Darktrace
AI-native cybersecurity platform
Overview
Darktrace built its name on self-learning threat detection that flags deviations from a network's own 'normal.' Thoma Bravo took the company private for $5.3 billion in October 2024, ending its LSE listing.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 28 Sep 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
Use cases
What you can produce with Darktrace
- Detect threats as deviations from your own network's learned normal, rather than by signature
- Cover a large estate without writing detection rules for each segment
- Adopt self-learning detection, which is the idea the company built its name on
- Buy from a private company: Thoma Bravo took it private for $5.3 billion in October 2024
- Disregard any source describing it as LSE-listed — that has been out of date since then
- Budget for tuning: behavioural baselining needs a learning period before it is useful
Darktrace still does what it always did well: build a live behavioural model of each network and flag anomalies that signature-based tools miss, with autonomous response able to throttle a compromised device automatically. That's genuinely useful against novel, no-CVE attacks. Thoma Bravo took the company private for $5.3 billion in October 2024, so the LSE ticker is gone and any framing of it as a public company is outdated. G2 puts its network product at 4.4 stars across 49 reviews and Gartner Peer Insights at 4.8, with recurring complaints about false positives and the tuning period needed before it settles down. Pricing is quote-only — Vendr puts the median buyer near $55,000 a year, rising well into six figures once modules stack — and there's a real ASEAN presence through its Singapore office, but this isn't a self-serve or API-first product.
What we found
Thoma Bravo closed its $5.3 billion take-private deal for Darktrace on October 1, 2024, so anything describing it as LSE-listed is now out of date. The company still runs as a stand-alone cybersecurity brand under new ownership, with the same core pitch: an unsupervised AI model learns what 'normal' looks like for a given network and flags deviations, rather than matching signatures.
On G2 its network product sits at 4.4 across 49 reviews, and Gartner Peer Insights rates it 4.8 across 625 in network detection. Reviewers split the same way on both: strong marks for catching novel, signature-less intrusions and for autonomous response that throttles a compromised device automatically, set against a recurring complaint about false positives during the first weeks of deployment. Several reviewers note the alert volume needs real tuning before the platform earns its keep, with 'a good deal of false positives' a phrase that shows up more than once in Gartner feedback.
Pricing is entirely quote-based and modular — Darktrace now sells its Behavioral Defense Platform as products such as / HYBRID NETWORK, / EMAIL and / SECURE AI — and the procurement marketplace Vendr puts the median buyer at about $55,200 a year, with mid-market multi-module deals at $150,000 to $500,000 and large enterprises beyond that. That puts it out of reach for smaller teams and firmly in the enterprise-security-budget category.
Skeptics still push back on how much of the 'AI' framing is marketing versus measurable outcome, a debate that predates the acquisition and hasn't gone away. What has changed is the ownership structure — worth flagging to anyone citing older Darktrace coverage that assumes it's still a public company.
Leadership changed in 2026: Ed Jennings became chief executive in March, succeeding Jill Popelka, and Darktrace / SECURE AI, for monitoring how staff use AI tools, reached general availability in September. A free 30-day trial is still offered, and the company lists offices in Singapore, Sydney, Melbourne and Tokyo.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
Notable facts
- Darktrace's co-founders include former members of GCHQ (the UK intelligence agency) and the US Department of Homeland Security — the same people who build government cyber defences.
- The Antigena autonomous response system can identify and contain a ransomware attack within milliseconds — far faster than any human SOC analyst could respond.
- Darktrace detected a novel cyberattack on a casino through an Internet-of-Things fish tank thermometer that was used as a network entry point.
Frequently asked questions
About this listing
This entry was compiled from publicly available data including Darktrace's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Darktrace unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Darktrace directly →
Spotted something out of date? Suggest an update →
Alternatives to Darktrace
More in Security & Safety
