Darktrace vs FortiSIEM

• It did an ok job of analyzing and collecting data. It used a span (mirrored) port and then using its own algorithm developed flow records.
• It did an ok job of segmenting traffic into networks - not always correctly, but ok.
• It tried to identify devices by type - once again, it did ok, but not that great.

Read full review

• Log aggregation and analytics
• CMDB
• Device inventory and remote management .
• It can be used by Managed Security Providers who have multiple customers as it offers multi organization support .

Read full review

• False positives. Darktrace uses "AI" to create its alerts for "unusual" or "malicious" activity. It is very common to see an alert for completely benign and normal device behavior - PC tries to print for the first time in a while, for example.
• Antigena actions. To some extent, this is a continuation of the previous point. Darktrace can break the network connectivity of the suspected device automatically. The excessive number of false positives makes administrators reluctant to use this feature, though. Also, the default Antigena actions are not relevant to real-world problems as I saw them in my experience with Darktrace.

Read full review

• Non-intuitive/unattractive user interface
• Too many features that will usually remain unused
• Very crowded (too many icons) portal
• The reporting feature is confusing, e.g. you have to click on the "refresh" button to get the result of your inquiry. The report generation process can be much easier, as the user interaction is not pleasant.

Read full review

• We had an ROI just during the POC. DarkTrace helped us identify a ransomware attack and we stopped it before it happened.
• The weekly reports more than pay for itself within the first few months.
• The powerful search capability helps us solve problems where other solutions fall short.

Read full review

• Other SIEM solutions were cost prohibitive at the time of purchase (2016).
• Just like any other SIEM, it helped draw a better picture of our current security posture.

Read full review