Darktrace is a cybersecurity product covering attack surface management, endpoint detection and response, extended detection and response, managed detection and response and threat intelligence · darktrace.com ↗
The standing depends on who is buying. Every model is asked the same questions for each company size.
Sophos NDR is first at 16%.
Vectra AI Platform is first at 24%. 1 of 14 models made it the first choice when asked directly.
Vectra AI Platform is first at 24%.
“Market leaders tend to be ExtraHop, Vectra AI, and Darktrace in pure-play NDR”Grok 4.20 · Comparative question · first choice
“Choose Darktrace for self-learning AI with autonomous response across multi-surface.”Muse Glimmer 30B · Comparative question · first choice
“Darktrace | Leader | Self-learning AI that autonomously models normal behavior”MiniMax M2.5 · Comparative question · first choice
“Traditional Enterprise Network | Darktrace or Cisco Secure Network Analytics”GLM 4.7 FlashX · Comparative question · first choice
“these enterprise-level NDR platforms should generally be avoided or approached with caution if you're a small business”MiniMax M2.5 · Negative question · warning
“What to Avoid on a Tight Budget ... Darktrace — premium pricing, often better for large enterprises”DeepSeek V4 Flash · Budget-constrained question · warning
“Darktrace is the platform most frequently cited as one to avoid or approach with caution”Mistral Small · Negative question · warning
“What to Avoid: Enterprise-only platforms like Darktrace or Vectra AI (typically $100K+)”GLM 4.7 FlashX · Budget-constrained question · warning
The products named in the same answers as Darktrace, over the 236 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 128 | 28 | Compare → | |
| 91 | 6 | Compare → | |
| 89 | 9 | Compare → | |
| 76 | 2 | Compare → | |
| 43 | 0 | View → | |
| 38 | 7 | Compare → | |
| 36 | 2 | View → | |
| 28 | 0 | View → | |
| 27 | 5 | Compare → | |
| 25 | 9 | View → |
What the models named instead of Darktrace →
A side-by-side page exists where both products are among a category's top eight.
Stated on Darktrace's own site, not checked by Gane.
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 217 of the 236 answers that named Darktrace and are not a share of its labels.
454 of the 540 domain citations in answers naming Darktrace came from a third party's page. Fifty-four were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.
Pages are listed as the models cited them.
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 2 | 0 | 1 | 3 |
| GPT-5.4 mini | 0 | 3 | 0 | 0 | 3 |
| Gemini 3.5 Flash | 0 | 3 | 0 | 1 | 4 |
| Perplexity Sonar | 0 | 2 | 1 | 2 | 5 |
| Grok 4.20 | 1 | 2 | 2 | 5 | 10 |
| Mistral Small | 0 | 3 | 3 | 1 | 7 |
| DeepSeek V4 Flash | 1 | 2 | 1 | 3 | 7 |
| Llama 4 Maverick | 0 | 0 | 3 | 2 | 5 |
| Qwen 3.7 Flash | 0 | 1 | 1 | 2 | 4 |
| Kimi K2 | 1 | 1 | 3 | 4 | 9 |
| GLM 4.7 FlashX | 2 | 2 | 0 | 3 | 7 |
| MiniMax M2.5 | 1 | 1 | 3 | 2 | 7 |
| GPT-6 Luna | 0 | 2 | 0 | 1 | 3 |
| Muse Glimmer 30B | 1 | 1 | 4 | 2 | 8 |
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| News or press | 1,103 | undated | Email security, ASM | ||
| Blog | 441 | undated | Email security, ASM | ||
| Case study | 116 | undated | |||
| Webinar or virtual event | 77 | undated | |||
| Report or ebook | 28 | undated | |||
| Conference or event | 8 | undated | |||
| Comparison | 8 | undated | |||
| Glossary or explainer | 4 | undated | |||
| Podcast or video | 4 | undated | |||
| Template or tool | 3 | undated | Email security |
Every page darktrace.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. Of its titles that name a category, most name email security (26); 10 name its categories the models place it in. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.