No more typing reviews! Try our Samantha, our new voice AI agent.

Darktrace vs Sublime Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.3
Darktrace users experience substantial returns through threat prevention and reduced downtime, despite deployment challenges and difficulty measuring returns.
Sentiment score
4.3
Sublime Security boosts ROI by reducing phishing risks, optimizing efficiency, and automating responses, lowering operational costs significantly.
Other NDR solutions provide virtual appliances that can be deployed on virtualization servers to get up and running quickly.
Technical Consultant - Unix Platform Services at BITS AND BYTE IT CONSULTING PVT LTD
Using this solution provides financial benefits by securing from server attacks, which offers indirect savings.
Systems Specialist/ Administrator at ALFA International Company Limited.
Importantly, we didn’t need to hire any additional staff; we were able to absorb this responsibility using our existing team.
Manager Security Operations Center at a educational organization with 10,001+ employees
I estimate that we have improved our efficiency, especially for phishing campaigns where we can handle multiple similar emails together, which has reduced repetitive analyst work and improved our response time.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Customer Service

Sentiment score
7.6
Darktrace's customer service is praised for responsiveness and efficiency, though some suggest improvements for complex issues.
Sentiment score
6.2
Sublime Security is praised for accessible, knowledgeable support, ensuring smooth integration and efficiently resolving issues through effective communication.
The technical support from Darktrace is of high quality.
Network & Security Section Head/Digital Transformation at a government with 201-500 employees
Darktrace provides excellent technical support with a monthly meeting to review platform incidents, ensuring the system functions as expected.
Head of Technology Operations at Pobl Group
The challenge lies in waiting for a response after logging a ticket.
Group Cybersecurity Administrator at Tharisa
We were able to get in touch with the person who constructed the LLM and its agentic aspects relatively quickly to address our questions.
Manager Security Operations Center at a educational organization with 10,001+ employees
I would rate customer support ten out of ten.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Scalability Issues

Sentiment score
7.6
Darktrace is praised for its scalability, supporting diverse user bases and integrating well with existing infrastructures.
Sentiment score
7.1
Sublime Security efficiently scales with growing email volumes and evolving threats, supporting enterprise expansion while maintaining performance.
Darktrace has high scalability, and I would rate it a nine out of ten.
Network & Security Section Head/Digital Transformation at a government with 201-500 employees
Since it's cloud-based, it expands easily.
Head of Technology Operations at Pobl Group
There is still a gap in terms of storage, and we are trying to figure out how to increase that capacity for regulated environments, which require data retention for 5 to 6 years.
Technical Consultant - Unix Platform Services at BITS AND BYTE IT CONSULTING PVT LTD
Despite nearly doubling the number of mailboxes and adding significantly more detection rules, the service remains just as fast as it was when we first implemented it.
Manager Security Operations Center at a educational organization with 10,001+ employees
Its scalability is also good, as it can scale with the number of protected mailboxes or users, or as email volume grows, supporting enterprise development across Microsoft 365 or Google Workspace.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Stability Issues

Sentiment score
8.5
Darktrace is highly rated for stability and reliability, with effective monitoring and an intuitive interface despite occasional traffic impacts.
Sentiment score
8.6
Sublime Security is highly praised for stability, reliability, zero-crash performance, efficient threat handling, and scalable infrastructure.
The stability of Darktrace is excellent, rated ten out of ten.
Head of Technology Operations at Pobl Group
The appliance itself has never let me down.
Group Cybersecurity Administrator at Tharisa
For stability, I would rate Darktrace an eight out of ten.
Security Analyst at a healthcare company with 10,001+ employees
Sublime Security acted quickly; once Microsoft alerted Outlook about the incoming email, Sublime Security managed to pull it from the stream before it had a chance to appear in the user's inbox.
Manager Security Operations Center at a educational organization with 10,001+ employees
 

Room For Improvement

Darktrace needs improved integration, automation, usability, pricing, support, and clarity, plus better endpoint protection and third-party tool integration.
Sublime Security requires enhanced reporting, better integration, improved automation, and accessible pricing to appeal to mid-sized businesses.
There is no dedicated salesperson in Egypt, and having one would help to improve focus on this market.
Solution Architect at a tech services company with 51-200 employees
They say they can integrate with most firewalls, but when we did an integration with Meraki MX firewalls, that integration didn't work and still doesn't work to this day.
Security Analyst at a healthcare company with 10,001+ employees
We need Darktrace on each branch to get the data out, and I suggest having some kind of a centralized product that gets data from multiple sources to aggregate and provide the data.
Technical Consultant - Unix Platform Services at BITS AND BYTE IT CONSULTING PVT LTD
While they do provide API-level access and web hooks, I believe more out-of-the-box integrations with SOAR platforms and SIEM tools would enhance Sublime's value.
Manager Security Operations Center at a educational organization with 10,001+ employees
One breach could potentially put a small company out of business, so having a tool such as this might save them from that fate.
Partner Account Manager at a wholesaler/distributor with 51-200 employees
Sublime Security could be improved by enabling more integration, better customization of alerts, and more detailed reporting.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Setup Cost

Darktrace is costly yet valued for advanced features, offering flexible module selection with negotiable discounts and yearly contracts.
Sublime Security offers cost-effective email protection via AWS Marketplace, praised for its value despite higher subscription fees.
The product is considered expensive compared to others.
Solution Architect at a tech services company with 51-200 employees
The pricing is costly in USD, and they charge based on device counts.
Group Cybersecurity Administrator at Tharisa
The licensing cost is approximately eight dollars a year.
Security Information & Incident Analyst at a financial services firm with 1,001-5,000 employees
It's competitive with its peers, especially for the number of mailboxes we have.
Manager Security Operations Center at a educational organization with 10,001+ employees
 

Valuable Features

Darktrace offers AI-driven threat detection, real-time monitoring, and autonomous response with scalability and ease of integration for enhanced security.
Sublime Security enhances email protection with advanced threat detection, AI analytics, seamless integrations, and automated remediation.
It is capable of responding to lateral movement and ransomware deployment within environments where there is data exfiltration.
Group Cybersecurity Administrator at Tharisa
I do not need to manually process incidents as Darktrace provides an incident summary, potential detection paths, and other details, all exportable with just a click.
Security Information & Incident Analyst at a financial services firm with 1,001-5,000 employees
If I am in a data center where I don't have layer two, it becomes an issue because the autonomous response is reliant on sending spoofed TCP resets to my core switch to block traffic, which is a major issue.
Security Analyst at a healthcare company with 10,001+ employees
This level of detail is essential for analysts and anyone conducting evaluations, as it helps them understand the specific circumstances of their environment.
Manager Security Operations Center at a educational organization with 10,001+ employees
It adds a smarter layer that catches anything missed by Microsoft 365 or Google Workspace protection.
Partner Account Manager at a wholesaler/distributor with 51-200 employees
The best features of Sublime Security are advanced phishing and BEC detection, campaign grouping, threat hunting, and automated remediation.
Soc Analyst at a manufacturing company with 10,001+ employees
 

Categories and Ranking

Darktrace
Ranking in Email Security
10th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
84
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (2nd), Network Traffic Analysis (NTA) (1st), Network Detection and Response (NDR) (1st), Extended Detection and Response (XDR) (6th), Cloud Security Posture Management (CSPM) (11th), Cloud-Native Application Protection Platforms (CNAPP) (10th), Attack Surface Management (ASM) (4th), AI-Powered Cybersecurity Platforms (4th), AI Observability (7th)
Sublime Security
Ranking in Email Security
15th
Average Rating
9.0
Reviews Sentiment
6.5
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Email Security category, the mindshare of Darktrace is 1.8%, down from 2.8% compared to the previous year. The mindshare of Sublime Security is 1.2%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Email Security Mindshare Distribution
ProductMindshare (%)
Darktrace1.8%
Sublime Security1.2%
Other97.0%
Email Security
 

Featured Reviews

Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Monitoring has improved data loss detection and now spots abnormal internal file transfers quickly
In my understanding, the best feature Darktrace offers is the identification of copying files, which acts as a DLP, and it is a main concern for companies because users sometimes copy data outside without knowing, especially those without a technical background. When I mention the DLP-like feature and file copying detection, the alerts have been very timely, as we get an alert within a couple of minutes, which is excellent. Even if some developers are working after hours and copying files, our SOC team detects this, and most of the time they call us so we can identify the users. The alerts are quite accurate and proactive.
reviewer2764257 - PeerSpot reviewer
Manager Security Operations Center at a educational organization with 10,001+ employees
Improves decision-making with clear verdict explanations and works well across multiple environments
I know that a lot of time has been invested in improving the efficacy of the platform, and it shows; it performs very well. Moving forward, I think our focus should be on how to achieve better integration with other systems. While they do provide API-level access and web hooks, I believe more out-of-the-box integrations with SOAR platforms and SIEM tools would enhance Sublime's value. This would allow it to be integrated more closely with the workflows of various teams and could potentially increase its market appeal. From my perspective, the tool itself functions exceptionally well, which gives me confidence in the system. I want to see this functionality extend to other tools that I use, enabling faster automation and improved workflows for the team, particularly from a security operations standpoint. I have no critiques regarding the tool itself. They've done an outstanding job and are maintaining high quality throughout their development process. They have a great product, and it's essential that they continue to uphold that standard, even though it requires significant effort.
report
Use our free recommendation engine to learn which Email Security solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
Computer Software Company
7%
Outsourcing Company
11%
Computer Software Company
9%
Financial Services Firm
9%
Marketing Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise29
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise10
 

Questions from the Community

How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What is your experience regarding pricing and costs for Darktrace?
Concerning pricing for the product, I would say it is somewhat expensive.
What is your experience regarding pricing and costs for Sublime Security?
My experience with pricing, setup cost, and licensing is limited, but I noticed that Sublime Security was slightly more expensive than Avanan or Defender, as Defender comes included with other Micr...
What needs improvement with Sublime Security?
I believe the main areas for improvement for Sublime Security are ease of onboarding and learning, as the platform has many powerful capabilities, making it take some time for new analysts to becom...
What is your primary use case for Sublime Security?
My main use case for Sublime Security is email security and phishing detection, where I use it to investigate suspicious emails, identify phishing and BEC attempts, analyze malicious links and atta...
 

Overview

 

Sample Customers

Irwin Mitchell, Open Energi, Wellcome Trust, FirstGroup plc, Virgin Trains, Drax, QUI! Group, DNK, CreaCard, Macrosynergy, Sisley, William Hill plc, Toyota Canada, Royal British Legion, Vitol, Allianz, KKR, AIRBUS, dpd, Billabong, Mclaren Group.
Snowflake, Spotify, Anduril, Elastic, Compass, Encompass Health, Zscaler, Ovo Energy, Personio, Beneteler 
Find out what your peers are saying about Darktrace vs. Sublime Security and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.