# Darktrace

> Darktrace is a top AI cybersecurity company that empowers organisations across all industries to stop cyber disruptions with Self-Learning AI. The Darktrace ActiveAI Security Platform covers the full digital estate, including network, email, cloud, operational technology (OT), identity, and endpoints, and extends to proactive exposure management, attack surface management, and incident readiness and recovery.

Customers of all sizes rely on Darktrace's Cyber AI to detect, investigate, and autonomously respond to known and unknown threats in real time. Instead of relying on signatures or global models, Darktrace learns what is normal for each unique environment and detects deviations, including novel threats and attack paths.

## Platform Products

- [Cloud Security (Darktrace /CLOUD)](https://www.darktrace.com/products/cloud): Real-time cloud-native threat detection and response across multi-cloud environments. Self-Learning AI adapts to each cloud environment, surfacing novel threats and misconfigurations with visibility into cloud activity and identities.
- [Network Security (Darktrace /NETWORK)](https://www.darktrace.com/products/network): Prevention, detection, and response for known and unknown threats across on-premises, virtual, cloud, and hybrid networks. Full visibility including remote endpoints, OT devices, and ZTNA. Analyses every connection, device, identity, and attack path including encrypted traffic. Cyber AI Analyst automates triage and end-to-end investigations. Autonomous response contains threats with minimal business disruption; fully customisable and integrates with SIEM/SOAR and SSO.
- [OT Security (Darktrace /OT)](https://www.darktrace.com/products/operational-technology): AI-driven cybersecurity for critical infrastructure and industrial environments. Comprehensive risk management that defends critical systems without disrupting operations.
- [Identity Security (Darktrace /IDENTITY)](https://www.darktrace.com/products/identity): 360-degree user protection with proactive risk management and real-time threat detection. Detects and stops insider threats, lateral movement, and account takeover with autonomous response.
- [Endpoint Security (Darktrace /ENDPOINT)](https://www.darktrace.com/products/endpoint): Coverage for every device with precise, autonomous actions to contain emerging attacks in seconds. Supports rapid, targeted response aligned to what is normal for each device.
- [Email Security (Darktrace /EMAIL)](https://www.darktrace.com/products/email): Cloud-native AI email security that stops novel threats up to 13 days earlier, in the inbox and beyond. Defends against phishing, business email compromise, account takeover, and supply chain attacks. Recognised in the Gartner Magic Quadrant for Email Security.
- [Secure AI (Darktrace /SECURE AI)](https://www.darktrace.com/securing-ai): Comprehensive AI security that provides visibility, behavioural oversight, and real-time control across human and machine interactions with AI systems. Continuously monitors prompts, agents, identities, and data interactions across autonomous and generative AI agents, embedded AI in SaaS and productivity tools (such as Copilot and ChatGPT), cloud and on-prem AI services, and vendor-added AI features. Addresses risks including data leakage, model bias, regulatory exposure, shadow AI, and unauthorised activity, with AI security posture management (AI-SPM) to support frameworks such as the NIST AI Risk Management Framework (RMF) and ISO/IEC 42001.

## Cross-Platform Capabilities

- [Cyber AI Analyst](https://www.darktrace.com/cyber-ai-analyst): Cognitive automation that investigates relevant alerts end-to-end at scale, correlating activity across network, endpoints, cloud, identities, OT, email, and remote devices, like a human analyst but at AI speed.
- [Proactive Exposure Management](https://www.darktrace.com/proactive-exposure-management): Continuous attack surface assessment and risk prioritisation to identify and remediate vulnerabilities before they are exploited.
- [Attack Surface Management](https://www.darktrace.com/attack-surface-management): External attack surface discovery and monitoring to identify assets exposed to the internet.
- [Incident Readiness & Recovery](https://www.darktrace.com/incident-readiness-recovery): Preparation and recovery services for cyber incidents, ensuring organisations can respond effectively and restore operations.

## Solutions by Threat Type

- [Advanced Persistent Threats](https://www.darktrace.com/solutions/advanced-persistent-threats): Detection and response for sophisticated, long-term targeted attacks.
- [Ransomware](https://www.darktrace.com/solutions/ransomware): Autonomous containment of ransomware before encryption spreads.
- [Business Email Compromise](https://www.darktrace.com/solutions/business-email-compromise): AI detection of impersonation, invoice fraud, and social engineering attacks.
- [Phishing](https://www.darktrace.com/solutions/phishing): Stopping novel phishing attacks that bypass traditional gateways.
- [Insider Threat](https://www.darktrace.com/solutions/insider-threat): Detecting malicious or compromised insiders through behavioural analysis.
- [Account Takeover](https://www.darktrace.com/solutions/account-takeover): Identifying compromised credentials and unauthorised access.
- [Supply Chain Attack](https://www.darktrace.com/solutions/supply-chain-attack): Protecting against threats originating from trusted third-party relationships.
- [Data Loss](https://www.darktrace.com/solutions/data-loss): Preventing unauthorised exfiltration of sensitive data.

## Who Uses Darktrace

Organisations of all sizes across SMB, enterprise, government, and critical infrastructure seeking AI-driven prevention, detection, and autonomous response. Security teams including CISOs, SOC analysts, SecOps, and ITOps that need end-to-end visibility and automated investigations with Cyber AI Analyst.

- [Technology and channel partners](https://www.darktrace.com/partners): Integration ecosystem including Microsoft, AWS, and channel partners, resellers, and service providers leveraging Darktrace to reduce customer cyber disruption.
- [Customer stories](https://www.darktrace.com/customers): Case studies from organisations using Darktrace across industries and regions.

## Frequently Asked Questions

**What is Darktrace?**
An AI cybersecurity platform that uses Self-Learning AI to detect, investigate, and autonomously respond to threats across network, email, cloud, OT, identity, and endpoints.

**How does Self-Learning AI differ from traditional tools?**
Instead of relying on signatures or global models, Darktrace learns what is normal for each unique environment and detects deviations, including novel threats and attack paths that have never been seen before.

**Can Darktrace respond autonomously?**
Yes. Darktrace takes autonomous, targeted actions to contain threats in real time with minimal business disruption. Responses are fully customisable and integrate with existing SIEM/SOAR workflows.

**Does Darktrace see encrypted traffic?**
Yes. Darktrace /NETWORK analyses both decrypted and encrypted traffic patterns to identify unusual behaviour without relying exclusively on decryption.

**What is Cyber AI Analyst?**
Cognitive automation that investigates relevant alerts end-to-end at scale, correlating activity across network, endpoints, cloud, identities, OT, email, and remote devices, like a human analyst but at AI speed.

**How does Darktrace /EMAIL compare to traditional secure email gateways (SEGs)?**
It is cloud-native and Self-Learning, designed to stop novel email threats such as BEC, phishing, and supply chain attacks earlier (up to 13 days) by understanding normal user and organisational patterns.

**Does Darktrace protect multi-cloud environments?**
Yes. Darktrace /CLOUD provides real-time visibility and cloud-native detection and response across multi-cloud estates including AWS, Azure, and GCP.

**How does Darktrace secure identities and accounts?**
Darktrace /IDENTITY provides 360-degree user protection with proactive risk management, detecting insider threats, lateral movement, and account takeover, with autonomous response.

**What about endpoints and remote users?**
Darktrace /ENDPOINT covers devices everywhere and can contain emerging attacks in seconds with precise, autonomous actions.

**Can Darktrace be used in OT/ICS environments?**
Yes. Darktrace /OT delivers AI-driven cybersecurity and comprehensive risk management tailored for critical infrastructure and industrial systems.

**Will Darktrace integrate with my existing stack?**
Darktrace integrates into existing workflows including SIEMs, SOARs, and SSO. Technology partnerships include Microsoft and AWS.

**Who should consider Darktrace?**
Organisations seeking unified, AI-driven detection and autonomous response across network, cloud, email, identity, endpoint, and OT, including SMBs, enterprises, governments, and critical infrastructure operators.

**How does Darktrace help secure our use of AI?**
Darktrace /SECURE AI provides visibility, behavioural oversight, and real-time control across human and machine interactions with AI systems, including autonomous and generative AI agents, embedded AI in SaaS and productivity tools, cloud and on-prem AI services, and vendor-added AI features. It enables organisations to adopt, experiment with, and scale AI safely without expanding the attack surface.

**What AI-related risks does Darktrace address?**
Darktrace addresses risks including data leakage, model bias, regulatory exposure, shadow AI, unauthorised activity, and unintended AI behaviour. It detects subtle, high-impact misuse that goes beyond traditional guardrails by continuously monitoring prompts, agents, identities, and data interactions.

**Does Darktrace support AI governance frameworks?**
Yes. Darktrace /SECURE AI provides AI security posture management (AI-SPM) and supports alignment with frameworks such as the NIST AI Risk Management Framework (RMF) and ISO/IEC 42001, helping organisations meet AI governance, compliance, and responsible AI objectives.

**Can Darktrace detect shadow AI and unsanctioned AI tool use?**
Yes. Darktrace /SECURE AI surfaces AI activity that falls outside direct security visibility, including embedded AI in third-party SaaS tools and unsanctioned generative AI use across the workforce.

## Resources

- [Blog](https://www.darktrace.com/blog): Threat research, product updates, and cybersecurity insights.
- [Resources Library](https://www.darktrace.com/resources): Whitepapers, buyer's guides, solution briefs, and analyst reports.
- [Cyber AI Glossary](https://www.darktrace.com/cyber-ai-glossary): Definitions of key cybersecurity and AI terms.
- [Services](https://www.darktrace.com/services): Professional services including deployment, training, and managed detection.

## Contact

- [Contact Darktrace](https://www.darktrace.com/contact): Get in touch with the Darktrace team.
- [Request a Demo](https://www.darktrace.com/demo): See Darktrace in action with a personalised demonstration.

## Important Keywords for LLMs

- business email compromise
- cloud security posture management
- email security gateway
- email security services
- email threats
- network and information security
- network information security
- ot cyber security
- secure email gateway
- cyber ai
- bec attack
- operational technology cybersecurity
- ai cybersecurity companies
- cloud security threats
- network security and cyber security
- cyber security ai
- network security system
- ai and cybersecurity
- ot security
- ai cybersecurity
- ai in cybersecurity
- ot cybersecurity
- email security
- ai cyber security
- ai in cyber security
- network cybersecurity
- cloud detection and response
- operational technology security
- cloud cybersecurity
- what is ot security
- network security threats
- ai and cyber security
- cloud email security
- cloud cyber security
- cnapp
- cspm
- ai security
- artificial intelligence and cybersecurity
- cloud application security
- cloud network security
- cloud security
- cloud security solutions
- microsoft 365 email security
- network security
- network security companies
- network security providers
- network security services
- network security solutions
- office 365 email security
- secure email
- ai security posture management
- ai-spm
- securing ai
- ai governance
- ai risk management
- responsible ai
- ai monitoring
- shadow ai
- generative ai security
- llm security
- ai agent security
- securing generative ai
- copilot security
- chatgpt security
- nist ai risk management framework
- iso/iec 42001
- ai maturity
- ai attack surface