Overview

With its Cyber AI Platform, Darktrace is automating every step of cyber defense: detection, response, and investigation. Leveraging unsupervised machine learning, the Enterprise Immune System, now in Version 4, immediately detects abnormal activity anywhere it emerges on the digital infrastructure. Device-agnostic, Darktrace Cyber AI is able to learn user activity and correlate risk across hybrid and multi-cloud environments, email applications, IoT devices, OT networks, and on-premises networks—fundamentally reinventing the per-technology basis conventional security tools typically operate on.

Once it identifies an urgent threat, Darktrace Antigena — the first and leading AI Autonomous Response technology on the market — surgically intervenes to contain the threat within an average of just two seconds. Every three seconds, Antigena stops another threat across the global Darktrace customer base. By enforcing the compromised device’s ‘pattern of life’, Antigena buys security teams the crucial time to investigate and take action without interrupting normal business.

This year’s Antigena expansion, now covering email and the cloud, provides an enterprise-wide defensive shield that neutralizes in-progress attacks. Indeed, default email security tools missed 76% of the phishing attacks that Antigena stopped, as modern “spear-phishing” emails — crafted specifically to deceive a particular target — can only be stopped with AI security tools that understand the target’s online behavior.

“Darktrace Antigena is the only automated cyber defense technology on the market that is capable of fighting the most important battles for us,” commented Michael Sherwood, CIO of the City of Las Vegas. “Antigena responds to email-borne threats, cloud-based attacks, and novel strains of malware that other tools miss.”

In a game-changing launch, this year’s Cyber AI Analyst is augmenting security teams in the critical threat investigation process. By reasoning through incidents, the Cyber AI Analyst reduces time to meaning, rapidly providing analysts with threat summaries. Crucially, this frees security teams for higher-level tasks.