Darktrace / EMAIL

What Darktrace / EMAIL is

Darktrace / EMAIL uses behavioral AI to identify and stop email threats such as phishing, business email compromise, impersonation, and social engineering. It learns an organization’s communication patterns to flag suspicious behavior without depending on known attack signatures. For suspicious messages, its response can range from tagging to full quarantine. Coverage includes inbound, outbound, and lateral email, along with account-based and messaging attacks. Its data-loss prevention capability examines behavior and message content to find sensitive information in outbound email, including unlabeled data. The product also describes behavioral protection for Microsoft Teams chats, including social engineering and attacks without payloads. Deployment can be API-only or API plus journaling, with no disruption to mail flow. Darktrace says it integrates with Microsoft 365 and Microsoft Exchange and is hosted on Microsoft Azure; listed security integrations also include Google Workspace, Azure Sentinel, Elastic Security, ReliaQuest, and Splunk. The cloud product is aimed at security teams protecting organizations and reducing SOC investigations. Pricing is on request, a 30-day trial is listed, and there is no free plan.