Darktrace / HYBRID NETWORK Reviews & Product Details

Darktrace Network excels in delivering cutting-edge cybersecurity through its intuitive UI/UX, making complex threat detection accessible. The platform seamlessly integrates with existing IT infrastructures, enhancing overall security without disruptions. Its performance is impressive, promptly identifying anomalies and potential threats in real-time. While pricing reflects the advanced technology it provides, the ROI is substantial for organizations prioritizing security. Onboarding is efficient, supported by responsive customer service that ensures a smooth transition. Darktrace's AI-driven intelligence gives it a unique edge, continuously learning and adapting to evolving threats. Overall, Darktrace Network is an invaluable tool for proactive cybersecurity management. Review collected by and hosted on G2.com.

The cost is very high. It had increased significantly over the last few years. When budgets are tight, this can be a major issue. Review collected by and hosted on G2.com.

I really appreciate how Darktrace/Network helps us identify anomalous network activity, insider threats, and compromised devices that traditional security controls might miss. Its AI-driven technology can do in minutes what would take humans years to detect and respond to, making my small team function like a big SOC. My favorite feature is the AI analyst, which analyzes particular alerts and does all the work to correlate them. The initial setup was also pretty straightforward, with the vendor assisting with configuration and making the process a breeze. Those guys are great at what they do. Review collected by and hosted on G2.com.

I think the user interface. While it looks awesome and highly technical, it isn't very friendly to use. For instance, doing manual investigations is pretty difficult. The alerts do not give much to go with. With the user interface, I think it's very challenging because of the amount of information there, and it's not always obvious where to begin your investigation. With the manual investigations specifically, some alerts do not immediately provide enough context to understand the root cause or impact. You'd need to be extremely technical and familiar and use different screens to investigate further. I just wish all pertinent information was there at once. Review collected by and hosted on G2.com.

What I like best about Darktrace/Detect is its user-friendly and interactive interface, which makes it easy to investigate alerts and understand network activity. The platform is well-supported with responsive customer service, tutorials, blogs, and customer experience reviews, which help accelerate learning and adoption. Having used it for two years, I find that these resources, combined with the intuitive design, make day-to-day monitoring and analysis much more efficient. Review collected by and hosted on G2.com.

What I dislike about Darktrace/Detect is that the initial setup and tuning require strong configuration and engineering skills. Without vendor support, organizations may need a large, skilled team to manage policies and integrations effectively. Some regular challenges include the high volume of alerts that require fine-tuning, occasional false positives and the need for continuous effort (probably a SOC team) to keep detections aligned with the business environment. Review collected by and hosted on G2.com.

real-time visibility and anomaly detection across our cloud workload. proactive prevention Review collected by and hosted on G2.com.

The CSPM part can be improved, as the data representation needs improvement Review collected by and hosted on G2.com.

Darktrace provided me with a very powerful solution with many detailed insights Review collected by and hosted on G2.com.

Their interface is incredibly complex and doesn't favour people who have limited time to learn it over repeated use. Also, there is no context given to some of the alerts. Review collected by and hosted on G2.com.

What I appreciate most about Darktrace/Network is its self-learning AI technology that continuously adapts to our network environment without requiring extensive manual configuration. The platform's ability to detect subtle anomalies and previously unknown threats is exceptional - it identifies attack patterns that traditional signature-based solutions completely miss.

The Threat Visualizer interface is incredibly intuitive, providing clear visual representations of network activity and threat progression that make complex security incidents easy to understand and communicate to stakeholders. The autonomous response capabilities are particularly impressive, allowing the system to take immediate action to contain threats while maintaining business continuity.

I also value the comprehensive network visibility it provides, giving us insights into device behavior, user activities, and data flows that were previously invisible. The real-time monitoring and alerting system has significantly reduced our incident response time and improved our overall security posture. Review collected by and hosted on G2.com.

The main challenge I've encountered is the initial learning period, where the AI system generates numerous alerts while it's still understanding our network's normal behavior patterns. This requires significant time investment from our security team to properly tune and validate alerts during the first few months of deployment.

The pricing structure can be quite expensive, especially for smaller organizations or those with limited security budgets. The cost increases significantly when scaling across multiple network segments or adding advanced features.

Sometimes the AI's decision-making process can be opaque, making it difficult to understand why certain actions were taken or alerts were generated. This "black box" aspect can be concerning when you need to provide detailed explanations for security incidents to compliance teams or executives. Additionally, the platform occasionally generates false positives that require manual investigation and tuning to prevent future occurrences. Review collected by and hosted on G2.com.

The automatic blocking is a big win — it reacts fast and usually gets it right without needing manual intervention.

Device tracking is solid — gives a clear view of what’s happening on the network and makes it easy to spot anomalies.

Visibility is impressive — it really feels like it sees everything, which gives a lot of confidence in coverage.

Overall, it's been a strong addition to our security stack. Set-and-forget most of the time, but with the depth when you need to dig in. Review collected by and hosted on G2.com.

Sometimes it misclassifies devices, especially when IPs shift — can be a pain to untangle when one device gets tied to the wrong activity.

There’s a fair bit of noise, especially early on while the AI is still learning — takes a little time to settle and reduce alert fatigue. Review collected by and hosted on G2.com.

Realtime monitoring and response to any network threats. The Cyber AI Analyst investigates threats (including potential threats), automatically triages, interprets, and reports on the full scope of security incidents. Customer support is great. Review collected by and hosted on G2.com.

Initial learning curve when first implementing Darktrace. The many features and all very complex. Review collected by and hosted on G2.com.

By using this behavior-based approach, we've been able to identify anomalies that traditional signature-based systems could overlook, including things like unexpected data transfers or suspicious lateral movement. Review collected by and hosted on G2.com.

It tends to be a premium product. Licensing, implementation, ongoing maintenance, support cost, staff training etc. might be significant, especially for smaller organizations. Review collected by and hosted on G2.com.

Cuts us off the moment something goes wrong Review collected by and hosted on G2.com.

Very rarely there are false positives and we need to get IT to bring us back online Review collected by and hosted on G2.com.