Darktrace / Network integrations

Technology Integrations

We know how important it is for your security solutions to talk to each other. Darktrace was built with an open architecture, making integrations quick and simple. Find some common cases listed below. Custom integrations are available upon request.

Integrations with Darktrace/Network

Azure Sentinel

Analyze Darktrace AI Analyst incidents and model breach alerts in Azure Sentinel.

Check Point NGFW

Extend Darktrace autonomous response to Check Point firewalls.

Cisco ASA

Extend Darktrace autonomous response to Cisco firewalls.

Cisco ASA FirePOWER

Extend Darktrace autonomous response to Cisco firewalls.

Cisco AnyConnect VPN

Enrich Darktrace user and device tracking for VPN.

Cisco FirePOWER Threat Defense

Extend Darktrace autonomous response to FirePOWER Threat Defense.

Cisco Meraki Firewall

Extend Darktrace autonomous response to Cisco Meraki firewalls.

Cisco Meraki VPN

Enrich Darktrace user and device tracking for VPN.

Citrix TSA

Enrich Darktrace user tracking for Citrix Virtual Apps and Virtual Desktop users.

Commvault Cloud

Enrich the Commvault platform with real time security insights from Darktrace Detect, so organizations can respond to threats reducing impact to their data

Cortex XSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Elastic Security

Analyze, correlate, and visualize Darktrace AI Analyst incidents and model breach alerts.

Endace

Deploy and host Darktrace sensors on EndaceProbes for increased forensic evidence and storage.

FortiSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

Fortigate Firewall

Extend Darktrace autonomous response to Fortigate firewalls.

Fortigate SSL VPN

Enrich Darktrace user and device tracking for VPN.

Hunters SOC Platform

Integrate Darktrace with Hunters to allow triaging of Darktrace alerts and incidents via the Hunters console, as well as further investigating and correlating them to related threats

InsightConnect

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

InsightIDR

Analyze Darktrace AI Analyst incidents and model breach alerts in InsightIDR.

InsightVM

Enrich Darktrace detection and response with additional device information.

Jira

Create Jira issues for AI Analyst incidents, model breaches, and system health alerts.

Juniper Networks SRX

Extend Darktrace autonomous response to Juniper firewalls.

Keysight

Capture and direct cloud or on-prem traffic with ease for Darktrace analysis.

LogRhythm

Analyze Darktrace AI Analyst incidents and model breach alerts in LogRhythm.

Microsoft Graph Security API

Enrich Darktrace detection with alerts from Microsoft Cloud App Security, the Microsoft Defender suite, Azure Information Protection, and Azure Identity Protection.

Microsoft Teams

Insert Darktrace alerting into Microsoft Teams channels.

Netscaler VPN

Enrich Darktrace user and device tracking for VPN.

Nutanix

Deploy Darktrace virtual Sensors (vSensors) in Nutanix virtual machine environments, mirroring traffic back to a Darktrace master appliance. Nutanix ready certified (AHV)

Palo Alto Networks NGFW

Extend Darktrace autonomous response to Palo Alto firewalls.

QRadar

Analyze Darktrace AI Analyst incidents and model breach alerts in Qradar.

ReliaQuest

Investigate AI Analyst Incidents and Model Alerts within GreyMatter. Commands can be executed to pull back further information from Darktrace.

ServiceNow ITSM

Automate IT tasks in ITSM triggered by Darktrace alerts.

ServiceNow SecOps

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Siemplify

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Slack

Insert Darktrace alerting into a Slack channel or chat.

SonicWall VPN

Enrich Darktrace user and device tracking for VPN.

Sophos VPN

Enrich Darktrace user and device tracking for VPN.

Splunk

Analyze Darktrace AI Analyst incidents and model breach alerts in CIM compatible Splunk dashboards, and poll Splunk data to enrich Darktrace modeling with additional contextual information.

Splunk SOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.