What is Darktrace?
Darktrace is a cybersecurity company that has been building behavior-based AI security since 2013. Its AI Research Center is based in Cambridge, UK. The company sells separate products for network, email and endpoint, and it was named a Leader in the 2026 Gartner Magic Quadrant for network detection and response (NDR).
The endpoint product extends visibility, detection, investigation and response across endpoints as part of a hybrid infrastructure security strategy. Its Adaptive AI builds a behavioral model of endpoint activity within the wider environment, aimed at suspicious behavior that signatures, rules and threat intelligence alone can miss. A function called Network Endpoint eXtended Telemetry (NEXT) combines endpoint telemetry with that model. Cyber AI Analyst investigates alerts and gathers evidence for analysts.
Darktrace Email targets phishing, account compromise, data loss and collaboration security. Response policies are configurable by device type, user group, location and business hours, and can integrate with existing security tools. Specify each product separately, since network, email and endpoint are licensed and deployed on their own.
Key capabilities
- Endpoint detection Adaptive AI models endpoint behavior within the wider environment.
- Endpoint telemetry NEXT combines endpoint and network context.
- Investigation Cyber AI Analyst investigates alerts and gathers evidence.
- Response controls Configurable actions by device type, user group, location and business hours.
- Email protection A separate product against phishing and account compromise.
Where Darktrace fits
- Adaptive AI Learns your organization's operational patterns instead of relying on static rules or training data from other organizations.
- Network detection and response Visibility, detection and response across network, cloud and OT environments.
- Endpoint detection and response Adaptive AI models endpoint behavior within the wider environment, combining endpoint and network context.
- Email protection Covers phishing, account takeover, data exfiltration and human risk across email and collaboration tools.
- Secure AI Secures deployment, management and development across your AI systems and agents.
- Cyber AI Analyst Investigates alerts and gathers evidence so analysts start from a case rather than a raw alert.
- Response policies Configurable actions by device type, user group, location and business hours.
- CPS protection Named a Visionary for CPS protection platforms on the vendor homepage.
Reviews of Darktrace
Be the first to share your experience with Darktrace.
Write a review
Loading review form…
Alternatives to Darktrace
Check PointCheck Point sells Quantum firewalls and the Maestro hyperscale cluster, with SD-WAN, SASE, VPN remote access and threat protection services.
FortinetFortinet builds FortiGate next-generation firewalls on FortiOS and custom security ASICs, plus Secure SD-WAN, FortiSASE, FortiManager, FortiAnalyzer, LAN edge hardware and security operations products connected through the Fortinet Security Fabric.
NetFoundryNetFoundry created and maintains OpenZiti and offers it as a managed zero-trust platform with outbound-only connections, no inbound ports and a free tier.