Try our new research platform with insights from 80,000+ expert users
reviewer1248177 - PeerSpot reviewer
Application & Security Specialist at a financial services firm with 1,001-5,000 employees
Real User
Easy to use with an intuitive dashboard, powerful AI, and inbuilt data packet analysis
Pros and Cons
  • "The Dynamic Threat Dashboard is very nice, as it lists all of your threats and rates them, and then you can choose whether to investigate further."
  • "This is quite an expensive product so the pricing is something that can be improved."

What is most valuable?

Once installed, it starts picking up and learning the network very well because it's got a powerful AI integrated into it.

The user interface is very intuitive.

The Dynamic Threat Dashboard is very nice, as it lists all of your threats and rates them, and then you can choose whether to investigate further.

This solution has some good features for customization in terms of how you're tagging your network, which basically makes it easier to identify what is actually happening. You can see where the traffic is going, where it is coming from, and that sort of thing.

Darktrace has quite a few inbuilt features such as its own packet analysis module, which is an offshoot of Wireshark.

This solution has some powerful APIs, although we do not use that functionality at the moment.

What needs improvement?

This is quite an expensive product so the pricing is something that can be improved.

For how long have I used the solution?

I have been using Darktrace for between two and three years.

What do I think about the stability of the solution?

We've seen no major problems between the master and slave devices in our architecture.

Buyer's Guide
Darktrace
March 2025
Learn what your peers think about Darktrace. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
841,152 professionals have used our research since 2012.

What do I think about the scalability of the solution?

Darktrace is definitely scalable. We started off with a single device monitoring a single site and we progressively added more sites with different devices in a master/slave architecture. The more we've added, we've had to re-think a little bit, but overall the scalability is excellent.

We have ten security analysts who are using this solution.

How are customer service and support?

The Darktrace technical support is very good.

Which solution did I use previously and why did I switch?

We started off with Darktrace. It was based on a decision from somebody in the business who had previously used it.

Personally, I have used a few other solutions and with respect to the interface, you probably couldn't get more intuitive than Darktrace.

How was the initial setup?

Darktrace is very easy to set up. Even our basic technical people are able to do it. It's almost like plug and play. There is some basic configuration to do, but it's nothing major.

I would say that most technical people can do the majority of the setup.

What about the implementation team?

We were granted access to all of the documentation and information from Darktrace, so we did the implementation ourselves. There may have been one or two areas that we had to go back to Darktrace directly to get clarification on, but there was no third-party partner or reseller involved.

What other advice do I have?

We're very pleased with Darktrace so it is a bit difficult to pinpoint areas for improvement. It covers all of our needs and from what I can see, it does the basics very well. There are many advanced features, also.

This is a solution that I definitely recommend. It offers a proof of value rather than a proof of concept, where they run the tool in your network, let it learn and then catch any vulnerabilities. Then you will actually see the value of the solution, either potentially blocking any exploitive threats or not, but its a really good thing to go through. To do this, I think that you have to go through an actual partner unless you're in a location where Darktrace has a physical office. In any event, I strongly recommend going through the proof of value to see if you like it. If there is a charge then it is definitely worth it.

I would rate this solution an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1762473 - PeerSpot reviewer
ICT Coordinator at a tech services company with 51-200 employees
Real User
A smart, autonomous solution that monitors and identifies threats based on abnormal patterns and proactively blocks them
Pros and Cons
  • "It is autonomous. So, it learns. It uses algorithms and AI to learn the common behavioral patterns on the network, and it is able to identify threats based on abnormal patterns."
  • "It is expensive, but everything else has been great so far."

What is our primary use case?

We have a Darktrace appliance, and we are using it to monitor threats in our network environment. It has the Antigena module installed. So, it does not only monitor but also proactively blocks when there is a physical threat.

It scans the entire network, which includes all IP addresses, subnets, and users. It is very smart for all different segments of the network.

What is most valuable?

It is autonomous. So, it learns. It uses algorithms and AI to learn the common behavioral patterns on the network, and it is able to identify threats based on abnormal patterns.

What needs improvement?

It is expensive, but everything else has been great so far. It is fine for now for what we need it to do.

For how long have I used the solution?

I have been using this solution for about a year and a half.

How are customer service and support?

Their support has been great so far.

How was the initial setup?

It was very easy and straightforward.

What's my experience with pricing, setup cost, and licensing?

It is expensive.

What other advice do I have?

It is good. Recently, they have made it more sensitive for tracking or identifying all the behaviors or patterns. So, you're getting more alerts out of it, which I guess is a good thing.

I would rate it a ten out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Darktrace
March 2025
Learn what your peers think about Darktrace. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
841,152 professionals have used our research since 2012.
reviewer1231641 - PeerSpot reviewer
Security Operations Manager at a financial services firm with 5,001-10,000 employees
Real User
Good threat detection, and technical support and is reliable
Pros and Cons
  • "Darktrace is very useful for us because it has a large number of models for detecting threats."
  • "Darktrace requires numerous configurations. It would be beneficial if the configuration could be made simpler."

What is most valuable?

Darktrace is a very good solution.

Darktrace is very useful for us because it has a large number of models for detecting threats.

What needs improvement?

There are numerous false positives.

Darktrace requires numerous configurations. It would be beneficial if the configuration could be made simpler.

For how long have I used the solution?

I have been using Darktrace for three years.

What do I think about the stability of the solution?

Darktrace is very stable.

What do I think about the scalability of the solution?

Darktrace is easy to scale. It's a scalable solution.

How are customer service and support?

Technical support is good.

How was the initial setup?

The initial setup is difficult.

It took three or four months to deploy.

What other advice do I have?

People must first examine the network architecture in order to make the best implementation.

Darktrace is a very good solution, I would rate it a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1556535 - PeerSpot reviewer
System Architect at a energy/utilities company with 51-200 employees
Real User
Stable with helpful technical support and good network visibility
Pros and Cons
  • "The product offers us a very good user interface and we've found the network visibility to be very good so far."
  • "It would be useful if there was a way to check to see if there are certain devices that are not in sync with the solution. I'm not sure if this is an option or not."

What is most valuable?

Overall, I like the system. The product offers us a very good user interface and we've found the network visibility to be very good so far. The solution has one window and shows all networks.

The solution comes in multiple languages, including English and Arab options.

The solution is stable.

We've found that technical support is helpful and available to assist us if we need them.

What needs improvement?

There are some automation capabilities, however, they could be presented better.

The manual is difficult to follow. While it presents some use cases, it's not very clear. There may also be some language barriers, as it's not available in my language.

Some aspects of the initial setup are complex. 

It would be useful if there was a way to check to see if there are certain devices that are not in sync with the solution. I'm not sure if this is an option or not. 

The cost of the solution is quite high.

I'm very interested in ISO 27001 and these processes. I'd like to better understand how it supports this kind of workflow.

For how long have I used the solution?

I haven't used the solution for very long. It may only be about 20 hours or so. It's very, very new. 

What do I think about the stability of the solution?

The solution is mostly stable. I found that, during the POC, sometimes my rights would do off and I would have to reinstate them, however, other than that, it was very stable. The performance was good. 

What do I think about the scalability of the solution?

I've only used the solution for a short amount of time. I can't really speak to the scalability. There were different models that I tried, however, I can't speak about how different models affect the scalability. I've only used it for a very short amount of time.

There are maybe three or four people on the solution, now that we've tested it. 

How are customer service and technical support?

I haven't really interacted so much with technical support, however, there is a person available to us that could help us troubleshoot or answer our questions if we need assistance. 

How was the initial setup?

There are aspects of the initial setup that are not very straightforward. there is some complexity. I needed to keep going back to the manual to check things at certain points. 

What's my experience with pricing, setup cost, and licensing?

We are still currently in the test period. Within the year, we will have to invest in the cost of licensing. We have not done that yet.

The solution itself is quite expensive. 

Which other solutions did I evaluate?

We did look at other solutions, however, I can't speak to which solutions we actually looked at.

What other advice do I have?

We are a partner.

I'm not sure which version of the solution we're using. My understanding is that it is version 5.

I would recommend the solution to others. However, it's important to ensure you use the solution in order to set up your processes correctly and to the benefit of the organization.

So far, I would rate the solution at an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Chiefopof576 - PeerSpot reviewer
Chief Operating Officer at Winstarbel Communications Limited
Reseller
Quickly identifies threats and has good stability
Pros and Cons
  • "What I like about Darktrace, is that you can quickly identify threats."
  • "The program is quite expensive."

What is our primary use case?

Our primary use case of this solution is for endpoint data and we've had good results with Darktrace.

What is most valuable?

What I like about Darktrace is that you can quickly identify threats. I did a trial where I injected a small malware to see how long it takes for the program to identify it and to see that there is an anomaly. The response was good and it took the program less than a minute to detect it. The fast response time is definitely a plus.

What needs improvement?

The pricing is based on the number of endpoints, so the program is rather expensive. I would like to see something that will fit my clients' budget. That is something they can work on to improve.

Secondly, I would like to see my entire network, structurally and architecturally, on a single screen or in one single dashboard. Right now you have to keep going through different clippings to see everything.

For how long have I used the solution?

I've been using Darktrace for three months now.

What do I think about the stability of the solution?

The solution is stable enough for what we use it for.

What do I think about the scalability of the solution?

We haven't been using the program long enough to know how scalable it is. I also know that it will depend on the amount of traffic on your server. But I saw in the demo that it can scale up to thousands and thousands of endpoints. 

How was the initial setup?

The initial setup was quite straightforward but it gets harder if you have a lot of traffic on your server. With the right knowledge, you would be able to work around that with ease and do the configuration yourself. Because it's more deployment, so it's not that complex so far. I may have to contact their technical team once we get a bigger deployment.

Which other solutions did I evaluate?

We evaluated several other options like McAfee. One reason why I chose Darktrace, in the end, was because of the difference in price, what we intend to achieve with the program and other costs. 

What other advice do I have?

My advice to others is always to keep an open mind and to find out as much as you can about the program to see if it offers what you are looking for. I rate Darktrace eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller.
PeerSpot user
Head of Strategic Business Development at Grove
Reseller
Simple to set up with a useful antigena and threat visualizer
Pros and Cons
  • "It's a very stable product."
  • "In the next version, I'd like to see penetration testing."

What is our primary use case?

We primarily use this solution as part of our security.

What is most valuable?

The cyber AI analyst, antigena, and threat visualizer are the most valuable aspects of the solution.

The setup is very simple. 

It's a very stable product.

Users can expand it as needed. 

What needs improvement?

I don't have any thoughts on where there might be a need for improvement. 

In the next version, I'd like to see penetration testing. They already have that coming up, so it'll be good to see that.

For how long have I used the solution?

I've been dealing with the solution for three to four years. 

What do I think about the stability of the solution?

The product is extremely stable and mature. There are no bugs or glitches. It doesn't crash or freeze.

What do I think about the scalability of the solution?

The product is very scalable across all vectors of the digital estate.

How was the initial setup?

The initial implementation process is extremely easy. It's extremely seamless and very easy to set up. It's up and running in less than an hour.

What other advice do I have?

I'm a partner and reseller.

We are using the latest version of the solution. 

It's deployed on-premise, in the cloud, in email, via SaaS, and on the endpoint.

I'd advise potential new users to  use antigena. It's a handy tool to stop cyber attacks.

I'd rate the solution ten out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
reviewer1468230 - PeerSpot reviewer
Founder and CEO at a tech services company with 51-200 employees
Reseller
Detects and blocks attacks automatically, and has excellent support
Pros and Cons
  • "The most valuable feature of this solution is that it does not require human intervention to eliminate a threat."
  • "The user interface and the configuration are a bit complex and should be improved or simplified."

What is our primary use case?

We are using this solution for both the detection and elimination of attacks.

What is most valuable?

The most valuable feature of this solution is that it does not require human intervention to eliminate a threat. It blocks everything automatically.

What needs improvement?

The user interface and the configuration are a bit complex and should be improved or simplified. 

It's user-friendly, but it could be easier.

The pricing could be better and the scalability should be simplified for the customers.

The integration could be better, as it's not that interactive. They could make it more interactive for the customer's daily use.

For how long have I used the solution?

I have been using Darktrace for three years.

What do I think about the stability of the solution?

It's a very stable solution. We are very satisfied with stability.

What do I think about the scalability of the solution?

It's a scalable solution, but it's not very easy to scale. When using a detection environment, it's not very easy for the customer.

How are customer service and technical support?

Technical support is very good. They are excellent.

Which solution did I use previously and why did I switch?

Previously, we had completed some trials with IronNet.

How was the initial setup?

The initial setup is straightforward.

What's my experience with pricing, setup cost, and licensing?

It could be cheaper.

When it comes to large installations, it can be expensive, but for small accounts it's fine.

What other advice do I have?

We are resellers and integrators of Darktrace.

I would rate Darktrace a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: reseller
PeerSpot user
Philippe Panardie - PeerSpot reviewer
Philippe PanardieRSSI at SDIS49
Top 10Real User

A real interesting solution, with tremendous efficiency, especially for special accounts and VIP. The cost is quite a bit expensive.

it_user1051182 - PeerSpot reviewer
Product Owner - Cyber Security at a healthcare company with 10,001+ employees
Real User
Helps us to find a few anomalies but I would like to see supervised machines in the next version
Pros and Cons
  • "Darktrace is extremely stable."
  • "Darktrace does not have any capabilities to configure."

What is our primary use case?

Our primary use case of this solution is to monitor lateral traffic.

How has it helped my organization?

The solution helped us to find a few anomalies.

What needs improvement?

Darktrace does not have any capabilities to configure. So I would like to see supervised machines and capabilities in the next version.

For how long have I used the solution?

I have been using the latest version of Darktrace for about three months.

What do I think about the stability of the solution?

Darktrace is extremely stable.

What do I think about the scalability of the solution?

We are only four users on Darktrace currently, and I believe it is scalable.

How are customer service and technical support?

I am satisfied with the technical support we received. 

How was the initial setup?

The initial setup was very straightforward because, in fact, there was nothing to configure. You just plug in the box and search for kickbacks. Deployment took about a day and it was done by one of Darktrace's consultants.

Which other solutions did I evaluate?

I worked on another solution before but we decided to test out Darktrace so that we could compare them.

What other advice do I have?

Darktrace is a good product and it can be implemented on premises. Someone who wants to take care of the lateral movement and configure it, will love what it offers. I rate this solution a seven out of ten. I would like to see supervised machine running in the future.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free Darktrace Report and get advice and tips from experienced pros sharing their opinions.
Updated: March 2025
Buyer's Guide
Download our free Darktrace Report and get advice and tips from experienced pros sharing their opinions.