Founded in 2013 by mathematicians from the University of Cambridge and government cyber intelligence experts in the US and the UK, Darktrace is recognized today as the world’s leading AI company for cyber security.

With deep expertise in mathematics and machine learning, as well as operational experience defending critical national assets, our founding team started Darktrace to empower organizations to defend their systems against the most sophisticated cyber-threats.

Darktrace’s pioneering technology, the Enterprise Immune System, applies AI to the cyber defense challenge for the first time, and has proven itself successful in detecting cyber-threats that existing, legacy systems cannot.

It quickly became clear that the technology was powerful enough to identify a diverse range of threats at their earliest stages – including insider attacks, latent vulnerabilities, cloud-based threats and even state-sponsored espionage.

In 2016, Darktrace’s leadership in AI was reinforced with the launch of the first-ever autonomous response technology, Darktrace Antigena. This innovation allowed the Enterprise Immune System to react to in-progress cyber-attacks in a highly precise way, giving security teams the time they desperately need to catch up. When WannaCry ransomware attacks hit hundreds of organizations in 2017, Darktrace Antigena reacted in seconds, protecting customer networks from the inestimable damage.

In November 2017, the company announced a new business unit, Darktrace Industrial, dedicated to fighting threats in industrial and SCADA networks, building on a strong base of customers that use Darktrace AI to protect critical national infrastructure and operational technology.

Darktrace is headquartered in San Francisco and Cambridge, UK, with 40 offices globally and over 900 employees. It is privately owned, with investors including KKR, Summit Partners, Vitruvian Partners, Samsung Ventures, TenEleven Ventures, Hoxton Ventures, Talis Capital, Invoke Capital and Insight Venture Partners.

Darktrace Antigena

Darktrace Antigena is the world’s first Autonomous Response solution. Powered by award-winning Cyber AI, it responds to cyber-attacks in a matter of seconds — when security teams are overwhelmed or simply aren’t around.

The technology works like a digital antibody, intelligently generating a targeted and proportionate response whenever a threatening incident arises in network, email or cloud environments.

Every 3 seconds, Darktrace Antigena responds to a cyber-threat.

Autonomous Response AI Decision-Making

Darktrace Antigena takes action against in-progress cyber-threats, stopping them in their tracks before any damage is done. Crucial for defending against fast-moving threats such as ransomware, Antigena reacts in seconds, giving your security team time to catch up without interrupting daily business operations. Its autonomous decisions are:

  • made in real time
  • repeatedly updated by continued observation of threats as they unfold
  • informed by combined behavior, not single data points
  • based on the broadest understanding of devices and people in the organization

Antigena is an intelligent decision-making engine that uses your existing security investments and capabilities in order to take action. This results in a step change improvement in ROI from your existing security stack.

Key Benefits

Surgical response

No disruption to your organization

Reacts in seconds

Stops an attack spreading in real-time


You choose where it acts, and how

Full oversight

Mobile alerts when Antigena steps in

Your journey to AI decision-making

Every organization’s journey to Autonomous Response AI is different. But building trust in Antigena is easy — our Mobile App gives you direct oversight and control over any actions taken. You can even start using Antigena during the evenings and the weekend, and build it up from there.

The Enterprise Immune System

The Enterprise Immune System is a self-learning cyber AI technology that detects novel attacks and insider threats at an early stage.

Modeled on the human immune system, the Enterprise Immune System learns and understands ‘self’ for everyone and everything in the business, and can spot the subtle signals of an advanced attack — without relying on rules, signatures, or prior assumptions.

The Enterprise Immune System detects subtle signs of emerging threats in real time.

Learning ‘On the Job’

The Enterprise Immune System uses unsupervised machine learning and AI to understand all about your organization. Observing your users and devices, cloud containers and workflows, it learns ‘on the job’ what is normal for your organization.

Unlike traditional approaches that rely on blacklists, rules and signatures, the immune system approach learns from your data – forming a bespoke and evolving understanding of your digital environments. This unique approach enables Darktrace to detect the most sophisticated and stealthy cyber-threats that other tools miss.

Whether a new strain of ransomware or an emerging insider attack, the Enterprise Immune System detects the threat at its earliest stages.

Protection Across Your Enterprise

Cyber-threats can emerge anywhere – in your cloud or on SaaS, via email or on IoT devices on your network.

The Enterprise Immune System shines a light into all these environments, including Salesforce, Office 365 & SharePoint, AWS and Microsoft Azure.

This means that organizations benefit from a unified view of their entire digital estate – not just part of it – and can tackle emerging threats quickly.

The Industrial Immune System

The Industrial Immune System is a fundamental AI platform for OT cyber defense. The self-learning technology passively learns what ‘normal’ looks like across OT, IT and industrial IoT, allowing it to detect even the subtlest signals of emerging cyber threats in real time.

The technology is protocol agnostic and can be deployed across a range of OT environments, providing full coverage of the organization without disrupting daily operations.

Darktrace passively learns a ‘pattern of life’ for every user, device and controller.

Unified View Across OT, IT, and IoT

Through its intuitive Threat Visualizer interface, Darktrace gives security teams an instant overview of their diverse digital infrastructure, enabling operators to proactively investigate cyber-threats and specific areas of the ICS.

With Darktrace’s self-learning AI, operators can visualize every user, device, and controller in the network and identify novel threats and insiders in real time.

Cyber AI for OT Environments

The Industrial Immune System is uniquely capable of learning ‘normal’ for radically different technologies and deployment types, from decades-old PLCs to distributed sensors and industrial IoT. This allows Darktrace’s self-learning AI to secure the full range of OT-centric environments and organizations: