ZeroFox HNTR platform launches with executive protection app

ZeroFox has launched the ZeroFox HNTR platform, an AI-first service that combines its digital risk protection and threat intelligence products into one offering. The first application on the platform is HNTR Executive Protection, which is built to identify and help remove threats aimed at corporate leaders; ZeroFox said both products are generally available.

The company did not disclose pricing, early customer counts or revenue expectations for HNTR. For ZeroFox, the launch is a product packaging and workflow bet: take years of external threat data, apply AI inside analyst workflows, and route validated threats into its takedown operation rather than leaving security teams with another alert queue.

What is the ZeroFox HNTR platform?

HNTR is ZeroFox’s new platform for finding, validating and disrupting external threats tied to a customer’s brands, domains, people and assets. ZeroFox says the system uses data collected over more than a decade from the open web, deep web and dark web, along with intelligence gathered by its analysts.

The workflow is organized around three steps: discovery, validation and disruption. HNTR looks for signals of exposure, connects related indicators into campaigns and then has an analyst review the context, so a team can address a broader threat pattern rather than many isolated alerts. Threats that pass validation are sent to the ZeroFox Global Disruption Network for takedown.

ZeroFox is positioning the AI as part of the analyst process, rather than as a fully autonomous replacement for human judgment. That distinction matters in executive protection and external threat intelligence, where a false positive can waste physical security resources and a missed signal can carry real-world consequences.

Why ZeroFox started with executive protection

ZeroFox chose executive protection as HNTR’s first use case because risks to senior leaders often span digital and physical channels. The company points to examples such as home addresses circulating online, travel details appearing through data brokers or hostile discussion emerging in forums before an in-person incident.

HNTR Executive Protection monitors more than the executive alone. ZeroFox says it extends coverage to family members, residences and travel, areas that can create exposure even when the target is a corporate leader. The application includes an Executive Risk Score that measures an individual’s exposure and compares it by percentile.

The product also watches for changes in online sentiment that ZeroFox says can appear before a physical threat, flags exposed personal information about executives and relatives, including information they may have published themselves, and connects travel intelligence to routes and destinations.

Russ Bentley, ZeroFox’s executive vice president of product, said the risk around an executive frequently sits in family, travel and unintended disclosures, rather than only in the executive’s own online presence. He also said security teams need threats removed, not just added to a queue.

ZeroFox Chief Executive David Muse said the company is trying to give security teams more time by monitoring early signs of intent across social platforms and harder-to-see parts of the web. Chris Steffen, vice president of research at Enterprise Management Associates Inc., said in ZeroFox’s announcement that security teams are having trouble separating genuinely new threats from variants of known activity, and that validated historical intelligence can help analysts make that call.

ZeroFox plans to show HNTR live at booth 2452 during Black Hat USA in Las Vegas next week. The Baltimore-founded company has been privately held since 2024, when Haveli Investments took it private in a deal valued at about $350 million on an enterprise basis. Muse became chief executive in the same year as the buyout.

This story draws on original reporting from SiliconANGLE.