Try our new research platform with insights from 80,000+ expert users

BlackBerry Cylance Cybersecurity vs Sophos EPP Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BlackBerry Cylance Cybersec...
Ranking in Endpoint Protection Platform (EPP)
26th
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
44
Ranking in other categories
No ranking in other categories
Sophos EPP Suite
Ranking in Endpoint Protection Platform (EPP)
30th
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
61
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of BlackBerry Cylance Cybersecurity is 1.2%, down from 1.3% compared to the previous year. The mindshare of Sophos EPP Suite is 1.1%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
BlackBerry Cylance Cybersecurity1.2%
Sophos EPP Suite1.1%
Other97.7%
Endpoint Protection Platform (EPP)
 

Featured Reviews

Sooraj Makkancherrry - PeerSpot reviewer
Security Operations Manager at Philips
Doesn't have daily updates, which is important for healthcare IT
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.
Sabbir Ahmed - PeerSpot reviewer
Director at Infosonik Systems Ltd
Experience significant threat prevention advancements with user-friendly deployment
The feature is called relay server, and some people refer to it as a cache server. The Sophos EPP Suite is scalable. Some customers in banks typically have 5,000 to 7,000 users. One customer started with 1,000 users and has now extended to 4,000 users. Some customers are using up to 8,000 users without any issues. Regarding AI elements in the Sophos EPP Suite, firewalls have already introduced AI features. They have integrated AI models similar to ChatGPT in firewalls. These AI features should be introduced in endpoint XDR as well. Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections. Extended visibility and data analysis include cross-product data correlations. They have a data lake, live discover, and threat graphs. They also offer AI case summary and AI common analysis, accessible from Sophos Central, which is the management portal for Sophos XDR. Sophos Central serves as one central management portal for managing firewalls, endpoint, Sophos encryption, and mobile device management solutions. This centralized management is particularly appealing to customers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It actively monitors the behavior and activity of processes and will, without hesitation, terminate at root anything it determines to be suspect."
"Its setup is simple if you have a Windows device; it is executable."
"I rate the tool a ten out of ten when it comes to the ease of use or management part."
"Specifically for a Windows domain environment, the product can be customized and pushed via GPO or SCCM without issue.​"
"The non-daily requirement to update signatures is the most valuable feature. From a functional point of view, it is pretty spot on. For instance, we compared an algorithm from five years ago to today's algorithm, and it was 98% accurate. It has the ability to detect and mitigate. In the industrial environment that we work in, there's what we call OT versus IT. You are IT Central, but this is OT. Generally, we don't have the same level of skillset as IT individuals or IT professionals have. This particular product doesn't require you to be a computer scientist to be able to understand its proprietary algorithm and to be able to deploy, use, and work within it. It integrates well with a robust SIEM or SOAR solution, and it plays nice with others. We use other detection solutions like CyberX or site provision with Cisco, and it plays nice. That's one of the things we really liked about it."
"The solution is extremely scalable. It's got the hybrid functionality, it's got the system functionality and cloud functionality as well."
"What's most valuable in CylancePROTECT is the optics feature. I also like its easy-to-use and user-friendly dashboard and monitoring system."
"What I like best about CylancePROTECT is its accuracy, as it doesn't give many false positives."
"It is a scalable platform."
"Our experience with Sophos has been notable; it's database-driven and efficiently integrates to inspect and protect us against biases, malware, and attacks."
"The most valuable feature is the ability to centrally manage the total security environment, including the firewall."
"The central management of the anti-virus features for our end user is a very valuable aspect of the solutions."
"The most valuable feature Sophos EPP Suite is that it protects the computer beyond the premise. Whether the user is at home, in the office, or traveling, you are able to apply the policies as the user moves."
"It is a stable solution. I would rate the stability a ten out of ten."
"It's very simple to use. The managing of the endpoints is very easy."
"The most valuable feature is endpoint detection and response."
 

Cons

"I would like to see them fix the alerting system so that the endpoint reporting is a bit more streamlined."
"CylancePROTECT's dashboard could be more user-friendly."
"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."
"It should provide more details about the events that they have detected."
"It should have better support for Windows and Mac."
"CylancePROTECT could be improved in its technical support and communication."
"I would say one thing that they might need to bring in is protection for mobile devices."
"It is hard to manage."
"The product's resource utilization is a concern, especially regarding memory usage on systems with older specifications such as lower memory and less powerful processors."
"In the future, I would like to see better third-party integration so that it can work in conjunction with our ticket system."
"I would like to have the capability to support legacy operating systems because the majority now don't support Windows XP, and Windows 2000."
"There could be more integration included in Sophos EPP Suite."
"Configuring notifications is lagging a bit behind the curve as the product should be able to direct exactly where any notification type is sent."
"The automation side of the setup is a pain."
"From our enrollment perspective, I would say maybe it could be a little lighter in terms of agent usage so that there is less computer utilization."
"The user interface is not responsive."
 

Pricing and Cost Advice

"I think that the price we are paying is good for what it is."
"CylancePROTECT is an affordable solution."
"Our licensing cost for the solution is around $4,000 for six months. There are no costs in addition to the standard licensing fees."
"We would just add more if there are new users, but right now you just need one license for per user."
"The product cost is about $5, per user, per month."
"​Shop around for sure and be assured the price you pay will be close to other solutions available, but even at a slight mark-up from the other solutions, you are getting real endpoint protection versus nothing more than a cheap security blanket that might keep you warm at night."
"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."
"The tool is not that expensive."
"The pricing for this solution is ok."
"There are licenses to use this solution and we are on a three-year license."
"We purchased a three-year license, which gave us a large discount."
"Willing to discount when you are switching from another product. Upgrading services will end up costing more, as expected."
"We are on an annual license to use the solution."
"Pricing and licensing are good and affordable."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."
"Sophos EPP Suite is cost-effective. We bought it because it costs less than other solutions we like—for example, Trend Micro and Panda Antivirus."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Computer Software Company
10%
Government
8%
Comms Service Provider
6%
Computer Software Company
12%
Manufacturing Company
12%
Educational Organization
10%
Performing Arts
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise5
Large Enterprise13
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise7
Large Enterprise14
 

Questions from the Community

What do you like most about Blackberry Protect?
It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessary actions.
What is your experience regarding pricing and costs for Blackberry Protect?
The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.
What needs improvement with Blackberry Protect?
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immedi...
What do you like most about Sophos EPP Suite?
Sophos EPP Suite is a powerful antivirus.
What needs improvement with Sophos EPP Suite?
To make Sophos EPP Suite better, some features could be added, but currently, whatever I require is available, and the interface is good. I think there should be templates in place so I do not have...
 

Also Known As

Blackberry Protect
EPP Suite
 

Overview

 

Sample Customers

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit
EK Services
Find out what your peers are saying about BlackBerry Cylance Cybersecurity vs. Sophos EPP Suite and other solutions. Updated: December 2025.
879,422 professionals have used our research since 2012.