Executive SummaryUpdated on Apr 20, 2025
BlackBerry Cylance Cybersecurity and NetWitness NDR are leading solutions in the cybersecurity category. While both have unique strengths, NetWitness holds the upper hand in comprehensive threat visibility and threat analysis capabilities.
Features: BlackBerry Cylance offers AI-driven endpoint protection optimized for minimal resource usage, centralized management features, and script blocking to stop malicious applications. NetWitness provides extensive network visibility, seamless integration across systems, and effective threat detection with signatureless malware capabilities.
Room for Improvement: BlackBerry Cylance could benefit from reducing false positives, enhancing its management console interface, and including additional integrated features like firewalls. Improvements in reporting capabilities and wider OS support are also needed. For NetWitness, better usability, expanded scalability, and more robust integration with third-party platforms are key areas for development, along with enhancing threat intelligence and simplifying deployment.
Ease of Deployment and Customer Service: BlackBerry Cylance offers flexible deployment options across public, private, and hybrid clouds, though user experiences with support are mixed. NetWitness, primarily an on-premises solution, is praised for its excellent technical support but may not suit less complex environments. While Cylance excels in deployment versatility, NetWitness is recognized for its consistent and responsive customer service.
Pricing and ROI: BlackBerry Cylance operates on a competitive subscription model providing good ROI through smooth endpoint protection, although some users consider it expensive. NetWitness's pricing is variable and can be high, especially in certain regions like India. Despite this, its ROI is favorable due to efficiency in labor hours and proactive threat management capabilities. Cylance is noted for affordability, whereas NetWitness's costs are balanced by flexible service options.
