BlackBerry Cylance Cybersecurity vs Cisco Secure Cloud Analytics [EOL] comparison

Why PeerSpot?

The compared BlackBerry and Cisco solutions aren't in the same category. BlackBerry is ranked #34 in EPP , and holds a 1.8% mindshare in the category. Additionally, 85% of BlackBerry users are willing to recommend the solution, compared to 100% of Cisco users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between BlackBerry Cylance Cybersecurity and Cisco Secure Cloud Analytics [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP).

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: October 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download the complete report

Helped 921,148 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Sudhanshu Pandey

Security Analyst at Orange España

Efficiently generates alerts for suspicious activities and scales easily

There are two areas of improvement. Firstly, extend the log retrieval limit to at least three months. For example, there is a limit on the number of log messages that can be received. So, I would like to expand the log retrieval limit. And another thing, if we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration. If a new user wants to learn how it should work, how policies work, and where we can configure policies, there should be some learning material for this product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."

"The normal protection was really effective, and we detected situations that if we didn't have Cortex XDR by Palo Alto Networks, it's highly likely that we would have been affected, but it protected the infrastructure."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."

"Cortex covers everything I need. It's a perfect solution. Cortex provides a different level of visibility because it's an extended EDR, allowing you to grab logs from the network and firewalls. Palo Alto invented the concept of the extended EDR or XDR."

"Since they've done their most recent update, the ease to isolate endpoints is valuable. If we find one where there is a virus on it, we can easily isolate it. We don't even have to contact the user. We don't have to manually take them off the network. We can easily isolate them."

More Cortex XDR by Palo Alto Networks pros

"The initial endpoint cost may seem a little high (~$55/device/year), but when you look at the total peace of mind that the solution of Cylance endpoint protection provides, with no reboots for updates, and negligible performance impact, it is well worth it."

"The solution is stable."

"With Cylance AI and Machine Learning, it's ensuring that all types of malware, PUP (Potential Unwanted Programs) and Memory Protection your endpoint devices are fully protected, even with day zero threats."

"It does a good job of protecting us."

"CylancePROTECT is a fairly decent antivirus."

"The non-daily requirement to update signatures is the most valuable feature. From a functional point of view, it is pretty spot on. For instance, we compared an algorithm from five years ago to today's algorithm, and it was 98% accurate. It has the ability to detect and mitigate. In the industrial environment that we work in, there's what we call OT versus IT. You are IT Central, but this is OT. Generally, we don't have the same level of skillset as IT individuals or IT professionals have. This particular product doesn't require you to be a computer scientist to be able to understand its proprietary algorithm and to be able to deploy, use, and work within it. It integrates well with a robust SIEM or SOAR solution, and it plays nice with others. We use other detection solutions like CyberX or site provision with Cisco, and it plays nice. That's one of the things we really liked about it."

"Does malware analysis. Blocks WannaCry and other attacks that have come out."

"The quick installation would be the most valuable aspect of this solution."

More BlackBerry Cylance Cybersecurity pros

"When it comes to scalability, there's no size limit. It varies based on licenses and requirements."

"It tells you if there is any communication going to command and control servers, or if there is any traffic that violates your internal policy, or if any data hoarding is happening where data is being dumped from your machine to outside of the environment. It provides all such meaningful reports to help you understand what's happening."

"My advice to others is Cisco has great solutions and I would recommend them."

"I would recommend Cisco Stealthwatch Cloud 100 percent."

"The tool's best feature is its ability to monitor network traffic. It will also inform users whether the traffic generated by a network is legitimate. The tool helps to capture and analyze the network traffic."

"Cisco Stealthwatch Cloud is scalable because it is on the cloud."

"The product helps me to see malware."

"Monitoring the traffic, making sure you have the visibility."

More Cisco Secure Cloud Analytics [EOL] pros

Cons

"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."

"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."

"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."

"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."

"The connection to the internet has not performed as expected."

More Cortex XDR by Palo Alto Networks cons

"I would not rate this solution in the top five for things like presenting information, or ease of use."

"An area for improvement in CylancePROTECT is its pricing, as it's a bit costly."

"While you are working, you are finding these things that were supposed to be waived have come back to being blocked. That's frustrating."

"I would say one thing that they might need to bring in is protection for mobile devices."

"Work on the math model. We are catching a lot of false positives, which gets to be a pain at the start of a deployment."

"If they can add more features on top of their Persona feature that would be ideal."

"I find the price for Blackberry Protect expensive, so that's an area for improvement."

"CylancePROTECT's dashboard could be more user-friendly."

More BlackBerry Cylance Cybersecurity cons

"When I used to work on it, I just didn't see anything new happening for about a year and a half. Providing newer data and newer reports constantly would help. There should be more classifications and more interesting data."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface. so that. Not everybody's a cyber security professional, most of the customers that I deal with are not very skilled. The terms that they use in the solution are quite understandable for a normal CIO."

"The initial setup of Cisco Stealthwatch Cloud is complex."

"If we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration."

"The initial setup is a bit complex in terms of deployment and configuration."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface."

"The product needs to improve its user-friendliness. It is very tricky and you need to study it before using the standard functionalities."

"The product's price is high."

Pricing and Cost Advice

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"Cortex XDR's pricing is ok."

"Cortex XDR’s pricing is very reasonable."

"This is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"We pay our license on a yearly basis and have just renewed for two years."

"Do not get hung up on price. You pay for what you get and expensive will hurt one time, where cheap will hurt forever, especially if you fall victim to a ransom attack, etc."

"Review closely how many endpoints you actually need before buying into a pricing level. Deal and deal with the VAR of your choice."

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

"This cost of the license is approximately $5 USD monthly per user."

"The product cost is about $5, per user, per month."

"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."

"The license price for this solution could be better. It's on the expensive side."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"Cisco Stealthwatch Cloud is an expensive enterprise solution."

"The solution is quite expensive."

"The price of Cisco Stealthwatch Cloud is expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

921,148 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Outsourcing Company

12%

Construction Company

11%

Manufacturing Company

Financial Services Firm

Construction Company

13%

Comms Service Provider

12%

Outsourcing Company

12%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	1
Midsize Enterprise	2
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

VMware Carbon Black Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

Intercept X Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

More BlackBerry Cylance Cybersecurity Competitors

Darktrace vs Cisco Secure Cloud Analytics [EOL]

Compared 16% of the time

CrowdStrike Falcon vs Cisco Secure Cloud Analytics [EOL]

Compared 12% of the time

Qualys Exposure Management vs Cisco Secure Cloud Analytics [EOL]

Compared 8% of the time

BigFix vs Cisco Secure Cloud Analytics [EOL]

Compared 6% of the time

Tanium vs Cisco Secure Cloud Analytics [EOL]

Compared 6% of the time

More Cisco Secure Cloud Analytics [EOL] Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

November 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BlackBerry Cylance Cybersecurity

November 2026

Download BlackBerry Cylance Cybersecurity product report

Buyer's Guide

Cisco Secure Cloud Analytics [EOL]

November 2026

Cisco Secure Cloud Analytics [EOL] report

Download Cisco Secure Cloud Analytics [EOL] product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackberry Protect

Cisco Stealthwatch Cloud, Observable Networks

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

BlackBerry Cylance Cybersecurity, renowned for its AI-driven approach, provides comprehensive endpoint protection against sophisticated threats, including ransomware and zero-day attacks, ensuring security without frequent updates.

Known for its lightweight design, BlackBerry Cylance integrates artificial intelligence and machine learning to deliver a powerful cybersecurity platform. Businesses benefit from its low CPU usage and advanced threat detection, utilizing a centralized dashboard for seamless management. Cylance's predictive intelligence and ability to block unauthorized applications make it invaluable in safeguarding both internal networks and endpoints. Despite its high pricing, users seek improvements in information display, post-incident details, and reporting features, alongside better script whitelisting and modernized interface.

What are its most important features?

Lightweight Design: Ensures minimal impact on system resources.
AI and Machine Learning: Enhances threat detection capabilities without relying on constant updates.
Endpoint Protection: Provides robust security for desktops, servers, and virtual machines.
Script Blocking: Prevents unauthorized scripts from running.
Centralized Dashboard: Simplifies management and monitoring tasks.

What benefits should users look for in reviews?

Predictive Intelligence: Offers proactive threat prevention, reducing risks of zero-day attacks.
Ease of Deployment: Facilitates faster, streamlined implementation across global systems.
Low CPU Usage: Maintains system performance while providing security.
Comprehensive Threat Analytics: Delivers actionable insights for enhanced security planning.

Organizations in sectors such as finance and healthcare deploy BlackBerry Cylance for its sophisticated security measures, enhanced threat analytics, and device control capabilities, ensuring operations remain secure even within closed network environments.

BlackBerry

Cisco Secure Cloud Analytics is a cloud-based security solution that provides visibility and threat detection for cloud environments. It offers software mapping and automation for incident response, forensic analysis, and segmentation of IT architecture. The solution can be used on-premise or on the cloud and is used in various sectors such as insurance and government.

The logs in Cisco Secure Cloud Analytics are valuable for API integration in a team as they provide important information for correlations. The solution also offers automated incident response and integration with next-generation firewalls and antivirus solutions."

Cisco

Sample Customers

CBI Health Group, University Honda, VakifBank

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Options, Schneider Electric, Washington University in St Louis, Gotcha, Kraft Kennedy, PartnerRe, Sumologic, Veterans United, AFGE, Agraform, Artesys, Dynamic Ideas Financials, Department of Agriculture and Commerce

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download Free Report

Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.

DOWNLOAD NOW

921,148 professionals have used our research since 2012.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.