ConnectWise SIEM vs CylanceOPTICS comparison

ConnectWise and BlackBerry are both solutions in the Endpoint Detection and Response (EDR) category. ConnectWise is ranked #54 with an average rating of 6.0, while BlackBerry is ranked #53 with an average rating of 4.0. ConnectWise holds a 0.7% mindshare in EDR, compared to BlackBerry’s 0.6% mindshare. Additionally, 66% of ConnectWise users are willing to recommend the solution, compared to 80% of BlackBerry users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

CylanceOPTICS and ConnectWise SIEM are two prominent cybersecurity solutions. ConnectWise SIEM has the upper hand due to its comprehensive feature set, even though CylanceOPTICS excels in pricing and customer support based on user reviews.

Features: Users notice CylanceOPTICS for advanced threat detection, AI-driven analytics, and robust performance. ConnectWise SIEM stands out for extensive integrations, real-time monitoring capabilities, and detailed reporting. Despite CylanceOPTICS' powerful analytics, ConnectWise SIEM's additional features give it an edge.

Room for Improvement: CylanceOPTICS users want more seamless integration with other tools, enhanced user interface, and improved reporting capabilities. ConnectWise SIEM users point out the steep learning curve, inadequate documentation, and high resource consumption. The complexity of ConnectWise SIEM is a notable drawback.

Ease of Deployment and Customer Service: CylanceOPTICS is known for its easy setup, responsive support team, and timely issue resolution. ConnectWise SIEM, while offering detailed deployment options, is criticized for a complicated installation process, slower customer support, and less user-friendly initial setup.

Pricing and ROI: CylanceOPTICS is favored for competitive pricing and strong return on investment. ConnectWise SIEM, although more expensive, is considered worth the investment by users due to its robust features and long-term value. CylanceOPTICS provides a financial advantage with lower upfront costs.

To learn more, read our detailed ConnectWise SIEM vs. CylanceOPTICS Report (Updated: March 2026).

Buyer's Guide

ConnectWise SIEM vs. CylanceOPTICS

March 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of ConnectWise SIEM is 0.7%, up from 0.2% compared to the previous year. The mindshare of CylanceOPTICS is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
CylanceOPTICS	0.6%
ConnectWise SIEM	0.7%
Other	95.3%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2711757

Cyber Security Software Engineer at a tech services company with 11-50 employees

Automated alerting and reporting excel while cost and feature limitations remain

I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.

Read full review

GauthamVakapalli

Account Manager at Teksalah

Provides reliable threat detection and response but requires better regional support

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitate towards popular EDRs like CrowdStrike or Sophos, largely due to better marketing, despite BlackBerry Cylance being a superior product. The lack of marketing from distributors or vendors is a critical area where they are falling short. Apart from marketing, it would be beneficial for CylanceOPTICS to establish a dedicated team in GCC since I coordinate with the UK team to handle support. Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process. In terms of scalability, CylanceOPTICS is indeed easy to scale, but one issue I face is related to visibility; while it is scalable, the security teams struggle with limited visibility as we need to gather data from multiple sources.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."

"It collects and caches and the knowledge of machine learning from different customers to take to the cloud, it makes it better to use for everybody, it allows for quick learning and updates and can, therefore, offer zero-day malware security, and this sharing of metadata helps make the solution very safe."

"The scalability of Cortex XDR by Palo Alto Networks is very good."

"Stability is a primary factor, and then there's the ease of distribution and policy management; Cortex XDR by Palo Alto Networks is very easy to work with, and we're quite happy with them."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"WildFire AI is the best option for this product."

"I don't have to do much monitoring with it; I don't have to have anybody manually looking at this, it gives us reports, and it lets us know if something needs to be addressed, and we can easily address it."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

More Cortex XDR by Palo Alto Networks pros

"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."

"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."

"We have found the solution has great functionality and it is easy to use."

"The initial setup was fairly straightforward. To get a large health care organization sorted, we had to create exemptions because some of the scripts and some of the automations were broken."

"It automatically blocks the threats, helping us investigate if they harm the environment."

"The technical support personnel I interacted with were good."

"It is a bit early in our evaluation process to give proper feedback, although so far, the overall feedback is good."

"Cylance seems to be able to meet our customers' requirements for the time being."

"The solution is pretty stable; it's pretty rock solid."

"It's pretty unintrusive"

"You can use the solution to query certain things."

More CylanceOPTICS pros

Cons

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."

"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."

"For Cortex XDR by Palo Alto Networks, if I had to point out improvements, I would say the UI is still somewhat difficult for beginners."

"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."

More Cortex XDR by Palo Alto Networks cons

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."

"The technical support could be improved although it's probably better than you get with a lot of the other traditional antivirus solutions"

"One minor issue that somebody mentioned was that they didn't like their management console."

"Too many false positives are reported."

"Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process."

"The reporting is very weak and not very good at all."

"CylanceOPTICS could benefit from more granular control in the timeline-building process. Ideally, users would be able to drill deeper into the analysis rather than have the machine dictate the direction."

"The product's initial setup process could be easy."

More CylanceOPTICS cons

Pricing and Cost Advice

"I am using the Community edition."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"It has a yearly renewal."

"It has reasonable pricing for the use cases it provides to the company."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"Its pricing is kind of in line with its competitors and everybody else out there."

"This is an expensive solution."

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The solution is expensive."

"We pay for the number of endpoints we have and that is about it. On a monthly basis, the licensing cost is $55 per user."

"I would rate the pricing a three out of five."

"The pricing for CylanceOPTICS is very good; I would rate it around a nine on a scale of one to ten, with ten being the lowest. It's one of the most affordable options I've seen."

"CylanceOPTICS is probably priced equal to other EDRs in the market."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Computer Software Company

19%

Comms Service Provider

Construction Company

University

Healthcare Company

11%

Manufacturing Company

10%

Construction Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

No data available

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	2
Large Enterprise	4

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What needs improvement with ConnectWise Fortify?

I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence ...

See all answers

What is your primary use case for ConnectWise Fortify?

I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles Con...

See all answers

What advice do you have for others considering ConnectWise Fortify?

The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visib...

See all answers

What is your experience regarding pricing and costs for Blackberry Optics?

In terms of cost, I find CylanceOPTICS to be reasonable; it's not overly expensive, nor is it at the lower end of the...

See all answers

What needs improvement with Blackberry Optics?

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitat...

See all answers

What is your primary use case for Blackberry Optics?

One of the main use cases for CylanceOPTICS is endpoint detection and response, which even works without internet, un...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony SASE (formerly Perimeter 81) vs ConnectWise SIEM

Compared 5% of the time

Zscaler Zero Trust Exchange Platform vs ConnectWise SIEM

Compared 5% of the time

CrowdStrike Falcon Complete MDR vs ConnectWise SIEM

Compared 3% of the time

CompassOne by Blackpoint Cyber vs ConnectWise SIEM

Compared 3% of the time

Wazuh vs ConnectWise SIEM

Compared 3% of the time

More ConnectWise SIEM Competitors

CrowdStrike Falcon vs CylanceOPTICS

Compared 12% of the time

Cisco Secure Endpoint vs CylanceOPTICS

Compared 9% of the time

Rapid7 InsightIDR vs CylanceOPTICS

Compared 8% of the time

Microsoft Defender for Endpoint vs CylanceOPTICS

Compared 8% of the time

Kaspersky Endpoint Security for Business vs CylanceOPTICS

Compared 5% of the time

More CylanceOPTICS Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download ConnectWise SIEM product report

Buyer's Guide

CylanceOPTICS

March 2026

Download CylanceOPTICS product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

IT solution providers are the first—and often only—line of defense for every kind of business in every part of the world. Whether managing mom-and-pop businesses or high-profile clients, providing preventive security measures is a must-have in today’s cybersecurity landscape. Security information and event management (SIEM) solutions offer an additional layer of security for your clients; however, most SIEM solutions are routinely difficult to manage, expensive to deploy, and require a significant amount of in-house cybersecurity expertise.

ConnectWise SIEM offers a powerful alternative to expand your security perspective to both prevention and detection. The solution includes comprehensive, flexible SIEM software that streamlines safety and security across your network without additional full-time employee costs or complicated implementations.

ConnectWise

Our cloud-native BlackBerry® Optics provide visibility, on-device threat detection and remediation across your organization. In milliseconds. And our EDR approach effectively and efficiently hunts threats while eliminating response latency. It’s the difference between a minor security event—and one that’s widespread and uncontrolled.

BlackBerry

Sample Customers

CBI Health Group, University Honda, VakifBank

Techvera, Syrex, Clark Integrated Technologies

Cerdant, Washoe County School District

Buyer's Guide

ConnectWise SIEM vs. CylanceOPTICS

March 2026

Free Report: ConnectWise SIEM vs. CylanceOPTICS

Find out what your peers are saying about ConnectWise SIEM vs. CylanceOPTICS and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our ConnectWise SIEM vs. CylanceOPTICS report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.