Proofpoint Emerging Threats Intelligence

Name: Proofpoint Emerging Threats Intelligence
Brand: Proofpoint
Rating: 4.5 (8 reviews)

Leader

We secure how people, data and AI agents connect across email, cloud and collaboration tools

Est 2002|Valuation $10.2B|Raised $8.8B|28 Ref Customers

LinkedIn 202K|Website|Web traffic 3.3M|FTEs 5,000|HQ Sunnyvale, CA

MarketsSecurity Information and Event Management (SIEM)

Platform CoversThreat Intelligence Platforms

Proofpoint Emerging Threats Intelligence screenshot

01Competitive Landscape

Competitive Landscape

| Aspect | Proofpoint ET Intelligence | Recorded Future | Mandiant (platform/services; packaging varies) | |--------|---------------------------|----------------|----------------------------------------------| | Starting Price | Quote-based (not publicly listed) | Public packaging documents exist; detailed costs often still quote-based | Often quote-based; some public pricing references exist via resellers/benchmarks but not a single list price | | Recommended For | Organizations needing Proofpoint-sourced domain/IP reputation and threat intel feeds, particularly those standardized on Proofpoint | Teams seeking a broader intelligence cloud with finished intelligence and multiple modules (digital risk/third-party, etc.) | Organizations that require incident-response-aligned intelligence and services; often chosen where Mandiant services are a strategic priority | | Key Strength | Feed-driven operational IoCs; telemetry sourced from Proofpoint's wider product footprint (vendor-asserted) | Breadth of sources and finished intelligence workflows; modular packaging and extensive integrations | Incident-response-informed intelligence and services; credibility in IR engagements | | Key Weakness | Limited public pricing transparency; community-reported API/licensing friction; few public reviews specific to ET Intelligence | Can be costly when multiple modules are required; community critiques of tiering and cost | Packaging changes over time; potential buyer confusion about product continuity and cost | - Direct competitors and their key differentiators - Recorded Future differentiates with a broad intelligence cloud and extensive finished intelligence and risk modules; it publishes packaging and licensing documentation. - Mandiant differentiates with incident response pedigree and services, though product names and packaging can change. - Feature comparison: where this product excels vs lagging areas - ET Intelligence is well-suited to providing reputation-style IoCs (IPs/domains) for enforcement controls. - It may be less well suited than some competitors for finished intelligence reporting, comprehensive dark web collection, and business-risk modules. - Pricing comparison: value proposition vs alternatives - Quote-based pricing for Proofpoint ET Intelligence makes benchmarking more difficult. - Recorded Future publishes packaging materials that improve transparency, though enterprise costs scale with selected modules. - Customer comparisons to competitors - In community discussions, Proofpoint Emerging Threats is mentioned alongside paid feeds such as Mandiant, Flashpoint, and Recorded Future; selection often depends on whether buyers need feeds vs finished intelligence. - Market share and adoption trends - Formal market share was not established in the sources reviewed; Proofpoint appears in analyst and review listings for threat intelligence products, but that does not equate to market share. - When customers choose competitors instead (and why) - Customers often choose competitors when they require finished intelligence, more expansive context beyond IP/domain reputation, or more transparent packaging and API access.

01Competitive Landscape

Competitive Landscape

Aspect	Proofpoint ET Intelligence	Recorded Future	Mandiant (platform/services; packaging varies)
Starting Price	Quote-based (not publicly listed)	Public packaging documents exist; detailed costs often still quote-based	Often quote-based; some public pricing references exist via resellers/benchmarks but not a single list price
Recommended For	Organizations needing Proofpoint-sourced domain/IP reputation and threat intel feeds, particularly those standardized on Proofpoint	Teams seeking a broader intelligence cloud with finished intelligence and multiple modules (digital risk/third-party, etc.)	Organizations that require incident-response-aligned intelligence and services; often chosen where Mandiant services are a strategic priority
Key Strength	Feed-driven operational IoCs; telemetry sourced from Proofpoint's wider product footprint (vendor-asserted)	Breadth of sources and finished intelligence workflows; modular packaging and extensive integrations	Incident-response-informed intelligence and services; credibility in IR engagements
Key Weakness	Limited public pricing transparency; community-reported API/licensing friction; few public reviews specific to ET Intelligence	Can be costly when multiple modules are required; community critiques of tiering and cost	Packaging changes over time; potential buyer confusion about product continuity and cost

Direct competitors and their key differentiators
- Recorded Future differentiates with a broad intelligence cloud and extensive finished intelligence and risk modules; it publishes packaging and licensing documentation.
- Mandiant differentiates with incident response pedigree and services, though product names and packaging can change.
Feature comparison: where this product excels vs lagging areas
- ET Intelligence is well-suited to providing reputation-style IoCs (IPs/domains) for enforcement controls.
- It may be less well suited than some competitors for finished intelligence reporting, comprehensive dark web collection, and business-risk modules.
Pricing comparison: value proposition vs alternatives
- Quote-based pricing for Proofpoint ET Intelligence makes benchmarking more difficult.
- Recorded Future publishes packaging materials that improve transparency, though enterprise costs scale with selected modules.
Customer comparisons to competitors
- In community discussions, Proofpoint Emerging Threats is mentioned alongside paid feeds such as Mandiant, Flashpoint, and Recorded Future; selection often depends on whether buyers need feeds vs finished intelligence.
Market share and adoption trends
- Formal market share was not established in the sources reviewed; Proofpoint appears in analyst and review listings for threat intelligence products, but that does not equate to market share.
When customers choose competitors instead (and why)
- Customers often choose competitors when they require finished intelligence, more expansive context beyond IP/domain reputation, or more transparent packaging and API access.

Aspect

Proofpoint ET Intelligence

Recorded Future

Mandiant (platform/services; packaging varies)

Starting Price

Quote-based (not publicly listed)

Public packaging documents exist; detailed costs often still quote-based

Often quote-based; some public pricing references exist via resellers/benchmarks but not a single list price

Recommended For

Organizations needing Proofpoint-sourced domain/IP reputation and threat intel feeds, particularly those standardized on Proofpoint

Teams seeking a broader intelligence cloud with finished intelligence and multiple modules (digital risk/third-party, etc.)

Organizations that require incident-response-aligned intelligence and services; often chosen where Mandiant services are a strategic priority

Key Strength

Feed-driven operational IoCs; telemetry sourced from Proofpoint's wider product footprint (vendor-asserted)

Breadth of sources and finished intelligence workflows; modular packaging and extensive integrations

Incident-response-informed intelligence and services; credibility in IR engagements

Key Weakness

Limited public pricing transparency; community-reported API/licensing friction; few public reviews specific to ET Intelligence

Can be costly when multiple modules are required; community critiques of tiering and cost

Packaging changes over time; potential buyer confusion about product continuity and cost