Darktrace Cyber AI Analyst

What it does

Cyber AI Analyst is Darktrace's agentic investigation system. On the vendor product page it autonomously questions data, tests hypotheses and reaches conclusions, investigates Darktrace and third-party alerts, and writes natural-language summaries with recommended actions. Darktrace says fewer than 4% of investigations require human review. The company page lists Cambridge, UK among its global offices and places the Darktrace AI Research Center in Cambridge, UK. Public dollar pricing is not published.

Frameworks (vendor-stated)

No framework tags yet.

Government authorizations

Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.

Pricing (as published)

Not published

India relevance

Relevant to CERT-In incident detection and response capability building; not a CERT-In compliance product by itself.

Tasks

threat detectionincident responsesecurity operations

Sources

1. darktrace.com/cyber-ai-analyst (primary)
2. darktrace.com/company
3. dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
4. govramp.org/program-participants

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• AI SOC and security-analyst agents — 51 verified listings (Security operations, alert investigation and threat detection)

Compare Darktrace Cyber AI Analyst with

• 
  CrowdStrike Charlotte AI vs Darktrace Cyber AI Analyst vs CloudSEK AI Agents vs Qevlar AI vs Dropzone AI SOC Analyst vs D3 Morpheus (agentic AI SOC platform) vs Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) vs 7AI agentic security platform vs Google Security Operations Triage and Investigation Agent vs Microsoft Security Copilot Phishing Triage Agent (Defender) vs Datadog Bits AI Security Analyst vs Securonix Sam, the AI SOC Analyst (Agentic Mesh) vs Swimlane AI SOC (Intelligent Deep Agents on Turbine) vs ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) vs Fortinet FortiSOC (agentic AI SOC platform with FortiAI-Assist) vs Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response) vs Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment) vs Command Zero Agent Zero (autonomous security analyst) vs Bricklayer AI security agents (agentic platform for the AI security workforce) vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) vs Spharaka Sphere (agentic AI SOC platform with autonomous investigation and policy-bounded response) vs Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation) vs Crogl sovereign AI SOC (autonomous alert investigation, threat hunting and evidence-gated auto-remediation) vs Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs HarkX Agentic AI SOC platform (multi-agent triage, threat hunting, investigation and automated response) vs Decanos AI Agents (Triage, Investigate, Hunt, Response and Compliance agents for autonomous security operations) vs RaonSecure OneSOAR (AI autonomous security control tower) and OneHacker (AI pentester) from the ONE AI agentic platform vs CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response) vs Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts) vs CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response vs AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs SOCRadar AI Agents (specialist threat-intelligence, attack-surface, digital-risk and alarm-triage agents) vs Strike48 agentic SecOps platform (pre-built SOC agent team and no-code agent builder over federated logs, cloud or air-gapped on-prem)
• 
  7AI agentic security platform vs Darktrace Cyber AI Analyst
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Darktrace Cyber AI Analyst
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Darktrace Cyber AI Analyst
• 
  Aikido Attack AI Pentesting vs Darktrace Cyber AI Analyst
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Darktrace Cyber AI Analyst
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Darktrace Cyber AI Analyst
• 
  Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs Darktrace Cyber AI Analyst
• 
  AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs Darktrace Cyber AI Analyst
• 
  Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs Darktrace Cyber AI Analyst

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Darktrace Cyber AI Analyst alternatives →

FAQ (from this dataset)

What does Darktrace Cyber AI Analyst do?

Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams.

How much does Darktrace Cyber AI Analyst cost?

Not published

Where is Darktrace headquartered?

United Kingdom

What are alternatives to Darktrace Cyber AI Analyst?

See the Darktrace Cyber AI Analyst alternatives page for category-sharing listings in relevance order, not a ranking. Darktrace Cyber AI Analyst alternatives.

Stay updated