BlackBerry Cylance Cybersecurity vs Cisco Secure Endpoint comparison

BlackBerry Cylance Cybersecurity vs. Cisco Secure Endpoint

Download the complete report

Helped 921,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.8%, up from 1.2% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Cisco Secure Endpoint	1.3%
BlackBerry Cylance Cybersecurity	1.8%
Other	93.1%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

"The policy configuration is great, the granularity of policies that are available is very helpful, it is straightforward to set up, and it has pretty much everything we need and works well within the Palo Alto ecosystem."

"The product's initial setup phase is very easy."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"It has pretty much everything we need and works well within the Palo Alto ecosystem."

"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."

"WildFire AI is the best option for this product."

More Cortex XDR by Palo Alto Networks pros

"The platform's most valuable features are the malware detection capabilities."

"It secures different entry points into the network."

"The solution is stable."

"CylancePROTECT is going to tell you if there are any issues and you are going to be able to see everything from one single dashboard."

"The solution is easy to deploy."

"A user can continue to add endpoints and the solution will continue to perform well."

"The deployment of updates is easy."

"Very easy to deploy. It can be done one by one or deployed by customizing an MSI file for GPO push."

More BlackBerry Cylance Cybersecurity pros

"The product's initial setup phase was very simple."

"One of the best features of AMP is its cloud feature; it doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taking their laptops home, because you don't have to be VPNed into the environment for AMP to work and AMP will work anywhere in the world as long as it has an Internet connection, giving you protection and reporting so no matter where the device is, AMP has still got coverage on it and is protecting it while you still have the ability to manage and remediate things, making the cloud feature the magic bullet and what makes the solution a valuable tool as far as I'm concerned."

"The most valuable feature is signature-based malware detection."

"Scalability wise, AMP is a sure shot recommendation."

"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."

"The console feature gives a centralized management of what's going on, and if something happens, it gives you an alert. So, that's the most important feature for me."

"The entirety of our network infrastructure is Cisco and the most valuable feature is the integration."

"The fact that I've been using it for five years already means that I believe I can trust it, and others can also trust it."

More Cisco Secure Endpoint pros

Cons

"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."

"The solution eats memory of the computer, unlike anything I've ever seen."

"In some cases, there are too many options for me, and it is a bit too hard to find some settings which I really need to implement."

"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."

"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."

"Cortex XDR by Palo Alto Networks could improve by adding a sandbox feature to better compete with their competitors which have it."

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."

"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."

More Cortex XDR by Palo Alto Networks cons

"It should have better support for Windows and Mac."

"The high price of the product is an area of concern where improvements are required. The product's price should be more competitive."

"CylancePROTECT's technical support is non-existent."

"Work on the math model. We are catching a lot of false positives, which gets to be a pain at the start of a deployment."

"It is not stable. The solution has caused six crashes over two years, with one of them requiring us to rebuild all of our Windows 10 devices."

"While you are working, you are finding these things that were supposed to be waived have come back to being blocked. That's frustrating."

"It just doesn't make you feel like you're getting covered or have the best protection, which you should have."

"Additionally, their channel management has been lacking, with a notable disregard for small and medium-sized businesses, focusing primarily on large enterprises and very large MSPs."

More BlackBerry Cylance Cybersecurity cons

"One of the things that Cisco Secure Endpoint really needs is that it's not just Secure Endpoint, it's a point product, and I think we really need to move into solution-based selling, designing, and architecting. So that we're not worried about putting things on endpoints and selling 'x' amount of endpoints, but to provide a solution that covers all of the remote access and sell them as solutions that cover multiple things."

"The technical support is very slow."

"The room for improvement would be on event notifications. I have mine tuned fairly well. I do feel that if you subscribe to all the event notification types out-of-the-box, or don't really go through and take the time to filter out events, the notifications can become overwhelming with information. Sometimes, when you're overwhelmed with information, you just say, "I'm not going to look at anything because I'm receiving so much." I recommend the vendor come up with a white paper on the best practices for event notifications."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"In the next version of this solution, I would like to see the addition of local authentication."

"We would like to have an API integration with a SIEM solution, because as far as I know, it currently hasn't yet been released."

"In terms of the user experience, if the UX design could be much simpler [that would improve things]... if they could make it more intuitive for someone who is not an engineer so that they still can read what's going on in their webpage and understand, that would be something."

"You need a certain level of technical experience because the console is not the easiest thing to look at."

More Cisco Secure Endpoint cons

Pricing and Cost Advice

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"Cortex XDR by Palo Alto Networks is an expensive solution."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"The pricing is okay, although direct support can be expensive."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."

"We went through a third party initially to do the renewal, but we won't be renewing, we will move on to something else."

"The tool is not that expensive."

"It's not so heavily priced; rather, it's average and decent."

"It is expensive, but not unreasonable."

"We would just add more if there are new users, but right now you just need one license for per user."

"Review closely how many endpoints you actually need before buying into a pricing level. Deal and deal with the VAR of your choice."

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"...the licensing needs to be improved. All the product features we need are there. It's just a matter of the complexity and the different offerings and trying to figure things out."

"There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."

"In our case, it is a straightforward annual payment through our Enterprise Agreement."

"It is an expensive solution."

"There is also the Cisco annual subscription plus my management time in terms of what I do with the Cisco product. I spend a minimal amount of time on it though, just rolling out updates as they need them and monitoring the console a couple of times a day to ensure nothing is out of control. Cost-wise, we are quite happy with it."

"The pricing and licensing fees are okay."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

More Cisco Secure Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

921,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Outsourcing Company

12%

Construction Company

11%

Manufacturing Company

Financial Services Firm

Manufacturing Company

12%

Outsourcing Company

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	15
Large Enterprise	21

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Ask a question

Earn 20 points

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

What is your primary use case for Cisco Secure Endpoint?

We deployed Cisco Secure Endpoint for our customers two to three years back. The use case was to secure their endpoin...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

VMware Carbon Black Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

Intercept X Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

More BlackBerry Cylance Cybersecurity Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

Microsoft BitLocker vs Cisco Secure Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

Fortinet FortiEDR vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

BlackBerry Cylance Cybersecurity

Download BlackBerry Cylance Cybersecurity product report

Cisco Secure Endpoint

Download Cisco Secure Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackberry Protect

Cisco AMP for Endpoints

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

BlackBerry Cylance Cybersecurity, renowned for its AI-driven approach, provides comprehensive endpoint protection against sophisticated threats, including ransomware and zero-day attacks, ensuring security without frequent updates.

Known for its lightweight design, BlackBerry Cylance integrates artificial intelligence and machine learning to deliver a powerful cybersecurity platform. Businesses benefit from its low CPU usage and advanced threat detection, utilizing a centralized dashboard for seamless management. Cylance's predictive intelligence and ability to block unauthorized applications make it invaluable in safeguarding both internal networks and endpoints. Despite its high pricing, users seek improvements in information display, post-incident details, and reporting features, alongside better script whitelisting and modernized interface.

What are its most important features?

Lightweight Design: Ensures minimal impact on system resources.
AI and Machine Learning: Enhances threat detection capabilities without relying on constant updates.
Endpoint Protection: Provides robust security for desktops, servers, and virtual machines.
Script Blocking: Prevents unauthorized scripts from running.
Centralized Dashboard: Simplifies management and monitoring tasks.

What benefits should users look for in reviews?

Predictive Intelligence: Offers proactive threat prevention, reducing risks of zero-day attacks.
Ease of Deployment: Facilitates faster, streamlined implementation across global systems.
Low CPU Usage: Maintains system performance while providing security.
Comprehensive Threat Analytics: Delivers actionable insights for enhanced security planning.

Organizations in sectors such as finance and healthcare deploy BlackBerry Cylance for its sophisticated security measures, enhanced threat analytics, and device control capabilities, ensuring operations remain secure even within closed network environments.

BlackBerry

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Sample Customers

CBI Health Group, University Honda, VakifBank

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

BlackBerry Cylance Cybersecurity vs. Cisco Secure Endpoint