Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Darktrace Network by Darktrace View product | Zeek by Zeek View product |
|---|---|---|
| Overview | ||
| What it is | Darktrace Network is a network detection and response for network detection and response and lateral movement interruption. See features and NDR alternatives. | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. |
| Product type | Network Detection and Response (NDR) | Open-Source Network Security Monitoring & Behavioral Analysis Engine |
| Best for | Cross-industry, Finance, Healthcare, Manufacturing, Enterprise Networks, Banking | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudOn-Premise |
| Deployment details | Cloud; Physical Appliance; Virtual Sensor; Physical network tap; Virtual appliance; Cloud VPC mirror | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor |
| Data residency | United States; European Union; United Kingdom | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Physical NetworksVirtual SwitchesCloud VPCs / VNets | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps |
| Compliance | SOC 2 Type IIISO 27001GDPR | BSD LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | CiscoPalo Alto NetworksCheck PointFortinetSplunk | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight |
| Industries | Cross-industryFinanceHealthcareManufacturingEnterprise NetworksBanking | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom |
| Regions | Global | Global |
| Vendor | ||
| Company | Darktrace | Zeek |
| Headquarters | Cambridge, United Kingdom | Berkeley, California, USA |
| Company size | 1,000+ | 1-10 |
| Founded | 2013 | 1994 |
Overview
What it is
Darktrace Network
Darktrace Network is a network detection and response for network detection and response and lateral movement interruption. See features and NDR alternatives.Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.Product type
Darktrace Network
Network Detection and Response (NDR)Zeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineBest for
Darktrace Network
Cross-industry, Finance, Healthcare, Manufacturing, Enterprise Networks, BankingZeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomPricing
Pricing model
Darktrace Network
Contact VendorZeek
Contact VendorFree trial
Darktrace Network
Free trial: yesZeek
Free trial: yesDeployment
Deployment options
Darktrace Network
Cloud
Zeek
CloudOn-Premise
Deployment details
Darktrace Network
Cloud; Physical Appliance; Virtual Sensor; Physical network tap; Virtual appliance; Cloud VPC mirrorZeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorData residency
Darktrace Network
United States; European Union; United KingdomZeek
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Darktrace Network
- Deep packet inspection
- Passive traffic analysis
- Autonomous TCP resets
- IoT/OT visibility
- Lateral movement detection
- MITRE ATT&CK mapping
- Network detection and response
- Lateral movement interruption
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
Platform & access
API access
Darktrace Network
API access: yesZeek
API access: noSingle sign-on (SSO)
Darktrace Network
SSO: yesZeek
SSO: noRole-based access (RBAC)
Darktrace Network
RBAC: yesZeek
RBAC: yesMulti-tenant
Darktrace Network
Multi-tenant: yesZeek
Multi-tenant: noMobile app
Darktrace Network
Mobile app: noZeek
Mobile app: noSupported platforms
Darktrace Network
Physical NetworksVirtual SwitchesCloud VPCs / VNets
Zeek
Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps
Compliance
Darktrace Network
SOC 2 Type IIISO 27001GDPR
Zeek
BSD LicenseCommon CriteriaNetwork Standards
Integrations & coverage
Integrations
Darktrace Network
CiscoPalo Alto NetworksCheck PointFortinetSplunk
Zeek
ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight
Industries
Darktrace Network
Cross-industryFinanceHealthcareManufacturingEnterprise NetworksBanking
Zeek
CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom
Regions
Darktrace Network
Global
Zeek
Global
Vendor
Company
Darktrace Network
DarktraceZeek
ZeekHeadquarters
Darktrace Network
Cambridge, United KingdomZeek
Berkeley, California, USACompany size
Darktrace Network
1,000+Zeek
1-10Founded
Darktrace Network
2013Zeek
1994