Darktrace vs. Tripwire Enterprise

In network-related attack detection and response, Darktrace threat visualizer is your best solution. Self-containment and quarantine of suspicious network activities with highly detection rate.

Tripwire Enterprise is great for hosting/data center environments and it greatly helps where console screenshots and reporting fill a lot of our client internal audit needs for security and change control.

Incentivized

• Monitors your network for unusual behaviour; as it learns what is normal for your network, you don't need to worry too much about things that are normal for your organisation, but might be considered odd in other places, triggering as alarms. It can also detect more subtle changes such as a device accessing a server but at an unusual time.
• There are a large number of models that are used to create the alerts, which can all be customised, and you can also create your own from scratch, to allow you to tailor it perfectly to your situation.

Incentivized

• It allows us to track development changes for engineer accountability.
• Tripwire Enterprise also allows us to monitor changes/updates being done to our systems in our hosting centers.
• We use the software to track user access and critical system changes.

Incentivized

• Really had a poor time of identifying devices and what the device's purpose was - a simple nmap scan did a better job. The problem is they expect you to fine-tune the results - which is exactly what you would expect - but day one it found over 2,000 servers (and I only have 112).
• Really had a hard time separating network traffic into locations - I use distinct subnets for my buildings, but there was no good way to create a logical map of my traffic internally. Did not garner a sense of trust that it was seeing everything.
• Sat through a few "analyst" reports - which showed me possible threats in my environment. I am already using a few open source tools, and they actually found more than the analyst reports. Also, there was no way to get the reports on your own - you had to work through their analysts to get the information.

Incentivized

• In previous versions the management console was a little hard to navigate in some respects.
• I'm sure this has changed over time but we hope the reporting system has gotten more granular.
• I really don't have to many cons for this product, I recommend it for every company I work for!

Incentivized

Darktrace comes with a simple usability interface with easy navigation and organisation.

Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.

Incentivized

The Darktrace user interface was improved. Darktrace provides more metrics and more info to decide if an email is malicious or not in doubt case. Darktrace provides a lot of info about the email being analyzed, if there was a previous communication between both parts before for example, it's so easy to deploy.

Incentivized

Honestly, I haven't used other products to do what Tripwire does, it's always my first recommendation.

Incentivized

• Darktrace is covering some lack of security issues.
• Darktrace helps the company to follow some compliance obligations.
• Darktrace can't solve all issues. It needs to work with other Security tools (e.g Splunk).

Incentivized

• Tripwire has been a positive business impact for us because of its trusted name. Our customers require software like Tripwire because they know their data and security concerns are in good hands when it's deployed.
• The ROI for Tripwire is also a positive for our business because of the time and man power saved in due diligence and reporting for our clients' internal auditing.

Incentivized