Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Darktrace Behavioral Defense Platform is an AI-powered cybersecurity platform designed to secure modern enterprises in the AI era. The platform provides unified visibility, continuous behavioral monitoring, and autonomous response across AI, people, and infrastructure. Darktrace uses Adaptive AI to continuously learn how an organization normally behaves across users, systems, relationships, AI interactions, and operational patterns. This behavioral understanding helps security teams identify anomalies, detect novel threats, and respond with speed and precision. The Secure AI capabilities help organizations monitor AI adoption, prompts, agents, development activity, and Shadow AI. The Secure People capabilities protect email and collaboration environments from phishing, account compromise, and other human-centered risks. The Secure Infrastructure capabilities help detect, investigate, and contain threats across network, cloud, identity, endpoint, and operational technology environments. Real-Time AI Analyst supports AI-driven detection, investigation, triage, response, prioritization, and reporting for security teams. By combining behavioral profiling, cross-domain visibility, autonomous response, AI security, email protection, infrastructure defense, and SOC support, Darktrace helps enterprises improve security outcomes in real time.
Description
Malcolm serves as an open-source platform for security monitoring, aimed at assisting security experts in the collection, processing, and analysis of network data to facilitate threat detection and incident response. By integrating a suite of robust tools, it enables users to capture and visualize network traffic, log information, and security alerts effectively. The platform features a user-friendly interface that simplifies the investigation of potential threats, granting security analysts detailed insights into network activities. Scalability is a key aspect of Malcolm, as it offers versatile deployment options suitable for a range of environments, from small businesses to large corporations. Additionally, its modular architecture allows users to tailor the platform according to their unique security needs, while seamless integration with other observability tools enhances overall monitoring capabilities. Although Malcolm excels in general network traffic analysis, its developers recognize a specific demand within the community for tools that deliver insights into protocols employed in industrial control systems (ICS), thereby addressing a critical niche in security monitoring. This focus on ICS enhances the platform’s relevance in sectors where such systems are vital for operational integrity and safety.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Abstract Security
Yes
Alibaba Cloud
Yes
Axonius
Yes
Azure Marketplace
Yes
CYREBRO
Yes
Checkpoint Anti-Spam and Email Security
Yes
Chronicle SOAR
Yes
Cydarm
Yes
Darktrace / CLOUD
Yes
Darktrace / NETWORK
Yes
Integrations
Abstract Security
No
Alibaba Cloud
No
Axonius
No
Azure Marketplace
No
CYREBRO
No
Checkpoint Anti-Spam and Email Security
No
Chronicle SOAR
No
Cydarm
No
Darktrace / CLOUD
No
Darktrace / NETWORK
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Darktrace
Founded
2013
Country
United Kingdom
Website
www.darktrace.com
Vendor Details
Company Name
Malcolm
Country
United States
Website
malcolm.fyi/
Product Features
Cloud Security
Antivirus
No
Application Security
No
Behavioral Analytics
No
Encryption
No
Endpoint Management
No
Incident Management
No
Intrusion Detection System
No
Threat Intelligence
No
Two-Factor Authentication
No
Vulnerability Management
No
Cybersecurity
AI / Machine Learning
Yes
Behavioral Analytics
Yes
Endpoint Management
Yes
IOC Verification
No
Incident Management
No
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
Yes
Email Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Encryption
No
Policy Management
No
Quarantine
No
Reporting/Analytics
No
Whitelisting / Blacklisting
No
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
No
IP Protection
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
No
Web Threat Management
No
Web Traffic Reporting
No
Network Security
Access Control
No
Analytics / Reporting
No
Compliance Reporting
No
Firewalls
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Threat Response
No
VPN
No
Vulnerability Scanning
No
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
No
High Bandwidth Usage Monitoring
No
Historical Behavior Data
No
Identify High Network Traffic Sources
No
Network Transaction Visibility
No
Stream Data to IDR or Data Lake
No
Traffic Decryption
No
Product Features
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
No
High Bandwidth Usage Monitoring
No
Historical Behavior Data
No
Identify High Network Traffic Sources
No
Network Transaction Visibility
No
Stream Data to IDR or Data Lake
No
Traffic Decryption
No