BlackBerry Cylance Cybersecurity vs CrowdStrike Falcon comparison

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon

Download the complete report

Helped 861,803 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BlackBerry Cylance Cybersec...

Ranking in Endpoint Protection Platform (EPP)

29th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

CrowdStrike Falcon

Ranking in Endpoint Protection Platform (EPP)

2nd

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

132

Ranking in other categories

Security Information and Event Management (SIEM) (6th), Threat Intelligence Platforms (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)

Mindshare comparison

As of July 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BlackBerry Cylance Cybersecurity is 1.1%, down from 1.5% compared to the previous year. The mindshare of CrowdStrike Falcon is 10.6%, up from 9.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Q&A Highlights

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

Both Cylance and CrowdStrike are amongst the few top of the market in terms or endpoint protection. CrowdStrike was considered among the top 5 in 2017 and Cylance was considered the same in 2019. As they are both highly effective, CrowdStrike is very unique in its user-friendliness, while Cylance is very unique for its minimum utilization of computer's resources. If you compare initial pricing, you would go with Cylance, but you can always negotiate with both to get the best offers.

Doesn't have daily updates, which is important for healthcare IT

Featured Reviews

Sooraj Makkancherrry

Security Operations Manager at Philips

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Waleed Omar

Information Security Specialist at Arab Open University

Provides effective real-time threat detection with potential for cost optimization

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It actively monitors the behavior and activity of processes and will, without hesitation, terminate at root anything it determines to be suspect."

"CylancePROTECT works on AI technology, is always up to date, and uses very few resources on your devices."

"What's most valuable in CylancePROTECT is the optics feature. I also like its easy-to-use and user-friendly dashboard and monitoring system."

"The most valuable features of CylancePROTECT are its powerful machine-learning capabilities and predictive intelligence."

"I find the actual overall endpoint malware protection the most valuable feature of CylancePROTECT."

"One of the best features of the solution is that it's easy to deploy."

"The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background."

"The solution is pretty easy to scale."

More BlackBerry Cylance Cybersecurity pros

"The OverWatch is the most valuable feature to me. It's a 24x7 monitoring service, and when they see anything suspicious in my environment, they will investigate."

"Their endpoint is pretty flawless. There is no lag on the machines at all. Even though I have a good overview of all the machines, that's pretty much the most valuable feature of CrowdStrike Falcon."

"As long as the machine is connected to the Internet, and CrowdStrike is running, then it will be on and we will have visibility; no VPNing in or making some type of network connection. CrowdStrike always there and running in the background; for us, that is big. We wanted something that could give us data as long as the machines connected to the Internet and be almost invisible to the employees."

"Everything is automatic. I install the sensor and renew the service. Periodically, I get a notice that they've shut something down."

"Its integration capability is valuable. It integrates easily with any OS."

"It seems to do a pretty good job of protecting the host. It offers good insights that it gives you when it has a detection. It's pretty incredible."

"The stability is very good."

"Easy to use, intelligent, and stable threat detection software."

More CrowdStrike Falcon pros

Cons

"I would say one thing that they might need to bring in is protection for mobile devices."

"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."

"It's a good solution but some features just need to be updated."

"CylancePROTECT's dashboard could be more user-friendly."

"While you are working, you are finding these things that were supposed to be waived have come back to being blocked. That's frustrating."

"We would like to see secure integration and multi-factor authentication to be able to access the administration dashboard."

"I'd like them to do software distribution too, but they said that that's architecturally not at the product line."

"The management console needs a little maturity in how it presents data and allows the administrator to drill down or search across systems."

More BlackBerry Cylance Cybersecurity cons

"If CrowdStrike can further expand its support for XDR compatibility, that would give it an edge over all the other competing new products."

"CrowdStrike Falcon could improve by having an easier way to search and use the interface for extracting queries from the data. The interface could improve."

"It does take more time to scan than other solutions."

"CrowdStrike costs a little more than its competitors."

"I would like them to improve the correlation of data in the search algorithms. When we run an investigation, malware, phishing, etc., I want to look at multiple endpoints at once to correlate that data to see the likenesses, e.g., how are they not alike or what systems and processes are running across those systems? I don't want to have to run the same search in their Spotlight module five, 10, 15, or 100 times to get 100 different results, copy that data out, and then correlate it on my own. In a very simple way, I want to be able to load up a comma-delimited list giving me the spotlight data on these X amount of hosts, letting me search for it quickly. We have had to go back to CrowdStrike, and say, "Our search are taking far too long for even one host." They did bump up the cores and that did improve performance, but it is still kind of slow to get that Spotlight data. That is probably our biggest pain point. I think that needs some help. I understand this kind of information access is probably not the easiest thing to do. It is probably a big ask depending on how their back-end is setup."

"Too many false positives."

"Whenever there is a feature release (upgrade) where we push to all the endpoints, it causes something to be blocked without us knowing."

"The solution could improve the policies themselves."

More CrowdStrike Falcon cons

Pricing and Cost Advice

"We went through a third party initially to do the renewal, but we won't be renewing, we will move on to something else."

"Review closely how many endpoints you actually need before buying into a pricing level. Deal and deal with the VAR of your choice."

"CylancePROTECT's pricing is reasonable, at about €18 per user, per year."

"It is expensive, but not unreasonable."

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

"The initial end-point cost may seem a little high (~$55/device/year) but when you look at the total peace of mind that the solution provides, with no reboots for updates, and negligible performance impact, it is well worth it."

"Do not get hung up on price. You pay for what you get and expensive will hurt one time, where cheap will hurt forever, especially if you fall victim to a ransom attack, etc."

"I think that the price we are paying is good for what it is."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"It is expensive compared to SentinelOne, but as the market leader, it is worth it."

"The more endpoints an organization adds the cheaper the cost."

"It has an annual license, and it is not that expensive."

"The solution's pricing is great for us."

"CrowdStrike Falcon is one of the more expensive endpoint solutions on the market."

"When it comes to licensing, customers can choose a bundle or select licences based on the specific features they would like access to. This solution comes with premium pricing. It is approximately 20 to 30% more expensive than competing solutions."

"The tool is a little bit expensive compared to other products, but I think it's okay owing to its quality."

"We are at about $60,000 per year."

More CrowdStrike Falcon pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

861,803 professionals have used our research since 2012.

Answers from the Community

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

2 out of 3 answers

Dan Brunnquell

Director Of Information Technology at a financial services firm with 11-50 employees

Jun 25, 2019

I never used Cylance. We installed CrowdStrike on 6/6/19 and aside from a test file have had zero hits. CrowdStrike has some additional features available (at a cost). One that I am looking at is device control for USB storage devices for policy enforcement. Syslogs are being absorbed by my SIEM as well.

Read full answer

ABDULRAHMAN ALBATARNI

IT Manager with 201-500 employees

Jun 26, 2019

Read full answer

See all 3 answers

Top Industries

By visitors reading reviews

Computer Software Company

14%

Manufacturing Company

12%

Government

Financial Services Firm

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Blackberry Protect?

It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions.

What is your experience regarding pricing and costs for Blackberry Protect?

The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.

What needs improvement with Blackberry Protect?

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...

How does Crowdstrike Falcon compare with Darktrace?

Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

Microsoft Defender for Endpoint vs BlackBerry Cylance Cybersecurity

Comparisons

Compared 17% of the time

Cisco Secure Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

SentinelOne Singularity Complete vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs BlackBerry Cylance Cybersecurity

Compared 4% of the time

More BlackBerry Cylance Cybersecurity Competitors

Microsoft Defender for Endpoint vs CrowdStrike Falcon

Compared 5% of the time

Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon

Compared 3% of the time

Darktrace vs CrowdStrike Falcon

Compared 3% of the time

Microsoft Defender XDR vs CrowdStrike Falcon

Compared 3% of the time

Wazuh vs CrowdStrike Falcon

Compared 3% of the time

More CrowdStrike Falcon Competitors

Product Reports

BlackBerry Cylance Cybersecurity

Download BlackBerry Cylance Cybersecurity product report

CrowdStrike Falcon

Download CrowdStrike Falcon product report

Also Known As

Blackberry Protect

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface

Overview

BlackBerry Cylance provides endpoint security, threat protection, and antivirus capabilities, using AI and machine learning for protection against malware and ransomware on desktops, servers, and virtual machines worldwide. Its AI-driven threat detection operates even with limited internet, facilitating effective threat management.

BlackBerry Cylance's centralized dashboard simplifies threat management and vulnerability protection for organizations globally. The platform combines AI and machine learning to deliver superior zero-day threat protection and minimize CPU usage, offering stable and accurate threat detection without frequent updates. It includes tools like CylanceOPTICS and CylancePERSONA for enhanced user behavior monitoring and adopts a proactive approach that effectively manages threats at various lifecycle stages. Renowned for stability and performance, it efficiently prevents unauthorized applications while maintaining system productivity.

What are the main features of BlackBerry Cylance?

Minimal CPU Usage: Efficiently operates without taxing computer resources.
AI and Machine Learning: Advanced technology for zero-day threat protection.
Lightweight Design: Functions without constant updates for simplified usage.
Centralized Management: Offers a user-friendly, intuitive dashboard.
CylanceOPTICS and PERSONA: Tools for in-depth user behavior analysis.

What are key benefits to look for in user reviews?

Effective Malware Detection: Recognized accuracy in identifying security threats.
Proactive Threat Mitigation: Actively detects and manages threats.
Stability and Performance: Consistent protection without hampering system performance.
Reduced Unauthorized Access: Limits unpermitted application activity.

In the professional sector, BlackBerry Cylance is leveraged to protect crucial infrastructure through a robust approach accommodating environments with limited connectivity. Its widespread deployment in industries, including healthcare and finance, is attributed to its ease of deployment and comprehensive protection capabilities. However, enhancements in reporting, pricing structures, and technical support are avenues for development, reflecting user feedback for improving detection rates and overall dashboard usability.

BlackBerry

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike

Sample Customers

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Information Not Available

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon