Darktrace
Cambridge-based outbound email DLP that scores each send by recipient context and behaviour instead of fixed rules
Quick Overview
| Company | Darktrace Holdings Limited |
|---|---|
| Category | Data Loss Prevention Software |
| Headquarters | Cambridge, United Kingdom |
| Founded | Not stated |
| EU Presence | Yes - United Kingdom |
| Data Location | See vendor |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Label-free DLP, 35+ sensitive data categories, misdirected email prevention, exfiltration and insider threat detection, hold and justification workflow, user micro-training, Action Flows |
| Pricing | See website |
| Best For | Organisations on Microsoft 365 that want outbound e-mail DLP without writing regex rules |
| Replaces | Forcepoint Email DLP, Symantec DLP for e-mail, Microsoft Purview DLP for e-mail |
Detailed Review
Darktrace / EMAIL DLP concentrates on one channel, outbound e-mail, and judges each message by its content and by the context of the send. The vendor describes it as label-free, so it does not depend on a user tagging files first.
The footer names Darktrace Holdings Limited, and the privacy policy states the company is headquartered in Cambridge, United Kingdom.
Context decides, not only content
The product combines behavioural and content analysis, catches accidental sends by checking recipient context, and correlates outbound anomalies with account behaviour. The vendor says it identifies more than 35 categories of personal, financial and health data.
Response options
A held message can be assessed using an anomaly score and an AI narrative, allowed with a justification, escalated to a security team, or used to trigger user notifications and micro-training. Responses can be tailored with Action Flows.
Deployment
It deploys through a mail flow rule and connectors, and the vendor says no fingerprinting or regex tuning is needed. It evaluates outbound mail inline in Microsoft 365 and extends Purview sensitivity labels.
Limitations to Consider
It covers e-mail only according to the product page, so there is no USB, printer or endpoint control. The page mentions Microsoft 365 and does not mention Google Workspace. No price is shown. The behavioural scoring is a vendor claim that you should test in a pilot, and the ownership of the company could not be checked on its own pages. For endpoint control look at Matrix42 or Safetica.
Who Should Use Darktrace
Microsoft 365 organisations in Europe that mainly worry about misdirected or leaked outbound e-mail and want little rule maintenance.
Pros and Cons
Pros
- No regex or fingerprint tuning according to the vendor
- Context of the send is part of the decision
- Works with Purview sensitivity labels
- Explanations for held messages (AI narratives)
- Operational within hours according to the vendor
Cons
- E-mail channel only
- Microsoft 365 named, Google not mentioned
- Pricing not published
- Behavioural scoring claims need a pilot
Alternatives to Darktrace
Other European data loss prevention software worth comparing before you decide:
Safetica
Czech Republic · Data loss prevention and insider risk in one console
Acronis
Switzerland · Behaviour-based DLP added to a backup and security platform
Matrix42
Germany · Endpoint Data Protection with device control and encryption
Cyera
Israel · Omni DLP built on data discovery and classification
See all European data loss prevention software or compare them directly against Forcepoint Email DLP on our alternatives page.
Frequently Asked Questions
No. The vendor describes it as label-free, and it also works alongside Microsoft Purview sensitivity labels.
The product page describes outbound e-mail only. For endpoint control use a tool such as Matrix42 or Safetica.
Through a mail flow rule and connectors, which the vendor says needs no complex configuration.