Machine learning cybersecurity firm Darktrace PLC today announced a new security platform designed to eliminate alert fatigue and illuminate security gaps to help security teams improve cyber resilience.

Called the Darktrace ActiveAI Security Platform, the platform includes Darktrace’s existing security products supplemented by a set of new innovations and features.

The platform uses artificial intelligence to transform security operations from a reactive posture to a state of proactive cyber resilience, identifying weaknesses in security controls and processes before they are exploited. The service also detects and responds to known and novel threats and automates the investigation of every alert to completion to reduce the manual triage process.

Core to the new platform, the company says, is the ability to visualize, correlate and investigate security incidents across cloud, email, network, endpoint, identity and operational technology, as well as third-party tools and applications.

The platform is built on Darktrace’s Self-Learning AI engine, which applies different types of AI directly to the data in each business so that it can learn unique business operations in real time and understand what’s normal and what’s not in an organization. The AI detects known and novel threats in real time and provides an autonomous response that shuts down active threats without disrupting business operations.

The new service incorporates Darktrace Cyber AI Analyst, a service that offers more explainable, automated and customizable investigations for every security alert. The service allows security analysts to gain insights into how the AI determined its conclusions and the rationale for not escalating alerts to incidents.

The new platform can also be tailored to meet specific business requirements, such as conducting thorough investigations that align with unique operational needs. The capability can automatically investigate every alert and suggest precise autonomous response actions. That helps not only mitigate alert fatigue and reduce the time spent on triage but also enables security teams to focus on strengthening their defenses and refining incident response strategies using the insights provided by Darktrace.

“Security teams are reaching a breaking point, forced into a reactive state by too many alerts, too little time and a fragmented security stack,” said Chief Product Officer Max Heinemeyer. “The Darktrace ActiveAI Security Platform takes a unique approach from the rest of the industry. It correlates incidents across the digital environment and automates investigations to uplift security teams and free them from the manual, time-intensive alert triage process so they can focus their time on building proactive cyber resilience.”

Darktrace has also introduced new features aimed at enhancing network visibility and preempting threats. The company’s platform now integrates with third-party network solutions to access decrypted traffic feeds and decryption keys and offers native decryption for applications on Microsoft Windows and Apple Mac, including internet browsers. A new Firewall Rule Analysis feature also aids in pre-breach preparations.

The company also announced new features in Darktrace/Email, the company’s email protection service, including new AI capabilities. The AI enhancements detect abnormal user behavior and changes in content that it claims go beyond the capabilities of native email providers by offering protection against both accidental and malicious data loss.

Photo: London Stock Exchange/X