Kevin JohnsonDarktrace is a British IT company based in Cambridge, England, specializing in cyber-defense. The company was founded in 2013 by Poppy Gustafsson and a group of mathematicians and AI experts. Its solutions leverage AI to help businesses detect and respond to cyberthreats in their IT systems. In Mar 2022, Darktrace raised $230.5 million from investors as part of its IPO process. Its initial public offering opened with a share value of £6.46.
In Apr 2021, Darktrace went public and was listed on the London Stock Exchange. Its shares surged by 43% in its LSE debut, increasing its valuation to £1.7 billion ($2.4 billion). The company is a constituent of the FTSE 250 Index and employs more than 2,000 people globally. In 2021, Darktrace’s revenue surged by 41.3% to $281.3 million. [1]
Darktrace is a global leader in cyber security AI. Its world-class solutions apply Self-Learning AI to protect business IT systems autonomously. More than 6,800 organizations in over 110 countries globally rely on Darktrace to secure IT assets against advanced cyber threats, including SaaS attacks and ransomware.
In Mar 2022, Darktrace acquired Cybersprint to become the first company to provide total network visibility. Darktrace’s AI prevention suite now rivals its response capabilities. The cybersecurity firm was named on TIME Magazine’s 2021 Most Influential Companies. In May 2022, Darktrace won the AI & Machine Learning Award at the 2022 Go: Tech Awards. The company faces stiff competition from IBM Security QRadar, Vectra AI, ExtraHop, FireEye, Cortex XDR, and Datadog. [2]
Here is an in-depth analysis of top Darktrace’s competitors and alternatives:
1. IBM Security QRadar
Year founded: 1911
Headquarter: Armonk, New York
IBM QRadar is a cyber security solution offered by IBM, a leading software developer. It helps organizations detect known and unknown threats in enterprise systems. In 2021, IBM had around 350,000 employees and made $57.35 billion in revenue. [3]
Both IBM QRadar and Darktrace help organizations uncover critical threats. But they achieve this using unique approaches. IBM QRadar leverages automation to collect and analyze logs, events, network flows, and user behavior across the entire enterprise.
Then, it correlates the information against threat intelligence to detect known threats and applies analytics to identify anomalies. Both IBM QRadar and Darktrace connect the end-to-end chain of activity linked to a specific threat and provide prioritized alerts based on severity. IBM QRadar is the top alternative to Darktrace.
2. ExtraHop
Year founded: 2007
Headquarter: Seattle, Washington
ExtraHop is the leader in cloud-native network detection and response. The cybersecurity company provides AI-based network intelligence that protects organizations from advanced threats across cloud, hybrid, and distributed environments. In 2021, ExtraHop had 597 employees and $90.1 million in total funding.
ExtraHop offers the cyber defense platform Reveal(x) 360. This dynamic solution helps organizations detect and respond to advanced threats. Like Darktrace, ExtraHop Reveal(x) 360 applies AI and advanced behavioral analytics to provide complete visibility across IT networks.
In May 2022, ExtraHop and Exclusive Networks signed a pan-EMEA distribution agreement. This deal will expand ExtraHop’s reach to 14 European territories. ExtraHop Reveal(x) 360 is one of the best alternatives to Darktrace for network traffic analysis (NTA) and threat detection and response. [4]
3. Vectra AI, Inc.
Year founded: 2010
Headquarter: San Jose, California
Vectra AI is a privately-held company that offers AI-driven cyber security solutions. The Vectra platform uses AI to enable threat detection and response for hybrid and multi-cloud enterprises. In 2021, Vectra AI had 523 employees and made $96 million in revenue.
Both Vectra and Darktrace detect and respond to hidden cyber-attackers in SaaS applications, data centers, the cloud, and enterprise networks. But only Vectra optimizes AI to visualize attacker methods. It identifies the TTP at the heart of the attack, providing a high-fidelity threat signal and clear context. This approach allows security teams to respond to threats quickly and appropriately.
In Mar 2022, Vectra received a 5-star rating from CRN for offering solution providers the best partner programs. Vectra AI is an innovative alternative to Darktrace for network detection and response (NDR). [5]
4. Check Point Software
Year founded: 1993
Headquarter: Tel Aviv, Israel
Check Point Software is a leading provider of cybersecurity solutions. It offers network, endpoint, cloud, mobile, and data security tools. In 2021, Check Point had 6,000 employees and generated $2.167 billion in revenue. [6]
Check Point Endpoint Security competes against Darktrace Industrial Immune System. It is cost-effective, easy to deploy and manage, and resource-efficient. Moreover, Check Point enables threat detection and protection proactively and reactively.
The platform also offers Next-Gen Firewalls (NGFWs) and Infinity solutions that protect enterprises from 5th generation cyberattacks. More than 100,000 organizations rely on Check Point to secure IT assets from malware, ransomware, and other threats. Check Point is one of the top alternatives to Darktrace.
5. Trellix
Year founded: Oct 2021
Headquarter: Milpitas and San Jose, California
Trellix is a months-old cybersecurity firm founded after McAfee Enterprise and FireEye merger. In 2021, Symphony Technology Group (STG) acquired McAfee Enterprise for $4 billion and FireEye for $1.2 billion. STG merged the two cybersecurity firms in Oct 2021 and named it Trellix. The new company has about 5,000 employees and $2 billion in annual revenue. [7]
Trellix offers McAfee and FireEye cybersecurity products. FireEye Network Security protects against known and unknown advanced attacks using intelligence-driven detection and intrusion prevention.
This solution is one of the best alternatives to Darktrace for network traffic analysis. More than 40,000 McAfee and FireEye customers rely on Trellix for cyber security. Like Darktrace, Trellix focuses on threat detection and response. But the firm uses automation and ML, while Darktrace leverages AI. Trellix is the newest and fiercest Darktrace competitor.
6. Armis Platform
Year founded: 2015
Headquarter: Palo Alto, California
Armis is a privately held company acquired by Insight Partners in Feb 2020 for $1.1 billion. The Armis Platform offers unified asset visibility and security to address new threat landscapes created by connected devices. In 2021, Armis had 496 employees and closed a $300 million funding round at a valuation of $3.4 billion. Since its founding, Armis has raised $537 million. [8]
Armis provides cybersecurity asset and risk management and automated enforcement. Fortune 1000 companies use its solutions for real-time and continuous protection and visibility across managed, unmanaged, and IoT devices, including IoMT, OT, and ICS.
In Jan 2022, Armis was named a Leader in ISG Provider Lens Manufacturing Industry Services for its OT security solution. It was ranked 25th fastest-growing tech company in North America in the 2021 Deloitte Technology Fast 500. Over the past three years, its revenue increased by 8,826%. Armis is an innovative competitor for Darktrace. [9]
7. Cortex XDR
Year founded: 2018
Headquarter: Santa Clara, California
Cortex XDR is an extended detection and response solution offered by Palo Alto Networks. The XDR concept was conceived by Palo Alto’s CTO Nir Zuk to break down traditional security silos and visualize threats across all data sources. In 2021, Palo Alto Networks reported a 25% increase in revenue to $5.325 billion. [10]
Cortex XDR brings a proactive approach to threat detection and response. It is the next-generation endpoint protection solution that combines malware and multi-prevention methods to block known and unknown threats.
Like Darktrace, Cortex XDR delivers visibility across endpoint, network, and cloud data and applies analytics and automation to address sophisticated threats. Palo Alto’s Cortex XDR is the cutting-edge alternative to Darktrace for NDR.
8. Cisco
Year founded: 1984
Headquarter: San Jose, California
Cisco is a leading technology and cybersecurity company. It offers several cybersecurity solutions, including Stealthwatch Cloud and Cyber Vision. Both compete against Darktrace’s products. In 2021, Cisco generated $49.8 billion in revenue. [11]
Cisco’s Stealthwatch is a cloud security analytics that detects threats in encrypted traffic and across private networks and public clouds. It is one of the top alternatives to the Darktrace Enterprise Immune System for network traffic analysis and threat detection and response.
Organizations can also use Cisco Cyber Vision to boost network visibility and analyze traffic flows to detect anomalies and threats. This solution is one of the best alternatives to the Darktrace Industrial Immune System. Cisco is a formidable Darktrace competitor.
9. Datadog
Year founded: 2010
Headquarter: New York City, New York
Datadog is a monitoring and security platform for cloud-scale apps. IT and DevOps teams use this SaaS analytics platform to monitor applications and convert the data produced by their apps, tools, and services into actionable insights. In 2021, Datadog had over 3,000 employees and made $1.02 Billion in revenue. [12]
Both Datadog and Darktrace support in-depth network traffic analysis. But Datadog’s full-stack monitoring platform is customizable and offers more than 400 built-in integrations. It automates infrastructure and app monitoring to provide unified, real-time observability. Datadog is one of the best alternatives to Darktrace for NTA.
10. Symantec Network Forensics
Year founded: 1982
Headquarter: Tempe, Arizona
Symantec is endpoint protection and security software suite offered by Broadcom Inc. Like Darktrace, Symantec Security Analytics enables full-packet capture for extensive network security visibility. In 2019, Broadcom acquired Symantec Enterprise Security business for $10.7 billion.
Symantec Security Analytics allows organizations to inspect all network traffic in real-time and detect anomalies. Users can conduct network forensics and respond quickly to visualized threats. Symantec also offers anti-malware, intrusion prevention, and a firewall.
In Jun 2021, Broadcom expanded Symantec Endpoint Security by introducing Adaptive Protection. The new feature leverages advanced machine learning techniques to customize automated security to users’ IT environments. Symantec is one of the best Darktrace alternatives for NTA. [13]
11. InsightIDR
Year founded: 2000
Headquarter: Boston, Massachusetts
InsightIDR is a cybersecurity solution offered by Rapid7. This comprehensive insight platform combines threat intelligence, security research, data collection, and analytics. In 2021, Rapid7 had 1,847 employees and made $535.3 million in revenue. [14]
The main competitive advantage for InsightIDR is its advanced capabilities. Unlike Darktrace, InsightIDR functions as a SIEM solution that extends to the budding XDR space. It combines behavioral analytics, endpoint detection and response, and SIEM features and uses ML to block anomalous threats.
In Jul 2021, Rapid7 acquired IntSights for $335 million. This acquisition will boost the platform’s “outside the wire” capabilities. InsightIDR is a robust alternative to Darktrace for NTA and NDR. [15]
12. Progress Software
Year founded: 1981
Headquarter: Bedford, Massachusetts
Progress is a software company that offers cyber security solutions in 16 countries. Its WhatsUp Gold software allows IT teams to monitor complex IT environments. In 2021, Progress had around 2100 employees and made over $600 million in revenue.
WhatsUp Gold is a comprehensive infrastructure and application monitoring software. It provides user-friendly networking monitoring and mapping features. More than 3 million developers and 100,000 enterprise customers rely on Progress to enhance cybersecurity. Progress Software is a worthy alternative to Darktrace for NTA. [16]
13. Claroty
Year founded: 2014
Headquarter: New York City, New York
Claroty offers security solutions to help organizations secure cyber-physical systems. It covers the entire Extended Internet of Things (XIoT) environment, including industrial (OT), healthcare (IoMT), and enterprise (IoT).
In Dec 2021, Claroty raised $400 million in a Series E funding round. Both Claroty and Darktrace offer cyber security solutions. But Claroty focuses on XIoT, while Darktrace specializes in cloud security AI. Claroty’s unified platform provides visibility controls, risk and vulnerability management, threat detection, and secure remote access by integrating with clients’ infrastructure.
In Jan 2022, Claroty acquired Medigate to secure the Extended Internet of Things (XIoT). This acquisition allows Claroty to deliver unparalleled visibility, protection, and threat detection for all organizations via a single platform. Claroty is an innovative Darktrace competitor. [17]
14. Attivo Networks
Year founded: 2011
Headquarter: Fremont, California
Attivo Networks offers identity security and lateral movement attack prevention. Its ThreatDefend platform delivers airtight defense for countering threat activity. In Mar 2022, SentinelOne acquired Attivo for $617 million.
The Attivo ThreatDefend Platform offers a scalable solution for detecting and mitigating attackers and reducing attack surfaces. The solution combines cyber visibility programs, deception, and conditional access tactics.
In Nov 2021, Attivo was recognized in Deloitte’s Technology Fast 500 list that features the 500 fastest-growing tech companies in North America. The company has won over 150 awards for its technology innovation and leadership. Attivo Networks is a formidable Darktrace competitor. [18]
15. Lumeta
Year founded: 2000
Headquarter: Overland Park, Kansas
Lumeta is a cybersecurity platform acquired by FireMon in May 2018. FireMon integrated Lumeta with its network security policy management (NSPM) solution to extend intent-based security to on-premise and cloud assets. As of Sep 2021, FireMon had secured networks of more than 1,700 customers in 70 countries.
Lumeta competes against Darktrace Industrial Immune System. It is a robust platform for security verification and monitoring in real-time. In Sep 2021, FireMon acquired DisruptOps to extend Lumeta’s functions to monitor and respond to security risks across the public cloud. Lumeta is a worthy alternative to Darktrace. [19]
References & more information
traffic analysis (NTA) and threat detection and response
Tell us what you think? Did you find this article interesting? Share your thoughts and experiences in the comments section below.
Ava Abbott
Brianna Parker
Add comment