Darktrace
Self-Learning AI cyber defense across network and cloud.
About
Darktrace builds cyber defense on Self-Learning AI that models normal behavior for every user, device, and container, then flags subtle deviations without relying on signatures or prior threat knowledge. The Cambridge-based company covers network, endpoint, cloud, SaaS, identity, and email under one platform.
Its ActiveAI Security Platform added agentic AI to the Cyber AI Analyst, which now connects insights across endpoint processes, network, cloud, SaaS, identity, and email for autonomous investigation and response. The NEXT agent brings native endpoint process visibility to network detection and response, letting analysts trace incidents to root cause without pivoting between NDR, EDR, and XDR tools.
What it can do
- Self-Learning AI behavioral baselining
- Cyber AI Analyst with agentic investigation
- NEXT endpoint process telemetry for NDR
- Autonomous response with human oversight
- Attack surface management and exploit prediction
Setup
Deploy virtual or physical sensors to ingest network traffic and connect cloud and SaaS integrations; the AI self-learns baselines automatically.
Prerequisites
Network span ports or cloud traffic mirroring plus admin access to covered SaaS apps.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 119; Trending score 76/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.