Darktrace vs Qualys Private Cloud Platform

• It did an ok job of analyzing and collecting data. It used a span (mirrored) port and then using its own algorithm developed flow records.
• It did an ok job of segmenting traffic into networks - not always correctly, but ok.
• It tried to identify devices by type - once again, it did ok, but not that great.

Read full review

• The first benefit is actually in the vendor. Qualys provides free instructor-led training.
• Ease of use in a diverse environment.
• The Qualys Private Cloud Platform has a complete suite of reporting capabilities so you can use your data quickly.

Read full review

• False positives. Darktrace uses "AI" to create its alerts for "unusual" or "malicious" activity. It is very common to see an alert for completely benign and normal device behavior - PC tries to print for the first time in a while, for example.
• Antigena actions. To some extent, this is a continuation of the previous point. Darktrace can break the network connectivity of the suspected device automatically. The excessive number of false positives makes administrators reluctant to use this feature, though. Also, the default Antigena actions are not relevant to real-world problems as I saw them in my experience with Darktrace.

Read full review

• The way that devices are catalogued can be tough in a DHCP environment.

Read full review

• We had an ROI just during the POC. DarkTrace helped us identify a ransomware attack and we stopped it before it happened.
• The weekly reports more than pay for itself within the first few months.
• The powerful search capability helps us solve problems where other solutions fall short.

Read full review

• Much faster response time for vulnerability management.
• Overall better security posture.

Read full review