How Darktrace Unifies Email Security with Cross-Domain AI

Darktrace / EMAIL is expanding its capabilities to end email security silos by delivering cross-domain AI-native detection that links email, identity, and SaaS, and by introducing label-free behavioural DLP to protect sensitive data without manual rules. The update also includes native Microsoft integrations with Defender and Security Copilot, enabling SOC teams to investigate and respond faster within their existing Microsoft workflows.

Further enhancements include unified quarantine management with Microsoft Defender, threat insights surfaced in Copilot, automatic ticket creation in JIRA, and sandbox analysis integration from the Darktrace UI. The company highlights that its approach is designed to catch threats SEGs miss, citing that many organisations fail to extend zero-trust to email according to Gartner, and noting a large proportion of multi-domain attacks can be neutralised in real time through cross-domain context.

The changes form part of a broader Darktrace release, with a live launch event scheduled for 9 December 2025. December 4, 2025, marks the blog publish date for this reputation-aware, unified approach to email security.