Darktrace / HYBRID NETWORK

Darktrace network detection and response product analysing network, cloud and OT traffic and containing threats with response actions taken natively or through firewalls, EDR, SOAR and ITSM tools.

AI capabilities recorded

• Autonomous Response — AI-selected network threat response

  Active · verified 2026-10-03

  Darktrace Autonomous Response uses information gathered from a threat alert to select a network response from multiple documented interventions — from restricting a specific connection or port, through enforcing learned device or peer-group pattern of life, to blocking device traffic or quarantining a device, or invoking third-party containment — and can execute it without individual human approval when fully autonomous operation is permitted. Human Confirmation mode is also available. It is not a generic endpoint-isolation or generic Darktrace autonomous-security record.