Try our new research platform with insights from 80,000+ expert users
reviewer1556535 - PeerSpot reviewer
System Architect at a energy/utilities company with 51-200 employees
Real User
Stable with helpful technical support and good network visibility
Pros and Cons
  • "The product offers us a very good user interface and we've found the network visibility to be very good so far."
  • "It would be useful if there was a way to check to see if there are certain devices that are not in sync with the solution. I'm not sure if this is an option or not."

What is most valuable?

Overall, I like the system. The product offers us a very good user interface and we've found the network visibility to be very good so far. The solution has one window and shows all networks.

The solution comes in multiple languages, including English and Arab options.

The solution is stable.

We've found that technical support is helpful and available to assist us if we need them.

What needs improvement?

There are some automation capabilities, however, they could be presented better.

The manual is difficult to follow. While it presents some use cases, it's not very clear. There may also be some language barriers, as it's not available in my language.

Some aspects of the initial setup are complex. 

It would be useful if there was a way to check to see if there are certain devices that are not in sync with the solution. I'm not sure if this is an option or not. 

The cost of the solution is quite high.

I'm very interested in ISO 27001 and these processes. I'd like to better understand how it supports this kind of workflow.

For how long have I used the solution?

I haven't used the solution for very long. It may only be about 20 hours or so. It's very, very new. 

What do I think about the stability of the solution?

The solution is mostly stable. I found that, during the POC, sometimes my rights would do off and I would have to reinstate them, however, other than that, it was very stable. The performance was good. 

Buyer's Guide
Darktrace
October 2025
Learn what your peers think about Darktrace. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
868,787 professionals have used our research since 2012.

What do I think about the scalability of the solution?

I've only used the solution for a short amount of time. I can't really speak to the scalability. There were different models that I tried, however, I can't speak about how different models affect the scalability. I've only used it for a very short amount of time.

There are maybe three or four people on the solution, now that we've tested it. 

How are customer service and support?

I haven't really interacted so much with technical support, however, there is a person available to us that could help us troubleshoot or answer our questions if we need assistance. 

How was the initial setup?

There are aspects of the initial setup that are not very straightforward. there is some complexity. I needed to keep going back to the manual to check things at certain points. 

What's my experience with pricing, setup cost, and licensing?

We are still currently in the test period. Within the year, we will have to invest in the cost of licensing. We have not done that yet.

The solution itself is quite expensive. 

Which other solutions did I evaluate?

We did look at other solutions, however, I can't speak to which solutions we actually looked at.

What other advice do I have?

We are a partner.

I'm not sure which version of the solution we're using. My understanding is that it is version 5.

I would recommend the solution to others. However, it's important to ensure you use the solution in order to set up your processes correctly and to the benefit of the organization.

So far, I would rate the solution at an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
PeerSpot user
reviewer1514760 - PeerSpot reviewer
Técnico Informático at a tech services company with 51-200 employees
Real User
Effectively stops cyber-attacks from spreading
Pros and Cons
  • "Darktrace is very flexible."

    What is our primary use case?

    I use it for my business. Within our organization, there are around 500 people using this solution. We want to continue using Darktrace but it's very expensive.

    What is most valuable?

    Darktrace is very flexible.

    For how long have I used the solution?

    I have been using this solution for a couple of weeks.

    What do I think about the scalability of the solution?

    This solution is both scalable and stable.

    How are customer service and technical support?

    The technical support is very good.

    Which solution did I use previously and why did I switch?

    We used Stealthwatch and Proofpoint.

    How was the initial setup?

    The initial setup was quite straightforward. Deployment takes roughly 45 minutes to one hour.

    What about the implementation team?

    We used an integrator.

    What's my experience with pricing, setup cost, and licensing?

    This solution is expensive.

    What other advice do I have?

    I would absolutely recommend using Darktrace. Overall, on a scale from one to ten, I would give this solution a rating of eight.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Buyer's Guide
    Darktrace
    October 2025
    Learn what your peers think about Darktrace. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
    868,787 professionals have used our research since 2012.
    it_user1322112 - PeerSpot reviewer
    Chief Operations & Information Officer at MineWorkers Provident Fund
    Real User
    Delivers as expected, provides good analytics around the real-time monitoring of our network, and has good reporting and reporting period
    Pros and Cons
    • "I particularly like Antigena and the analytics around the real-time monitoring of our network. I also like its reporting because it has got a seven-day reporting period within the system. Every time you run the reports, it gives you the data about the previous seven days. I like that because it is in real-time. I enjoy reading those reports and getting a very clear and decisive idea of what's happening on my network on a real-time basis. I like the actual real-time monitoring of spoofing and things like that. I also like the user monitoring as well as the network logging capabilities."
    • "One thing that I would like to look at going forward is to have a fully automated network infrastructure that is monitored automatically real-time, and that gives me this kind of capability where I would be able to look at my network at any given time and see the state of my network. With Darktrace, at the moment, I have to almost put in a date and tell them that want you to give me data from this date to this date. I don't want that. I want a fast solution in which it doesn't matter when I log into the application. Whenever I log in, I must be able to see my network and run a report. In other words, if I go in now and I say, "Give me a full report of what happened today, it must be able to give me that. It mustn't just be limited to a seven-day period, for argument's sake. It must be able to give me real-time and day-to-day tracking of what has happened within my network."

    What is our primary use case?

    We have Antigena on the email, and we also use the network monitoring capabilities. We are using the latest version of the Antigena Email and AI analytics platform. 

    What is most valuable?

    I particularly like Antigena and the analytics around the real-time monitoring of our network. I also like its reporting because it has got a seven-day reporting period within the system. Every time you run the reports, it gives you the data about the previous seven days. I like that because it is in real-time. I enjoy reading those reports and getting a very clear and decisive idea of what's happening on my network on a real-time basis. I like the actual real-time monitoring of spoofing and things like that. I also like the user monitoring as well as the network logging capabilities. 

    What needs improvement?

    One thing that I would like to look at going forward is to have a fully automated network infrastructure that is monitored automatically real-time, and that gives me this kind of capability where I would be able to look at my network at any given time and see the state of my network. With Darktrace, at the moment, I have to almost put in a date and tell them that want you to give me data from this date to this date. I don't want that. I want a fast solution in which it doesn't matter when I log into the application. Whenever I log in, I must be able to see my network and run a report. In other words, if I go in now and I say, "Give me a full report of what happened today, it must be able to give me that. It mustn't just be limited to a seven-day period, for argument's sake. It must be able to give me real-time and day-to-day tracking of what has happened within my network.

    For how long have I used the solution?

    We have been using Darktrace for two years.

    How are customer service and technical support?

    There were a couple of times when we needed some of the expertise, and the guys were not available at the time when we needed them. Subsequently, they've managed to improve.

    What other advice do I have?

    In terms of our organization, we are a massive IT organization or financial services company. We've got a very small ITP, but we've got a lot of data. We are not sure about Darktrace in terms of its capacity to deal with huge data, but it is probably too early for me to give some sort of indication of what is not big.

    At the moment, they are delivering on the set objective in terms of what I want to achieve as a CIO, and I'm quite happy with some of the deliverables that are coming through at the moment. In terms of what our requirements were and what we expect in terms of what we want them to deliver, they have delivered. Within the next two to three years, I would probably be able to provide a different perspective after we've matured within the Darktrace environment. At the moment, they've delivered the actual scope of work. There is nothing really that they're not delivering on as promised. So, at the moment, I'm quite happy with where we are.

    I would rate Darktrace a nine out of ten.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Seguridad de la Información at Banco Davivienda (Costa Rica) S.A.
    Real User
    Allows us to monitor our network 24/7 without a lot of analysts
    Pros and Cons
    • "The main valuable feature is that we don't need a lot of analysts. With few analysts, we have all the network monitored, 24/7."
    • "I would like to see more protection in the endpoint. Especially because we have a lot of people using VPNs. If they would improve end point security, it would give more control there."

    What is our primary use case?

    Darktrace is deployed on our LAN, inside the network. No site, no internet, it's just for monitoring the LAN, local access network. It helps us to find a lot of threats inside the network. We are very happy with the solution. You don't need to have a lot of analysts with Darktrace who are making or following the incident. This solution helps you to send the notification and avoid threats.

    What is most valuable?

    The main valuable feature is that we don't need a lot of analysts. With few analysts, we have all the network monitored, 24/7.

    What needs improvement?

    Firstly, the integration should be improved. 

    In terms of what additional features I would like included in the next release of Darktrace, I would like to see more protection in the endpoint. Especially because we have a lot of people using VPNs. If they would improve end point security, it would give more control there.

    For how long have I used the solution?

    We have been using Darktrace for three years.

    What do I think about the stability of the solution?

    In terms of stability, Darktrace is an excellent product.

    What do I think about the scalability of the solution?

    Darktrace's scalability is very good. We have about 1,200 users on it currently.

    How are customer service and technical support?

    Their technical support is excellent.

    Which solution did I use previously and why did I switch?

    We have more than an SOC, a security operation center, so we switched to Darktrace because they use artificial intelligence and they are more sophisticated in preventing threats.

    How was the initial setup?

    The initial setup is straight forward. Deployment took one day.

    What about the implementation team?

    We implemented with a consultant. It required two people.

    What was our ROI?

    Our ROI as a result of Darktrace is excellent. The return of the cost of the solution for preventing threats is very good.

    What's my experience with pricing, setup cost, and licensing?

    Darktrace is expensive, but its results are invaluable.

    What other advice do I have?

    Because of all it does, Darktrace is a very good solution, and it doesn't take a lot of time to implement and to get results. You can learn the behavior of the network and take actions, not based in signatures. I think this is very, very good.

    On a scale of one to ten, I would give Darktrace a nine.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer1474389 - PeerSpot reviewer
    Networking & Security Specialist at a tech services company with 51-200 employees
    Real User
    Very stable and easy to use, but needs better threat analyzer and pricing and an option to monitor agents
    Pros and Cons
    • "It is very stable and easy to use."
    • "Its threat analyzer could be better. It should also have agents. They should improve this product by installing agents for the machine to get more visibility. Currently, they are monitoring only the network. They should also monitor the agents from inside. It should also have a better pricing plan because it is an expensive product."

    What is our primary use case?

    We are using it for proof of concept purposes. We are using it to monitor all traffic on our network, and it is analyzing the traffic. We have 5,000 users. We are using the latest version.

    What is most valuable?

    It is very stable and easy to use.

    What needs improvement?

    Its threat analyzer could be better. It should also have agents. They should improve this product by installing agents for the machine to get more visibility. Currently, they are monitoring only the network. They should also monitor the agents from inside.

    It should also have a better pricing plan because it is an expensive product.

    For how long have I used the solution?

    I have been using this solution for a few weeks. 

    What do I think about the stability of the solution?

    It is very stable.

    How are customer service and technical support?

    Currently, we are working with their pre-sales and technical teams. For POC, there is a dedicated team for us to ask and check what we want, and they have been good. I have not yet contacted their support. When we purchase the solution, we will be directly connected with the support team.

    Which solution did I use previously and why did I switch?

    We were using Trend Micro's Deep Discovery Inspector.

    How was the initial setup?

    It was done in less than half an hour.

    What about the implementation team?

    We are a system integrator. For its deployment, one cybersecurity specialist would be enough.

    What's my experience with pricing, setup cost, and licensing?

    It is a very expensive product.

    Which other solutions did I evaluate?

    I am comparing Darktrace with other products like Stealthwatch and Vectra, but for now, I find Darktrace as good.

    What other advice do I have?

    We have been using it for a few weeks. As of now, we plan to keep using it. I would recommend this solution for big companies.

    I would rate Darktrace a seven out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
    PeerSpot user
    reviewer1468230 - PeerSpot reviewer
    Founder and CEO at a tech services company with 51-200 employees
    Reseller
    Detects and blocks attacks automatically, and has excellent support
    Pros and Cons
    • "The most valuable feature of this solution is that it does not require human intervention to eliminate a threat."
    • "The user interface and the configuration are a bit complex and should be improved or simplified."

    What is our primary use case?

    We are using this solution for both the detection and elimination of attacks.

    What is most valuable?

    The most valuable feature of this solution is that it does not require human intervention to eliminate a threat. It blocks everything automatically.

    What needs improvement?

    The user interface and the configuration are a bit complex and should be improved or simplified. 

    It's user-friendly, but it could be easier.

    The pricing could be better and the scalability should be simplified for the customers.

    The integration could be better, as it's not that interactive. They could make it more interactive for the customer's daily use.

    For how long have I used the solution?

    I have been using Darktrace for three years.

    What do I think about the stability of the solution?

    It's a very stable solution. We are very satisfied with stability.

    What do I think about the scalability of the solution?

    It's a scalable solution, but it's not very easy to scale. When using a detection environment, it's not very easy for the customer.

    How are customer service and technical support?

    Technical support is very good. They are excellent.

    Which solution did I use previously and why did I switch?

    Previously, we had completed some trials with IronNet.

    How was the initial setup?

    The initial setup is straightforward.

    What's my experience with pricing, setup cost, and licensing?

    It could be cheaper.

    When it comes to large installations, it can be expensive, but for small accounts it's fine.

    What other advice do I have?

    We are resellers and integrators of Darktrace.

    I would rate Darktrace a nine out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer. reseller
    PeerSpot user
    Philippe Panardie - PeerSpot reviewer
    Philippe PanardieRSSI at SDIS49
    Top 5Real User

    A real interesting solution, with tremendous efficiency, especially for special accounts and VIP. The cost is quite a bit expensive.

    Head of Cybersecurity Business Unit at S2E
    Real User
    Provides a visual representation of attack history, with a nice GUI, but the analysis could be simplified
    Pros and Cons
    • "I find it very good in the way that they show the past events, including the attack history."
    • "It would be helpful if they could recognize incidents and simplify the customer's challenge to identify what is happening."

    What is our primary use case?

    We are a system integrator and we pose solutions, including this one, to our clients.

    It is mainly used to reinforce response capabilities with respect to network security.

    What is most valuable?

    I find it very good in the way that they show the past events, including the attack history. You are able to visualize all of the attack paths and connectivity to see what's happened.

    The GUI interface is very good.

    They are using the best machine learning and AI at the moment.

    What needs improvement?

    The need to simplify the analysis from a user perspective. In a few cases, you have to be a specialist in order to understand what's happening. It would be helpful if they could recognize incidents and simplify the customer's challenge to identify what is happening.

    For how long have I used the solution?

    I was been working with Darktrace for two years.

    What do I think about the stability of the solution?

    Stability-wise, we have not had any issues and it has been quite good.

    What do I think about the scalability of the solution?

    We haven't had any trouble with scalability.

    How are customer service and technical support?

    We have had contact with technical support and help was quite straightforward. Our feedback for them is good.

    Which solution did I use previously and why did I switch?

    We work with a variety of products in the security space including Darktrace, Splunk, Elastic, and others.

    How was the initial setup?

    The initial setup is really simple. This product is normally deployed as an on-premises appliance and it normally takes less than one day. It depends on how complex the network is, but it's usually quite simple.

    What's my experience with pricing, setup cost, and licensing?

    Our customers feel that the price of Darktrace is quite high compared to other solutions. However, I feel that they are one of the top solutions in this space and they want to be paid for that.

    What other advice do I have?

    They are currently working on improving their interface by including AI to help simplify things, but it does not work on real-time data. Rather, it works on historical events.

    This is definitely a product that I can recommend, although I would probably be using it together with a SOC service or somebody else who can manage it properly.

    I would rate this solution a seven out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
    PeerSpot user
    RSSI at SDIS49
    Real User
    Top 5
    A clever solution that spots problems that cannot be found by other solutions but it would benefit from having automation
    Pros and Cons
    • "The solution is stable. We've never had any problems with it."
    • "The solution would benefit from automation. Currently, you have to know what you are searching for."

    What is our primary use case?

    Primarily we use the solution to spot problems that cannot be found by other solutions. 

    How has it helped my organization?

    Darktrace has improved our knowledge of abnormal phenomenen which could have potentially be hazardous for the organization.You have to be vigilant with GDPR compliance rules in Europe 

    What is most valuable?

    The most valuable aspect of the solution is that you can see all the process mistakes. You can see all the different types of unusualcsituations that you usually don't see in a traffic solution.

    What needs improvement?

    The solution would benefit from automation. Currently, you have to know what you are searching for.

    For how long have I used the solution?

    I've been using the solution for one month.

    What do I think about the stability of the solution?

    The solution is stable. We've never had any problems with it.

    What do I think about the scalability of the solution?

    The solution is scalable. So far, we have 12 networks done. We have about 500 users on it currently.

    How are customer service and technical support?

    I haven't had too much interaction with technical support. Technical support was in France but the experts were in England. It's good generally, but we haven't used the solution for too long.

    Which solution did I use previously and why did I switch?

    We didn't previously use a different solution.

    How was the initial setup?

    When you have an expert, the initial setup is easy, but if you do it on your own, it could be complex. Deployment takes at least a month.

    Which other solutions did I evaluate?

    We didn't evaluate another solution. We met the solution's team in Cannes for an IT meeting and decided to pursue discussions with implementation.

    What other advice do I have?

    We use the on-premises deployment model.

    It's a quite clever solution. It has a lot of potential, but I'd advise those considering to hold off implementing the solution until after a newer version is released.

    I'd rate the solution seven out of ten. If they added automation and included it in the price, I'd rate it higher.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Buyer's Guide
    Download our free Darktrace Report and get advice and tips from experienced pros sharing their opinions.
    Updated: October 2025
    Buyer's Guide
    Download our free Darktrace Report and get advice and tips from experienced pros sharing their opinions.