TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Darktrace

    Score8.3 out of 10
    N/ADarktrace AI interrupts in-progress cyber-attacks, including ransomware, email phishing, and threats to cloud environments. It's able to detect and establish baselines for your organization so it can make the distinction between what is and what isn't normal network activity for your organization. This allows it to tackle complex cyber-attacks as they happen and prevent future cyber-attacks from happening.N/A

    Sophos Rapid Response

    Score8 out of 10
    N/ASophos Rapid Response provides assistance, identifying and neutralizing active threats against the organization – delivered by an expert team of incident responders. Whether it is an infection, compromise, or unauthorized access attempting to circumvent security controls, Sophos aims to stop it.N/A

    TheHive

    Score9.7 out of 10
    Enterprise companies (1,001+ employees)
    TheHive is a collaborative case management platform that helps security teams centralize, structure, speed up and scale their alert management, investigations and incident response.N/A
    Pricing
    DarktraceSophos Rapid ResponseTheHive
    Editions & Modules
    No answers on this topic
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    DarktraceSophos Rapid ResponseTheHive
    Free Trial
    NoNoYes
    Free/Freemium Version
    NoNoYes
    Premium Consulting/Integration Services
    NoNoYes
    Entry-level Setup FeeNo setup feeOptionalOptional
    Additional DetailsTheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Prices start from 1 organization and 5 users.
    More Pricing Information
    Community Pulse
    DarktraceSophos Rapid ResponseTheHive
    Considered Multiple Products
    Darktrace
    No answer on this topic
    Sophos
    No answer on this topic
    StrangeBee
    No answer on this topic
    Key User Insights
    Would buy again
    90%
    Would buy again
    9 Answers
    No answers on this topic
    No answers on this topic
    Delivers good value for the price
    86%
    Delivers good value for the price
    6 Answers
    No answers on this topic
    No answers on this topic
    Happy with the feature set
    90%
    Happy with the feature set
    9 Answers
    No answers on this topic
    No answers on this topic
    Lived up to sales and marketing promises
    80%
    Lived up to sales and marketing promises
    8 Answers
    No answers on this topic
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    10 Answers
    No answers on this topic
    No answers on this topic
    Features
    DarktraceSophos Rapid ResponseTheHive
    Incident Response Platforms
    Comparison of Incident Response Platforms features of Darktrace and Sophos Rapid Response and TheHive
    Feature
    Darktrace
    -
    Ratings
    Sophos Rapid Response
    10.0
    1 Ratings
    11% above category average
    TheHive
    10.0
    1 Ratings
    11% above category average
    Company-wide Incident Reporting00 Ratings10.01 Ratings10.01 Ratings
    Integration with Other Security Systems00 Ratings10.01 Ratings10.01 Ratings
    Attack Chain Visualization00 Ratings10.01 Ratings00 Ratings
    Centralized Dashboard00 Ratings10.01 Ratings10.01 Ratings
    Machine Learning to Prevent Incidents00 Ratings10.01 Ratings00 Ratings
    Live Response for Rapid Remediation00 Ratings10.01 Ratings10.01 Ratings
    Best Alternatives
    DarktraceSophos Rapid ResponseTheHive
    Small Businesses
    No answers on this topic
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    SolarWinds NetFlow Traffic Analyzer (NTA)
    Score8.6 out of 10
    No answers on this topic
    No answers on this topic
    Enterprises
    SolarWinds NetFlow Traffic Analyzer (NTA)
    Score8.6 out of 10
    No answers on this topic
    No answers on this topic
    All AlternativesView all alternativesView all alternativesView all alternatives
    User Ratings
    DarktraceSophos Rapid ResponseTheHive
    Likelihood to Recommend
    8.0
    (13 ratings)
    9.0
    (1 ratings)
    10.0
    (1 ratings)
    Likelihood to Renew
    9.7
    (2 ratings)
    -
    (0 ratings)
    -
    (0 ratings)
    Usability
    6.5
    (3 ratings)
    -
    (0 ratings)
    -
    (0 ratings)
    Support Rating
    7.0
    (3 ratings)
    -
    (0 ratings)
    -
    (0 ratings)
    User Testimonials
    DarktraceSophos Rapid ResponseTheHive
    Likelihood to Recommend
    Darktrace
    Darktrace is a product well suited for the vast majority of infrastructures and helps monitoring and responding to threats based on the network in a very elastic way. This is a product based on on-premise infrastructures that hosts its machines locally, of course it can be technically difficult to monitor an entire On-Cloud infrastructure but even there there's room for sensors and monitoring, not to mention the SaaS and mail integration that completes the product.
    Incentivized
    Read full review
    Sophos
    Knock on wood we haven't had a instance where we need to bring the Rapid Response team in. But from the meetings we had we are certain that they will be a valuable asset if and when we have an incident.
    Incentivized
    Read full review
    StrangeBee
    Managing incident response - it does exactly what it is supposed to do!
    Read full review
    Pros
    Darktrace
    • Uses it Al model UEBA to detect anomalies in the behaviour of not only the users in a corporate network but also the routers, servers, and endpoints in that network.
    • Provides a visualisation of both egress and outbound network traffics flowing in and out of the organisation.
    • Darktrace comes with it autonomous AI model detection and responses capabilities.
    • Darktrace as an AI next generation NDR solution, prevents ,contains and quarantines malicious traffics from and into the corporate network.
    Read full review
    Sophos
    • 24/7 team of remote incident responders
    • Full-scale incident response service that will triage, contain and neutralize active threats
    • Port Mortem of the incident with recommendations
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Cons
    Darktrace
    • There are few areas that I would say need to be improved; their customer support portal allows you to log tickets with any suggestions or things you feel the product is missing, and they will generally show you how to achieve what you want, or in some cases, introduce it as a feature in a later update.
    Incentivized
    Read full review
    Sophos
    • For a non-profit pricing could always be better
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Likelihood to Renew
    Darktrace
    It's a powerfull product that help administrators to provide email security to our organization.
    Good metrics about received emails that help us to determine in doubt case if the email is a false positive or it's malware.
    They're improving the product releasing continuous updates and have mobile phone app to manage it.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    StrangeBee
    No answers on this topic
    Usability
    Darktrace
    The Darktrace toolset is very expansive, allowing it to handle many different tasks, but this leads to a user interface that is sometimes not at all intuitive. Icons don't always make sense visually, and the associated tool tips do not always provide enough detail on what action the button performs
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    StrangeBee
    No answers on this topic
    Support Rating
    Darktrace
    Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    StrangeBee
    No answers on this topic
    Alternatives Considered
    Darktrace
    We did NOT select Darktrace. OSSIM/AlienVault is a more mature product and it provided better intelligence and reporting. The end user interface is much easier to use - and you can tell built form engineers who have had to do the work. My suggestion for anyone considering Darktrace, is to get the price upfront; do a 30/60 onsite trail; and do the same thing, at the same time, with AlienVault. AlientVault will win every time. I say that because that's exactly what I did.
    Incentivized
    Read full review
    Sophos
    We were a Secureworks customer and there were limitations on the platform that caused us to evaluate competitors. We didn't get to far in discussions with Palo but from what we heard and reach about Sophos RR it was an easy decision.
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Return on Investment
    Darktrace
    • One big positive is how it helps us with the security assessments that clients have done on us. They are looking to see if we know how we might have unusual/malicious traffic running on the network.
    • If you have a small network and only need 1 appliance, it can be a good ROI and peace of mind.
    • You could go down a hole in trying to spend time looking at all of your traffic with this software. You need to focus only on what it is showing as potential bad traffic.
    Incentivized
    Read full review
    Sophos
    • It was a positive when we negotiated our cyber insurance
    • It is comforting to the Board of Trustees that we have this in our back pocket
    • Helps us sleep at night knowing they're a phone call away
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    ScreenShots

    TheHive Screenshots

    Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.