BlackBerry Cylance Cybersecurity vs CrowdStrike Falcon comparison

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon

Download the complete report

Helped 863,901 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

BlackBerry Cylance Cybersec...

Ranking in Endpoint Protection Platform (EPP)

29th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

CrowdStrike Falcon

Ranking in Endpoint Protection Platform (EPP)

2nd

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

132

Ranking in other categories

Security Information and Event Management (SIEM) (6th), Threat Intelligence Platforms (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)

Mindshare comparison

As of July 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of BlackBerry Cylance Cybersecurity is 1.1%, down from 1.5% compared to the previous year. The mindshare of CrowdStrike Falcon is 10.6%, up from 9.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Q&A Highlights

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

Both Cylance and CrowdStrike are amongst the few top of the market in terms or endpoint protection. CrowdStrike was considered among the top 5 in 2017 and Cylance was considered the same in 2019. As they are both highly effective, CrowdStrike is very unique in its user-friendliness, while Cylance is very unique for its minimum utilization of computer's resources. If you compare initial pricing, you would go with Cylance, but you can always negotiate with both to get the best offers.

Doesn't have daily updates, which is important for healthcare IT

Featured Reviews

Sooraj Makkancherrry

Security Operations Manager at Philips

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Waleed Omar

Information Security Specialist at Arab Open University

Provides effective real-time threat detection with potential for cost optimization

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You can manage all the threats and everything from a centralized dashboard."

"The platform's most valuable features are the malware detection capabilities."

"We chose the solution because it doesn't have daily updates, which is important for us in healthcare IT, where network usage and connectivity to hospitals matter."

"I've found the AI engine in CylancePROTECT to be particularly effective for technology and in preventing unknown threats."

"The most valuable feature of CylancePROTECT is the support."

"Has good RAM capacity for the power I need"

"The solution is pretty easy to scale."

"The solution is stable."

More BlackBerry Cylance Cybersecurity pros

"The solution's most valuable feature is that it is robust and can detect almost every malicious activity that occurs within the endpoint."

"The Protect functionality on the laptops provides great visibility into what's occurring, and the cloud management of the platform is what we needed."

"The most valuable feature of CrowdStrike Falcon is its accuracy. That's very important for me. False-positive are very bad for everyone. As we are a financial institution, it's even worse. I like Falcon because it's very accurate."

"CrowdStrike enables the infrastructure managers to visualize all the events and get information about the network."

"The solution offers great stability."

"The most valuable feature is the activity dashboard because it gives you a holistic view of your environment from a security standpoint."

"The CS falcon agent is a lightweight agent compared with other agents of EDR products."

"As an EDR tool, we can integrate log management and event management. The solution deals with threats automatically, that's the advantage."

More CrowdStrike Falcon pros

Cons

"They could improve on the false positives, reporting and whitelisting features."

"It's a good solution but some features just need to be updated."

"It needs real analysis of quarantined files. The EDR product isn't showing much right now."

"I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable."

"Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal."

"It should have better support for Windows and Mac."

"It was not effective. There were a lot of false positives, even when we use Adobe, and everybody uses Adobe, which is not a threat."

"The high price of the product is an area of concern where improvements are required. The product's price should be more competitive."

More BlackBerry Cylance Cybersecurity cons

"Whenever there is a feature release (upgrade) where we push to all the endpoints, it causes something to be blocked without us knowing."

"The console is a little cluttered and at times, finding what you're looking for is not intuitive."

"Deployment in cloud environments is challenging. Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options."

"I would also like to see the endpoint firewall component produce some level of logging and feedback."

"In the future release of CrowdStrike Falcon, they should add a sandbox feature."

"I have experience with a product called SentinelOne, which has a feature that allows for the customization of query languages. I would like to see such a feature for CloudStrike."

"For further improvements, I can only think of one example because this is very important for us; they could reduce the price. Then it would deserve a rating of seven."

"Too many false positives."

More CrowdStrike Falcon cons

Pricing and Cost Advice

"It's not so heavily priced; rather, it's average and decent."

"The solution provides me with competitive pricing."

"The tool is not that expensive."

"We pay our license on a yearly basis and have just renewed for two years."

"The initial end-point cost may seem a little high (~$55/device/year) but when you look at the total peace of mind that the solution provides, with no reboots for updates, and negligible performance impact, it is well worth it."

"CylancePROTECT's pricing is reasonable, at about €18 per user, per year."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

"This cost of the license is approximately $5 USD monthly per user."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"Different components are additional price points. We got the components that were right for us, but other organizations may require more (or less) components to suit their needs."

"The pricing will depend upon your volume of usage."

"We bought a very small number of licenses, then ran it for a year. We bought a 100 licenses for a year, so we didn't actually do a proof of concept. We just bought them. Then, the next year, we bought 10,000 licenses."

"The more endpoints an organization adds the cheaper the cost."

"We have a yearly subscription and find the price to be good. I'd give it a rating of four out of five for price, we got a good discount."

"There are three to four licensing models available to choose from for CrowdStrike Falcon. The price of CrowdStrike Falcon depends on the distributor and the reseller partner. The price we received was good."

"The solution's pricing is great for us."

"Annual licensing."

More CrowdStrike Falcon pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

863,901 professionals have used our research since 2012.

Answers from the Community

Miriam Tover

Service Delivery Manager at PeerSpot

Jun 27, 2019

What is the biggest difference between CrowdStrike and Cylance?

2 out of 3 answers

Dan Brunnquell

Director Of Information Technology at a financial services firm with 11-50 employees

Jun 25, 2019

I never used Cylance. We installed CrowdStrike on 6/6/19 and aside from a test file have had zero hits. CrowdStrike has some additional features available (at a cost). One that I am looking at is device control for USB storage devices for policy enforcement. Syslogs are being absorbed by my SIEM as well.

Read full answer

ABDULRAHMAN ALBATARNI

IT Manager with 201-500 employees

Jun 26, 2019

Read full answer

See all 3 answers

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Computer Software Company

12%

Government

Comms Service Provider

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Blackberry Protect?

It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions.

What is your experience regarding pricing and costs for Blackberry Protect?

The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.

What needs improvement with Blackberry Protect?

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...

How does Crowdstrike Falcon compare with Darktrace?

Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

Microsoft Defender for Endpoint vs BlackBerry Cylance Cybersecurity

Comparisons

Compared 17% of the time

Cisco Secure Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

SentinelOne Singularity Complete vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs BlackBerry Cylance Cybersecurity

Compared 4% of the time

More BlackBerry Cylance Cybersecurity Competitors

Microsoft Defender for Endpoint vs CrowdStrike Falcon

Compared 5% of the time

Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon

Compared 3% of the time

Darktrace vs CrowdStrike Falcon

Compared 3% of the time

Microsoft Defender XDR vs CrowdStrike Falcon

Compared 3% of the time

Wazuh vs CrowdStrike Falcon

Compared 3% of the time

More CrowdStrike Falcon Competitors

Product Reports

BlackBerry Cylance Cybersecurity

Download BlackBerry Cylance Cybersecurity product report

CrowdStrike Falcon

Download CrowdStrike Falcon product report

Also Known As

Blackberry Protect

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface

Overview

BlackBerry Cylance provides endpoint security, threat protection, and antivirus capabilities, using AI and machine learning for protection against malware and ransomware on desktops, servers, and virtual machines worldwide. Its AI-driven threat detection operates even with limited internet, facilitating effective threat management.

BlackBerry Cylance's centralized dashboard simplifies threat management and vulnerability protection for organizations globally. The platform combines AI and machine learning to deliver superior zero-day threat protection and minimize CPU usage, offering stable and accurate threat detection without frequent updates. It includes tools like CylanceOPTICS and CylancePERSONA for enhanced user behavior monitoring and adopts a proactive approach that effectively manages threats at various lifecycle stages. Renowned for stability and performance, it efficiently prevents unauthorized applications while maintaining system productivity.

What are the main features of BlackBerry Cylance?

Minimal CPU Usage: Efficiently operates without taxing computer resources.
AI and Machine Learning: Advanced technology for zero-day threat protection.
Lightweight Design: Functions without constant updates for simplified usage.
Centralized Management: Offers a user-friendly, intuitive dashboard.
CylanceOPTICS and PERSONA: Tools for in-depth user behavior analysis.

What are key benefits to look for in user reviews?

Effective Malware Detection: Recognized accuracy in identifying security threats.
Proactive Threat Mitigation: Actively detects and manages threats.
Stability and Performance: Consistent protection without hampering system performance.
Reduced Unauthorized Access: Limits unpermitted application activity.

In the professional sector, BlackBerry Cylance is leveraged to protect crucial infrastructure through a robust approach accommodating environments with limited connectivity. Its widespread deployment in industries, including healthcare and finance, is attributed to its ease of deployment and comprehensive protection capabilities. However, enhancements in reporting, pricing structures, and technical support are avenues for development, reflecting user feedback for improving detection rates and overall dashboard usability.

BlackBerry

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike

Sample Customers

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Information Not Available

BlackBerry Cylance Cybersecurity vs. CrowdStrike Falcon