BlackBerry Cylance Cybersecurity vs CrowdStrike Falcon comparison

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon

Download the complete report

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BlackBerry Cylance Cybersec...

Ranking in Endpoint Protection Platform (EPP)

20th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

CrowdStrike Falcon

Ranking in Endpoint Protection Platform (EPP)

2nd

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

132

Ranking in other categories

Security Information and Event Management (SIEM) (6th), Threat Intelligence Platforms (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)

Mindshare comparison

As of June 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BlackBerry Cylance Cybersecurity is 1.1%, down from 1.5% compared to the previous year. The mindshare of CrowdStrike Falcon is 10.8%, up from 9.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Q&A Highlights

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

Both Cylance and CrowdStrike are amongst the few top of the market in terms or endpoint protection. CrowdStrike was considered among the top 5 in 2017 and Cylance was considered the same in 2019. As they are both highly effective, CrowdStrike is very unique in its user-friendliness, while Cylance is very unique for its minimum utilization of computer's resources. If you compare initial pricing, you would go with Cylance, but you can always negotiate with both to get the best offers.

Doesn't have daily updates, which is important for healthcare IT

Featured Reviews

Sooraj Makkancherrry

Security Operations Manager at Philips

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Waleed Omar

Information Security Specialist at Arab Open University

Provides effective real-time threat detection with potential for cost optimization

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Even if an endpoint loses connection to the Internet, I know that endpoint is protected against 99.99% of the threats in the wild today."

"The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background."

"It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions."

"I like the AI and mathematical components that they use."

"The solution is easy to deploy."

"I rate the tool a ten out of ten when it comes to the ease of use or management part."

"The solution is very quick at easily changing the levels of protection for each computer and the server."

"Two or three years ago when the WannaCry virus struck, the people that were on Cylance were the ones that weren't affected."

More BlackBerry Cylance Cybersecurity pros

"The platform is very scalable."

"The DLP is the most valuable feature of CrowdStrike Falcon."

"It provides very good protection and the ability to crosscheck environments."

"The product provides good monitoring features."

"The features we showcase to potential customers are prevention, malware protection, zero-day protection, and application scripting. Vulnerability assessment is another valuable feature."

"CrowdStrike displays a threat score when it detects an infection. This is helpful because not all detections are the same. It will classify them as ransomware, malware, phishing, etc. This feature helps us prioritize and cross-check with other EDR tools."

"The stability is very good."

"CrowdStrike provides a lot of visibility in their tool."

More CrowdStrike Falcon pros

Cons

"An area for improvement in CylancePROTECT is its pricing, as it's a bit costly."

"Additionally, their channel management has been lacking, with a notable disregard for small and medium-sized businesses, focusing primarily on large enterprises and very large MSPs."

"It should have better support for Windows and Mac."

"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."

"The AI of CylancePROTECT has room for improvement. I'm on a trial license of SentinelOne, and its AI is much better than what's on CylancePROTECT."

"The product must make the interface a little more user-friendly."

"Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal."

"The stability could be improved."

More BlackBerry Cylance Cybersecurity cons

"CrowdStrike Falcon could be enhanced by extending its security capabilities to include NDR and XDR."

"We can't do scanning audits or device blocking or application control."

"CrowdStrike should provide better visibility in its reporting. There should be more forensic details about detected threats."

"The pricing structure should allow for some flexibility."

"I would like to see equal support across all versions. Aside from that, I would say most of the features are there."

"CrowdStrike needs to quit making up stuff about its features and functionality to bash its competition."

"An improvement would be to extend support to legacy and unsupported servers."

"I would like them to improve the correlation of data in the search algorithms. When we run an investigation, malware, phishing, etc., I want to look at multiple endpoints at once to correlate that data to see the likenesses, e.g., how are they not alike or what systems and processes are running across those systems? I don't want to have to run the same search in their Spotlight module five, 10, 15, or 100 times to get 100 different results, copy that data out, and then correlate it on my own. In a very simple way, I want to be able to load up a comma-delimited list giving me the spotlight data on these X amount of hosts, letting me search for it quickly. We have had to go back to CrowdStrike, and say, "Our search are taking far too long for even one host." They did bump up the cores and that did improve performance, but it is still kind of slow to get that Spotlight data. That is probably our biggest pain point. I think that needs some help. I understand this kind of information access is probably not the easiest thing to do. It is probably a big ask depending on how their back-end is setup."

More CrowdStrike Falcon cons

Pricing and Cost Advice

"The solution provides me with competitive pricing."

"We pay our license on a yearly basis and have just renewed for two years."

"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

"The initial end-point cost may seem a little high (~$55/device/year) but when you look at the total peace of mind that the solution provides, with no reboots for updates, and negligible performance impact, it is well worth it."

"We would just add more if there are new users, but right now you just need one license for per user."

"We went through a third party initially to do the renewal, but we won't be renewing, we will move on to something else."

"CylancePROTECT's pricing is reasonable, at about €18 per user, per year."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"The cost of CrowdStrike Falcon in Latin America seems high relative to the economic conditions in the region."

"The pricing on CrowdStrike is per license. It was about $42 per seat yearly."

"This solution has a very competitive price."

"The cost of CrowdStrike Falcon could be reduced. It is quite expensive if you compare it to other solutions, such as Blue Coat, Symantec, McAfee, or Kaspersky."

"CrowdStrike Falcon offers excellent value for the money for our organization, particularly given our lean IT team."

"We bought a very small number of licenses, then ran it for a year. We bought a 100 licenses for a year, so we didn't actually do a proof of concept. We just bought them. Then, the next year, we bought 10,000 licenses."

"There are approximately a hundred different modules you have to purchase, depending on what you want to do. I have most of the modules. How it works is you buy the portfolio, you have to decide all the components you want in it, and then they price out a bundle for you. I have almost all of the package features in my bundle. You only need to pay for the modules you want."

"The pricing is not bad. It's on the higher end of the market, but you get what you pay for."

More CrowdStrike Falcon pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Answers from the Community

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

2 out of 3 answers

Dan Brunnquell

Director Of Information Technology at a financial services firm with 11-50 employees

Jun 25, 2019

I never used Cylance. We installed CrowdStrike on 6/6/19 and aside from a test file have had zero hits. CrowdStrike has some additional features available (at a cost). One that I am looking at is device control for USB storage devices for policy enforcement. Syslogs are being absorbed by my SIEM as well.

Read full answer

ABDULRAHMAN ALBATARNI

IT Manager with 201-500 employees

Jun 26, 2019

Read full answer

See all 3 answers

Top Industries

By visitors reading reviews

Computer Software Company

14%

Manufacturing Company

11%

Government

Financial Services Firm

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Blackberry Protect?

It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions.

What is your experience regarding pricing and costs for Blackberry Protect?

The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.

What needs improvement with Blackberry Protect?

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...

How does Crowdstrike Falcon compare with Darktrace?

Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

Microsoft Defender for Endpoint vs BlackBerry Cylance Cybersecurity

Comparisons

Compared 19% of the time

Cisco Secure Endpoint vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

SentinelOne Singularity Complete vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

Cortex XDR by Palo Alto Networks vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

More BlackBerry Cylance Cybersecurity Competitors

Microsoft Defender for Endpoint vs CrowdStrike Falcon

Compared 6% of the time

Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon

Compared 5% of the time

Kaspersky Endpoint Security for Business vs CrowdStrike Falcon

Compared 3% of the time

Symantec Endpoint Security vs CrowdStrike Falcon

Compared 3% of the time

Microsoft Defender XDR vs CrowdStrike Falcon

Compared 3% of the time

More CrowdStrike Falcon Competitors

Product Reports

BlackBerry Cylance Cybersecurity

Download BlackBerry Cylance Cybersecurity product report

CrowdStrike Falcon

Download CrowdStrike Falcon product report

Also Known As

Blackberry Protect

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface

Overview

BlackBerry Cylance provides endpoint security, threat protection, and antivirus capabilities, using AI and machine learning for protection against malware and ransomware on desktops, servers, and virtual machines worldwide. Its AI-driven threat detection operates even with limited internet, facilitating effective threat management.

BlackBerry Cylance's centralized dashboard simplifies threat management and vulnerability protection for organizations globally. The platform combines AI and machine learning to deliver superior zero-day threat protection and minimize CPU usage, offering stable and accurate threat detection without frequent updates. It includes tools like CylanceOPTICS and CylancePERSONA for enhanced user behavior monitoring and adopts a proactive approach that effectively manages threats at various lifecycle stages. Renowned for stability and performance, it efficiently prevents unauthorized applications while maintaining system productivity.

What are the main features of BlackBerry Cylance?

Minimal CPU Usage: Efficiently operates without taxing computer resources.
AI and Machine Learning: Advanced technology for zero-day threat protection.
Lightweight Design: Functions without constant updates for simplified usage.
Centralized Management: Offers a user-friendly, intuitive dashboard.
CylanceOPTICS and PERSONA: Tools for in-depth user behavior analysis.

What are key benefits to look for in user reviews?

Effective Malware Detection: Recognized accuracy in identifying security threats.
Proactive Threat Mitigation: Actively detects and manages threats.
Stability and Performance: Consistent protection without hampering system performance.
Reduced Unauthorized Access: Limits unpermitted application activity.

In the professional sector, BlackBerry Cylance is leveraged to protect crucial infrastructure through a robust approach accommodating environments with limited connectivity. Its widespread deployment in industries, including healthcare and finance, is attributed to its ease of deployment and comprehensive protection capabilities. However, enhancements in reporting, pricing structures, and technical support are avenues for development, reflecting user feedback for improving detection rates and overall dashboard usability.

BlackBerry

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike

Sample Customers

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Information Not Available

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon