Effective at detecting phishing and malicious email threats. The AI-driven analysis and anomaly detection work well, and it’s easy to integrate with other email gateways like O365. Onboarding and deployment were straightforward, and I was able to roll out the solution without disrupting the existing email infrastructure. Review collected by and hosted on G2.com.

Darktrace / EMAIL is effective at detecting and analyzing email threats, but the alert volume can be high and often needs additional tuning to cut down on noise and improve prioritization. Investigations can also feel complex for less experienced analysts, since some AI-driven insights require security expertise to interpret with confidence. In addition, the reporting and customization features could be more flexible so they better support different operational needs and compliance requirements. Review collected by and hosted on G2.com.

for sure, I like the sel-learing AI that understand or norma email behaviour and stop threats. it integrates cleanly with our other defense systems, providing a clear, natural-language narrative, useful also for end users Darktrace / EMAIL delivers strong value as a second AI control for high‑impact scenarios (BEC, internal threats, novel phishing) when you measure outcomes like time to containment, false‑positive rate, and legitimate mail interrupted. It’s expensive, but the extra layer reduces breakthrough risk and manual toil, justifying the cost when well tuned and governed. In many cases, with targeted autonomy, solid baselines, and outcome metrics, it could even stand alone without adding complexity Review collected by and hosted on G2.com.

What I "dislike" most about Darktrace/email is that it still neddes carefull tuning and governace. We mitigate with phased autonomy, baseline governance and workflow integration Review collected by and hosted on G2.com.

It is simple to navigate - gives you all the detail and reasons in one pane, simple remediation if needs be - it has become out goto when we have any query on email delivery. The %age score when searching, allows you to narrow down rapidly on the problem email. Good plain English reasons behind any isse. Review collected by and hosted on G2.com.

It uses Exchange Journaling in order to examine the email, post-facto to it's delivery. This means that payloads can be delivered and clicked before they are yanked from the mailbox. Also, leads to helpdesk tickets when people see notifications, but are then confused that they can't find the email. Review collected by and hosted on G2.com.

Darktrace offers a comprehensive solution for enterprise threat detection with its autonomous response capabilities. It uses unsupervised machine learning to understand normal operations and provides real-time anomaly detection. However, the interface can be complex for new users, and the cost may be prohibitive for smaller organizations. Review collected by and hosted on G2.com.

Darktrace used unsupervised machine learning to learn normal operations without manual training. It also includes autonomous response capabilities to neutralize threats instantly. Its impressive 3D graphic visualizations effectively show threat paths and help with understanding what’s happening.

That said, the interface has a steep learning curve and can feel overwhelming for junior analysts because of the dense telemetry data. Customer support is generally fast and helpful, although full 24/7 Managed Detection and Response analyst overlays require premium support packages. Overall, it delivers excellent real-time anomaly detection and a fast time-to-respond, but onboarding typically needs a 2 to 4-week "learning phase" to reduce noise and false positives while its AI baselines the network. Review collected by and hosted on G2.com.

The best thing about Darktrace EMAIL is its ability to proactively detect and stop sophisticated phishing attacks that may bypass traditional email security tools. It gives me confidence that potential threats are being identified early, with useful insights and minimal disruption to users. Review collected by and hosted on G2.com.

While Darktrace EMAIL is effective at identifying threats, I would like to see improvements in alert prioritisation and reporting clarity. It can sometimes be difficult to quickly distinguish between high-risk events and lower-priority findings, which may slow down investigations. Review collected by and hosted on G2.com.

As someone who helps manage IT and security for our organization, Darktrace Email has been one of those tools that quietly proves its value almost every day. The biggest benefit for me is visibility. It gives us a clear picture of what's happening in our email environment and highlights threats that could easily be missed by users.

What I appreciate most is that it doesn't just detect threats, it takes action. We've seen Darktrace automatically hold suspicious emails, lock malicious links, and stop phishing attempts before they ever become support tickets. That saves our team time and reduces the risk of someone accidentally clicking on something they shouldn't.

The reporting is also excellent. Every week I can quickly review what was blocked, what trends are emerging, and which users may have been targeted. The threat explanations are detailed enough to be useful without being overly technical, making investigations much easier.

Another thing I like is that Darktrace continues to evolve beyond just email protection. The security awareness and phishing training features they've discussed are a natural fit because they tie real-world threats to user education, rather than treating security awareness as a separate exercise.

Overall, Darktrace Email has given me more confidence in our email security posture. No security product catches everything, but Darktrace adds another strong layer of protection and often catches things that would otherwise require manual review. From an IT administrator's perspective, it's been a worthwhile investment and a valuable addition to our security stack. Review collected by and hosted on G2.com.

The biggest challenge for me is that there can be a lot of information to digest, especially when you're first learning the platform. Some alerts still require manual investigation to determine whether they're a real threat or simply unusual behavior. I'd also like to see more flexibility in the reporting and dashboard customization options. These aren't deal-breakers by any means, but they are areas where the product could continue to improve. Overall, the benefits far outweigh the drawbacks. Review collected by and hosted on G2.com.

Very slick UI, great breakdowns of why things are blocked or filtered. SSO works well. Pricing is around the same as its competitors. Performance is good despite the occasional blip. Review collected by and hosted on G2.com.

Integrations need to improve with other vendors. Would really like to see an integration with Crowdstrike for example. The way the app is hosted feels a little dated, as it seems to be a VM with a host dashboard you can look at, rather than a true SAAS solution with proper scaling. In fact a few times we have had scaling issues causing minor issues. Support is overall good but the support portal needs a bit of polish. Review collected by and hosted on G2.com.

Darktrace / EMAIL uses AI-powered detection and Self-Learning AI to identify phishing, BEC, and impersonation attacks that traditional email security tools can miss. The UI/UX is intuitive, making investigations easy, while its integrations with Microsoft 365 provide visibility beyond the inbox. The platform delivers strong performance through real-time detection and automated response, helping reduce analyst workload. From a Pricing / ROI perspective, it improves security efficiency and lowers risk without increasing staffing costs. The Support / Onboarding experience is straightforward, allowing organizations to realize value quickly Review collected by and hosted on G2.com.

While Darktrace Email is very effective, the UI/UX can sometimes present large amounts of information, which may require additional analyst training to fully leverage. The platform’s AI-driven detections can also occasionally produce false positives. In addition, the product’s learning curve feels much steeper than expected. Integration works well, but extracting maximum value often requires integrating with multiple security tools. Review collected by and hosted on G2.com.

Once set up, it's pretty autonomous. I rarely have to go in and admin anything on it.

The rule creation process is fairly streamlined, but still needed definition and guidance from the DT engineer. Integrating with Outlook was pretty easy, but we almost never use the app. Review collected by and hosted on G2.com.

It's not always easy to just block a domain. You can list it as part of the domains to treat as a threat, but hard blocking and blacklisting is a little more difficult. The UI for the admin side is fairly routine and tablualr, it's not been designed to be a picture perfect UX. Review collected by and hosted on G2.com.

The interface is pretty easy to pick up, and a few screenshots do genuinely help get a few extra £ during budget time. The navigation is pretty intuitive. Onboarding was quick and fully supported. We ran in Review only for a month, then went live with Respond actions Review collected by and hosted on G2.com.

ROI is less than a singular email dedicated SaaS. Having it bundled in, isn't the most cost efficient. The Outlook integration is decent, but doesn't seem to be useful on the mobile app Outlook, nor Apple Mail. History is limited to 30/90 days and performance can be a little slow. Review collected by and hosted on G2.com.