• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. Darktrace / NETWORK
Logo of Darktrace / NETWORK

Darktrace / NETWORK

byDarktrace
in Network Detection and Response
4.8
2025

Overview

Product Information on Darktrace / NETWORK

Updated 13th October 2025

What is Darktrace / NETWORK?

Darktrace NETWORK is a cybersecurity software designed to identify and respond to cyber threats within enterprise network environments. The software utilizes machine learning technology to analyze network activity, detect anomalies, and provide real-time alerts on potential security incidents. It helps organizations manage risks by offering automated response capabilities to contain threats and minimize disruptions. Darktrace NETWORK supports monitoring across cloud, on-premises, and hybrid infrastructures, enabling visibility into network traffic and vulnerabilities. The software assists organizations in maintaining security posture, reducing the potential for data breaches, and addressing advanced persistent threats by continuously adapting to evolving attack techniques.

Darktrace / NETWORK Pricing

Darktrace NETWORK software pricing model is typically structured as a subscription based on factors such as network size and deployment requirements. The software cost may vary according to the specific number of devices, data throughput, and custom configurations needed. Pricing usually includes ongoing support and updates, with optional add-ons or modules available at additional fees depending on selected features and scale.

Overall experience with Darktrace / NETWORK

Engineer
50M - 250M USD, Construction
FAVORABLE

“Strong AI Driven NDR with Pricing concerns”

4.0
Apr 1, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.
It Technical Engineer
Gov't/PS/ED <5,000 Employees, Education
CRITICAL

“Darktrace Provides strong Network Visibility but User Interface Remains Challenging to Navigate”

3.0
Mar 24, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

Badges

Gartner Peer Insights recognizes vendors who meet or exceed both the market average Overall Experience and the market average User Interest and Adoption score through a Customers’ Choice distinction.
2025
For Market:
Network Detection and Response

About Company

Company Description

Updated 25th July 2024

Darktrace is a Cambridge, UK-based firm concentrating on the mitigation of cyber disruptions globally. The company employs a unique AI technology used by thousands of businesses globally to counteract, identify, react to, and recover from cyber-attacks. With a team of over 2200 people spread over 30 global offices, Darktrace is dedicated to containing the global impacts of cyber threats.

Company Details

Updated 26th February 2025
Year Founded
2013
Head office location
Cambridge, United Kingdom
Number of employees
1001 - 5000
Annual Revenue
500M-1B USD
Website
https://darktrace.com/

Do You Manage Peer Insights at Darktrace?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Top Darktrace / NETWORK Alternatives

Logo of Vectra AI Platform
1. Vectra AI Platform
4.8
(472 Ratings)
Logo of RevealX
2. RevealX
4.7
(273 Ratings)
Logo of Open XDR Platform
3. Open XDR Platform
4.7
(248 Ratings)
View All Alternatives

Peer Discussions

Darktrace / NETWORK Reviews and Ratings

4.8

(623 Ratings)

Rating Distribution

5 Star
76%
4 Star
21%
3 Star
2%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?
  • Engineer
    50M-1B USD
    Construction
    Review Source

    Strong AI Driven NDR with Pricing concerns

    4.0
    Apr 1, 2026
    Darktrace Network delivered strong NDR capabilities in our evaluation by focusing on behavior-based detection and helping reduce manual triage. The main limitation I identified is cost: depending on licensing scope, pricing can be difficult to justify for a mid-sized organization.
  • Engineer
    50M-1B USD
    Construction
    Review Source

    Strong AI Driven NDR with Pricing concerns

    4.0
    Apr 1, 2026
    Darktrace Network delivered strong NDR capabilities in our evaluation by focusing on behavior-based detection and helping reduce manual triage. The main limitation I identified is cost: depending on licensing scope, pricing can be difficult to justify for a mid-sized organization.
  • Read All 630 Reviews

    Get unlimited access to verified peer reviews and insights

    Read unlimited Gartner-vetted product reviews
    View and share valuable product insights
    Download full product profiles
    Review products you use today

Recommended Gartner Insights

  • Critical Capabilities for Network Detection and Response
  • Magic Quadrant for Network Detection and Response
Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

User Sentiment About Darktrace / NETWORK
Reviewer Insights for: Darktrace / NETWORK
Deciding Factors: Darktrace / NETWORK Vs. Market Average
Performance of Darktrace / NETWORK Across Market Features

Darktrace / NETWORK Likes & Dislikes

Like

I value that the product detects anomalous network behavior beyond static rules, for example endpoints connecting to previously unseen domains or IP addresses or showing unusual communication patterns. During our POC, it surfaced concrete misuse on the guest Wi-Fi (including access to illegal football streaming services), which demonstrated practical detection value. The option for a local appliance is a clear advantage for privacy and governance, because telemetry can be processed on-premises and sensitive data can remain under the organization's control. I also appreciate the ability to tune thresholds and create custom alerts, as well as the integration benefits across the Darktrace ecosystem-using Network together with Identity and Email typically improves investigation context and confidence. Finally, the active response capability is distinctive: when configured, it can attempt to terminate suspicious sessions by injecting TCP FIN packets for the relevant connection/port, supporting rapid containment while the alert is validated.

Like

I value that the product detects anomalous network behavior beyond static rules, for example endpoints connecting to previously unseen domains or IP addresses or showing unusual communication patterns. During our POC, it surfaced concrete misuse on the guest Wi-Fi (including access to illegal football streaming services), which demonstrated practical detection value. The option for a local appliance is a clear advantage for privacy and governance, because telemetry can be processed on-premises and sensitive data can remain under the organization's control. I also appreciate the ability to tune thresholds and create custom alerts, as well as the integration benefits across the Darktrace ecosystem-using Network together with Identity and Email typically improves investigation context and confidence. Finally, the active response capability is distinctive: when configured, it can attempt to terminate suspicious sessions by injecting TCP FIN packets for the relevant connection/port, supporting rapid containment while the alert is validated.

Like

I value that the product detects anomalous network behavior beyond static rules, for example endpoints connecting to previously unseen domains or IP addresses or showing unusual communication patterns. During our POC, it surfaced concrete misuse on the guest Wi-Fi (including access to illegal football streaming services), which demonstrated practical detection value. The option for a local appliance is a clear advantage for privacy and governance, because telemetry can be processed on-premises and sensitive data can remain under the organization's control. I also appreciate the ability to tune thresholds and create custom alerts, as well as the integration benefits across the Darktrace ecosystem-using Network together with Identity and Email typically improves investigation context and confidence. Finally, the active response capability is distinctive: when configured, it can attempt to terminate suspicious sessions by injecting TCP FIN packets for the relevant connection/port, supporting rapid containment while the alert is validated.

Dislike

As mentioned previously I have a strong dislike of the UI, I find tuning models to be quite tricky and I also found that sometimes picking up device DNS can be inaccurate so you have to rely more on IP addresses than DNS names

Dislike

As mentioned previously I have a strong dislike of the UI, I find tuning models to be quite tricky and I also found that sometimes picking up device DNS can be inaccurate so you have to rely more on IP addresses than DNS names

Dislike

As mentioned previously I have a strong dislike of the UI, I find tuning models to be quite tricky and I also found that sometimes picking up device DNS can be inaccurate so you have to rely more on IP addresses than DNS names