Darktrace Reviews

“Good for threat detection

Pros

Right away the interface feels polished and well designed making it much easier to focus on the areas that actually need attention. It does a solid job of cutting through the noise and highlighting genuinely malicious activity in the main view which helps reduce false positives. Overall it feels like a high end product when it comes to detection capabilities.

Cons

Where it falls a bit short is in its ability to actively block threats on its own although it can integrate with other tools to help cover that gap. At a high level it comes across as more of an IDS than a true IPS solution.

“powerful real time protection

Pros

It does a really good job with real time monitoring catching anomalies quickly when they happen. The email encryption adds an extra layer of security for communications and the policy controls are useful for keeping compliance requirements in check.

Cons

Setup process is fairly complicated and support tends to lag when more advanced troubleshooting is needed. When problems do come up they can sometimes turn into major issues.

“Excellent tool

Pros

This tool does an excellent job of spotting network threats that could otherwise turn into major problems for us.

Cons

The dark themed interface feels quite outdated and it is not very comfortable when reading through or reviewing the information.

“Great for emails

Pros

A very forward thinking AI tool and it keeps evolving as the IT security landscape changes. Its email module is easily one of the strongest options available especially with the AI driven approach it uses to catch and filter unwanted messages.

Cons

Biggest downside is the cost since it sits on the higher end of the pricing range. That said there is usually some room to negotiate particularly if you're using a broader set of products from their portfolio.

“Shows anomaly detection

Pros

It alerts you to unusual behavior in real time which is really useful for catching issues quickly.

Cons

It doesn't include a reporting feature which is a noticeable limitation.

“responsive support that delivers

Pros

Any time we had questions while using the tool the support team was the standout! They replied quickly, gave helpful and well explained answers and if they didn't have a solution immediately they always came back with a follow up without much delay.

Cons

The price was definitely the biggest drawback at first but in the end it felt justified. It proved to be worth the investment!

“mobile alerts

Pros

One of the biggest strengths is Advanced Search which helps us drill all the way down into the exact 5W's. It's also really useful for rebuilding packet captures when we need to troubleshoot network issues. The iOS app has been a big plus too since it lets us get alerts remotely and step in when something needs manual attention outside our autonomous response scope.

Cons

There were a few bugs in the app before although it's working really well now. The only thing I'd still like to see more functions in the mobile app especially Advanced Search features so we can diagnose issues better while away from the desk.

“positive experience

Pros

A huge benefit of this softwae has been how quickly it helps us spot and respond to threats in real time! It has noticeably reduced the time it takes for our organization to detect cyberattacks and take action. Because alerts come in early our security team can react faster, limit the impact and prevent a potential incident from turning into something more serious.

Cons

A downside is that it can still generate false positives which is pretty common with cybersecurity tools. Sometimes it flags activity that looks suspicious but ends up being harmless. Because of that the platform needs ongoing monitoring and tuning to cut down on unnecessary alerts while still making sure real threats are properly identified.

“valuable network visibility

Pros

Something the tool really helped with was uncovering a lot of network activity we had no visibility into before. The interface looks good and having access to the raw network logs was genuinely useful when digging into events.

Cons

Where it fell short was outside of its model based breach detection. It wasn't very effective for troubleshooting or for monitoring broader network related issues. Even after years of tuning it still produced too many false positives and eventually the alerts became hard to take seriously because there were so many of them.