Darktrace / NETWORK Pricing Overview

The automatic blocking is a big win — it reacts fast and usually gets it right without needing manual intervention.

Device tracking is solid — gives a clear view of what’s happening on the network and makes it easy to spot anomalies.

Visibility is impressive — it really feels like it sees everything, which gives a lot of confidence in coverage.

Overall, it's been a strong addition to our security stack. Set-and-forget most of the time, but with the depth when you need to dig in. Review collected by and hosted on G2.com.

Sometimes it misclassifies devices, especially when IPs shift — can be a pain to untangle when one device gets tied to the wrong activity.

There’s a fair bit of noise, especially early on while the AI is still learning — takes a little time to settle and reduce alert fatigue. Review collected by and hosted on G2.com.

What I appreciate most about Darktrace/Network is its self-learning AI technology that continuously adapts to our network environment without requiring extensive manual configuration. The platform's ability to detect subtle anomalies and previously unknown threats is exceptional - it identifies attack patterns that traditional signature-based solutions completely miss.

The Threat Visualizer interface is incredibly intuitive, providing clear visual representations of network activity and threat progression that make complex security incidents easy to understand and communicate to stakeholders. The autonomous response capabilities are particularly impressive, allowing the system to take immediate action to contain threats while maintaining business continuity.

I also value the comprehensive network visibility it provides, giving us insights into device behavior, user activities, and data flows that were previously invisible. The real-time monitoring and alerting system has significantly reduced our incident response time and improved our overall security posture. Review collected by and hosted on G2.com.

The main challenge I've encountered is the initial learning period, where the AI system generates numerous alerts while it's still understanding our network's normal behavior patterns. This requires significant time investment from our security team to properly tune and validate alerts during the first few months of deployment.

The pricing structure can be quite expensive, especially for smaller organizations or those with limited security budgets. The cost increases significantly when scaling across multiple network segments or adding advanced features.

Sometimes the AI's decision-making process can be opaque, making it difficult to understand why certain actions were taken or alerts were generated. This "black box" aspect can be concerning when you need to provide detailed explanations for security incidents to compliance teams or executives. Additionally, the platform occasionally generates false positives that require manual investigation and tuning to prevent future occurrences. Review collected by and hosted on G2.com.