BlackBerry Cylance Cybersecurity Reviews

We are currently using Blackberry Protect as our main endpoint solution, for threat prevention, script control, and scanning of malware. This is the core functionality of the Protect module.

We have the Blackberry Optics, which is the AI module of Blackberry Protect. It is called Blackberry Protect Plus Optics. The Optics feature logs all of the behavior of the servers. For example, when someone runs a PowerShell script and it blocks, it will learn the behavior and knows what to do the next time another user triggers that specific functionality.

It is currently deployed on-premises but our administration dashboard is in the cloud.

The agents are installed for our servers and reporting is to the Blackberry cloud.

This is still new to us. We have explored this solution and it fulfills our requirements, in terms of live malware detection.

We are quite security-focused. Blackberry Protect as an endpoint solution for our service really delivers what we are expecting.

When it comes to the management of the application of agents, especially for us as an IT team the dashboard is much easier to manage in the McAfee solution.

We were looking to have a multi-factor authentication with the administration dashboard to log in, because it's cloud-based. 

There is no integration with Google Authenticator and other solution providers. 

We would like to see secure integration and multi-factor authentication to be able to access the administration dashboard.

We have been using Blackberry Protect for just less than a year.

We are two versions behind the latest one.

Definitely, Blackberry Protect is a stable product. We have not had any kind of blue screen of death or crosstabs.

It's really lightweight in terms of resource consumption as well and in terms of memory and CPU consumption, it's quite low which is very good for us for other applications.

It's a scalable solution.

We have approximately 150 people in our organization who are using it.

We are also using Microsoft Outlook to block any kind of unwanted applications, which our users try to run in the background.

The initial setup is very straightforward. You just click on the MSI and provide the key to register for it to sync to the cloud dashboard.

We have a team of seven IT resources who have an account under Blackberry administration.

We pay our license on a yearly basis and have just renewed for two years.

We have not evaluated other options. For the time being, we are very satisfied with what we have.

I would definitely recommend this solution to others who are interested in using it.

There is always room for improvement. I would rate Blackberry Protect an eight out of ten.

I use this solution as a customer and I provide services for my clients. We are system integrators and we use this solution for endpoint security.

I like the AI and mathematical components that they use.

I like the pre-execution method of protection that prevents infection. It is a nice feature.

I have already suggested features that need to be improved and Blackberry is already working on those improvements. For example, the interface and the Cylance Optics need to be improved a fair bit.

It's a good solution but some features just need to be updated.

I have been using Blackberry Protect for almost four years.

Blackberry Protect is stable. I have not experienced any issues with bugs or had any limitations with this Blackberry product. It's a good solution.

Technical support is good, but the response time could be improved. They can take two or three days to get back to you with a solution.

The initial setup is straightforward. It is very easy to install.

It's not so heavily priced; rather, it's average and decent.

I would recommend going with Blackberry Cylance, it's good. 

It's a very lightweight agent that doesn't put very much pressure on the computers, it's really good in terms of resources.

I would rate Blackberry Protect a nine out of ten.

We use this solution for endpoint protection for our external devices and laptops.

The deployment of updates is easy.

Not having OPTICS doesn't allow us to do any history. We don't have OPTICS, but FortiEDR comes with things like OPTICS, which is nice because we are not able to see more. 

OPTICS gives you things that FortiEDR has built in. For Cylance, there is an add-on to do the things that come with that solution.

It would be nice if Cylance didn't separate PROTECT and OPTICS and put them together and made them on the same price point as FortiEDR, and some other ones rather than having to pay extra for something that the others already have built-in, and seen to do better.

It often lets you waive something for the firm or for the whole company and then comes back and blocks the same thing because you have to do the certificate instead of the hash. You are finding yourself having to approve for the same program, the same application, the same file more than once and it's frustrating.

While the deployment of updates is easy, it would be good to have some more information about which version to use, because the versions that are available seem to be outdated. 

When you go to the admin section, you will see that you will have the latest update from months ago and a month before that, and a month before that. 

I have a hard time believing that there are no more updates in between when there are things that are out all the time. It just doesn't make you feel like you're getting covered or have the best protection, which you should have. 

I have been using this solution for two years.

We are using one of the newer versions. I don't always install the updates.

The stability varies. It's not consistent and it's frustrating.

Things that are blocked, you waive and it comes back. It's very frustrating. It doesn't keep up with the machines. 

You have a lot of machines and if you reimage a lot you will see many duplicates that you have to export and remove from figuring out which one's the MAC address. It should have an easy way to know that a machine is re-imaged, and not adding to your list of devices.

You end up having all these devices that are no longer being scanned that you have to figure out what they are. It is frustrating.

We have approximately 200 users in our organization. It's for everyone in our accounting firm, who are accountants, auditors, IT, and HR accounting.

We don't have plans to continue using this solution, we are considering other options.

We don't go through technical support directly. We go through a reseller and they take care of it. We have never directly talked to BlackBerry or Cylance about any issues that we have had.

Previously, we had McAfee ePO. We changed to CylaneProtect, a solution that we felt would be a better fit, and that was not managed in-house, on a local server that we used for that. It was time to move on from that.

The initial setup was fine. It's doesn't take a long time to deploy.

Uninstalling is difficult. Sometimes it doesn't remove easily, and that is frustrating. 

It would be nice if it had an uninstalled feature within the dashboard, in the SAS part of the application online, because it would do everything itself. Unless it is something that I have missed or that I didn't see. 

With FortiEDR you can go in, and you can uninstall from the dash, find the endpoint you right-click, or you click a button, then you choose to uninstall and it pulls it from the machine. You don't have to put in any keys, or anything. It does it from there. I don't believe that Cylance does that, but it would be nice if it did.

We have a team of two, myself and my colleague maintain this solution.

The deployment and implementation were completed in-house.

I would advise that they keep in mind what it doesn't do and be open to looking at things that include more and cost less.

I would rate CylanceProtect a four out of ten.

I primarily use the solution for security purposes. I use it for endpoint protection and response. That's the only real use case for us.

The product works pretty well. It does a good job catching good viruses. While we haven't had a chance to test against any kind of ransomware attack, I know it works great and I'm not worried about its capabilities in that respect.

The initial setup was straightforward. 

The solution has proven itself to be very stable and unobtrusive.

A user can continue to add endpoints and the solution will continue to perform well.  

Technical support is helpful and responsive. 

Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal. 

I've used the solution for only a few months at this point. It hasn't been too long. It's still rather new to me. 

The solution's stability is good. Most importantly, it is unintrusive. Even when it really goes through a lot of resources, it remains pretty stable. There are no bugs or glitches. It doesn't crash or freeze. it's reliable.

The scalability is very good. I can add additional endpoints and the solution continues to perform well. If a company needs to expand, it should be able to do so with no problem. 

We have thousands of departments. We are quite a sizeable business. 

My understanding is that technical support is quite good. I don't deal with them directly, however, I have heard that they are helpful and responsive. I would say that we are satisfied with the level of support we receive.

I've used both Cylance and SentinelOne. I have more experience with SentinelOne.

However, they are very similar in terms of their offering. both offer good performance and are AI-driven with good machine learning capabilities. Neither has an impact on an endpoint's performance levels. They offer good protection as well. The biggest difference is that SentinelOne has a rollback feature, which is something Cylance should consider adding. 

The initial setup is not complex. It's very straightforward and very easy to deploy. A company would not have any issues with the process. 

I don't have any information in relation to the pricing or the licensing. it's not an aspect of the solution I deal with. 

However, I can say that it's my understanding that it is 20% less expensive than SentinelOne.

We are Cylance partners.

I'm not sure which version of the solution we're using. It's likely the most up-to-date version. They update them quite often.

I'd advise companies considering the solution to take some time to do a proof of concept to see how it would react in their environment and then decide if it is the right solution for them.

I would rate the solution at an eight out of ten.

The solution is primarily used as the last line of defense for the customer. In regards to network security technologies that focus on protecting the network, the endpoint, if something gets through, someone brings it in, the endpoint protection will actually, as our last line of defense, detect it, prevent it from executing, and in some cases, actually remediate the issue. This solution is the last line of defense within your organization for events such as a breach and it also protects users.

In most cases, the solution's ability to detect in the MITRE framework and its ability to be able to detect attacks in any one of seven or eight different areas of the life cycle of an attack is very useful.

The product needs to continue to offer better alerts. In particular, around false positives. It needs to reduce them from happening.

I can't speak to the solution lacking any features per se.

In terms of reviewing the product, I've been dealing with it for about four or five years.

The stability isn't something that we measure. We're consultants and we just advise clients on if the solution is protecting them correctly or not. We don't look at stability issues.

As consultants, we don't look at scaling. It's not an aspect of the solution I can comment on.

We don't integrate or set the system up. I couldn't speak to how the deployment process happens, or how easy or hard it is. That's not an aspect of the solution we handle. We have nothing to do with implementing or managing the solution.

We don't handle the implementation process at all or advise clients on it.

We deal with a variety of other solutions in the market. It depends on which our clients are working with. We evaluate their security based on what they have. Sometimes it's Cylance, however, that's not always the case.

We're consultants. We don't have a direct relationship with Cylance. We are working with clients on security, and handle assurance-type work for them. We're not specifically working with Cylance, however, in some cases, we may be providing it from a security review standpoint. We'd look at the client and at the product and ask: Do they have it configured properly? Are they using it properly in their overall security strategy? et cetera.

We're not managing it, we're not integrating it or installing in anything in that. We just look at it from a security review or assessment standpoint and tell the customer whether or not they have it properly implemented based upon what they're trying to accomplish.

Clients may use a hybrid or a cloud deployment model and may have it on various clouds, such as AWS or Azure.

I general, I would rate the solution at a seven out of ten.

Our primary use case of this product is for protection of our computers and network. I'm the coordinator of special projects and we are customers of CyclancePROTECT.

The solution does a good job of blocking whatever it thinks needs to be blocked and it doesn't require a lot of performance from the computer.

The implementation was complicated requiring some things that felt unsafe. After that, it was easy

I've been using this solution for the past 12 months. 

Scalability is perfect - we have around 100 users. It doesn't require a lot of staff for maintenance. 

I haven't needed to use technical support, the supplier helps us with anything that needs fixing.  

The initial setup was quite complicated, it took us a month or two with the reseller doing a good job assisting us with the initial configuration. 

We currently pay an annual license fee although I'd prefer we were paying on a monthly basis. 

I would recommend this solution. It's important to have a plan and the time to deploy it correctly. 

I would rate this solution a nine out of 10. 

We use CylancePROTECT for overall endpoint malware protection.

CylancePROTECT works really well with the way we work. It's flexible. It moves with people, whether you're virtual or working off-site or working here or whatever, it doesn't matter. We can manage it all in one place.

I find the actual overall endpoint malware protection the most valuable feature of CylancePROTECT.

I'd like them to do software distribution too, but they said that that's architecturally not at the product line. I'd like to see where they can push to avoid using another product to push the agents.

I have been using CylancePROTECT for almost seven years.

It's a stable solution, and I haven't seen anything bad.

CylancePROTECT's scalability seems very good. All the way from one to 100,000. We've seen it go both ways. All the way around. I've been in organizations that have had it too—they were much larger.

Technical support is very good and pretty responsive.

We used Carbon Black before and switched to CylancePROTECT because it failed.

The initial setup is pretty straightforward. 

We primarily use the solution to protect us against ransomware.

The solution is very quick at easily changing the levels of protection for each computer and the server. It's very easy to control and to see what is happening with each computer. It's very easy to choose, which computer I can look at and check. 

It would be very important to have any kind of utility in the computer for Cylance to install monitoring into it in a simpler way. A computer should be able to self-scan on command. It is not easy to do that just yet. 

The company that sells us the licenses sometimes doesn't know how to do certain things. They should be offered more training or something, or maybe we could cover out channels ourselves and could have the knowledge of how to do everything ourselves without a third party needing to be involved.

I started using the solution for seven months or so.

The stability is quite good. There aren't bugs or glitches. It doesn't crash or freeze. It's reliable.

The solution is very scalable. There aren't any issues with expanding the product.

At this time, we have about 18 people on the solution.

We haven't needed to reach out to technical support just yet. Therefore, I can't speak to their level of knowledge or responsiveness.

We previously used McAfee. We were worried the solution wouldn't be able to effectively protect us, so we looked for other options.

The initial setup was a little bit complex. We had to take some time learning the machines and how to protect ourselves. That part of the implementation took a good amount of time.

We had a few problems setting everything up, and with those issues, it took us maybe two months to deploy the product in total.

We currently have one person that handles the maintenance of the solution for us. He's an engineer.

We did have one outside person that assisted us with the setup.

We have a couple of issues surrounding licensing. The person who assisted us had a couple of problems trying to integrate another set of licenses that we had before.

I don't know exactly which version we're using. A person in charge of that in our office was the person who looked for the product. I just read some things about it and I found that it was a very good product. 

We have been trained to learn how to use the product and now we have a very good experience with it. The problem is, for me, sometimes it creeps into the computers and into the servers that we want to get running. Sometimes it has problems. That said, it's a very good product. We are okay with how it works.

I would recommend Cylance. I think it's very good and very stable. The only thing to keep in mind is you to have a very good channel and someone who really knows how to use the console and everything

Overall, I would rate the solution at a nine out of ten.

We are resellers and CylancePROTECT is one of the products that we offer to our customers.

The standard configuration is an agent that is deployed to every workstation. It protects against malware, scripting, and other threats using its built-in AI business logic.

The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background.

The dashboard is good.

There is not too much overhead, which is good because you don't want unnecessary things that just build in bulk. 

The process of whitelisting a script that you want to be able to run can be a little bit difficult, or awkward. Some enhancements to this process would be an improvement.

I have been working with CylancePROTECT for about three years.

The stability is very good.

This is a scalable product. About 600 people in our organization use it.

I have not personally been in contact with technical support. However, we do have a support ticket, the odd time, and I would say that the support is good.

The initial setup is very easy.

The management platform is in the cloud and there is an agent on each device.

We have an in-house team that deploys this product for our customers.

This cost of the license is approximately $5 USD monthly per user.

I would rate this solution a nine out of ten.

CylancePROTECT came packaged with our HR and IT management system, which was a selling point. It allows us to ensure that every single computer is always up to date as far as vulnerability protection and we can manage all the threats and everything from a centralized dashboard.  

We can see what is going on and that really allows us to have good insight into the programs that we should be working on, the applications or websites that may need attention — those type things. That insight has been a real positive for us so far.  

I think Cylance has just done a great job for us so far. I think that is the headliner for our experience with the product. The computer interface really has next to nothing on it, which is nice. You see what you need to see and there are really no distractions or extra noise.  

We have not had anything major come up that the product has not handled — at least not that we have known of. There have been a total of zero issues.  

I would like to see a little bit of additional reporting or insight as to what it is doing exactly. I do not think I need anything else included in the next release that I know of. Honestly, just improvement in the reporting would be good enough.  

I have been using Cylance PROTECT for two or three months.  

The stability of CylancePROTECT is great.  

The scalability of CylancePROTECT is very good. We have about 15 staff members in your organization currently using the product on a variety of devices.  

I have not had to call technical support during the time we have been using the product because we have had zero issues.  

We did use other products before CylancePROTECT. I used Kaspersky Internet Security for a long time before we moved over to CylancePROTECT. We used Kaspersky Internet Security because it was a great fit for us.  

In comparison, the only thing that I would say about Kaspersky is that sometimes on startup it would kind of slow the computer down a bit. It took up a lot of resources. It would just last for a short period of time on startup and then that would be it. Everything would return to normal.  

The other thing was that, as a growing company, it was difficult to manage all the installs. To make sure that Kaspersky was provisioned out to every computer and that it was always up to date made for a little more maintenance than seemed necessary. That extra maintenance was really what influenced our decision to move over to the CylancePROTECT product.  

The initial installation and setup are straightforward.  

We did use a reseller for our initial deployment.  

I believe the product cost is about $5, per user, per month.  

CylancePROTECT is going to tell you if there are any issues and you are going to be able to see everything from one single dashboard. If there are any issues on any computers across your whole architecture you will know about it.  

If there were advice that I would give to someone thinking about working with CylancePROTECT, I would just say it is extremely — extremely — simple to manage and deploy.  

On a scale of one to ten (where one is the worst and ten is the best), I would rate CylancePROTECT as a ten-out-of-ten as per our experience with it thus far.