Recorded Future

What Recorded Future does

Recorded Future is an AI-driven threat intelligence platform serving large enterprises, governments, and security teams across more than 80 countries. Its core asset is the Intelligence Graph®, an AI- and NLP-driven ontology and event graph that indexes data from over one million global sources, maintains 200+ billion nodes and 50+ billion entities, and powers nine specialized intelligence modules covering Threat Intelligence, Brand Intelligence, Identity Intelligence, Payment Fraud Intelligence, Vulnerability Intelligence, Third-Party Intelligence, Geopolitical Intelligence, Attack Surface Intelligence, and SecOps Intelligence. Underpinning platform capabilities include Collective Insights® (correlating internal EDR/SIEM/SOAR telemetry with external intelligence), Recorded Future AI (AI Sessions, AI Insights, AI Report Creation, and an MCP server), and Autonomous Threat Operations (ATO), an AI-driven 24/7 threat-hunting and response capability that integrates natively with Microsoft Defender XDR, Microsoft Sentinel, Splunk, CrowdStrike XDR & NGSIEM, Google SecOps, SentinelOne, Zscaler, and Palo Alto NGFW.

Name

Recorded Future

Legal name

RF Ultimate Parent, Inc.

Website

https://recordedfuture.com

Company type

Private

Founded year

2009

Operating status

Acquired

Headcount range

1,001–5,000 employees

Short description

Recorded Future provides AI-driven threat intelligence for enterprises, governments, and security teams, unifying cyber, fraud, brand, and third-party risk on its Intelligence Graph® platform. It is a wholly-owned Mastercard subsidiary serving 1,900+ customers across 80+ countries.

Ownership category

akta.pro rank

Product category

Threat Intelligence Software

akta.pro primary industry

Vulnerability Intelligence & Exploit Prediction (HDADAHAI)

akta.pro secondary industries

Threat Intelligence Services (BPAEADAC), Exposure Analytics & Risk-Based Prioritization (RBVM) (HDADAHAF)

Keywords

• Threat intelligence platform
• Cybersecurity intelligence software
• Attack surface management
• Digital risk protection
• Payment fraud intelligence

Headquarters

HQ city

Somerville

HQ country

United States

HQ region

North America

Offices8 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Platform subscriptions (tiered packages): Tiered subscription packages — Core, Professional, and Elite — bundled around four solution areas (Cyber Operations, Digital Risk Protection, Third-Party Risk, Payment Fraud); Autonomous Threat Operations is included with Professional and Elite packages and offered as an add-on for Core.
2. Managed and Intelligence Services: Professional and managed services including Managed Monitoring, Intelligence Services (integration and advisory), and Analyst on Demand — recurring and project-based engagements that extend customer security teams and provide custom intelligence deliverables.
3. Training and enablement programs: Recorded Future University training courses and onboarding/enablement programs sold as part of customer journeys and partner enablement.
4. Embedded intelligence inside parent products (Mastercard): Recorded Future intelligence is embedded into Mastercard's products and services (e.g., Mastercard Threat Intelligence, RiskRecon capabilities, CyberShield partnership with Wipro), generating inter-company revenue and joint offerings such as payment fraud skimmer intelligence and brand monitoring.

Pricing tiers

Go-to-market motion4 records

Distribution channels7 records

Marketing channels11 records

Core offering

Recorded Future provides an AI-driven threat intelligence platform built on the Intelligence Graph®, which ingests and correlates data from over one million sources to deliver real-time intelligence on threat actors, malware, vulnerabilities, and adversary infrastructure. The platform is organized around four solution areas — Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud — and powers specialized modules (Threat, Brand, Identity, Vulnerability, Geopolitical, Attack Surface, SecOps Intelligence) plus an Autonomous Threat Operations capability for AI-driven 24/7 threat hunting and response.

Product overview

Recorded Future offers a platform-plus-modules architecture organized around four solutions (Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud), all unified by the Intelligence Graph® — the AI-driven core that indexes over 1 million sources and correlates threat actors, campaigns, malware, infrastructure, and vulnerabilities. Underpinning platform capabilities include Collective Insights®, Recorded Future AI (with AI Sessions, AI Report Creation, AI Insights, agents, and MCP server), and Integrations and APIs that connect to SIEM, SOAR, EDR, IAM, and vulnerability management tools. The platform powers nine specialized intelligence modules including Threat Intelligence, Brand Intelligence, Identity Intelligence, Payment Fraud Intelligence, Vulnerability Intelligence, Third-Party Intelligence, Geopolitical Intelligence, Attack Surface Intelligence, and SecOps Intelligence. Extended capabilities include Autonomous Threat Operations for 24/7 AI-powered threat hunting, Private Sandbox for malware detonation, External Identity, VIP Credential Monitoring, and Executive Protection.

Differentiator

Problem solved

Functional benefit

Brands

• The Record: Recorded Future's owned cybersecurity news publication, delivered as 'The Record by Recorded Future LLC' and published at therecord.media, providing news, podcasts, and the Cyber Daily newsletter.
• Insikt Group

Products and services

• Recorded Future Intelligence Platform
• Intelligence Graph

Quantifiable outcome

• 73% increase in visibility into threats; 65% faster threat identification; 64% improved understanding of threat landscape
• +14 more outcomes

Named customers21 records

Segments10 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration13 records

AI capability11 records

Feature8 records

Partnerships

22 partnerships are on record, tiered flagship, minor and core.

• Wipro LimitedflagshipStrategic or Co-development Partner · 2 June 2026Strategic partnership to launch a Managed Threat Intelligence and Brand Monitoring service within Wipro's MSSP portfolio under its CyberShieldSM offering. Integrates Recorded Future's AI-powered threat intelligence into Wipro's security operations, threat hunting, and digital risk protection workflows at enterprise scale. Wipro plans to use the platform internally and offer joint solutions globally.
• Cloudflare (via Mastercard partnership)minorStrategic or Co-development Partner · 2 June 2026Cloudflare and Mastercard announced a strategic partnership in February 2026 to develop cybersecurity tools including attack surface monitoring, real-time cyber posture assessment, and risk mitigation; Recorded Future's intelligence is embedded via Mastercard Threat Intelligence and RiskRecon capabilities.
• TenableflagshipTechnology or Integration · 21 May 2026Founding ecosystem partner in Tenable's Open Partner Exchange Network (OPEN). Recorded Future AI integrates with Tenable One via a new Open Connector enabling bi-directional data exchange across 330+ validated integrations, unifying external threat intelligence with exposure management.
• BitsightflagshipTechnology or Integration · 21 May 2026Founding ecosystem partner alongside Recorded Future and Splunk in Tenable's OPEN ecosystem, contributing external intelligence and telemetry to enable coordinated remediation across security environments.
• SplunkflagshipTechnology or Integration · 21 May 2026Ecosystem partner in Tenable's OPEN ecosystem contributing intelligence and telemetry; Recorded Future also has deep native integration with Splunk SIEM/SOAR and supports launching autonomous threat hunts from Splunk.
• Tenable (Watch List connector)coreTechnology or Integration · 19 May 2026Automatic Watch List connector with Tenable Vulnerability Management keeps Recorded Future vulnerability Watch Lists continuously synchronized with scan data from Tenable.
• Qualys (Watch List connector)coreTechnology or Integration · 19 May 2026Automatic Watch List connector with Qualys VMDR keeps Recorded Future vulnerability Watch Lists continuously synchronized with Qualys scan data.
• Okta / Microsoft Identity (identity automation)coreTechnology or Integration · 19 May 2026Pre-built integrations enable automated password resets with Microsoft Identity or Okta triggered by Recorded Future identity/credential alerts (e.g., 7-Eleven's SOAR playbook processing 330+ identity alerts).
• eMerge Americas (Title Partner sponsorship)coreGTM or Marketing Partner · 27 March 2026Recorded Future (with Mastercard) is a Title Partner of eMerge Americas 2026 in Miami, leveraging the conference to highlight South Florida as a global security, fintech, and innovation hub and to engage security leadership buyers.
• CYBERAcoreTechnology or Integration · 26 February 2026Partnership to integrate CYBERA's Money Mule Intelligence into the Recorded Future Platform, enabling fraud teams at banks to detect scam-linked mule accounts before funds are transferred. Addresses U.S. Authorized Push Payment fraud projected to grow from $8.3B in 2024 to nearly $15B by 2028.
• CrowdStrikecoreTechnology or Integration · 1 February 2026Recorded Future's Autonomous Threat Operations integrates natively with CrowdStrike Falcon XDR and NGSIEM, enabling customers to push continuously validated malicious indicators and run autonomous threat hunts directly within the Falcon platform.
• Microsoft (Microsoft Defender XDR and Microsoft Sentinel)flagshipTechnology or Integration · 1 February 2026Native integration of Autonomous Threat Operations with Microsoft Defender XDR and Microsoft Sentinel enables automated threat intelligence enrichment, password reset actions, and threat hunting inside the Microsoft security stack.
• Google SecOpscoreTechnology or Integration · 1 February 2026Autonomous Threat Operations integrates natively with Google SecOps (formerly Chronicle) to push continuously validated malicious indicators and enable threat hunting and response across Google's security operations platform.
• SentinelOnecoreTechnology or Integration · 1 February 2026Autonomous Threat Operations integrates natively with SentinelOne's XDR platform to enable automated threat hunting and intelligence-driven prevention.
• ZscalercoreTechnology or Integration · 1 February 2026Autonomous Threat Operations integrates with Zscaler for intelligence-led prevention and threat hunting across Zscaler's zero-trust platform.
• Palo Alto Networks (NGFW)coreTechnology or Integration · 1 February 2026Autonomous Threat Operations integrates natively with Palo Alto Networks Next-Generation Firewall (NGFW) for automated prevention of malicious network traffic.
• Exabeam (Scottish tech ecosystem mention)coreTechnology or Integration · 4 December 2025Exabeam and Recorded Future strategic partnership referenced in November 2025 Scottish tech sector coverage.
• ExabeamcoreTechnology or Integration · 18 November 2025Strategic partnership to integrate Recorded Future's threat intelligence with Exabeam's security analytics platform, enabling real-time threat intelligence enrichment, automation of response actions, and improved investigation efficiency for intelligence-led threat detection and response.
• Mastercard (Mastercard Threat Intelligence co-launch)flagshipStrategic or Co-development Partner · 27 October 2025Co-developed Mastercard Threat Intelligence, launched at Money 20/20 USA in October 2025, combining Mastercard's fraud insights with Recorded Future cyber threat intelligence to help banks detect and prevent cyber-enabled payment fraud. Intelligence data has helped identify malicious domains impacting ~9,500 e-commerce sites linked to ~$120M in fraud.
• Mastercard (MSSP / partner ecosystem distribution)flagshipChannel Partner/ Reseller/ Distributor · 1 September 2024Recorded Future is sold and embedded through Mastercard's global MSSP and partner channels, including Wipro CyberShieldSM, Mastercard Threat Intelligence for issuing/acquiring banks, and Mastercard RiskRecon — leveraging Mastercard's customer footprint for distribution.
• Hatching (Triage sandbox)coreStrategic or Co-development Partner · 8 July 2022Recorded Future acquired Hatching in July 2022 and integrated Hatching's Triage sandboxing solution into the Intelligence Cloud, providing automated malware analysis with 1.5M+ samples detonated daily.
• SecurityTrailscoreStrategic or Co-development Partner · 4 January 2022Recorded Future acquired SecurityTrails in January 2022 to integrate internet asset inventory and attack surface monitoring data into its enterprise security intelligence platform — now part of Attack Surface Intelligence.

Scale indicators17 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• Mandiant (Google Cloud): Mandiant is a direct peer in cyber threat intelligence and incident response; following its 2024 integration into Google Cloud it competes head-on with Recorded Future for enterprise CTI and threat-hunting engagements and was named alongside Recorded Future in the inaugural 2026 Gartner MQ for CTI.
• Anomali: Anomali is a direct peer offering a threat intelligence platform with similar TIP/aggregator, STIX/TAXII, and SIEM/SOAR integration capabilities; positioned as a comparable alternative to Recorded Future's Intelligence Platform for enterprise buyers.
• ThreatConnect: ThreatConnect is a direct peer in the threat intelligence platform space, offering TIP, threat intel orchestration, and SOAR capabilities; competes for the same enterprise CTI and SecOps buyers that Recorded Future targets with its Intelligence Graph and ATO offerings.
• ZeroFox: ZeroFox is a direct peer in digital risk protection and external threat intelligence, with overlapping brand protection, executive protection, and dark-web monitoring capabilities that directly compete with Recorded Future's Digital Risk Protection solution.
• Flashpoint: Flashpoint is a direct peer in threat intelligence with deep-and-dark-web collection, vulnerability intelligence, and finished intelligence, competing with Recorded Future's Insikt Group® research and dark-web monitoring capabilities.

Broad incumbents

• CrowdStrike: CrowdStrike is a broad XDR/endpoint incumbent that bundles Falcon Intelligence and now natively integrates with Recorded Future ATO inside Falcon; competes at the platform level for security budget while also serving as a key integration partner for Recorded Future intelligence.
• Palo Alto Networks (Unit 42): Palo Alto Networks' Unit 42 threat intelligence arm is a broad incumbent peer that competes with Recorded Future on CTI content and feeds, while Recorded Future ATO integrates natively with Palo Alto NGFW — making it both a competitor and a partner.
• Microsoft (Defender Threat Intelligence / Sentinel): Microsoft bundles threat intelligence across Defender XDR, Microsoft Sentinel, and Security Copilot, competing with Recorded Future for enterprise CTI budget while also serving as one of Recorded Future's most important native ATO integration partners.

Emerging players

• Intel 471: Intel 471 is an emerging player in cyber threat intelligence focused on adversary, malware, and credential intelligence; overlapping use cases with Recorded Future's Threat Intelligence and Identity Intelligence modules, particularly for CTI teams and fraud use cases.
• Tenable: Tenable is an emerging/adjacent peer in vulnerability and exposure management; Recorded Future is a founding ecosystem partner in Tenable's Open Partner Exchange Network (OPEN), so the two are increasingly co-sold while still competing for some vulnerability intelligence budget.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/recordedfuture
• YouTubeyoutube.com/user/RecordedFuture
• Facebookfacebook.com/recordedfuture
• LinkedInlinkedin.com/company/recorded-future
• Instagraminstagram.com/recordedfuture

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles15 records

Subsidiaries6 records

Funding overview

Funding rounds7 records

Investors9 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A3 records

Investments2 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Recorded Future