Item: Darktrace
Rating: 8
Author: Verified User

Overall Satisfaction with Darktrace

Use Cases and Deployment Scope

We use Darktrace's NETWORK and EMAIL services to monitor for and act upon anomalous activity. Their use of AI algorithms allows the detection system to instantly halt all threatening traffic. In addition, the EMAIL service uses similar technology to weed out malicious email, perform email link locking and blocking, and more to keep your users and network safe.

Pros and Cons

Pros

detects anomalous network activity
automatically act on detected threats
email link locking
email link blocking

Cons

The dashboard offers a lot of data but can also be very confusing to use
Tooltips for icons could be more detailed

Return on Investment

They will negotiate on pricing if you're insistent
Expect 5%+ price increase for each year across the contract

Usability

The Darktrace toolset is very expansive, allowing it to handle many different tasks, but this leads to a user interface that is sometimes not at all intuitive. Icons don't always make sense visually, and the associated tool tips do not always provide enough detail on what action the button performs.

Alternatives Considered

Palo Alto Networks Advanced Threat Prevention, Palo Alto Networks Advanced URL Filtering and Palo Alto Networks Cortex XDR

Darktrace does a very good job at complementing our other security tools by adding an additional level of automated security. It is important to point out that the automation is optional. We ran Darktrace in "manual" mode until we were comfortable enough to switch it to a fully automated system.

Key Insights

Do you think Darktrace delivers good value for the price?

Not sure

Are you happy with Darktrace's feature set?

Yes

Did Darktrace live up to sales and marketing promises?

Yes

Did implementation of Darktrace go as expected?

Yes

Would you buy Darktrace again?

Yes

Other Software Used

Palo Alto Networks Cortex XDR, Palo Alto Networks Advanced Threat Prevention, Palo Alto Networks Advanced URL Filtering

Likelihood to Recommend

Darktrace is an enterprise-level product that is not affordable for most small or mid-sized companies. The period during which the appliance learns your network can be time consuimg as many false-positives are alerted. It is important that your staff anticipates this and has the time to help train the device.

Comments

Please log in to join the conversation

detects anomalous network activity

Modules Used