Darktrace / EMAIL
darktrace.com
What it is
Darktrace / EMAIL is a paid cloud security product that uses behavioral AI to identify and stop phishing, business email compromise, impersonation, and social-engineering threats. It learns an organization’s communication patterns and detects suspicious behavior without relying on known attack signatures. Responses can range from tagging messages to full quarantine. Coverage includes inbound, outbound, and lateral mail, plus account-based and messaging attacks. Data-loss prevention analyzes behavior and message content for sensitive information in outbound email, including unlabeled data. Darktrace also describes behavioral protection for Microsoft Teams chats. Deployment can use API-only or API plus journaling without disrupting mail flow. The product integrates with Microsoft 365 and Microsoft Exchange and is hosted on Microsoft Azure; listed integrations include Google Workspace, Azure Sentinel, Elastic Security, ReliaQuest, and Splunk. Pricing is on request, with a 30-day trial.
Spec sheet
- Purpose
- Darktrace / EMAIL uses behavioral AI to identify and stop email threats, including phishing, business email compromise, impersonation, and social engineering.Read 30 Sep 2026 · darktrace.com
- Intended users
- Darktrace describes the product as helping security teams protect organizations against email threats and reduce investigations in the SOC.Read 30 Sep 2026 · darktrace.com
- Deployment
- Darktrace says EMAIL can be deployed as API-only or API plus journaling, with no disruption to mail flow.Read 30 Sep 2026 · darktrace.com
- Support
- Darktrace’s Trust Center identifies Darktrace affiliates as providing 24/7 customer support services.Read 30 Sep 2026 · trust.darktrace.com
- Headquarters
- Cambridge, United KingdomRead 28 Sep 2026 · darktrace.com
- Founded
- 2013Read 28 Sep 2026 · darktrace.com
- Company
- Darktrace says it was founded in 2013 and lists its Cambridge office at the Maurice Wilkes Building, Cowley Road, Cambridge, CB4 0DS.Read 30 Sep 2026 · darktrace.com
- Autonomous response
- For suspicious messages, Darktrace can take actions ranging from tagging to full quarantine.Read 30 Sep 2026 · darktrace.com
- Behavioral detection
- It learns communication patterns from an organization’s own activity to identify suspicious behavior without relying on known attack signatures.Read 30 Sep 2026 · darktrace.com
- Collaboration security
- The product page describes behavioral protection for Microsoft Teams chats, including social engineering and attacks without payloads.Read 30 Sep 2026 · darktrace.com
- Data loss prevention
- Its DLP capability analyzes behavior and message content to identify sensitive information, including unlabeled data, in outbound email.Read 30 Sep 2026 · darktrace.com
- Email platforms
- Darktrace says EMAIL integrates with Microsoft 365 and Microsoft Exchange and is hosted on Microsoft Azure.Read 30 Sep 2026 · darktrace.com
- Mail coverage
- The product covers inbound, outbound, and lateral mail, as well as account-based and messaging attacks.Read 30 Sep 2026 · darktrace.com
- Security and compliance
- Darktrace’s Trust Center lists ISO 27001:2022, ISO 27018:2019, ISO 42001, IRAP, Cyber Essentials, and GDPR badges.Read 30 Sep 2026 · trust.darktrace.com
- Security integrations
- The integrations page lists Microsoft 365, Google Workspace, Azure Sentinel, Elastic Security, ReliaQuest, and Splunk integrations.Read 30 Sep 2026 · darktrace.com
Plans and prices
Strong points and limits
Strong points
- Behavioral detection learns organizational communication patterns
- Responses range from tagging to quarantine
- Covers inbound, outbound, and lateral mail
- Includes outbound data-loss prevention
- Offers API-only deployment without mail-flow disruption
Limits
- No free plan is listed
- Pricing is available only on request
- Cloud deployment requires supported integrations
Who it suits
It suits security teams protecting organizational email and reducing SOC investigations. Organizations using Microsoft 365, Exchange, or listed security integrations can consider its deployment options.
Verdict
Darktrace / EMAIL combines behavioral detection, automated response, data-loss prevention, and collaboration protection. Its API deployment choices and broad integration list support organizations centralizing email threat controls.
Where Specifiction places it
- Cloud Detection and Response Software#8 of 257.4
- Cloud Email Security#7 of 197.4
- Email Security Gateways#17 of 357.4
- Anomaly Detection Software#15 of 227.3