Our Darktrace review
Darktrace is a acceptable AI tool option: strongest at insider threat detection, weakest on tuning period produces false positives.
We score Darktrace 3.9 out of 5 — acceptable ease of use, strong performance and acceptable value for money.
What Darktrace is
Darktrace is Darktrace's AI tool product, launched in 2013. Self-learning AI that models normal network behaviour and autonomously contains anomalies across email, cloud and OT.
It is aimed at advanced users — the learning curve is steep. Day one you would use it for insider threat detection and cloud and email attack containment. It runs on Web and On-premise, with no mobile app, and there is an API if you want it inside your own systems.
Where it shines
The core strengths are easy to state: catches novel behaviour, not just signatures and can contain threats without an analyst. The feature set behind that is behavioural anomaly detection, autonomous response, email, cloud and OT coverage and attack path modelling.
We rate performance 4.4/5 and answer accuracy around 89% for the tasks in this category, which is why it holds up for insider threat detection and cloud and email attack containment.
Where it falls short
The honest downsides: tuning period produces false positives and enterprise budget required.
Expect a real ramp-up — we rate the learning curve steep. Budget time for it before judging the tool.
Pricing and value for money
Pricing is Quoted per organisation. There is no public per-seat price — it is quoted per organisation, so the real number depends on your team size and contract. There is no free tier, so trial it deliberately before committing.
Ask for the quote early: the alternatives below publish their pricing, so you can hold this one to a number you can compare.
Who should use Darktrace
Darktrace is the right call for insider threat detection and cloud and email attack containment. Look elsewhere if tuning period produces false positives is a bigger problem for you than catches novel behaviour, not just signatures is a benefit.
We do not track a direct replacement for it yet, which is part of the argument for it.
Consider carefully: Darktrace at quoted pricing is best used for insider threat detection and cloud and email attack containment, and it earns 3.9/5 from us.