Cybereason Endpoint Detection & Response vs Elastic Security comparison

Cybereason and Elastic are both solutions in the Endpoint Detection and Response (EDR) category. Cybereason is ranked #26 with an average rating of 8.2, while Elastic is ranked #16 with an average rating of 7.7. Cybereason holds a 1.1% mindshare in EDR, compared to Elastic’s 2.4% mindshare. Additionally, 89% of Cybereason users are willing to recommend the solution, compared to 86% of Elastic users who would recommend it.

Cybereason Endpoint Detecti...

Read 21 Cybereason Endpoint Detection & Response reviews

3,210 Views
1,790 Comparison Views

89% willing to recommend

Elastic Security

Read 63 Elastic Security reviews

4,080 Views
3,440 Comparison Views

86% willing to recommend

Cybereason Endpoint Detecti...

Elastic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cybereason Endpoint Detection & Response and Elastic Security are two leading solutions for endpoint protection. Cybereason excels in specific features, while Elastic often offers superior overall value based on user reviews.

Features: Cybereason Endpoint Detection & Response is known for advanced threat detection and response capabilities, automated investigation features, and user-friendly design. Elastic Security is powerful with its integration with the ELK stack, extensive data analytics options, and customizability. Cybereason stands out with its advanced threat intelligence. Elastic shines due to flexibility and scalability, especially in large-scale deployments.

Room for Improvement: Cybereason Endpoint Detection & Response could improve reporting features and integration with third-party tools. Elastic Security users suggest a more streamlined setup process and better customer support documentation. Cybereason's feedback focuses on feature expansion, while Elastic's feedback is about usability and support.

Ease of Deployment and Customer Service: Cybereason Endpoint Detection & Response is commended for its straightforward deployment process and responsive customer support. Elastic Security's deployment can be more complex, but it offers robust support once set up. Cybereason stands out for ease of deployment and immediate support. Elastic offers deeper resources for users navigating a more challenging setup.

Pricing and ROI: Cybereason Endpoint Detection & Response users find the pricing fair relative to its value but sometimes costly for smaller organizations. Elastic Security is praised for offering good value due to its open-source components, leading to a lower setup cost and favorable ROI. Cybereason is valued for feature richness. Elastic is recognized for long-term cost efficiency.

To learn more, read our detailed Cybereason Endpoint Detection & Response vs. Elastic Security Report (Updated: January 2025).

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Elastic Security

January 2025

Download the complete report

Helped 839,255 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Endpoint Detecti...

Ranking in Endpoint Detection and Response (EDR)

26th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (32nd)

Elastic Security

Ranking in Endpoint Detection and Response (EDR)

16th

Average Rating

7.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Log Management (7th), Security Information and Event Management (SIEM) (5th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (8th)

Mindshare comparison

As of March 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cybereason Endpoint Detection & Response is 1.1%, down from 1.3% compared to the previous year. The mindshare of Elastic Security is 2.4%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Chad Kliewer

Information Security Officer at PTCI

We can make more informed decisions on whether an action is malicious

The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.

Read full review

Nikhil-Kumar

Assistant Manager - IT Security at Photon inc

Customizable with great dashboards but the premium support is poor

The initial setup can be complex if you don't have technical knowledge. However, once it is deployed, it works well. I'm not sure how long it took to deploy. I wasn't there when it was set up and configured. We have an internal team that handles deployment and maintenance. It doesn't require too many people to deploy. Five or six people would be enough. However, for 24/7 monitoring, you need to have someone always on it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"For me, the technical support is good."

"Cybereason absolutely enables us to mitigate and isolate on the fly. Our managed detection response telemetry has dropped dramatically since we began using it. It's very top-of-mind. We were running some tabletop exercises and none of the detections were getting triggered by the managed security services provider. So we needed to find a solution that would trigger high-fidelity alerts. That was Cybereason and it dramatically changed our landscape from the detection and response perspective."

"The initial setup was easy and straightforward."

"It gives all the information in a clear response."

"The interface is user-friendly."

"The dashboard is very good and you can consider it as an interactive UI."

"What I find most valuable is the clarity of the platform. It is very straightforward."

"I haven't had any issues with the solution. Stability-wise, I rate the solution a ten out of ten."

More Cybereason Endpoint Detection & Response pros

"The most valuable feature is the scalability. We are in Indonesia, more engineers understand Elastic Security here. So it is easier to scale and also develop. In features, the discovery to query all the logs is very important to us. It is very easy, especially with the query function and the feature to generate alerts and create tools. Sometimes we use the alert security dashboard to monitor our clients."

"It's very stable and reliable."

"The performance is good and it is faster than IBM QRadar."

"The most valuable feature is the speed, as it responds in a very short time."

"It's simple and easy to use."

"It's a good platform and the very best in the current market. We looked at the Forester report from December 2022 where it was said to be a leader."

"The product has huge integration varieties available."

"I like that it's a SIEM platform. I like that I can sell Elastic Security quickly. Elastic Security has a large community that can support users."

More Elastic Security pros

Cons

"It should be more stable, and the sensor needs improvement in terms of connectivity."

"Cybereason does not have sandbox functionality."

"I feel it is a shame that I cannot create groups of groups with inheritance."

"Its Microsoft PowerShell protections still need some compatibility improvements. We have run across just a few. It is compatible with 90% of what we have in our network, but there is that 10% that we are still struggling with as far as compatibility with the type of PowerShell scripts needed to run our day-to-day business."

"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."

"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."

"There is room for improvement in the product features related to device control, particularly USB management."

"There can be problems with the EDI."

More Cybereason Endpoint Detection & Response cons

"Elastic Security could improve the documentation. It would help if they were more simple and clean."

"Improvements in Elastic Security could include refining and normalizing queries to make them more user-friendly, enhancing the user experience with better documentation, and addressing any latency issues."

"It would be better if Elastic Security had less storage for data. My customers do not like this. Other vendors have local support in different countries, but Elastic Security doesn't. I would like to have Operational Technology (OT) security in the next release."

"If you compare this with CrowdStrike or Carbon Black, they can improve."

"Email notification should be done the same way as Logentries does it."

"The price of this product could be improved, especially the additional costs. I would also like to see better-quality graphics."

"There should be a simulation environment to check whether my Elastic implementation is functioning perfectly fine. Other solutions have their own Android and iOS applications that I can install on my mobile so that I am continuously connected to the SIEM."

"One limitation of Elastic Security is that it does not have built-in workflows for all tasks. For example, if you need a workflow for compliance, you will need to create a custom workflow."

More Elastic Security cons

Pricing and Cost Advice

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"In terms of pricing, it's a good solution."

"I do not have experience with the licensing of the product."

"This product is somewhat expensive and should be cheaper."

"The pricing is manageable."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

More Cybereason Endpoint Detection & Response pricing and cost advice

"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."

"Compared to other tools, Elastic Security is a cheaper solution."

"I find it better than Splunk in terms of cost-effectiveness. For cost-effectiveness, I would rate it a nine out of 10."

"When compared to other products, the price is average or on the low side."

"The solution is free."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."

"The base product is open-source but if you need advanced security features then you need to pay for the subscription. Elastic Security's price is reasonable in some cases and in other cases it's not."

More Elastic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

839,255 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

Manufacturing Company

Government

Computer Software Company

16%

Government

10%

Financial Services Firm

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

See all answers

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

See all answers

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

See all answers

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

See all answers

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

See all answers

What is your experience regarding pricing and costs for Elastic Security?

Elastic Security is considered cost-effective, especially at lower EPS levels. However, a direct comparison was not made due to different pricing structures.

See all answers

Comparisons

Darktrace vs Cybereason Endpoint Detection & Response

Compared 28% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 19% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 9% of the time

Kaspersky Endpoint Security for Business vs Cybereason Endpoint Detection & Response

Compared 4% of the time

More Cybereason Endpoint Detection & Response Competitors

Wazuh vs Elastic Security

Compared 26% of the time

CrowdStrike Falcon vs Elastic Security

Compared 9% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Splunk Enterprise Security vs Elastic Security

Compared 6% of the time

Microsoft Sentinel vs Elastic Security

Compared 6% of the time

More Elastic Security Competitors

Product Reports

Buyer's Guide

Cybereason Endpoint Detection & Response

February 2025

Cybereason Endpoint Detection & Response report

Download Cybereason Endpoint Detection & Response product report

Buyer's Guide

Elastic Security

February 2025

Download Elastic Security product report

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond

Elastic SIEM, ELK Logstash

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Elastic

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Elastic Security

January 2025

Free Report: Cybereason Endpoint Detection & Response vs. Elastic Security

Find out what your peers are saying about Cybereason Endpoint Detection & Response vs. Elastic Security and other solutions. Updated: January 2025.

DOWNLOAD NOW

839,255 professionals have used our research since 2012.

See our Cybereason Endpoint Detection & Response vs. Elastic Security report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.