Darktrace
The essential AI cybersecurity platform
Founded
2013
Starting Price
Custom
Category
Cybersecurity
Last updated June 29, 2026
About Darktrace
Darktrace is an AI-native cybersecurity platform built on Self-Learning AI that learns the unique patterns of an organization to detect and autonomously respond to known and novel threats. Its ActiveAI Security Platform spans network, email, cloud, OT, identity, and endpoint, with an agentic Cyber AI Analyst that investigates incidents across domains in real time.
Pros & Cons
Pros
- Self-learning AI adapts to each environment without heavy manual configuration
- Exceptional at detecting subtle anomalies and novel, signature-less threats
- Autonomous response contains threats while maintaining business continuity
- Threat Visualizer makes complex incidents easy to understand
- Cyber AI Analyst reduces analyst workload by automating investigations
Key Features
Self-Learning AI
Learns the normal behavior of every user and device to spot subtle anomalies and previously unknown threats without relying on signatures.
Cyber AI Analyst
Agentic AI that autonomously investigates incidents across network, cloud, SaaS, identity, email, and endpoint, correlating events like a human analyst.
Autonomous Response
Takes surgical, targeted action to contain threats in real time while maintaining business continuity.
Network Security
Monitors network traffic with behavioral analysis to detect anomalous activity and lateral movement.
Email Security
Defends against phishing and business email compromise by learning normal communication patterns for each user.
Cloud Security
Provides real-time threat detection and visibility across cloud environments and SaaS applications.
OT Security
Protects industrial control systems and operational technology with unified IT/OT visibility.
Pricing
ActiveAI Security Platform
Custom
- Self-Learning AI across the digital estate
- Modular: Network, Email, Cloud, OT, Identity, Endpoint
- Cyber AI Analyst autonomous investigations
- Autonomous Response
- Pricing scales by deployment size and modules
Best For
Detecting novel and insider threats
Surfaces zero-day and insider threats that signature-based tools miss by flagging deviations from learned normal behavior.
Autonomous incident response
Contains active attacks automatically in real time, buying time for security teams without disrupting operations.
Email and phishing defense
Stops advanced phishing and business email compromise by understanding each user's normal communication.
OT and critical infrastructure protection
Gives industrial organizations unified IT/OT visibility to protect control systems from disruption.
