White Papers

2021 Cyber-Threat Landscape

This white paper uncovers five key threats observed across Darktrace’s customer base of over 5,000 organizations. These threat vectors were selected based on how frequently the attacks were seen, their likelihood of success, and the extent of the damage in the case of a successful attack.

Defending Critical Infrastructure Against Ransomware

The Colonial Pipeline ransomware incident highlighted the significant threat that ransomware poses to organizations overseeing industrial control systems (ICS) and operational technology (OT). This white paper will closely examine a real-world ransomware attack on an energy supplier that was detected in real time by self-learning AI technology.

Preparing for AI-Enabled Cyberattacks

This paper explores key findings from a recent survey conducted by MIT Technology Review, assessing critical developments in the cyber-threat landscape, and how organizations are approaching the challenge of offensive AI.

Cyber AI for the Inbox

This white paper explores recent trends in the email threat landscape, and describes how AI is used to detect and respond to the full range of attacks targeting the inbox.

This white paper examines the technology and design principles behind Darktrace’s Cyber AI Analyst, a groundbreaking innovation that automates threat investigations at speed and scale.

Email Security Threat Report

This threat report explores 13 email threats — from spear phishing to account takeover — that evaded legacy security tools but were neutralized in real time by Darktrace’s AI.

2020: Threats in Review

This report explores the implications of the pandemic on the cyber-threat landscape, focussing on four key attack trends, from compromised SaaS credentials to ransomware.

Cyber AI for SaaS Security: Protecting Your Dynamic Workforce

This white paper explores eight case studies of threats the Cyber AI Platform identified in SaaS environments. In every case, the threatening activity evaded static defenses, but thanks to Darktrace, was contained and actioned well before it could escalate into a crisis.

Darktrace Cyber AI: An Immune System for Cloud Security

This white paper explores how Darktrace’s Cyber AI Platform is uniquely suited to detect the subtle signs of a threat in the cloud. It examines 11 case studies of advanced attacks that evaded other security tools but were identified by Cyber AI, including compromised credentials, a malicious insider and misconfiguration.

Securing OEM networks involves challenges that require a solution that goes beyond securing specific OEM products in isolation. By providing full visibility, AI investigations, continuous detection and, where appropriate, autonomous response, self-learning AI complements static OEM security with adaptive defense capabilities.

Cyber AI for Industrial Control Systems

This white paper discusses Darktrace's Industrial Immune System, a fundamental innovation that views data from an Industrial Control System network in real time, and establishes an evolving baseline for what is normal for operators, workstations and automated systems within that environment.

Autonomous Response: The Threats Darktrace Antigena Finds


The Evolution of Autonomous Response

This white paper explores the critical challenges that security teams face in today’s new era of cyber-threat and how Autonomous Response technology leverages AI to surgically and proportionately stop ongoing attacks, no matter how novel or sophisticated.

This technical white paper examines the multiple layers of machine learning that make up Darktrace’s Cyber AI, and how they are architected together to create an autonomous, system that self-updates, responding to, but not requiring, human input.

Triton 2.0 & The Future of OT Cyber-Attacks

This white paper evaluates the development of OT attack campaigns, identifying new trends in order to anticipate what an AI-augmented ‘Triton 2.0’ attack might look like.

General Data Protection Regulation

The implementation of GDPR represents one of the most significant events in data protection regulatory history. Darktrace is applicable to a range of requirements under GDPR. Darktrace provides the real-time visibility required to make intelligence-based decisions in live situations, while enabling in-depth investigations into historical activity.

NIST Framework for Improving Critical Infrastructure Cybersecurity

While primarily aimed at organizations that own or operate critical infrastructure, the NIST Framework can be advantageous for any organization that implements it, in any industry, as it provides concrete guidance on how to measure and improve an organization’s cyber security.

Complying with New York DFS Cybersecurity Regulations

This white paper explains how Darktrace can help financial services organizations comply with key areas of the new 23 NYCRR 500 regulation, particularly with some of the more challenging measures, such as the 72-hour rule, managing third-party risk, and detecting and responding to cyber-threats.

Darktrace and the SAMA Cyber Security Framework

This white paper explains how Darktrace can help financial services organizations comply with the regulations of the new SAMA Cyber Security Framework. Applicable to a range of requirements, Darktrace AI will enable businesses in Saudi Arabia to meet the most challenging obligations of the framework.

Darktrace and the UK NIS Directive

This white paper explains how the Darktrace AI platform helps your company to comply with the Cyber Assessment Framework of the EU's NIS Directive, released in April 2019.

Threat Discoveries: What Darktrace Industrial Finds

This report provides several case studies of alerts raised in real industrial networks where Darktrace was deployed. Each example features a description of the alert and the outcome of the specific investigation.

Darktrace Discoveries in Asia

As attackers learn to move at unprecedented speeds, organizations are embracing cyber AI to regain the advantage over today’s ever-changing adversary – and win. This special report highlights five real-world threat scenarios in Asia, that were identified and neutralized by Darktrace’s powerful AI technology as they were emerging, before they could escalate into crises.

This white paper explores the Australian cyber-threat landscape and the recent legislation and strategies introduced by Scott Morrison’s government, before taking a close look into how Cyber AI protects Australian organisations, including customer case studies and threat finds.

Australian Notifiable Data Breaches Scheme

The Australian NDB Scheme is a legislative framework that introduces rigorous and mandatory data breach notification provisions for all entities regulated by the Privacy Act 1988. This white paper explains how Darktrace detects the earliest signs of anomalous activity to ensure compliance.

Today’s organisations face remarkably urgent risk factors in an era of automated and fast-moving cyber-threats. Discover how Darktrace supports compliance with APRA CPS 234 with its self-learning Cyber AI, ensuring that threats are dealt with as soon as they arise and that all necessary information for auditing and reporting purposes is supplied.

Data Sheets

Darktrace for Mergers & Acquisitions
Cyber Defense for the Telecommunications Industry

Case Studies

Customer Insights: Self-Learning Cyber Defense
Hear how the Darktrace Immune System is used at first hand – Darktrace customers reveal the benefits of self-learning defense technology.
Learn from David McGrath, CDO, why ClubsNSW have chosen Darktrace’s Self-Learning AI to augment their security and respond to threats across their organization 24/7.
Mainstream Renewable Power
Mark Kane, Global Head of Information Solutions at MRP, shares how his team use Darktrace to augment their security across their Microsoft platform.
Americas Styrenics
Learn why Laura Tibodeau, CIO at Americas Styrenics, believes Darktrace’s Cyber AI Analyst is “an absolute game changer” for the SOC.
McLaren Group
McLaren have turned to self-learning AI to protect every corner of their business from even the most advanced cyber-threats. Learn how Antigena Email defended the organization from increasingly targeted and sophisticated spear phishing emails that other tools missed.
Greg DeBrecourt, Cybersecurity Manager at AeroVironment, discusses how Darktrace Cyber AI provides total visibility into the company’s infrastructure. Darktrace is the “extra set of eyes” that allows the team to continuously monitor its digital estate, including data transfers and user activity.
King’s Hawaiian
King’s Hawaiian, world famous for its Hawaiian sweet rolls, turned to Darktrace AI to secure its complex digital ecosystem and manufacturing floor from advanced cyber-threats. Learn how Darktrace’s Cyber AI is able to detect and respond to the earliest signs of cyber-attack regardless of where they emerge across the expansive organization – keeping the brand’s IP secure and the production facilities operational.
Wind Creek Hospitality
With more than 10 gaming properties across the United States, learn how Wind Creek Hospitality relies on Darktrace AI to identify and contain emerging vulnerabilities and cyber-threats to each location. With a diverse and complex digital environment, Darktrace’s cyber AI is able to learn and understand the pattern of life for the entire enterprise – all without human tuning or configuration.
Salve Regina University
As a leading institute in higher education, Salve Regina University needed a cyber technology that could keep student and university data secure, while still enabling the free flow of information on campus. Learn how Darktrace cyber AI has allowed the university to meet this challenge head on, and how its team relies on Antigena to fight back against threats before they can do damage.
“The bad guys are already using AI to devise spear phishing attacks. It’s a cyber war.” Learn how Hydrotech, a leading industrial technology provider, uses Darktrace’s Cyber AI to fight back against sophisticated threats to its cloud and SaaS environments.
Global Travel
Global Travel is a Singapore-based travel management company which provides end-to-end solutions for both business and leisure clients. Deploying Darktrace’s Enterprise Immune System, Antigena Email and Antigena Network, Global Travel can protect its employee and customer data from phishing attacks, unauthorized data exfiltration and insider threat, with enterprise-wide coverage and visibility.
eBay Classifieds Group
“The ability to see and take action is key, which is why we are so excited about the Antigena capability that Darktrace has.” Hear from James Bynoe, Head of Cyber & Information Security from eBay Classified, on how Darktrace’s AI for cyber can raise the bar and help small teams’ performance “by having artificial intelligence as a component of your overall program”.
Gallagher-Kaiser Corporation
Gallagher-Kaiser Corporation is a Michigan based turn-key supplier of paint finishing systems, commercial HVAC, and mechanical automotive systems. Hear from Rick Bertoncin, Director of Technology and Security: “I truly think everybody should have artificial intelligence as part of their arsenal in cyber security.”
Pacific Dental Services
Hear from Nemi George, Senior Director of Information Security at Pacific Dental Services discuss how Darktrace’s Self-Learning AI defends the healthcare organization from advanced cyber-threats. Armed with Darktrace, their lean security team are able to “cut through the noise and focus on the things we need to focus on”.

Global Online Trading Group
Legislative Governing Body
Caribbean Security Company
Indian Co-Operative Bank
International Component Manufacturer
International Component Manufacturer
Managed Data Services Provider
Renewable Energy Company
IT Management Consultancy
Australian Non-Profit Youth Organisation
Australian Independent School
East Asian Telecommunications Company
Peer-to-Peer Lending Marketplace
Electricity Transmission Company
Clothing Retailer
International Sporting Goods Manufacturer
Global Educational Foundation
UK Law Firm for Pensions & Retirement Savings
UK Energy Saving Organization
UK Reinsurer of Terrorism Risk
UK Real Estate Investment Trust
Cypriot Law Firm
US Software Company
Global Maritime Company
UAE Logistics Provider
US Telecommunications Company
South African Insurance Company
UK Public Infrastructure Provider
Independent International School
International Digital Payment Company
Canadian Media Content Company
Global Furniture Manufacturer
Online Car Rental Service
European Vehicle Supplier
International Plumbing Technology Manufacturer
Provider of Public Safety Software
Pioneer of Digital Credential Management Services
US Healthcare Provider
Global Contract Manufacturing Organization

Video Features

Darktrace Immune System
Darktrace is redefining enterprise security with Self-Learning and Autonomous AI. This Self-Learning AI protects your workforce and data from sophisticated attackers, by detecting, investigating and responding to cyber-threats in real time — wherever they strike.
Ransomware: Attack Scenario
Discover how Autonomous Response would interrupt ransomware at 8 different stages of the attack life-cycle, from the initial intrusion, through to encryption.
Introducing the Darktrace Immune System: Version 5
Eloy Avila explores three critical innovations offered in Version 5: upgrades to Cyber AI Analyst and Autonomous Response, extending coverage to protect every corner of the digital estate, and seamless one-click integrations.
Introducing Cyber AI Analyst
Cyber AI Analyst is Darktrace’s AI investigation technology, which automatically triages, interprets, and reports on the full scope of security incidents targeting your dynamic workforce.
Introducing the Darktrace OT Engineer Interface
Learn how to use Darktrace’s new OT Engineer interface within the Threat Visualizer, including how to triage the OT alerts that have immediate operational consequences — streamlining operations for plant operators and security professionals alike.
WIRED Brand Lab: How AI can fight disinformation
Justin Fier joined WIRED’s editor in chief, Nick Thompson to discuss the promise of AI in fighting against ever evolving hacking threats, and countering misinformation.
Darktrace SaaS Console
Darktrace’s SaaS Console allows users to visualize and analyze SaaS behaviors across the workforce from one central location, providing all the data needed to effectively triage events in the cloud.
Darktrace for SaaS: Protecting Your Dynamic Workforce
Darktrace’s Self-Learning AI learns the unique ‘patterns of life’ of your entire workforce, providing visibility and protection across SaaS environments and beyond.
McLaren and Darktrace: Remote Working
McLaren’s transition to remote working was accelerated overnight with Darktrace’s AI, protecting data while ensuring their employees stay highly productive. Hear more from Karen McElhatton, Group CIO in this video.
Remote Working Security Risks
The world has shifted to working remotely. Join Max Heinemeyer as he dives into some of the cyber security risks and dangers that employees may face when working from home — and what they can do about it.
McLaren champions Darktrace for Email
In F1, every second counts. Karen McElhatton explains how Darktrace for Email pre-emptively stops the most advanced phishing attacks.
Darktrace for Email: The Self-Defending Inbox
Powered by self-learning AI, Darktrace for Email neutralizes the email attacks that evade border defenses. The technology continuously analyzes inbound and outbound mail flow, understanding the human behind email interactions.
Nicole Eagan at AWS re:Invent 2019: Securing the Super Bowl
Nicole Eagan joins Floyd Fernandes, CISO of CBS Interactive, to explore how they hosted the 2019 Super Bowl smoothly and securely with AWS and Darktrace AI.
MacRobert Award 2019 Finalist: Darktrace
Darktrace have been selected as a 2019 MacRobert Award finalist for Antigena, our autonomous response AI that can both identify and neutralise cyber-attacks.

Industry Analyst Reports

SINC: Autonomous Systems — The Future of Cyber Security

This report between Darktrace and SINC explores how organizations are thinking about AI defenses in the face of increasingly sophisticated cyber-attacks.

Cybersecurity Insiders: 2021 Remote Working Risks

This report reveals the status of organizations’ efforts to secure the dynamic workforce, their key challenges, unique security threats, and technology gaps and preferences, as based on insights from cyber security professionals.

HMG Strategy: The Threat Landscape of Today and Tomorrow

This research report from HMG Strategy in collaboration with Darktrace explores what offensive AI attacks will look like, the impact they will have on organizations, and why defensive AI is crucial for defenders to stay one step ahead as threats grow in sophistication and speed.

Cybersecurity Insiders: 2020 Insider Threat Report

This report, produced by Cybersecurity Insiders, reveals the recent rise of insider threats and explores how organizations across industries are addressing the challenges surrounding internal risk.

Forrester: The Emergence of Offensive AI

This report from Forrester evaluates the emergence of offensive AI, organizations’ current security practices, and how well prepared they are to fight off such attacks.

IDC Perspective: Making Strides in Cybersecurity

This case study from leading analyst firm IDC tells the story of Milton Keynes University Hospital (MKUH) NHS Foundation Trust in England, which deployed Darktrace’s Cyber AI Platform to fight back against advanced attacks in the wake of last year’s global WannaCry campaign.

Ovum: ‘Darktrace AI powers all phases of threat defense’

This report from leading analyst firm Ovum declares Darktrace’s Enterprise Immune System “a strong example of leveraging artificial intelligence” and “one of the few cases where talk about use of AI in cyber security has turned into action”.

451 Research: ‘Darktrace succeeding with a focus on the ‘good’ and the ‘not good enough’’

This report analyzes how Darktrace's use of unsupervised machine learning is positioning it as the leader in anomaly detection, and outlines how Darktrace Antigena autonomously responds to potential threats in real time.

451 Research: ‘Darktrace is immune to old security ideas’

This report from 451 Research provides an overview of Darktrace’s technology and products, along with the current state of the cyber-security industry and where Darktrace fits in today’s landscape.

Ovum ‘On the Radar: Darktrace detects threats with machine learning’

Ovum’s Rik Turner outlines and analyzes Darktrace’s unique approach to cybersecurity and how it fulfills the need for anomaly-based threat detection without rules and signatures.

“Darktrace was early with its approach and, from a technology point of view, has managed to stay in the lead. Darktrace has a well-honed path into artificial intelligence. I think they’ve used it properly and harnessed it with a good user interface that allows them to respond quickly.”
Earl Perkins, Gartner
“The need for skilled analysts is increasing and outstripping the supply, even with all of the educational programmes available. Tools like the Darktrace AI analyst add power to the elbow; they’re a force multiplier for our scarce resource of human analysts.”
Jonathan Care, Gartner
“Darktrace’s approach is innovative because it helps deal with a number of pressing issues in the security market, as the technology addresses alert fatigue by generating significantly less alerts for analysts to triage. The technology can also detect active threats on the inside of a network.”
Craig Lawson, Gartner
“Unsupervised machine learning understands what constitutes ‘normal’ and ‘abnormal’ behavior based on what it learns. This enables Darktrace software to flag behavior that deviates from the norm regardless of where it originates — even from within cloud-integrated network.”
Zhi-Ying Barry, Forrester Research
“This is probably the best use of visuals I've seen. I can see how somebody who doesn't necessarily have the experience or the knowledge can really quickly look at the Threat Visualizer and say, Well that's where my problem is. That's probably the most important thing you can do in this space.”
Chase Cunningham, Forrester Research
“The customer has never experienced false positives in its environment. Every response action Antigena has taken since its deployment was legitimate [...] Darktrace’s ability to see and autonomously respond to the known knowns and unknowns is unparalleled by any other product out there and, with its expanded capabilities [in email] has ushered Darktrace to the leader of the pack in the network threat analysis team of rivals.”
Alissa Knight, Aite Group
“Darktrace thrives in complex digital environments, as the technology is adaptive and continues to revise its understanding of ‘normal’ in light of new evidence, enabling it to detect and respond to threats that other tools miss, while providing complete visibility across the digital infrastructure.”
Jonas Knudsen, IDC
Christopher Kissel, IDC
“Darktrace’s system is constantly learning, and it evolves to react to new technologies and new threats. An enterprise will always be prepared for hackers’ capabilities. The technology is self-learning and requires no set-up; it identifies threats in real-time, including zero-days, insiders, and stealthy silent attackers.”
Jamie Snowdon, HFS Research
“The secret sauce for Darktrace remains depth and experience with unsupervised machine learning applied to its modelling of IT systems as organisms protected by immune systems.”
Dan Cummins, 451 Research
“Darktrace Antigena acts faster than any security practitioner could to prevent damage from attacks such as ransomware.”
Eric Ogren, 451 Research
“Darktrace’s ML implementation is superior in the marketplace. This leads to benefits to customers in terms of decreased labor and false positives, and increased reliability for automated responses. Their coverage for cloud-based solutions, including many SaaS apps as well as the full range of IaaS environments, makes their solution a top consideration.”
John Tolbert, KuppingerCole
“Darktrace offers a fundamentally different platform that’s powering an entire cyber defense strategy with AI and machine learning [...] Darktrace’s platform is one of the few cases where talk about use of AI in cyber security has turned into action.”
Mike Sapien, Omdia
“There is a need for technologies that provide enterprises with the ability to detect attacks that are underway based on anomalous behaviors whether entirely on their premises or in their cloud deployments. Darktrace enables such detection, and with Antigena it has added the ability for its customers to level the playing field somewhat by containing attacks until responders can root out their cause and eradicate them.”
Rik Turner, Omdia