No more typing reviews! Try our Samantha, our new voice AI agent.

Darktrace vs Tanium comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Darktrace
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
84
Ranking in other categories
Email Security (10th), Intrusion Detection and Prevention Software (IDPS) (2nd), Network Traffic Analysis (NTA) (1st), Network Detection and Response (NDR) (1st), Extended Detection and Response (XDR) (7th), Cloud Security Posture Management (CSPM) (10th), Cloud-Native Application Protection Platforms (CNAPP) (9th), Attack Surface Management (ASM) (4th), AI-Powered Cybersecurity Platforms (5th), AI Observability (6th)
Tanium
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
22
Ranking in other categories
Server Monitoring (4th), Vulnerability Management (26th), Endpoint Protection Platform (EPP) (17th), Endpoint Detection and Response (EDR) (22nd), Unified Endpoint Management (UEM) (7th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Darktrace is designed for Network Detection and Response (NDR) and holds a mindshare of 14.3%, down 24.1% compared to last year.
Tanium, on the other hand, focuses on Endpoint Protection Platform (EPP), holds 2.4% mindshare, down 2.5% since last year.
Network Detection and Response (NDR) Mindshare Distribution
ProductMindshare (%)
Darktrace14.3%
Vectra AI10.6%
ExtraHop Reveal(x)5.9%
Other69.2%
Network Detection and Response (NDR)
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Tanium2.4%
Microsoft Defender for Endpoint6.8%
CrowdStrike Falcon6.0%
Other84.8%
Endpoint Protection Platform (EPP)
 

Featured Reviews

AM
Technical Consultant - Unix Platform Services at BITS AND BYTE IT CONSULTING PVT LTD
Consistent threat hunting and anomaly detection deliver valuable insights for network security management
In terms of improvement for Darktrace, pricing is the main concern. Pricing bothers me and this is one of the major factors when choosing a solution. When we get feedback from customers, that's the only felt need. When we factor in Darktrace, we do it only limited. We put it on where the perimeters and connections are, but still, some gray areas are left out, especially if we have multiple branches. We need Darktrace on each branch to get the data out, and I suggest having some kind of a centralized product that gets data from multiple sources to aggregate and provide the data.
MA
Division Manager, Information Technology at a legal firm with 51-200 employees
Centralized policies have improved remote endpoint control and have simplified data visibility
The integration is not simple and easy. It requires experienced users or people who have done the implementation. When certain policies are applied, they do not immediately push the policies. For example, we manage endpoint device USB access. We set a policy to block it, but it does not come into effect immediately. Sometimes it takes three or four days for it to reflect. That is a pain point. I have raised this issue with support as well, but they said that I need to limit the number of devices in the policy. In terms of application deployment, for us, it was seamless.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The AI-based pattern is the most valuable feature."
"The models, triggers, and alerts are customizable."
"The most valuable feature in Darktrace is that it gives me a comprehensive, detailed view of my network and whatever is happening inside it."
"Technical support is helpful and responsive."
"The solution automatically monitors everything on the network to prevent anti-phishing by monitoring, responding, and restoring the system."
"It is a very simple product to use."
"This is something that is really easy to implement in an organization, gives us good visibility about what is happening in our networks and on the system, and we like the transparency available within our infrastructure now."
"The solution is outstanding from a monitoring perspective."
"The interrogation piece was the most valuable feature because it was very detailed."
"Tanium is highly scalable."
"The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps."
"The product is granular and can build complex roles compared to other EDR vendors."
"The solution's technical support is very responsive."
"I like the tool's incident response and security patching."
"Tanium's most valuable feature is its instant discovery aspect."
"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."
 

Cons

"They are too expensive compared with other vendors."
"I did not use the AI features because they should make it more user-friendly which would be a benefit. Additionally, the solution could integrate with more SIEM or SOAR tools."
"Darkforce could be improved in the range of the interface; how to interact with the actions it's taking or not taking."
"I would like for the product to work on the endpoints as well. I would like to see enhanced visibility into the endpoints and network but this solution only sits on the network itself."
"One thing I would like is for Darktrace to flag SMB traffic more accurately. Currently, it only flags that SMB traffic has occurred, but it doesn't specify which file was being transferred. This makes it difficult to investigate incidents involving SMB traffic, as we don't have concrete evidence of what was being sent."
"Its documentation is not up to the mark. At times, I have a lot of trouble finding a solution. Even when I posted questions on the community chats, it took a lot of time for me to get answers. That's something that can be improved. Darktrace can focus on creating a more interactive community. If there are more people from Darktrace to focus on community chats, it would be better."
"There is no dedicated salesperson in Egypt, and having one would help to improve focus on this market."
"Updates keep coming, which is great, but I prefer a unified UI experience. The intelligence section and the incident view should be seamlessly connected in one view to avoid jumping between pages."
"The solution can give a lot of false positives."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"The most painful thing is the interface. It's a bit unclear sometimes."
"There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective."
"The solution lacks mobility."
"There are some bugs in the product. The tool needs to improve in the area of reporting."
"The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization."
"We had some issues with the solution's OS upgrade."
 

Pricing and Cost Advice

"The product is expensive."
"It's an expensive solution."
"The price of the solution is not cheap. It is not a one-time purchase, there is a subscription that needs to be paid every one to five years depending on your choice. It is expensive but you can reduce the price by only using the services that you want."
"The pricing is a little high compared to the competition."
"It was $3,600 a month or $2,000 plus or so. I am not sure. Its licensing is pretty simple."
"The pricing is quite high, estimated at around $350,000 per year."
"The solution is about $6,000 per quarter."
"I'm unfamiliar with the exact cost, but we have a yearly license and had to pay for Darktrace's services before the deployment. The product is very expensive, so some organizations can't afford to pay the total amount directly, meaning they often seek a partner or pay in installments, which increases the price more."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"The solution is expensive but it's a good investment."
"It's an expensive solution. It would be nice if the cost were lower."
"There is an annual license required to use this solution."
"The solution offers value for money."
"It is higher than some competitors in the market."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
896,803 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
9%
Financial Services Firm
9%
Computer Software Company
9%
Government
7%
Financial Services Firm
14%
Government
11%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise29
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise12
 

Questions from the Community

How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What is your experience regarding pricing and costs for Darktrace?
Concerning pricing for the product, I would say it is somewhat expensive.
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the core functions.
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it economically viable. I would recommend it to others with a similar use case. The solut...
 

Also Known As

No data available
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

Irwin Mitchell, Open Energi, Wellcome Trust, FirstGroup plc, Virgin Trains, Drax, QUI! Group, DNK, CreaCard, Macrosynergy, Sisley, William Hill plc, Toyota Canada, Royal British Legion, Vitol, Allianz, KKR, AIRBUS, dpd, Billabong, Mclaren Group.
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about Darktrace, TrendAI, Vectra AI and others in Network Detection and Response (NDR). Updated: May 2026.
896,803 professionals have used our research since 2012.