SOCRadar is a provider of Extended Threat Intelligence (XTI) delivered via a Software as a Service (SaaS) platform. The offerings of the company include External Attack Surface Management (EASM), Digital Risk Protection Services (DRPS), and Cyber Threat Intelligence (CTI). Its platform provides organizations the capacity to enhance their Security Operations Center (SOC) team efficiency by only dealing with valid, actionable, and context-based threat alerts, thereby eliminating the issue of false positives.
Do You Manage Peer Insights at SOCRadar?
Access Vendor Portal to update and manage your profile.
I really like the typo squatting/malicious domain shutdown feature, it's great and not something I personally have come across with any other product. I also like the constant scanning for leaked company credentials, that then will notify you when it's found some. Luckily all of ours that were found were old and the users were no longer at the company, but there were 2 cases where even personal passwords and PCI data were leaked for the same users this showed that likely on their BYOD devices they had some kind of keyloggers on their devices! The UI is really clean and easy to navigate which I like, from the first ever login I found I didn't get lost when I was looking for certain things, whereas with other products you may have to click around a lot to find the information you are looking for, with SOCRadar it's simple to get around.
Both Attack Surface Management and Digital Risk Protection capabilities are continuously being enhanced, SOCRadar keeps making all their modules more powerful and useful.
Set of features, search capabilities, mobile app vulnerability scanning, integrations, multi-company parent-child deployment
One thing to note which is not really a dislike as such but something to not get caught out with is, when you buy the product, for things like domain takedowns you need to purchase credits on top to do this, so it's not a feature you can use free will, it does cost you credits. There will likely be a negotiation for how many credits you may need when you look at buying and I know you can add more at any time, but that is something to note. The only other thing for me is with the third party risk management, I feel there should be parts where it shows what cyber security accreditations companies are compliant with, it would help when dealing with third parties and get a better overall risk score knowing that they are compliant with say ISO 27001 for example.
There isn't anything I really dislike, but there are a couple of areas that could be further enhanced. ASM and mobile vulnerability scanners work well, though they don't yet fully replace dedicated VS from other vendors. Additionally, managing user permissions and roles can be a bit challenging, but we are confident these aspects will continue to improve with future updates.
reports are commercially branded in the last page for paying customers. There should be a possibility to set dashboards with custom filters.