Darktrace / NETWORK review
A cross-domain threat hunting platform for investigating hybrid-network anomalies.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Darktrace / NETWORK, presented on Darktrace’s site as Darktrace / HYBRID NETWORK, is a network detection and response product for organizations securing hybrid infrastructure. It passively ingests traffic from on-premises and virtual networks while monitoring multi-cloud environments, operational technology, endpoints and identities. A continuously evolving behavioral profile helps identify anomalous, novel and cross-domain threats. The product is positioned for mid-market and enterprise teams that need one investigation view across varied infrastructure.
Purchasing follows a contact-sales model, so evaluation starts through a demo or sales conversation rather than published plan tiers. The integration model is broad: response can connect with firewalls, EDR, SOAR and ITSM tools, while listed integrations include Fortigate SSL VPN, FortiSOAR, Hunters SOC Platform, InsightConnect, InsightIDR, InsightVM, Jira and Garland Technology. This ecosystem fit supports organizations that already coordinate security operations across several tool categories and need findings routed into existing response workflows.
Its standout capability is cross-domain behavioral analysis. Darktrace / NETWORK correlates related activity across network, cloud, OT, endpoint and identity telemetry, analyzes encrypted and decrypted traffic, and captures evidence from endpoints, cloud, containers and SaaS. Configurable autonomous containment can then apply native or third-party actions. Teams seeking hybrid-estate investigations and coordinated containment should consider it; organizations wanting a narrowly focused network-only tool or transparent self-serve pricing may prefer a simpler alternative.
Darktrace / NETWORK pros and cons
- Where it wins
- Behavioral profiles span networks, cloud, OT, endpoints and identities.
- Correlates cross-domain events for AI-driven investigations.
- Configurable containment connects native and third-party response tools.
- Where it doesn't
- Pricing uses a contact-sales model rather than published plan rates.
- Its broad scope is aimed at mid-market and enterprise environments.
- May exceed the needs of teams seeking network-only threat hunting.
Darktrace / NETWORK fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update