Cybereason Endpoint Detection &amp; Response vs Elastic Security comparison

Cybereason Endpoint Detection & Response vs. Elastic Security

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Endpoint Detecti...

Ranking in Endpoint Detection and Response (EDR)

25th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (35th)

Elastic Security

Ranking in Endpoint Detection and Response (EDR)

16th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (7th), Security Information and Event Management (SIEM) (5th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (8th)

Mindshare comparison

As of May 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cybereason Endpoint Detection & Response is 1.0%, down from 1.2% compared to the previous year. The mindshare of Elastic Security is 2.5%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Chad Kliewer

Information Security Officer at PTCI

We can make more informed decisions on whether an action is malicious

The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.

Read full review

SyedAli17

Assistant Director at PTA

Centralized monitoring improves security posture through rapid data processing

The processing part of Elastic Security ( /products/elastic-security-reviews ) is very interesting for us since we handle almost 7,000 to 8,000 alerts per minute. We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data. Additionally, Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Their EDR solution, the ability to mitigate issues through their command line, is probably the best feature that we've had. We use that all the time. It's very useful for doing investigations."

"The dashboard is very good and you can consider it as an interactive UI."

"What I find most valuable is the clarity of the platform."

"I haven't had any issues with the solution. Stability-wise, I rate the solution a ten out of ten."

"The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running."

"The initial setup was straightforward."

"They do a very good job of providing multi-stage visualizations of malicious operations that immediately show all attack details across all devices and users. Since it is MalOp-centric model, you can see if there has been a similar operation across multiple machines. If it is the same thing appearing on multiple machines, you see all the machines and users affected in one screen."

"For me, the technical support is good."

More Cybereason Endpoint Detection & Response pros

"I like the indexing of the logs."

"Elastic Security makes data communication easier."

"It's not very complicated to install Elastic."

"ELK documentation is very good, so never needed to contact technical support."

"The most valuable features of Elastic Security are it is open-source and provides a high level of security."

"The most valuable features of the solution are the prevention methods and the incident alerts."

"The visualization is very good."

"I can look at events from more than one source across multiple different locations and find patterns or anomalies. The machine learning capabilities are helpful, and I can create rules for notifications to be more proactive rather than responding after something has gone wrong."

More Elastic Security pros

Cons

"While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper."

"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."

"Ad hoc higher-level reporting to senior management can be improved or can be implemented. That's definitely an area of improvement that they need to focus on."

"Reporting could be a bit more granular so that we had the ability to check regions and countries. I just noticed that, for instance, if I look at our servers, it's either "contained" or it's "not contained". I don't have the option, for instance, to look at countries. It only allows me to look at users as one big group."

"Cybereason does not have sandbox functionality."

"I would like to see improvements on the operational side, specifically in grouping."

"The network coverage becomes an issue most of the time."

"Its Microsoft PowerShell protections still need some compatibility improvements. We have run across just a few. It is compatible with 90% of what we have in our network, but there is that 10% that we are still struggling with as far as compatibility with the type of PowerShell scripts needed to run our day-to-day business."

More Cybereason Endpoint Detection & Response cons

"There is an area of improvement in the Logs list. The load list may need to be paginated as there are limits."

"One thing they could add is a quick step to enable users who don't have a solid background to build a dashboard and quickly search, without difficulty."

"We set up a cron job to delete old logs so that we wouldn't hit a disk space issue. Such a feature should be available in the UI, where old logs can be deleted automatically. (Don’t know if this feature is already there)."

"The solution should generate an automatic product that integrates with ELK Stack to use artificial intelligence."

"The biggest challenge has been related to the implementation."

"The tool should improve its scalability."

"We're using the open-source edition, for now, I think maybe they can allow their OLED plugin to be open source, as at the moment it is commercialised."

"Elastic Security can be a bit difficult to use if a person only has experience in SMBs with tools like Zoho. The product can also be difficult for those who have never dealt with query language."

More Elastic Security cons

Pricing and Cost Advice

"The pricing is manageable."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"In terms of pricing, it's a good solution."

"In terms of cost, this is a good choice for our needs."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"I do not have experience with the licensing of the product."

"This product is somewhat expensive and should be cheaper."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

More Cybereason Endpoint Detection & Response pricing and cost advice

"Affordable but with additional costs"

"I find it better than Splunk in terms of cost-effectiveness. For cost-effectiveness, I would rate it a nine out of 10."

"Elastic Security is free to use."

"When compared to other products, the price is average or on the low side."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

"The pricing is in the middle. I think it is not an expensive experience if we compare it with big names, for example, QRadar, and also Oxide. I think Elastic Security is quite cheap. I would rate the pricing of this solution a five out of ten."

"I can say that the product is cheaply priced."

"The solution is not expensive and costs around ten dollars a month."

More Elastic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

17%

Government

10%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

What is your experience regarding pricing and costs for Elastic Security?

Since Elastic Security is community-based, it does not require significant costs. This is beneficial for SMEs as they do not need extensive budgets for security solutions.

Darktrace vs Cybereason Endpoint Detection & Response

Comparisons

Compared 28% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 15% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Kaspersky Endpoint Security for Business vs Cybereason Endpoint Detection & Response

Compared 5% of the time

More Cybereason Endpoint Detection & Response Competitors

Wazuh vs Elastic Security

Compared 21% of the time

CrowdStrike Falcon vs Elastic Security

Compared 8% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Splunk Enterprise Security vs Elastic Security

Compared 7% of the time

Microsoft Defender for Endpoint vs Elastic Security

Compared 5% of the time

More Elastic Security Competitors

Product Reports

Cybereason Endpoint Detection & Response

Download Cybereason Endpoint Detection & Response product report

Cybereason Endpoint Detection & Response report

Elastic Security

Download Elastic Security product report

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond

Elastic SIEM, ELK Logstash

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Elastic

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

Cybereason Endpoint Detection & Response vs. Elastic Security