded Future's threat intelligence with Exabeam's security analytics platform, enabling real-time threat intelligence enrichment, automation of response actions, and improved investigation efficiency for intelligence-led threat detection and response.
- Mastercard (Mastercard Threat Intelligence co-launch)flagshipCo-developed Mastercard Threat Intelligence, launched at Money 20/20 USA in October 2025, combining Mastercard's fraud insights with Recorded Future cyber threat intelligence to help banks detect and prevent cyber-enabled payment fraud. Intelligence data has helped identify malicious domains impacting ~9,500 e-commerce sites linked to ~$120M in fraud.
- Mastercard (MSSP / partner ecosystem distribution)flagshipRecorded Future is sold and embedded through Mastercard's global MSSP and partner channels, including Wipro CyberShieldSM, Mastercard Threat Intelligence for issuing/acquiring banks, and Mastercard RiskRecon — leveraging Mastercard's customer footprint for distribution.
- Hatching (Triage sandbox)coreRecorded Future acquired Hatching in July 2022 and integrated Hatching's Triage sandboxing solution into the Intelligence Cloud, providing automated malware analysis with 1.5M+ samples detonated daily.
- SecurityTrailscoreRecorded Future acquired SecurityTrails in January 2022 to integrate internet asset inventory and attack surface monitoring data into its enterprise security intelligence platform — now part of Attack Surface Intelligence.
Scale indicators17 records
Recent moves7 records
Expansion highlights7 records
Recorded Future competitors and assessment
Company assessmentDirect peers
- Mandiant (Google Cloud): Mandiant is a direct peer in cyber threat intelligence and incident response; following its 2024 integration into Google Cloud it competes head-on with Recorded Future for enterprise CTI and threat-hunting engagements and was named alongside Recorded Future in the inaugural 2026 Gartner MQ for CTI.
- Anomali: Anomali is a direct peer offering a threat intelligence platform with similar TIP/aggregator, STIX/TAXII, and SIEM/SOAR integration capabilities; positioned as a comparable alternative to Recorded Future's Intelligence Platform for enterprise buyers.
- ThreatConnect: ThreatConnect is a direct peer in the threat intelligence platform space, offering TIP, threat intel orchestration, and SOAR capabilities; competes for the same enterprise CTI and SecOps buyers that Recorded Future targets with its Intelligence Graph and ATO offerings.
- ZeroFox: ZeroFox is a direct peer in digital risk protection and external threat intelligence, with overlapping brand protection, executive protection, and dark-web monitoring capabilities that directly compete with Recorded Future's Digital Risk Protection solution.
- Flashpoint: Flashpoint is a direct peer in threat intelligence with deep-and-dark-web collection, vulnerability intelligence, and finished intelligence, competing with Recorded Future's Insikt Group® research and dark-web monitoring capabilities.
Broad incumbents
- CrowdStrike: CrowdStrike is a broad XDR/endpoint incumbent that bundles Falcon Intelligence and now natively integrates with Recorded Future ATO inside Falcon; competes at the platform level for security budget while also serving as a key integration partner for Recorded Future intelligence.
- Palo Alto Networks (Unit 42): Palo Alto Networks' Unit 42 threat intelligence arm is a broad incumbent peer that competes with Recorded Future on CTI content and feeds, while Recorded Future ATO integrates natively with Palo Alto NGFW — making it both a competitor and a partner.
- Microsoft (Defender Threat Intelligence / Sentinel): Microsoft bundles threat intelligence across Defender XDR, Microsoft Sentinel, and Security Copilot, competing with Recorded Future for enterprise CTI budget while also serving as one of Recorded Future's most important native ATO integration partners.
Emerging players
- Intel 471: Intel 471 is an emerging player in cyber threat intelligence focused on adversary, malware, and credential intelligence; overlapping use cases with Recorded Future's Threat Intelligence and Identity Intelligence modules, particularly for CTI teams and fraud use cases.
- Tenable: Tenable is an emerging/adjacent peer in vulnerability and exposure management; Recorded Future is a founding ecosystem partner in Tenable's Open Partner Exchange Network (OPEN), so the two are increasingly co-sold while still competing for some vulnerability intelligence budget.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat7 records
Key risks6 records
Key highlights7 records
Customer concentration
Recorded Future social profiles
Digital presenceRecorded Future compliance and trust
Trust signalCompliance5 records
Recorded Future financial estimates
Financial estimateRevenue estimate
Valuation estimate
Recorded Future leadership team
Management profileNumber of profiles
Profiles15 records
Recorded Future subsidiaries and ownership
Company hierarchySubsidiaries6 records
Recorded Future funding detail
Funding detailFunding overview
Funding rounds7 records
Investors9 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Recorded Future M&A and investment
M&A and investmentM&A3 records
Investments2 records
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Recorded Future
What does Recorded Future do?
Recorded Future provides an AI-driven threat intelligence platform built on the Intelligence Graph®, which ingests and correlates data from over one million sources to deliver real-time intelligence on threat actors, malware, vulnerabilities, and adversary infrastructure. The platform is organized around four solution areas — Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud — and powers specialized modules (Threat, Brand, Identity, Vulnerability, Geopolitical, Attack Surface, SecOps Intelligence) plus an Autonomous Threat Operations capability for AI-driven 24/7 threat hunting and response.
Is Recorded Future a public or private company?
Recorded Future is a private company. It is classified as corporate owned and is currently acquired.
When was Recorded Future founded?
Recorded Future was founded in 2009. It employs 1,001 to 5,000 people.
Where is Recorded Future based?
Recorded Future is headquartered in Somerville, United States, in the North America region.
How does Recorded Future make money?
Four revenue lines are on record. Platform subscriptions (tiered packages) is the primary driver. The others are managed and Intelligence Services, training and enablement programs and embedded intelligence inside parent products (Mastercard).
Who are Recorded Future's main competitors?
Direct peers on record are Mandiant (Google Cloud), Anomali, ThreatConnect, ZeroFox and Flashpoint. Broad incumbents are CrowdStrike, Palo Alto Networks (Unit 42) and Microsoft (Defender Threat Intelligence / Sentinel). Emerging players are Intel 471 and Tenable.
Does Recorded Future have an API?
Yes. Recorded Future offers a variety of APIs to support integration needs. APIs enable searching Intelligence Cards, programmatically managing Alerts, querying third-party intelligence, downloading YARA, Sigma, and Snort rules from the Insikt Group, and creating or updating Watch Lists and custom lists. The platform has an API-first architecture and supports out-of-the-box integrations across SIEM, SOAR, EDR, IAM, Network Security, and Vulnerability Management categories. The Recorded Future MCP server and full set of MCP tools make Recorded Future intelligence available wherever an organization's agents operate. Developer documentation is at www.recordedfuture.com/platform/integrations.
What industry is Recorded Future in?
Recorded Future's product category is Threat Intelligence Software. Its primary akta.pro industry code is HDADAHAI, Vulnerability Intelligence & Exploit Prediction, with a secondary code of BPAEADAC, Threat Intelligence Services.