Darktrace’s April 9, 2024 announcement described email protections for data loss, phishing, account takeover and risky links, plus coverage intended to extend into Microsoft Teams. The features were expected in early calendar Q2 2024; that announcement does not confirm whether each is available today. Darktrace described additional email and cross-domain capabilities in a separate release dated December 4, 2025.
What are the new Darktrace email features?
In its April 9, 2024 announcement, Darktrace presented the additions as part of its ActiveAI Security Platform and Darktrace/Email. The company said the new platform features were expected in early calendar Q2 2024. That was an expected window, not confirmation of a launch date or present-day availability.
Data loss prevention and account behavior
Darktrace said its AI-based data loss prevention (DLP) was designed to identify unusual user behavior and changes in email content, with the aim of detecting accidental as well as malicious data loss. The announcement also described expanded account takeover protection intended to spot early behavioral signs of compromise and malicious insiders before payload delivery or data exfiltration.
Microsoft Teams and phishing across channels
The 2024 announcement described Microsoft Teams coverage intended to detect novel, insider and sophisticated early phishing threats that can span collaboration tools and email. It does not establish the scope of Teams coverage in a current product deployment.
#1 Best Overall
DMARC and suspicious links
Darktrace described Darktrace/DMARC as an AI-assisted way to deploy Domain-based Message Authentication, Reporting and Conformance (DMARC), an email-authentication protocol intended to help prevent domain spoofing and phishing. It also announced behavioral link analysis designed to surface hidden intent on interactive or dynamic web pages, where a destination may behave differently as a user interacts with it.
Mailbox Security Assistant
The Mailbox Security Assistant was described as giving users a natural-language explanation and context for an email they reported. Darktrace said the feature reduced reporting of potential false positives by 60%. That figure came from Darktrace’s internal testing in February and March 2024, comparing analyzed with reported emails among users who had the feature; it is not an independently validated result.
Rank #2
- Pass the Securing Email with Email Security Appliance 300-720 SESA with updated flashcards packed with detailed content aligned to the latest exam blueprint. Cover all core topics without the overload found in lengthy study guides. Get 300+ Securing Email with Email Security Appliance 300-720 SESA flashcards on 8-1/2″ x 11″ perforated card stock.
How did Darktrace’s later email announcement differ?
A separate December 4, 2025 release described further capabilities. Keep these distinct from the 2024 announcement: the later release does not establish that all 2024 features were launched, nor does its publication alone verify feature-by-feature availability today.
- Email and identity correlation: Darktrace said an integration between Darktrace / EMAIL and Darktrace / IDENTITY could use suspicious email patterns, including email bombing, to raise sensitivity around targeted users and help identify account-takeover or impersonation activity.
- Cross-domain context: The release described correlation involving Salesforce, along with integrated antivirus verdicts and threat intelligence.
- Outbound trust and DLP: Darktrace described BIMI support for outbound brand indicators and behavioral DLP. It said the announced DLP could identify more than 35 new categories of personally identifiable and protected health information; this is a vendor capability claim.
- Investigation and administration: The release described Jira and ServiceNow ticket integrations, a sandbox-analysis integration, and unified quarantine management for Microsoft Defender for Office 365.
Darktrace reported that email-bombing messages observed in its customer base rose from 200,000 to more than 20 million between April and July 2025, calling that a 100-fold increase. It also reported a 1,317% month-over-month rise in phishing attacks targeting Black Friday in November. These are company-reported observations, not independently established industry-wide rates. The same release said 72% of actions involving end users in internal breaches were attributed to mis-delivery; that figure should be understood as Darktrace’s claim and not generalized beyond its stated context.
Rank #3
- Pass the Securing Email with Email Security Appliance with updated flashcards packed with detailed content aligned to the latest exam blueprint. Cover all core topics without the overload found in lengthy study guides. Get 300+ Securing Email with Email Security Appliance flashcards on 8-1/2″ x 11″ perforated card stock.
How should buyers assess the feature claims?
The announcements describe intended functions, not a comparative product test or proof of effectiveness across organizations. The reviewed materials do not establish current pricing, deployment requirements or feature-by-feature availability. Before evaluating a purchase, ask Darktrace or a reseller to confirm the current SKU, region, prerequisites, integrations and availability for each capability.
For a useful comparison with other email-security services, check whether each product documents inbound, lateral and outbound email protection; collaboration and identity coverage; DLP and email authentication; investigation and ticketing workflows; deployment requirements; verified availability; and total cost. The cited Darktrace releases do not provide competitor data or enough procurement detail to rank products.
Rank #4
- XGS 108 with 1 Year Xstream Protection - Next-generation firewall appliance with Xstream Protection subscription providing zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting, managed through Sophos Central for unified policies and reporting.
- 6 x 2.5 GE copper ports and 1 SFP fiber port, supporting up to 12.5 Gbps firewall performance for growing business networks.
- Zero day protection with cloud sandboxing, email filtering, and advanced reporting for full enterprise coverage.
- TLS inspection and next generation intrusion prevention block hidden threats in encrypted traffic and stop sophisticated attacks.
- Includes Xstream Protection – Advanced security bundle with zero-day protection, cloud sandboxing, email filtering, and automated threat response, providing full coverage against the most sophisticated cyberattacks.
Darktrace’s current product page provides broader positioning around behavioral email security and cross-channel detection. Treat that as product positioning rather than independent validation of the dated announcements or confirmation of particular features in a specific deployment.
Quick Recap
Best Value
- XGS 88W with 1 Year Xstream Protection - Next-generation firewall appliance with Xstream Protection subscription providing zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting, managed through Sophos Central for unified policies and reporting.
- Built in Wi Fi 6 with 4 x 2.5 GE copper ports, delivering up to 9.9 Gbps firewall performance for secure wired and wireless networks.
- Zero day protection with cloud sandboxing, email filtering, and advanced reporting for full enterprise coverage.
- TLS inspection and next generation intrusion prevention block hidden threats in encrypted traffic and stop sophisticated attacks.
- Includes Xstream Protection – Advanced security bundle with zero-day protection, cloud sandboxing, email filtering, and automated threat response, providing full coverage against the most sophisticated cyberattacks.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →
