Darktrace 4+

Review not updated for the new version.

The mobile app has just about everything I need to be aware of events on the network. There’s definitely still room for improvement: expanded context actions, the ability to tag devices, and more of the core functionality available when connected to the appliance’s web interface.

The Antigena section is just enough mobile functionality to help stabilize my nerves. The only downside currently is the lack of an option to manually initiate an Antigena block on arbitrary addresses or covered devices, especially from within a model breach or on the page for a device, in circumstances where an Antigena model breach has not already occurred.

Some extremely minor things:

On the Antigena page for a device where no actions are available, there’s a catchall notice to contact your representative if you don’t have Antigena licensed. I have no actual issue with this, but if someone on the app team finds themselves awake late at night and there’s nothing else catching their attention, I think at least a couple of us users would appreciate a cached license check for Antigena.

Used daily, incredibly functional. Truly innovative solution and the app reflects that.

The Darktrace app is intuitive and easy. Highly recommended