No more typing reviews! Try our Samantha, our new voice AI agent.

Darktrace vs RedSeal comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Darktrace
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
84
Ranking in other categories
Email Security (10th), Intrusion Detection and Prevention Software (IDPS) (2nd), Network Traffic Analysis (NTA) (1st), Network Detection and Response (NDR) (1st), Extended Detection and Response (XDR) (7th), Cloud Security Posture Management (CSPM) (10th), Cloud-Native Application Protection Platforms (CNAPP) (9th), Attack Surface Management (ASM) (4th), AI-Powered Cybersecurity Platforms (5th), AI Observability (7th)
RedSeal
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
9
Ranking in other categories
Risk-Based Vulnerability Management (22nd), Continuous Threat Exposure Management (CTEM) (17th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Darktrace is designed for Network Detection and Response (NDR) and holds a mindshare of 13.9%, down 23.4% compared to last year.
RedSeal, on the other hand, focuses on Risk-Based Vulnerability Management, holds 1.6% mindshare, up 0.4% since last year.
Network Detection and Response (NDR) Mindshare Distribution
ProductMindshare (%)
Darktrace13.9%
Vectra AI9.8%
Cisco Secure Network Analytics5.5%
Other70.8%
Network Detection and Response (NDR)
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
RedSeal1.6%
Qualys VMDR9.7%
Rapid7 InsightVM7.2%
Other81.5%
Risk-Based Vulnerability Management
 

Featured Reviews

Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Monitoring has improved data loss detection and now spots abnormal internal file transfers quickly
In my understanding, the best feature Darktrace offers is the identification of copying files, which acts as a DLP, and it is a main concern for companies because users sometimes copy data outside without knowing, especially those without a technical background. When I mention the DLP-like feature and file copying detection, the alerts have been very timely, as we get an alert within a couple of minutes, which is excellent. Even if some developers are working after hours and copying files, our SOC team detects this, and most of the time they call us so we can identify the users. The alerts are quite accurate and proactive.
reviewer1339494 - PeerSpot reviewer
Associate Consultant at a consultancy with 10,001+ employees
Enhancing network visibility with competitive pricing but needs better OT and 5G integration
The primary use cases for RedSeal are lifecycle management, vulnerabilities, and change management. Customers might look up or use these solutions for these areas RedSeal helps in optimizing the cost for the customer based on different use cases. If the solution caters to a particular use case,…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The investigative part of Darktrace is valuable, especially the automation features. It allows setting up checks and provides guidance on mitigating situations, which is very useful. There are different modules that you can add to the console for protection."
"The solution is outstanding from a monitoring perspective."
"The Dynamic Threat Dashboard is very nice, as it lists all of your threats and rates them, and then you can choose whether to investigate further."
"The NDR is good in their solution and they have NTG for email."
"The Enterprise Immune System, Cyber Artificial Intelligence Analyst, and Antigena technology are all very useful aspects of the product."
"It has helped the organization to detect any malware affecting the machines...The network monitoring and the email monitoring features are very valuable for us."
"We liked their approach to identifying intrusions or network anomalies using AI."
"A very useful feature in Darktrace for real-time threat analysis is the packet inspection that analyzes the packet traffic in real time."
"If you want to understand your network environment as it relates to configuration issues, host/node vulnerabilities and firewall configurations, then I highly recommend that RedSeal be considered."
"The most valuable feature I enjoy that is provided by this security analytics platform is the ability to measure resilience."
"This is the only solution in the world that gives you a digital resilience score."
"Overall, I am very happy with the way the product is working."
"The Vulnerability and Risk Management feature is valuable to us for keeping the security posture up-to-date and conducting regular continuous audits."
"The most valuable features are network mapping and configuration."
"RedSeal integrates the network and gives us a visual or graphical overview of our network. If an organization is geographically dispersed, for instance, with one office in Canada and one office in the Philippines, the whole network, including all devices, is integrated into RedSeal, and you can see from where the traffic is going in and out."
"The most valuable feature of the product to me is being able to ask what-if questions about traffic flows, which is a great ability to have for security and incident response."
 

Cons

"Darktrace does not have any capabilities to configure. So I would like to see supervised machines and capabilities in the next version."
"In a shared environment, it doesn't work, and there are still some integration issues."
"One thing I would like is for Darktrace to flag SMB traffic more accurately. Currently, it only flags that SMB traffic has occurred, but it doesn't specify which file was being transferred. This makes it difficult to investigate incidents involving SMB traffic, as we don't have concrete evidence of what was being sent."
"I would like to see some additional enhancements."
"The level of tracking within the network from the transmission level up to the machine level can use improvement."
"We'd like threat hunting, and we'd like to see a global solution that can automate vulnerability scans. I know it is something they are working on."
"In terms of improvements, fine-tuning is the area where we have to spend some time because it works on unsupervised machine learning. It would be good if they can improve their algorithm or technical functionality to reduce the fine-tuning effort. They can also come up with something at the endpoint level. So far, Darktrace has been a network detection response (NDR) solution. It does not offer much at the endpoint level or on user-client devices or servers. There should be more visibility at the endpoint level. It would be good to have the detection and response at the endpoint level by Darktrace. It should also have integration with an agile environment so that we can have continuous development and continuous integration in the application development environment. This is currently not there. It should also have internet-facing platform visibility, which is currently missing. They also need to improve the reporting and management dashboards. Currently, these are not so easy for a non-technical person. All these features would make Darktrace much better, and they would also be helpful in selling more solutions."
"I'd love them to see maybe covering the cloud a bit more."
"The network mapping/visualization could be improved significantly."
"Integration with other security tools. Have the ability to create custom reports: Currently, within RedSeal you only have the option to run the canned reports."
"There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal."
"One of the areas of concern is the GUI. It is important to our customers that the GUI looks beautiful. It's a Java Client, so you have a Java dependency."
"Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus."
"Although we are talking about a very robust platform, I would like to see the Windows compatible VM version come back."
"The dashboard should be improved to make correlating data easier to do."
"There is room for improvement regarding customization and automation of reports."
 

Pricing and Cost Advice

"I'm unfamiliar with the exact cost, but we have a yearly license and had to pay for Darktrace's services before the deployment. The product is very expensive, so some organizations can't afford to pay the total amount directly, meaning they often seek a partner or pay in installments, which increases the price more."
"The solution is about $6,000 per quarter."
"It is expensive. I don't have the price for other competitors."
"The pricing is a little high compared to the competition."
"This solution is expensive."
"When it comes to large installations, it can be expensive, but for small accounts it's fine."
"Darktrace is pricey, but the price is reasonable for what the solution does, and it's comparable to other products."
"The pricing is subscription-based and it is high."
"The pricing is based on the number of endpoints and devices, and we have seen it range from mid-five figures to low six figures."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Financial Services Firm
9%
Computer Software Company
8%
Comms Service Provider
7%
Construction Company
9%
Outsourcing Company
9%
Government
8%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise29
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise1
Large Enterprise7
 

Questions from the Community

How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What is your experience regarding pricing and costs for Darktrace?
Concerning pricing for the product, I would say it is somewhat expensive.
What needs improvement with RedSeal?
There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal.
What is your primary use case for RedSeal?
The primary use cases for RedSeal are lifecycle management, vulnerabilities, and change management. Customers might look up or use these solutions for these areas.
 

Overview

 

Sample Customers

Irwin Mitchell, Open Energi, Wellcome Trust, FirstGroup plc, Virgin Trains, Drax, QUI! Group, DNK, CreaCard, Macrosynergy, Sisley, William Hill plc, Toyota Canada, Royal British Legion, Vitol, Allianz, KKR, AIRBUS, dpd, Billabong, Mclaren Group.
United States Postal Service, Pacific Gas and Electric Co., Interval International
Find out what your peers are saying about Darktrace, TrendAI, Vectra AI and others in Network Detection and Response (NDR). Updated: July 2026.
908,834 professionals have used our research since 2012.