Darktrace AI interrupts in-progress cyber-attacks, including ransomware, email phishing, and threats to cloud environments. It's able to detect and establish baselines for your organization so it can make the distinction between what is and what isn't normal network activity for your organization. This allows it to tackle complex cyber-attacks as they happen and prevent future cyber-attacks from happening.
N/A
Nexthink
Score7.3 out of 10
N/A
Nexthink Workplace Experience is a cloud-native platform allowing IT teams to manage the Digital Employee Experience (DEX) by providing insights across devices, applications, users, operating systems, locations and organizational units.
Darktrace is a product well suited for the vast majority of infrastructures and helps monitoring and responding to threats based on the network in a very elastic way. This is a product based on on-premise infrastructures that hosts its machines locally, of course it can be technically difficult to monitor an entire On-Cloud infrastructure but even there there's room for sensors and monitoring, not to mention the SaaS and mail integration that completes the product.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I've been managing desktops for 20+ years and Nexthink was the missing tool out of my toolbox. Just to give some perspective, if you were building and maintaining a house, Nexthink would be comparable to switching up from a hammer and nails and to full blown using a nailgun. Nexthink is a solution accelerator and a well thought out toolset to give you the customer experience at a glance. It allows for so much more visibility just with the default set of data points the Collector (agent) gathers, which is A LOT, and grants you the ability to gather even more data with remote actions. All of this evidence cuts how the "it could possibly be this" and "maybe it's that" discussions when you're troubleshooting an issue. It may not provide the exact answer all the time, but it gives you a "compass point" on where you need to start looking to resolve the issue. Also the service monitoring, activity monitoring, and critical event thresholds really empower the teams to know when a problem is happening and they can get ahead of it before the first call even reaches the Help Desk. Nexthink is a cornerstone tool in our environment for end user experience and I'm excited to see where the go next.
Uses it Al model UEBA to detect anomalies in the behaviour of not only the users in a corporate network but also the routers, servers, and endpoints in that network.
Provides a visualisation of both egress and outbound network traffics flowing in and out of the organisation.
Darktrace comes with it autonomous AI model detection and responses capabilities.
Darktrace as an AI next generation NDR solution, prevents ,contains and quarantines malicious traffics from and into the corporate network.
There are few areas that I would say need to be improved; their customer support portal allows you to log tickets with any suggestions or things you feel the product is missing, and they will generally show you how to achieve what you want, or in some cases, introduce it as a feature in a later update.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The on-premise solution can be slow at times and resource-demanding even on newer laptops. (This isn't the case with the cloud offering.)
Some useful features are only available to cloud customers.
Library pack configuration could be made easier, often these packs require some customization and it's not always clear how to get them up and running after importing.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The Darktrace toolset is very expansive, allowing it to handle many different tasks, but this leads to a user interface that is sometimes not at all intuitive. Icons don't always make sense visually, and the associated tool tips do not always provide enough detail on what action the button performs
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We did NOT select Darktrace. OSSIM/AlienVault is a more mature product and it provided better intelligence and reporting. The end user interface is much easier to use - and you can tell built form engineers who have had to do the work. My suggestion for anyone considering Darktrace, is to get the price upfront; do a 30/60 onsite trail; and do the same thing, at the same time, with AlienVault. AlientVault will win every time. I say that because that's exactly what I did.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Nexthink had better integration and a better user interface. 1E did not have the engagement capability which is so critical to many of the actions we complete using Nexthink. Nexthink had better trending data capabilities. 1E did not capture and hold data the way Nexthink does so all data assumes you are able to pull information from all systems at any time. with remote systems it is unlikely you will capture all systems at the same time so it makes any actions less effective. this review was performed 4 years ago so 1E may have addressed some of these limitations but Nexthink has also grown and continues to add and improve on their industry-leading capabilities.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
One big positive is how it helps us with the security assessments that clients have done on us. They are looking to see if we know how we might have unusual/malicious traffic running on the network.
If you have a small network and only need 1 appliance, it can be a good ROI and peace of mind.
You could go down a hole in trying to spend time looking at all of your traffic with this software. You need to focus only on what it is showing as potential bad traffic.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SCCM proactive remediation: Automatically resolving hundreds of SCCM issues per month
Hardware: Identification of over $5m cost avoidance by seeing a lack of usage for 128GB SSDs - no need to upgrade to 256GB... coupled with OneDrive migration packs in the Nexthink library this is valuable.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
