> ## Content Index
> Fetch the complete content index at: https://www.theaidirectory.com.au/llms.txt
> Use this file to discover other available public pages before exploring further.

# Darktrace Review (2026): Enterprise AI Cybersecurity, Judged for Australian Businesses
- URL: https://www.theaidirectory.com.au/review-darktrace-australia-2026/
- Published: 2026-06-12T23:00:00.000Z
- Updated: 2026-10-09T06:29:13.000Z
- Description: Darktrace's self-learning AI is a genuine cybersecurity heavyweight — but it's built and priced for enterprise. Here's the honest verdict for Australian businesses.
- Author: Adam
- Tags: Cybersecurity & Data Protection, Darktrace, #review

**18**/25

★★★★☆

Very Good

Darktrace

Verified 13 Jun 2026 

Value for Money**3**/5

Ease of Use**3**/5

Feature Depth**5**/5

Australian Fit**4**/5

Reliability & Support**3**/5

Pricing

Pricing on application — see the pricing table

**The gate:** Five stars need 21+ and Australian Fit of at least 4/5.

[Skip to the verdict ](#verdict) 

*Pricing figures updated 6 September 2026: USD prices are converted at the current rate (1 USD ≈ 1.40 AUD, verified 5 September 2026) and shown ex-GST, replacing the retired 1.55 + GST basis. A GST-registered Australian business that supplies its ABN is not charged GST on an imported digital service; other buyers should allow \~10% on top (*[*Methodology*](https://www.theaidirectory.com.au/methodology/)*).*

> **The verdict.** Darktrace is one of the most capable AI security platforms money can buy. Its self-learning AI watches your network, email, cloud and identity systems, learns what "normal" looks like for your business, and acts on the odd stuff on its own. That's real, and it works. But it is enterprise software with enterprise pricing — quote-only, typically tens to hundreds of thousands of dollars a year. If you run a 12-person business in Hobart, this is not your tool. If you run a mid-market or larger Australian organisation with a security team and a real budget, Darktrace earns a place on your shortlist. Local offices in Melbourne, Sydney and Brisbane help. The unanswered question is where your data is processed — get that in writing before you sign.

## What it is

Darktrace is an AI cybersecurity company. Its core idea, in plain English: instead of looking for known attacks (the way old antivirus did), it learns the normal "pattern of life" for every user and device in your business, then flags and stops the things that don't fit.

The company calls this Self-Learning AI, and it has been the pitch since Darktrace was founded in Cambridge in 2013\. The platform — branded the ActiveAI Security Platform — now spans network, email, cloud, endpoint, identity and operational technology (OT, the industrial systems behind manufacturing, utilities and the like). It also has a layer called Cyber AI Analyst that investigates alerts the way a human analyst would, and an autonomous response capability that can step in and shut down a threat before a person is even awake.

This is not a tool a small business buys off a website and installs on a Friday afternoon. It's a serious enterprise security platform, sold by a sales team, deployed with help, and run by people whose job is security. We're reviewing it that way — but judging it through an Australian lens, for an Australian buyer.

One ownership note worth knowing: Darktrace was a publicly listed UK company until October 2024, when private-equity firm Thoma Bravo completed a US$5.3 billion acquisition. It is now privately held. That hasn't changed the product, but it's the kind of fact a buyer doing due diligence should have.

## What it costs in Australia (AUD + GST)

Here's the honest answer: Darktrace does not publish prices. There is no plan page, no monthly tier, no "from $X" button. Every deal is a custom quote based on how many devices and users you have, which modules you turn on (network, email, cloud, identity, OT), how long you sign for, and whether you run it as software or on physical appliances.

We don't invent numbers we can't anchor. What independent market data suggests is a useful guide to scale, not a quote:

- The **median Darktrace deal sits around US$55,200/year** — roughly **A$77,280 ex-GST** at our standard basis (US$1 ≈ A$1.40, ex-GST). That figure is a third-party market aggregate, not a Darktrace-published price.
- **Mid-market deployments** (around 500–2,000 devices) commonly land in the **US$150,000–US$500,000/year** band — roughly **A$210,000–A$700,000 ex-GST**.
- The **email module alone** has been quoted around **US$3.25–US$8 per mailbox per year** — roughly **A$5–A$11.20 ex-GST per mailbox**.

Two things matter here. First, the base is the detection layer; autonomous response, email, cloud, identity and OT are licensed separately and each adds meaningfully to the bill. Second, these are global aggregate figures — your actual Australian quote, in AUD, is whatever Darktrace's local team negotiates with you. Darktrace publishes no Australian list pricing and no AUD billing terms.

For GST: if Darktrace contracts you through an Australian entity, expect GST on the invoice. If billed offshore in USD, GST treatment depends on the contracting entity — check the contracting entity and currency in your quote with your accountant before you budget.

The plain takeaway: this is a five-to-six-figure annual commitment. Treat it as a capital security decision, not a software subscription.

## How it works / features (specific)

Strip away the branding and Darktrace does four concrete things.

**It learns your baseline.** When deployed, the AI spends time watching traffic and behaviour to build a model of what normal looks like for your specific organisation — who logs in from where, which devices talk to which servers, what your email patterns are. It doesn't rely on a global threat list to do this.

**It spots the anomalies.** Once the baseline exists, deviations get flagged: a finance laptop suddenly scanning the network at 2am, a mailbox quietly setting up forwarding rules, a cloud workload reaching somewhere it never has. The pitch is that this catches novel and AI-driven attacks that signature-based tools miss, because it's looking for "weird for you," not "matches a known virus."

**The Cyber AI Analyst investigates.** This is the part that saves humans time. Instead of dumping 400 alerts on a tired analyst, the AI Analyst triages them — questioning the data, testing hypotheses, and writing up plain-language summaries with recommended actions. Darktrace says fewer than 4% of its investigations end up needing human review, and claims it accelerates triage roughly tenfold. Those are vendor figures, but the capability is real and well regarded in the industry.

**Autonomous Response acts.** This is Darktrace's signature move. When something dangerous is unfolding, the system can intervene by itself — halting the malicious action to stop the spread while, in theory, leaving legitimate business activity running. For an organisation without round-the-clock security staff, "it stopped the attack at 3am on its own" is the headline benefit.

Coverage is genuinely broad: network, email, cloud, endpoint, identity and OT, plus add-ons for attack-surface management and exposure management. It integrates with the security tools you already own rather than demanding you rip them out.

## What it does well

- **The anomaly-based approach is the real deal.** Catching threats by spotting "not normal for you" — rather than waiting for a known-bad signature — is the right design for an era of novel, AI-assisted attacks. Darktrace pioneered it and remains a leader.
- **Autonomous response genuinely helps the understaffed.** Most Australian organisations cannot afford a 24/7 security operations centre. A system that contains a live attack on its own, overnight, addresses exactly that gap.
- **The AI Analyst cuts alert fatigue.** Triage and plain-English write-ups are where security teams drown. Automating the first pass is a concrete, defensible win.
- **Breadth of coverage.** One platform across network, email, cloud, identity and OT is rare. For complex environments, that single pane of glass has real value.
- **It has boots on the ground in Australia.** Offices in Melbourne, Sydney and Brisbane mean local sales, support and deployment help — not a foreign vendor you only reach by email at midnight.

## Where it falls short

- **The price wall is the headline limitation.** No published pricing, quote-only, five-to-six figures a year. For the small businesses and operators most of our readers run, that alone takes Darktrace off the table.
- **It assumes you have security people.** Even with the AI Analyst doing the heavy lifting, this is a platform for organisations with a security function. There's no "set and forget for the office manager" version.
- **Autonomous response needs a careful hand.** A system that can shut down activity by itself is powerful — and, tuned wrong, can interrupt legitimate work. It needs proper configuration and a tuning-in period. That's a project, not a switch.
- **Vendor metrics, not independent benchmarks.** The "10x faster triage" and "under 4% need human review" figures come from Darktrace. They're plausible and widely cited, but they are the vendor's own numbers — treat them as claims to test in a proof-of-concept, not proven facts.
- **Data residency is unclear from the public record.** For an Australian buyer in finance, health, government or any regulated sector, where your security telemetry is processed and stored is a first-order question. Darktrace's R&D sits in the UK and the Netherlands, and we could not confirm Australian data-residency guarantees from primary sources. Get that answer directly from Darktrace, in writing, before you buy.

## Australian fit (data residency, AUD billing, AU presence/support)

This is where we score most honestly, because it's the publication's defining question.

**AU presence: strong.** Darktrace has genuine local offices — Melbourne, Sydney and Brisbane — with local staff for sales, deployment and support. Among global security vendors, that's a real advantage. You're not buying blind from offshore.

**AUD billing: unconfirmed.** Because pricing is quote-only and we found no published Australian rate card, we cannot confirm whether deals are invoiced in AUD or USD, or how GST is applied. That depends on which entity contracts you — confirm both in your quote. This is why we mark Darktrace as not AUD-native.

**Data residency: the open question.** A security platform sees deeply sensitive data — your traffic, your emails, your identity logs. For regulated Australian organisations, knowing the processing and storage location isn't optional. We could not verify Australian data residency from primary sources. Any serious AU buyer should make a written data-residency and data-handling commitment a condition of purchase.

Net: the local-office presence lifts Darktrace above the typical "offshore SaaS, USD billing, data who-knows-where" global tool. But unconfirmed AUD billing and unconfirmed data residency keep its Australian Fit short of top marks. Honest beats flattering here.

## Score

| Criterion             | Score     | Why                                                                                                            |
| --------------------- | --------- | -------------------------------------------------------------------------------------------------------------- |
| Value for Money       | 3/5       | World-class capability, but enterprise-only pricing puts it out of reach for most, and modules stack the bill  |
| Ease of Use           | 3/5       | Powerful but needs a security team, deployment effort and a tuning period; not for non-specialists             |
| Feature Depth         | 5/5       | Genuinely deep — anomaly detection, AI Analyst, autonomous response, across network/email/cloud/identity/OT    |
| Australian Fit        | 4/5       | Real AU offices (Melbourne, Sydney, Brisbane) lift it; unconfirmed AUD billing and data residency hold it back |
| Reliability & Support | 3/5       | Established leader with local support; we couldn't verify uptime SLAs or AU support terms from primary sources |
| **Total**             | **18/25** |                                                                                                                |

**⭐⭐⭐⭐ Very Good (16–20).** Australian Fit meets the 4/5 gate, so the four-star rating stands.

## Bottom line

**For small businesses and sole operators:** skip it. Darktrace is not built or priced for you, and you'd never see value against the cost. Look at the more accessible tools in our [cybersecurity for Australian SMBs roundup](#) instead.

**For mid-market Australian organisations with a security function:** shortlist it. If you have hundreds to thousands of devices, real risk, and people to run a security platform, Darktrace's self-learning AI and autonomous response are a serious answer to "how do we catch what we don't already know to look for?" Run a proof-of-concept, test the vendor's triage claims against your own environment, and pin down pricing in writing.

**For regulated AU buyers (finance, health, government):** the technology fits, but do your homework first. Make Australian data residency, AUD billing terms and support SLAs explicit conditions before you sign. The local offices give you someone to hold to account — use them.

A closing note: this review is editorial guidance for choosing a tool, not security advice. Darktrace does not replace a qualified security professional, a proper risk assessment, or your own compliance obligations. Treat any deployment as a project to be scoped with people who do this for a living.

Update history 
- **9 Oct 2026** — Re-checked for the AUD-claim queue (#405) on an Australian connection: darktrace.com still publishes no prices (`/pricing` returns 404; the home page offers "Get a demo" and no dollar figure), so the market ranges above remain third-party estimates and `aud_native: false` stands. No claims re-verified beyond the absence of a public price. Capture: `Dossiers/captures/darktrace-pricing-2026-10-09.txt`.
- **13 Jun 2026** — First reviewed.

## Frequently asked questions

### Is Darktrace worth it for Australian businesses?

For mid-market and larger Australian organisations with a security team, yes — it earns a shortlist spot. Its self-learning AI and autonomous response are genuinely capable, and it scores 18/25 in our review. For small businesses and sole operators, no. The enterprise pricing alone takes it off the table.

### How much does Darktrace cost in Australia?

Darktrace does not publish prices — every deal is a custom quote. Independent market data puts the median deal around US$55,200 a year, roughly A$77,280 ex-GST. Mid-market deployments commonly land between US$150,000 and US$500,000 a year. Treat it as a five-to-six-figure annual commitment, and confirm currency and GST treatment in your quote.

### Does Darktrace store Australian data locally?

That is the open question. We could not verify Australian data-residency guarantees from primary sources — Darktrace's R&D sits in the UK and the Netherlands. A security platform sees your traffic, email and identity logs. Any regulated Australian buyer should make a written data-residency commitment a condition of purchase.

### Who should use Darktrace — and who shouldn't?

Mid-market and larger organisations with hundreds to thousands of devices and a security function should shortlist it. Regulated buyers in finance, health and government can too, with residency and billing terms nailed down first. Small businesses and sole operators should skip it — Darktrace is not built or priced for them.

### What score did Darktrace get and why?

18/25 — four stars, Very Good. Feature Depth earned a full 5/5 for its breadth across network, email, cloud, identity and OT. Australian Fit scored 4/5, lifted by real offices in Melbourne, Sydney and Brisbane. Value for Money, Ease of Use and Reliability each sat at 3/5, reflecting enterprise pricing and the need for a security team.

## Read next

- [Our review methodology and scoring framework](https://www.theaidirectory.com.au/methodology/)
- [The best AI cybersecurity tools for Australian SMBs (June 2026)](#) — the practical, affordable end of the market most readers should start with

## Sources

Primary and market sources, checked 13 June 2026\. Wayback snapshots queued (Save Page Now unavailable at time of writing — no archive URLs invented).

- Darktrace — Products / ActiveAI Security Platform: https://darktrace.com/products (primary)
- Darktrace — Cyber AI Analyst: https://darktrace.com/products/cyber-ai-analyst (primary)
- Darktrace / Thoma Bravo — acquisition completion (Oct 2024): https://www.darktrace.com/news/darktrace-announces-formal-completion-of-its-acquisition-by-thoma-bravo (primary)
- Thoma Bravo — completion of acquisition: https://www.thomabravo.com/press-releases/thoma-bravo-completes-acquisition-of-darktrace (primary)
- UnderDefense — Darktrace pricing guide 2026 (third-party aggregate, pricing context only): https://underdefense.com/blog/darktrace-pricing-guide/ (supporting)
- Capterra Australia — Darktrace cost & reviews: https://www.capterra.com.au/software/168955/darktrace (supporting)
- AU office locations (Melbourne / Sydney / Brisbane) cross-checked via Darktrace listings and partner pages (supporting; current offices listed at darktrace.com/contact)

**Structured data (Ghost code injection):**