Learn more about the Enterprise Immune System and the cyber threat landscape by downloading exclusive Darktrace documentation

White Papers

Darktrace Global Threat Report 2017

This exclusive report outlines nine unique cyber-threat scenarios that were identified by Darktrace in enterprise and industrial networks in 2017. In each case study, traditional security tools failed to detect the attacks, which used sophisticated or novel methods to infiltrate the network perimeter. All threats were contained without significant damage to the organization.

General Data Protection Regulation

The implementation of GDPR represents one of the most significant events in data protection regulatory history. Darktrace is applicable to a range of requirements under GDPR. Darktrace provides the real-time visibility required to make intelligence-based decisions in live situations, while enabling in-depth investigations into historical activity.

Enterprise Immune System White Paper

This white paper discusses the challenges of the threat landscape, the limitations of legacy security approaches, and Darktrace's new approach to cyber defense.

Machine Learning: A Higher Level of Automation

This white paper focuses on the rapid development of automation, and discusses new approaches to cyber security based on machine learning. Learn how Darktrace’s unique approach utilizes genuinely unsupervised machine learning techniques to detect the most subtle cyber threats.

Cyber Security for Industrial Control Systems

This white paper discusses Darktrace's Industrial Immune System, a fundamental innovation that views data from an Industrial Control System network in real time, and establishes an evolving baseline for what is normal for operators, workstations and automated systems within that environment.

Cyber Intelligence: Getting Ahead of Compromise

Find out why cyber intelligence is critical to allow organizations to achieve the visibility and focus that they need to get ahead of compromises — before they turn into crises.

Detecting the Threat Within: The Real Challenge of Insider Threat

This white paper addresses the growing challenge of insider threat. Learn why good practise is not always good enough in an age of interconnected businesses, global supply chains and porous boundaries, and how a new perspective is required to tackle the problem in a practical and meaningful way.

Finding a Needle in a Haystack: The Continuous Approach to Cyber Defense

This paper focuses on a continuous approach to cyber security which accepts that constant cyber threat is an inevitable part of doing business. Learn how cyber security must be considered as an on-going process of self-evaluation and informed actions — not as a state of perfection to be achieved and maintained.

Darktrace Discoveries: Global Threat Case Studies 2016

This report showcases six real-world case studies describing attacks in customer networks over the last year. For each case, the report describes the abnormal behavior Darktrace found, the apparent objective behind the threat and the potential risks that were prevented by our Enterprise Immune System.

Data Sheets

Using the Threat Visualizer: A Practical Guide

Darktrace Service Plans

Darktrace Antigena Network: Product Overview

Darktrace for Cloud, Hybrid and Virtual Networks

Darktrace SaaS Connectors

Darktrace for Mergers & Acquisitions

Standards and Compliance for ICS: NERC CIP V5

Industry Spotlight: Cyber Defense for Energy & Utilities

Industry Spotlight: Cyber Defense for Financial Services

Industry Spotlight: Cyber Defense for Retail & e-Commerce

Cyber Defense for the Telecommunications Industry

Darktrace and SIEMs

Cyber Security and Compliance: Proposed New York State Requirements 2016

Case Studies

All Industries
Financial Services
Government & Defense
Healthcare & Pharma
Legal & HR
Manufacturing & Supply
Media & Entertainment
Online Services
Retail & e-Commerce
Technology & Telecoms
Energy & Utilities

Birmingham Airport

British International Airport


Major European Power Infrastructure Company


Global Financial Services Company

Open Energi

British Smart Grid Company

Energy Saving Trust

Leading UK Energy Saving Organization


Leading Scottish Accountancy Firm

Pool Re

Leading UK Reinsurer of Terrorism Risk

British Land

UK Real Estate Investment Trust

Blackhawk Network

Premier Provider of Digital Payment Solutions


Leading Billing and Payment Provider


Major US Television Broadcaster


Leading US Bicycle Retailer

Wellcome Trust

Global Charitable Foundation

FirstGroup plc

British Transport Group

QUI! Group

Leading Digital Service Provider


Leading Norwegian Insurance Company


Leading Prepaid Card Provider

BH Global

Maritime Electrical Supply Chain Management and Manufacturing

Royal British Legion

British Military Charity


Global Technology Company


Media Content Company

Aspect Capital

Leading Investment Manager


Global Furniture Manufacturer

Online Car Rental Service

Bassadone Automotive Group

Gibraltar’s Leading Vehicle Supplier

Human Longevity

Medical Technology Company


Leading UK Law Firm for Pensions & Retirement Savings

City of Las Vegas

Legislative Governing Body


Leading International Manufacturer

Spillman Technologies

Premier Provider of Public Safety Software Solutions


Leading Italian Jewelry Brand


Leading Outdoor Footwear Retailer


Pioneer of Digital Credential Management Services


Major Risk Management Company


Canadian Energy Distribution Company

Sunsweet Growers

World’s Largest Manufacturer of Dried Fruit

Swope Health Services

Leading Healthcare Provider

Video Case Studies

Industry Analyst Reports

Ovum: ‘Darktrace AI powers all phases of threat defense’

This report from leading analyst firm Ovum declares Darktrace’s Enterprise Immune System “a strong example of leveraging artificial intelligence” and “one of the few cases where talk about use of AI in cyber security has turned into action”.

451 Research: ‘Darktrace succeeding with a focus on the ‘good’ and the ‘not good enough’’

This report analyzes how Darktrace's use of unsupervised machine learning is positioning it as the leader in anomaly detection, and outlines how Darktrace Antigena autonomously responds to potential threats in real time.

‘Immune System’ Cyber Security for SCADA Systems

Simon Fellows, Darktrace's Head of Security and Technical Director, has produced this white paper discussing the ‘immune system’ approach to cyber security for SCADA systems. The paper provides detailed technical insight into how Darktrace works across operational technology environments, including in SCADA systems, and includes multiple use case examples.

451 Research: ‘Darktrace is immune to old security ideas’

This report from 451 Research provides an overview of Darktrace’s technology and products, along with the current state of the cyber-security industry and where Darktrace fits in today’s landscape.

Gartner Cool Vendors 2015

In this annual report highlighting the most innovative vendors in the industry, Gartner’s Earl Perkins explains how Darktrace is using unsupervised machine learning to combat cyber threats in the Energy and Utilities industry.

Ovum ‘On the Radar: Darktrace detects threats with machine learning’

Ovum’s Rik Turner outlines and analyzes Darktrace’s unique approach to cybersecurity and how it fulfills the need for anomaly-based threat detection without rules and signatures.


Darktrace Education

We all know that cyber-attacks are not a matter of if, but when. For that reason Darktrace Education offers a curriculum and training service that allows you to rapidly learn how to use and get the maximum value from the Enterprise Immune System. With a global team of experienced instructors and subject matter experts, our mission is to deliver the best possible learning experience.

Training courses

Our education services reinforce formal classroom instruction with extensive hands-on practical experience. The majority of the training is in a workshop environment following preset lessons that challenge the trainee, aid them during the learning process and accelerate the knowledge transfer.

Training: Threat Visualizer

Our first course is designed to provide you with a comprehensive guide to using Darktrace’s award-winning Threat Visualizer interface. In just one day, network security and compliance teams will feel empowered to use this fully featured application and gain unprecedented real-time visibility of their network.

Duration: 1 day

Training: Threat Intelligence Reporting

The Threat Intelligence Reporting course is designed for security professionals that need to learn how submit regular Threat Intelligence Reports (TIRs) to the Chief Information Security Officer. Leveraging the Enterprise Immune System’s powerful machine learning and AI algorithms, participants will use the Threat Visualizer as a platform to carry out detailed Threat Hunting techniques and learn the craft of creating TIRs that highlight prioritized risks to the organization.

Duration: 1 day

Partner Training: Darktrace Cyber Security Professional

As part of Darktrace’s worldwide Partner Program, Darktrace Education has developed a fast-paced training program that empowers Darktrace Partners to deploy and support Darktrace solutions. This program consolidates the vital learning objectives taken from our entire training portfolio and combines this with architectural design considerations, deployment and best practices in order to provide an end-to-end training course for security professionals.

Duration: 2 days

Course delivery

At Darktrace Education, we offer the following training delivery options:

Online training

Online training allows your staff to participate in the training from their local office or workplace. This option is ideal if your security team is in multiple geographic locations and you want to reduce the time and expense of organizing a training session. All they need to do is put on a headset and get online to attend the training session with a live instructor.

On-site training

On-site training is conducted by a certified Darktrace instructor at your chosen site (subject to adequate on-site training facilities). This training option is most convenient when your team members are located in the same region.

Course development and feedback

Our instructors conduct themselves with absolute professionalism, deliver training with enthusiasm, and are respectful to students and their needs at all times. At the end of each training course, we gather in-depth feedback from our students in order to continuously optimize and develop our training courses. With that in mind, please bookmark this page to check on updates to our curriculum. It is through this process and our structured learning philosophy that our classes are greatly valued and appreciated by participants.

“The training was absolutely excellent. An excellent trainer and clearly knows the product inside out.”
“We learned a lot and the manual is superb too; perfectly clear and simple. It’ll be great to rely on it to refresh our memory about what we’ve learned.”
“Excellent training session. Well communicated, great content, really interesting and beneficial.”

Contact us

If you would like to inquire about our training services or schedule a training session, please do not hesitate to contact us at [email protected].

English Français 日本語