Darktrace

What the company sells

Darktrace sells security for AI systems and agents, for network, cloud and OT environments, and for email and collaboration tools. Darktrace says it understands behavior across people, networks, applications, cloud, and AI. Darktrace says its Adaptive AI learns an organization's own operational patterns, unlike security tools that rely on static rules or training data from other organizations. Darktrace says its AI learns from each organization's own business data to identify anomalous activity for each asset across domains.

Darktrace says a dynamic understanding of every email user in an organization allows Darktrace / EMAIL to take a targeted response to threats that others miss. Darktrace learns from each organization's own activity and users, not a shared cross-customer model. Darktrace says its email security catches phishing, business email compromise, executive impersonation, and social engineering attacks. Darktrace says its behavioral detection extends across Microsoft Teams, Zoom, and Slack. When credentials are compromised, Darktrace responds autonomously by terminating sessions, forcing re-authentication, and restricting access across email, SaaS, and cloud. Darktrace says each employee's risk score adapts their email controls, so protection strengthens for higher-risk users as training progresses. The Darktrace Email Analysis Agent integrates with Microsoft Defender and Security Copilot to streamline investigation and response for SOC teams.

Darktrace says one solution detects, investigates, and contains threats across network, cloud, OT, endpoint, and identity, and learns the environment from the ground up. Darktrace / HYBRID NETWORK passively ingests traffic from on-premises and virtual networks, multi-cloud environments, OT, endpoints, and identities. Darktrace analyzes encrypted and decrypted traffic across network, cloud, and OT to surface activity that does not fit the environment. Darktrace then contains that activity with response actions taken natively or through firewalls, EDR, SOAR, and ITSM tools. Darktrace says it can flag account takeover, privilege escalation, and insider misuse when an identity stops matching how that identity normally behaves. When a threat is identified, Darktrace automatically acquires host and workload artifacts across endpoints, cloud, containers, and SaaS environments. Darktrace says its approach detects zero-day threats an average of 8 days before public CVE disclosure.

For cloud, Darktrace says its Adaptive AI continuously monitors activity across cloud assets, workloads, APIs, containers, and identities. Darktrace says Cyber AI Analyst automatically investigates alerts and connects related cloud and infrastructure activity. Darktrace's coverage extends across Compute, Serverless, Containers, IAM, Storage Services, and beyond. Darktrace draws data from lightweight host-based server agents or a combination of traffic mirroring and API logs. Darktrace supports security investigations by combining its detection and response capabilities with Amazon Security Lake.

For operational technology, Darktrace maintains a live asset inventory, obtained through passive and active scanning, and immediately reveals CVEs and End-Of-Life status. Darktrace says it identifies and contains threats across converged IT and OT environments with Adaptive AI. Darktrace says Cyber AI Analyst automatically investigates alerts and correlates related activity across OT and IT environments. Darktrace says it automatically maps its models to the MITRE for ICS attacks/techniques, and says it helps organizations meet NIST and other regulations and standards.

Darktrace calls its endpoint functionality Network Endpoint eXtended Telemetry (NEXT), which shows the endpoint process root cause for network threats. Darktrace says Cyber AI Analyst autonomously investigates alerts, gathers evidence, tests hypotheses, and delivers incident context. Darktrace responds autonomously with targeted actions that contain threats and avoid business disruption. Darktrace lets customers set response policies with configurable actions based on device types, user groups, locations, business hours, and operational requirements. Darktrace complements Microsoft Defender for Endpoint by connecting endpoint signals with behavioral understanding across a wider infrastructure.

Darktrace says action can be taken independently or via integrations with native security controls, and that alerts are sent wherever the customer wants them. Darktrace extends its autonomous response to Check Point firewalls and to Palo Alto firewalls. Darktrace incidents and model breach alerts can be analyzed in CIM compatible Splunk dashboards. Darktrace enriches its AI decision-making with alerts from the Crowdstrike Falcon platform. Darktrace's Cyber AI Analyst integrates with Microsoft Copilot for Security.

HARMAN International uses Darktrace coverage for email, network, and OT systems. Centre Parcs turned to Darktrace to protect its network, email, and cloud environments with a single AI security platform. Darktrace says organizations across all sizes and industries rely on it to get proactive about cyber security.^{[1][14][15][16][18][19][20][21][22][23]}

Categories

• Network detection and response (primary category)
• Email security
• OT and ICS security
• Compare Darktrace with companies in the same categoryside by side

Headquarters

Cambridge, United Kingdom^[2]

Founded

2013^[2]

Ownership

Owned by Thoma Bravo since 2024^{[3][12][13][17]}

CISO on record

Not yet on our record. Send a verified source

Website

darktrace.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Darktrace / EMAIL^[14][15]

  Email security that catches phishing, business email compromise, executive impersonation and social engineering attacks.

  Darktrace / EMAIL learns from each organization's own activity and users, not a shared cross-customer model. Darktrace says it catches phishing, business email compromise, executive impersonation, and social engineering attacks. Behavioral detection extends across Microsoft Teams, Zoom, and Slack. Each employee's risk score adapts their email controls.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Darktrace's categories, then alphabetical. A list from the record, never a ranking.

• On network detection and response, Darktrace competes with Arista Networks, Corelight, ExtraHop, Vectra AI, NEOX NETWORKS, Fidelis, Gigamon, Guardsix, NETSCOUT and ThreatDefence.

• On email security, Darktrace competes with Abnormal AI, Barracuda Networks, Cofense, Egress, Hornetsecurity, IRONSCALES, Material Security, Mimecast, Proofpoint, Sublime Security and 12 more.

• On ot and ics security, Darktrace competes with Claroty, Elbit Systems, Honeywell, Indurex, Northrop Grumman, Nozomi Networks, Rockwell Automation, Siemens, TXOne Networks, Xage Security and 19 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.4 out of 5 · 51 reviews^[13]seen November 3, 2026

Named customers

Organizations publicly named as customers, each linked to the page that names it. Not a complete list, and not an endorsement.

• Coca-Cola Beverages Northeast^[4]Darktrace
• HARMAN International^[5]Darktrace
• City of Las Vegas^[6]Darktrace
• Centre Parcs^[7]Darktrace
• Banco Galicia^[8]Darktrace

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• September 24, 2026

  Darktrace launched Signal Labs, a research unit that tests how AI models and agents misbehave in sandboxed environments, and published its first findings. Darktrace^[9]

• September 22, 2026

  Darktrace made its SECURE AI product generally available, giving enterprises tools to discover AI use, monitor people and agents, and act on policy risks. Darktrace^[10]

• August 4, 2026

  Darktrace announced an integration that feeds behavioral risk signals about AI agents from its SECURE AI product into the Microsoft Agent 365 portal. Darktrace^[11]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]ProductsDarktrace · darktrace.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Darktrace named technology pioneer by world economic forumDarktrace · darktrace.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Darktrace announces formal completion of its acquisition by thoma bravoDarktrace · darktrace.com · published October 1, 2024 · Tier A: the company, a regulator or a filing
4. [4]Coca cola beverages northeastDarktrace · darktrace.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Harman internationalDarktrace · darktrace.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]City of las vegasDarktrace · darktrace.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Center parcs darktraceDarktrace · darktrace.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Banco galiciaDarktrace · darktrace.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Darktrace launches signal labs to research emerging risks of enterprise ai agentsDarktrace · darktrace.com · published September 24, 2026 · Tier A: the company, a regulator or a filing
10. [10]Darktrace extends behavioral security with general availability of darktrace secure aiDarktrace · darktrace.com · published September 22, 2026 · Tier A: the company, a regulator or a filing
11. [11]Darktrace among first cybersecurity companies selected to integrate risk signals into microsoft agent 365Darktrace · darktrace.com · published August 4, 2026 · Tier A: the company, a regulator or a filing
12. [12]Darktrace | The Essential AI Cybersecurity PlatformDarktrace · undated page, accessed October 24, 2026 · Tier A: the company, a regulator or a filing
13. [13]Darktrace / HYBRID NETWORK Reviews & Product Details - G2G2 · undated page, accessed October 24, 2026 · Tier C
14. [14]AI Cyber Security Solutions | Harden Defenses Inside & OutDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
15. [15]Microsoft Azure Security & Compliance | Security ServicesDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
16. [16]AI-Based Email Security Software | Email Threat ProtectionDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
17. [17]Network Security Management | AI Network Security ProtectionDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
18. [18]Cloud Security Solutions | AI for Cloud Cyber SecurityDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
19. [19]AWS Data Loss Prevention, Security Compliance, & ProtectionDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
20. [20]Operational Technology (OT) Cyber Security SolutionsDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
21. [21]AI Endpoint Security | Cyber Security Endpoint Protection SuiteDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
22. [22]Network Security Integrations | Darktrace/NetworkDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
23. [23]Integrations | Darktrace/EndpointDarktrace · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing

Last verified October 10, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Darktrace? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.