Darktrace introduces a new AI-driven platform to combat alert fatigue and improve cyber resilience.

Darktrace introduces the Darktrace ActiveAI Security Platform. This platform combines existing security products with new features. The Darktrace ActiveAI Security Platform of course uses AI, as no technology company today dares to bring something to market without AI in its name.

Expansion of existing capabilities

In the platform we find Darktrace’s detection and autonomous response capabilities, as well as prevention mechanisms, attack simulations and recovery tools. The whole thing sounds neatly put together AI architecture. With this tagline, Darktrace wants to point out that the platform can correlate data from different domains, including cloud, email, endpoints, network, identity tools and OT environments.

The possibility of Darktrace Cyber ​​AI Analyst to automatically investigate and explain alerts. Analysts can review the AI ​​analysis for each event and see how the system reached a specific conclusion. The tool itself has been around since 2019, but the additional explanation options are new.

Darktrace also offers better integration with third-party network solutions, allowing the platform to analyze unencrypted traffic. Additional rules in the firewall are intended to ensure that any risky configurations come to light.

post

Daktrace/Email will also have AI capabilities. Above all, they must recognize and stop phishing in a timely manner. Additionally, the tool detects suspicious behavior and prevents attackers from easily moving laterally across the network using a hijacked account. According to Darktrace, false positive reports would become less common.

The launch of the platform does not represent a major step forward. In fact, Darktrace mainly bundles what is already there and gradually expands this portfolio with useful functions. Like all other players in the market, Darktrace points to AI as the glue that holds everything together. In practice, these smart analytics capabilities are not new, but since ChatGPT was launched a year and a half ago, it is of course interesting from a marketing perspective to highlight them as “new” and “AI”.

According to Gartner forecasts, organizations are increasingly looking for security partners that can provide an integrated platform where different solutions communicate with each other. We must view the launch of the Darktrace ActiveAI Security Platform in the context of this trend.