BlackBerry Cylance Cybersecurity Reviews

I am using CylancePROTECT as an active learning algorithm. We installed it on almost 20,000 servers and virtual machines.

We chose the solution because it doesn't have daily updates, which is important for us in healthcare IT, where network usage and connectivity to hospitals matter.

We had a major incident where CylancePROTECT found malware in one customer's file that other antivirus programs missed.

CylancePROTECT is our antivirus replacement that was deployed on every workstation and server. We intend to block anything malicious, except we had to maintain a list of white lists. We had white lists from members to protect certain areas of Cylance.

We had to whitelist and maintain it. There were around over 200 exemptions within our environment that I didn't like. With CrowdStrike, we have two exemptions so far.

CylancePROTECT is a fairly decent antivirus. As far as I know, we haven't had any incidents of known malicious code executed on a device that had CylancePROTECT. It was able to block everything that was thrown at it. The solution's dashboards were pretty clean and very clear to understand.

The solution is used to protect our endpoints. It can be used for computers and mobile devices.

The solution automatically protects the endpoints from any antivirus and cyber attacks.

We use it for protecting our endpoints. We have a specific use case involving a closed and secure environment devoid of internet connectivity, where Cylance is utilized due to its ability to operate without requiring updates for at least twelve months.

We integrate it into our comprehensive cybersecurity strategy, specifically for antivirus and antiviral purposes. CylancePROTECT provides comprehensive endpoint security, including EDR capabilities. Additionally, BlackBerry now offers XDR, similar to other companies like CrowdStrike and SentinelOne. 

The AI-driven threat detection of CylancePROTECT has significantly enhanced our organization's security posture. This company has pioneered an AI-based engine that doesn't rely on signatures, thus offering protection for every computer, server, and endpoint without requiring specific signatures for malware or other attacks.

Cylance stands out for pioneering the delivery of a complete AI-driven antivirus engine that relies primarily, if not solely, on AI and machine learning for threat identification. Remarkably, it identifies over 99.7% of global threats.

I used the solution in my company after we tested it against a ransomware attack. In my company, we presented CylancePROTECT with the challenge of dealing with real-time ransomware attacks, during which we saw that it works very well. In my company, we use the tool to control our devices since its device control feature is excellent. Compared to the other vendors in the market, CylancePROTECT has a much shorter turnaround time for policy applications. Otherwise, we can have granular controls over what can be run on the endpoint machines when it comes to areas involving scripting or running PowerShell scripts. Scripting or running PowerShell scripts can be controlled very well through CylancePROTECT.

The high price of the product is an area of concern where improvements are required. The product's price should be more competitive.

The product is perfect for the business that I am working in. It works as needed.

The solution provides us with the protection that the company needs against ransomware, malware, and viruses.

The product is easy to implement and deploy.

I cannot control the agent. If the agent is installed on a machine, then it'll report back. If I have 15 machines on an agent, I cannot see that 15 machines unless I install the agent on each.

The solution is not stable right now. The performance isn't so good.

It's a hard product to maintain. 

I have found support to be quite bad. 

We want them to offer better pricing. 

I work in cybersecurity and with sensitive materials, so the solution is a proactive antivirus system.

CylancePROTECT is a proactive antivirus system, and I can't rely on a reactive system.

It actively monitors the behavior and activity of processes and will, without hesitation, terminate at root anything it determines to be suspect.

In essence, it will just terminate malware, even disguised malware. It will also occasionally terminate legitimate software that's trying to update, but at the same time, you can check in the dashboard. It has a very accessible and easy-to-read, and understandable record that tracks everything it does. It actively monitors what's going on.

So if you download the wrong software package, or you click the wrong link and run something, even if your computer does not detect something wrong, Cylance will notice that there is something off about it and will terminate it for you.