Forward Future Tools Library
Darktrace
Darktrace detects and responds to novel threats across network, email, cloud, endpoint, OT, and identity environments for enterprise security teams.
Try Darktrace →
darktrace.com·Contact Sales
›What is Darktrace?
Darktrace is an AI cybersecurity platform that establishes behavioral baselines for an organization and detects activity that differs from normal patterns. Its products cover network, email, cloud, endpoint, OT, and identity security, with capabilities for investigation and autonomous response.
›What are the pros and cons of Darktrace?
Strengths
Covers multiple attack surfaces through one platform
Can detect activity that differs from an organization’s established baseline
Supports autonomous action against threatening traffic
Includes email link locking and blocking
Offers investigation and alert-triage capabilities
Trade-offs
Can produce false-positive alerts
The dashboard can be confusing because it presents a large amount of data
Some interface icons have limited tooltip detail
Reported contract costs can be substantial
›What are Darktrace’s key features?
Behavioral baselining to identify anomalous network activity
Threat detection across network, email, cloud, endpoint, OT, and identity environments
Autonomous response that can halt threatening traffic
Email security with malicious-link locking and blocking
AI investigations and a Cyber AI Analyst for alert triage
Integrations across security and technology environments
›What are the best use cases for Darktrace?
Monitoring network and device activity for anomalous behavior
Detecting and interrupting ransomware, phishing, and account takeover attempts
Locking or blocking malicious links in email
Investigating threats across cloud, endpoint, OT, and identity environments
Responding to active attacks and reducing security alert triage time
›What is the pricing for Darktrace?
Contact Sales
›Who is Darktrace best for?
enterpriseBroad coverage across network, email, cloud, endpoint, OT, and identity makes it suitable for organizations managing several security domains.
IT security professionalsSecurity teams can use behavioral detection, autonomous response, email controls, and AI-assisted investigations in day-to-day operations.
CISOsThe platform supports a consolidated approach to detecting and responding to threats across an organization’s attack surfaces.
Not for
- Solo buyers or small organizations seeking low-cost, self-serve security software should look elsewhere, since reported contracts can be substantial and pricing is sales-led.
- Teams that require a very simple dashboard may struggle with the volume of information in the interface.
