10/15/25, 10:00 AM

A UK-based civil engineering company that maintains much of the country’s highway infrastructure reduced MTTR across network, email and cloud by deploying Darktrace’s ActiveAI Security Platform. Darktrace / EMAIL cut the discovery, alerting and response process from days or weeks to seconds, while automating workflows that saved the team eight to ten working hours a week.

After initial success with /EMAIL, the organisation added Darktrace / NETWORK and Darktrace / IDENTITY, contributing to further cost savings and avoiding the need for a larger 24/7 SOC; the existing analysts could be more effective, and the company even lowered its cyber insurance premiums. The MDR-enabled environment allowed Darktrace’s SOC to rapidly triage alerts, restrict affected devices and notify the customer, limiting impact to the point where only around 2 GiB of data was observed leaving the network.

The story highlights how anomaly‑based detection helps identify and neutralise threats at machine speed, reducing disruption and enabling ongoing strategic security work.