Darktrace Reviews

It has improved our monitoring capabilities. 

The most valuable feature is the alerts. The alerts are meaningful. The event rolls up into meaningful and actionable alerts rather than just being noise. 

The products is designed to monitor traffic sent and received via the corporate egress /network points.

I would be interested to see further integration or development of a capability to obtain visibility of mobile devices such as Laptops and Mobiles, which operate outside of the network and may communicate specifically when off the corporate network.  

The stability isn't good but I like the product. It's a good product but we need to look into other similar products that operate in the same zone: user behavior analysis and user detection. We need it to be good in comparison. 

We currently have an inner network. We don't have a full-scale deployment. It is on network segment where there are around 5,000 users. The full company would be around 9,000 users if we deployed it across all the subsidiaries. 

Their technical support is good. 

This is the first solution of this type that we've used. During the initial three month trial, we saw a lot of stuff from the product that we were unable to see through the conventional tooling technologies that we had in place. 

The setup was straightforward. It was a matter of hours. It took around two to three hours. 

My advice to someone considering this solution is to install it, conduct a pilot, and see. You need to see how easy it is to implement and you need to add it to install. You need to see what kinds of results it provides and compare it to your existing tool kit. The product demonstrates its actual capabilities when it's actually working. It's difficult to comprehend what it can actually do but it does give you an added level of visibility. 

It has good capabilities. I would rate it an eight out of ten. 

Cross-correlation with the endpoint based activities would be useful, like the ability to look at the deep supervised learning engine of the artificial intelligence unit and being able to take input data from the endpoints in order to apply the rules. It works on supervised learning and rules but I would like to be able to do things on different feeds as well. 

It has a very good graphical user interface. The ability to get a console on the mobile phone and being able to respond and do basic incident response capabilities remotely is also a good feature. 

• Security  
• Network visibility  
• Breach detection in a VMware environment of about 25 VMs.             

• Developed breach detection and security threats
• GDPR   
• Privacy compliance      
• ISO 27001 compliance. 

DT console and alerting system allow getting detailed information about the behavior of users and malicious external or internal threats.

Block attack capabilities or integration with other SIEM solutions such as IBM QRadar.             

Our primary use case is for monitoring traffic for unusual behaviors.

I find the complete portfolio to be excellent.

I would like to see some additional enhancements and the price adjusted because it is expensive.

I have been working with Darktrace for the past six months.

It is scalable and we have ten users currently using the system. We do have plans to increase the usage.

The setup is straightforward and not complex at all.

The deployment took us about a week and a half to implement. We did not use a third party to implement but it is available.

The return on investment is evident when it comes to security incidents.

The pricing is subscription-based and it is high.

I would rate Darktrace an eight on a scale of one to ten.

The NDR is good in their solution and they have NTG for email. They have multiple solutions, but for me, I was focusing on one solution, in the NDR section.

I think there is some MSSP missing. The market as a whole needs to enhance this area. Some additional integration would be helpful. They need to focus on having additional tools based on how competitive the market currently is.

I have been working with Darktrace for the past six months.

I find the solution to be stable. I faced one issue and I think it is good after resolving that issue.

I think it is scalable like Vectra.

I have not used technical support for Darktrace.

They are too expensive compared with other vendors.

When considering Darktrace you need to have a plan and decide if it is something you really need as an organization. I would rate Darktrace an eight out of ten.

Regarding the autonomous response feature, I appreciate how it functions within the platform.

Based on my experience, I believe the solution could be improved in some areas, and there are certain drawbacks that I have encountered.

I have been working with Darktrace for approximately one to one and a half years or longer.

In general, I would say that the interface of Darktrace is intuitive enough, and it aids in understanding threat landscapes and attack paths.

Regarding scalability, I would rate it eight points.

If asked to rate Darktrace support on a scale from zero to ten where ten is the best, I would give them five points.

Neutral

Regarding the installation and initial setup, I found it to be straightforward rather than complex.

Concerning pricing for the product, I would say it is somewhat expensive.

I have rich experience with many tools including Vectra, Cisco firewall, and Check Point.