BlackBerry Cylance Cybersecurity vs Cybereason Endpoint Detection &amp; Response comparison

BlackBerry Cylance Cybersecurity vs. Cybereason Endpoint Detection & Response

Download the complete report

Helped 861,524 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BlackBerry Cylance Cybersec...

Ranking in Endpoint Protection Platform (EPP)

29th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Cybereason Endpoint Detecti...

Ranking in Endpoint Protection Platform (EPP)

35th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (24th)

Mindshare comparison

As of July 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BlackBerry Cylance Cybersecurity is 1.1%, down from 1.5% compared to the previous year. The mindshare of Cybereason Endpoint Detection & Response is 0.8%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

AtulChaurasia

Operational Technical Security at Metro Bank

Scalable platform with intuitive features for detecting malicious files

The initial setup process is straightforward. We have to install the agent, create a package, and deploy it on servers. It has a prebuilt console managed by the cloud team of Cybereason. We don't have to worry about the console and concentrate on endpoint implementation. It takes ten days to deploy it on 10,000 devices.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Blackberry Protect offers endpoint protection. It's easy to deploy. It's scalable and stable."

"It provides good insight into the programs, applications, or websites that may need attention."

"I find the actual overall endpoint malware protection the most valuable feature of CylancePROTECT."

"The initial setup of CylancePROTECT is very easy."

"What's most valuable in CylancePROTECT is the optics feature. I also like its easy-to-use and user-friendly dashboard and monitoring system."

"Endpoints are protected in real-time without the need of a centralized server."

"A user can continue to add endpoints and the solution will continue to perform well."

"The non-daily requirement to update signatures is the most valuable feature. From a functional point of view, it is pretty spot on. For instance, we compared an algorithm from five years ago to today's algorithm, and it was 98% accurate. It has the ability to detect and mitigate. In the industrial environment that we work in, there's what we call OT versus IT. You are IT Central, but this is OT. Generally, we don't have the same level of skillset as IT individuals or IT professionals have. This particular product doesn't require you to be a computer scientist to be able to understand its proprietary algorithm and to be able to deploy, use, and work within it. It integrates well with a robust SIEM or SOAR solution, and it plays nice with others. We use other detection solutions like CyberX or site provision with Cisco, and it plays nice. That's one of the things we really liked about it."

More BlackBerry Cylance Cybersecurity pros

"The initial setup is not overly complicated."

"What I like most about Cybereason Endpoint Detection & Response is the support because the support is good. The solution is also easy to use, and it has a dashboard. Everything is good, and there's no problem with it."

"The initial setup was easy and straightforward."

"What I find most valuable is the clarity of the platform."

"The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running."

"They do a very good job of providing multi-stage visualizations of malicious operations that immediately show all attack details across all devices and users. Since it is MalOp-centric model, you can see if there has been a similar operation across multiple machines. If it is the same thing appearing on multiple machines, you see all the machines and users affected in one screen."

"What I find most valuable is the clarity of the platform. It is very straightforward."

"Cybereason absolutely enables us to mitigate and isolate on the fly. Our managed detection response telemetry has dropped dramatically since we began using it. It's very top-of-mind. We were running some tabletop exercises and none of the detections were getting triggered by the managed security services provider. So we needed to find a solution that would trigger high-fidelity alerts. That was Cybereason and it dramatically changed our landscape from the detection and response perspective."

More Cybereason Endpoint Detection & Response pros

Cons

"The OPTICS component could be made more user-friendly with respect to giving people more information."

"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."

"It was not effective. There were a lot of false positives, even when we use Adobe, and everybody uses Adobe, which is not a threat."

"Additionally, their channel management has been lacking, with a notable disregard for small and medium-sized businesses, focusing primarily on large enterprises and very large MSPs."

"The product must make the interface a little more user-friendly."

"I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable."

"The AI of CylancePROTECT has room for improvement. I'm on a trial license of SentinelOne, and its AI is much better than what's on CylancePROTECT."

"The solution should implement AI in the product."

More BlackBerry Cylance Cybersecurity cons

"The product's reporting isn't great."

"The network coverage becomes an issue most of the time."

"What needs to improve in Cybereason Endpoint Detection & Response and what I'd like to see in its next release is a centralized dashboard that allows you to view what is there, similar to what's on Symantec Endpoint Protection Manager: a beautiful display and reporting. Cybereason Endpoint Detection & Response has to start with the compliance, the homepage, etc. Everything should be there and should be customizable. The options should be there. The tool is very good currently, but visibility for IT administrators is lacking and needs to be worked on."

"They need to improve their technical support services."

"Reporting could be a bit more granular so that we had the ability to check regions and countries. I just noticed that, for instance, if I look at our servers, it's either "contained" or it's "not contained". I don't have the option, for instance, to look at countries. It only allows me to look at users as one big group."

"There is room for improvement in the product features related to device control, particularly USB management."

"It initially took some time to deploy."

"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."

More Cybereason Endpoint Detection & Response cons

Pricing and Cost Advice

"CylancePROTECT is an affordable solution."

"It's not so heavily priced; rather, it's average and decent."

"The license price for this solution could be better. It's on the expensive side."

"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."

"We pay our license on a yearly basis and have just renewed for two years."

"The solution provides me with competitive pricing."

"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."

"The solution's pricing is around the same as most EDRs but slightly behind some of the major ones."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"This product is somewhat expensive and should be cheaper."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"In terms of pricing, it's a good solution."

"The pricing is manageable."

"I do not have experience with the licensing of the product."

"In terms of cost, this is a good choice for our needs."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

More Cybereason Endpoint Detection & Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

861,524 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Manufacturing Company

12%

Government

Financial Services Firm

Computer Software Company

16%

Financial Services Firm

11%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Blackberry Protect?

It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions.

What is your experience regarding pricing and costs for Blackberry Protect?

The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.

What needs improvement with Blackberry Protect?

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

Microsoft Defender for Endpoint vs BlackBerry Cylance Cybersecurity

Comparisons

Compared 17% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 12% of the time

Cisco Secure Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

SentinelOne Singularity Complete vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

More BlackBerry Cylance Cybersecurity Competitors

Darktrace vs Cybereason Endpoint Detection & Response

Compared 28% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 11% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 11% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Kaspersky Endpoint Security for Business vs Cybereason Endpoint Detection & Response

Compared 5% of the time

More Cybereason Endpoint Detection & Response Competitors

Product Reports

BlackBerry Cylance Cybersecurity

Download BlackBerry Cylance Cybersecurity product report

Cybereason Endpoint Detection & Response

Download Cybereason Endpoint Detection & Response product report

Cybereason Endpoint Detection & Response report

Also Known As

Blackberry Protect

Cybereason EDR, Cybereason Deep Detect & Respond

Overview

BlackBerry Cylance provides endpoint security, threat protection, and antivirus capabilities, using AI and machine learning for protection against malware and ransomware on desktops, servers, and virtual machines worldwide. Its AI-driven threat detection operates even with limited internet, facilitating effective threat management.

BlackBerry Cylance's centralized dashboard simplifies threat management and vulnerability protection for organizations globally. The platform combines AI and machine learning to deliver superior zero-day threat protection and minimize CPU usage, offering stable and accurate threat detection without frequent updates. It includes tools like CylanceOPTICS and CylancePERSONA for enhanced user behavior monitoring and adopts a proactive approach that effectively manages threats at various lifecycle stages. Renowned for stability and performance, it efficiently prevents unauthorized applications while maintaining system productivity.

What are the main features of BlackBerry Cylance?

Minimal CPU Usage: Efficiently operates without taxing computer resources.
AI and Machine Learning: Advanced technology for zero-day threat protection.
Lightweight Design: Functions without constant updates for simplified usage.
Centralized Management: Offers a user-friendly, intuitive dashboard.
CylanceOPTICS and PERSONA: Tools for in-depth user behavior analysis.

What are key benefits to look for in user reviews?

Effective Malware Detection: Recognized accuracy in identifying security threats.
Proactive Threat Mitigation: Actively detects and manages threats.
Stability and Performance: Consistent protection without hampering system performance.
Reduced Unauthorized Access: Limits unpermitted application activity.

In the professional sector, BlackBerry Cylance is leveraged to protect crucial infrastructure through a robust approach accommodating environments with limited connectivity. Its widespread deployment in industries, including healthcare and finance, is attributed to its ease of deployment and comprehensive protection capabilities. However, enhancements in reporting, pricing structures, and technical support are avenues for development, reflecting user feedback for improving detection rates and overall dashboard usability.

BlackBerry

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Sample Customers

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

BlackBerry Cylance Cybersecurity vs. Cybereason Endpoint Detection & Response