Darktrace
AI-native cybersecurity company whose self-learning platform models what is normal for each customer and detects and autonomously responds to novel threats across network, email, cloud, OT, identity and endpoints; Cyber AI Analyst investigates the alerts.
Products
Reviewed against the official catalog on 5 Sep 2026. The ActiveAI Security Platform page's own product navigation: the platform, its 7 core products and its 6 cross-platform products — 14 records, no more and no fewer.
-
Darktrace ActiveAI Security Platform Platform
Darktrace's self-learning security platform, sold as a set of natively integrated products (network, email, cloud, OT, identity, endpoint and AI-agent security) that share one Adaptive AI model of what is normal for a customer and respond autonomously when behaviour deviates; being renamed the Behavioral Defense Platform.
Inside Darktrace ActiveAI Security Platform
-
The investigation engine inside every Darktrace product: triages each alert the way a human analyst would, using Darktrace's DEMIST-2 and DIGEST models to correlate events into an incident narrative and write the report -- Darktrace says it accelerates triage by 10x. Not sold on its own.
-
Security for an organisation's own AI agents and assistants: learns how each agent normally behaves and what access it accumulates, and flags drift, misuse and prompt-driven abuse before it spreads.
-
Network detection and response that models normal traffic for every device and user inside the customer's own environment, then detects and contains known and unknown threats without cloud-trained signatures.
-
Email security that learns each mailbox's normal correspondence to stop novel phishing, account takeover and business email compromise, with add-on modules for data loss prevention, messaging apps and DMARC.
-
Cloud detection and response across multi-cloud environments: maps identities, roles and permissions, detects lateral movement and insider threats, and enforces compliance baselines.
-
Operational-technology security that protects industrial production assets and the IT systems connected to them in one model, covering risk management, detection and response for OT networks.
-
Identity threat detection and response that learns how each account normally behaves across SaaS, cloud and network to catch account takeover and credential misuse that perimeter tools trust by default.
-
Endpoint detection and response that builds a pattern of life for each device, including standalone and remote endpoints, and contains threats that deviate from it.
-
Exposure management that ranks a customer's attack paths and vulnerabilities by the AI's model of their estate, so remediation targets the risks most likely to be exploited.
-
External attack-surface discovery that finds the internet-facing assets an organisation does not know it owns and scores the exposure they create.
-
Incident readiness that generates bespoke, AI-written response playbooks for a customer's own environment and supports recovery and compliance reporting after an attack.
-
Automated forensic capture for cloud, container and ephemeral assets, triggered from any alert source over API so evidence is preserved before it disappears.
-
Personalised security coaching: phishing simulations and bite-size e-learning tuned to each employee's behaviour, feeding what it learns back into the platform's detection.
Closest alternatives 1
Similar products 32
Closest alternatives are pairs a vendor page itself compares. Similar products are matched from what each product does; nothing in that group is asserted as a rivalry.
Sources
- Valuation
-
Darktrace's own announcement of the completed take-private acquisition by Thoma Bravo: $5.3 billion cash deal, $7.75 per share, closed 2024-10-01. Darktrace delisted from the London Stock Exchange (FTSE 100) and continues to operate and ship product under its own name, so the record is kept rather than merged -- the acquirer, Thoma Bravo, is a private equity firm and is not itself an AI company this directory would list.
- Employees
-
Same release. States Darktrace's "platform and services are supported by over 2,400 employees around the world who protect nearly 10,000 customers across all major industries globally."
- Founded
-
Same release states the company was founded in 2013.
- Status
-
Company disclosure · 23 Sep 2026
Darktrace's own company page, read 2026-09-23: "Today, Darktrace is a global leader in cybersecurity AI" -- it operates and ships under its own name. Taken private by Thoma Bravo (completed 2024-10-01, Darktrace's own announcement at darktrace.com/news/darktrace-announces-formal-completion-of-its-acquisition-by-thoma-bravo). Status active: a company owned by a private-equity firm that still operates standalone is
activeunder org-status.json's own definition -- the same reading as smartsheet and zendesk. - Description
-
Official documentation · 5 Sep 2026
Rewritten 2026-09-05 when the product catalog was reconciled: the old sentence named Cyber AI Analyst as the thing that 'detects and autonomously responds', which is what the seven platform products do; the Analyst investigates. Platform page: 'every product in the Darktrace Behavioral Defense Platform is natively integrated'.
Open Darktrace in the directory
Something wrong here? Send a correction — quote this company id: darktrace.