D

Cyber AI Analyst

Application

by Darktrace

The investigation engine inside every Darktrace product: triages each alert the way a human analyst would, using Darktrace's DEMIST-2 and DIGEST models to correlate events into an incident narrative and write the report -- Darktrace says it accelerates triage by 10x. Not sold on its own.

Find alternatives to Cyber AI Analyst

The product page shows no published pricing; every call to action is "Get a demo", routing to contact sales.

What it does

• Threat detection and response

Sources

Pricing

Official documentation · 5 Sep 2026

No published pricing; the page's calls to action are 'Get a demo'. Re-checked 2026-09-05 at the page's current URL -- the URL recorded on 2026-08-31, /products/detect, now redirects to /platform.

Description

Official documentation · 5 Sep 2026

Page: 'Investigates every alert like a human analyst, at the speed and scale of AI' and 'Cyber AI Analyst underpins the Darktrace Behavioral Defense Platform.' Re-typed from application to component on 2026-09-05: it is the shared investigation layer of the platform, not a product a customer buys, and the site navigation files it under 'AI Investigations' rather than under Products.

Sold within

Official documentation · 5 Sep 2026

'Cyber AI Analyst underpins the Darktrace Behavioral Defense Platform. Discover added benefits when trialling products in unison.' It is reached by buying any platform product, never separately.

Also from Darktrace

• Darktrace ActiveAI Security Platform Platform

  Darktrace's self-learning security platform, sold as a set of natively integrated products (network, email, cloud, OT, identity, endpoint and AI-agent security) that share one Adaptive AI model of what is normal for a customer and respond autonomously when behaviour deviates; being renamed the Behavioral Defense Platform.

• Darktrace / SECURE AI Application

  Security for an organisation's own AI agents and assistants: learns how each agent normally behaves and what access it accumulates, and flags drift, misuse and prompt-driven abuse before it spreads.

• Darktrace / NETWORK Application

  Network detection and response that models normal traffic for every device and user inside the customer's own environment, then detects and contains known and unknown threats without cloud-trained signatures.

• Darktrace / EMAIL Application

  Email security that learns each mailbox's normal correspondence to stop novel phishing, account takeover and business email compromise, with add-on modules for data loss prevention, messaging apps and DMARC.

• Darktrace / CLOUD Application

  Cloud detection and response across multi-cloud environments: maps identities, roles and permissions, detects lateral movement and insider threats, and enforces compliance baselines.

• Darktrace / OT Application

  Operational-technology security that protects industrial production assets and the IT systems connected to them in one model, covering risk management, detection and response for OT networks.

• Darktrace / IDENTITY Application

  Identity threat detection and response that learns how each account normally behaves across SaaS, cloud and network to catch account takeover and credential misuse that perimeter tools trust by default.

• Darktrace / ENDPOINT Application

  Endpoint detection and response that builds a pattern of life for each device, including standalone and remote endpoints, and contains threats that deviate from it.

• Darktrace / Proactive Exposure Management Application

  Exposure management that ranks a customer's attack paths and vulnerabilities by the AI's model of their estate, so remediation targets the risks most likely to be exploited.

• Darktrace / Attack Surface Management Application

  External attack-surface discovery that finds the internet-facing assets an organisation does not know it owns and scores the exposure they create.

• Darktrace / Incident Readiness & Recovery Application

  Incident readiness that generates bespoke, AI-written response playbooks for a customer's own environment and supports recovery and compliance reporting after an attack.

• Darktrace / Forensic Acquisition & Investigation Application

  Automated forensic capture for cloud, container and ephemeral assets, triggered from any alert source over API so evidence is preserved before it disappears.

• Darktrace / Adaptive Human Defense Application

  Personalised security coaching: phishing simulations and bite-size e-learning tuned to each employee's behaviour, feeding what it learns back into the platform's detection.

Open Darktrace in the directory

Something wrong here? Send a correction — quote this product id: darktrace-cyber-ai-analyst.