Cybereason Endpoint Detection &amp; Response vs Symantec Endpoint Security comparison

Cybereason Endpoint Detection & Response vs. Symantec Endpoint Security

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Endpoint Detecti...

Ranking in Endpoint Protection Platform (EPP)

35th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (25th)

Symantec Endpoint Security

Ranking in Endpoint Protection Platform (EPP)

12th

Average Rating

7.6

Reviews Sentiment

7.3

Number of Reviews

144

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Cybereason Endpoint Detection & Response is 0.8%, down from 1.2% compared to the previous year. The mindshare of Symantec Endpoint Security is 4.0%, down from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

Chad Kliewer

Information Security Officer at PTCI

We can make more informed decisions on whether an action is malicious

The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.

Read full review

Hakeem_Abdulkareem

Head, Security Technology & Engineering at a financial services firm with 10,001+ employees

The solution has given us visibility into compliance within our whole system and helped us ensure everything is updated

Symantec's application security module needs some improvement. You need to create a lot of fingerprints for application security. For instance, let's say I have different brands of ATMs in my environment, like Wincor and NCR. I use GRG to deploy an application control to whitelist some applications. I have to get the exact image of the different models of ATMs. When I tested in the past, some machines would not connect to the server without that. Only the approved software on the ATM should run. Anything outside that should not even come up at all. We did this so that an outside person doesn't introduce malicious software to the ATM. That's the essence of locking down with application control. Using Symantec for application control has been hectic, so I use Carbon Black to do the lockdown. Checking that data security will work fine with Carbon Black. Carbon Black worked fine. Setting up approval in Carbon Black works differently than Symantec. In Symantec, we first need the fingerprints of the applications running underneath. Before setting up Carbon Black, you first install the agent, allowing it to learn the environment. It will analyze all the software's behavior and provide recommendations for what should be allowed. It's more straightforward, whereas configuring application control in Symantec is a bit cumbersome.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We didn't have the visibility that we now have. It has increased our visibility by a lot. So, we put a lot more time into really looking at our environment and what is happening throughout our different networks. It has increased our visibility by around fivefold."

"The interface is user-friendly."

"The initial setup is not overly complicated."

"What I like most about Cybereason Endpoint Detection & Response is the support because the support is good. The solution is also easy to use, and it has a dashboard. Everything is good, and there's no problem with it."

"I haven't had any issues with the solution. Stability-wise, I rate the solution a ten out of ten."

"Cybereason's threat hunting and investigation are the most valuable features. Threat hunting is a user-friendly feature that keeps you safe. Investigation offers an added value that I haven't seen with other EDR services. It allows you to find specific policy problems within your environment."

"Immediately we can pick up the computers in the network if any malicious operation that is triggered."

"It gives all the information in a clear response."

More Cybereason Endpoint Detection & Response pros

"Its response time is the most valuable. It is very quick."

"Customer service and support are very good, rating ten out of ten."

"It's good for large organizations. It's able to handle a lot of users."

"Some important features that are included are the built-in firewall and device control."

"The application and device control functionality is good. We are able to see which applications are installed using the product management dashboard."

"The fact that it has centralized management is the most valuable feature."

"All Symantec Endpoint Protection (SEP) features, such as anti-malware, zero-day attack protection, and IPS features, are valuable."

"It's a single-agent installation with many features including wireless protection."

More Symantec Endpoint Security pros

Cons

"What needs to improve in Cybereason Endpoint Detection & Response and what I'd like to see in its next release is a centralized dashboard that allows you to view what is there, similar to what's on Symantec Endpoint Protection Manager: a beautiful display and reporting. Cybereason Endpoint Detection & Response has to start with the compliance, the homepage, etc. Everything should be there and should be customizable. The options should be there. The tool is very good currently, but visibility for IT administrators is lacking and needs to be worked on."

"The network coverage becomes an issue most of the time."

"They need to improve their technical support services."

"The reporting feature needs improvement."

"It should be more stable, and the sensor needs improvement in terms of connectivity."

"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."

"I feel that the product lacks reporting features and needs improvement."

"It initially took some time to deploy."

More Cybereason Endpoint Detection & Response cons

"Since the acquisition by Broadcom, we are no longer receiving the proper support."

"There could be definition updates installed and running for the product, similar to new EDR solutions that receive updates from the internet."

"It can be improved in terms of features and integration. It should have more advanced features and more integration. Currently, it is just talking to their own solutions. They could add more artificial intelligence, more XDR, and more integration with other vendors so that we can do sharing of information with other vendors."

"It should support the next-generation IPS. Currently, it supports only IPS."

"I would like to see improvements in the anti-virus and the device control features."

"They need to develop a multi-language interface."

"This solution needs better compatibility with services and applications."

"The solution could improve by having a better graphical interface."

More Symantec Endpoint Security cons

Pricing and Cost Advice

"In terms of pricing, it's a good solution."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"I do not have experience with the licensing of the product."

"In terms of cost, this is a good choice for our needs."

"This product is somewhat expensive and should be cheaper."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

More Cybereason Endpoint Detection & Response pricing and cost advice

"It provides a good solution at a good price."

"The price of Symantec is on the higher end. They face some competition from a company called Quick Heal, which is much cheaper than Endpoint Security. They offer three years of protection at just 900 rupees."

"It is the better product, even if it is a little on the higher side."

"I am not sure of the initial cost, but the yearly renewals are quite affordable, which is a good thing. The price seems to have come down in recent years, and with the alternatives that are out there, such as Microsoft Defender, it needs to maintain that affordability to make it attractive."

"Zero-day threat or advanced attacks should be part of the endpoint. The product should not require you to buy a separate license."

"Its price is fair."

"I’d say SEP deserves the money."

"Symantec Endpoint Security is a moderately priced solution."

More Symantec Endpoint Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

15%

Financial Services Firm

12%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

Which is better - Cortex XDR or Symantec End-User Endpoint Security?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...

What do you like most about Symantec End-User Endpoint Security?

Symantec have everything – documentation, videos, data sheets.

Darktrace vs Cybereason Endpoint Detection & Response

Comparisons

Compared 28% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 15% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Fortinet FortiClient vs Cybereason Endpoint Detection & Response

Compared 2% of the time

More Cybereason Endpoint Detection & Response Competitors

Microsoft Defender for Endpoint vs Symantec Endpoint Security

Compared 18% of the time

CrowdStrike Falcon vs Symantec Endpoint Security

Compared 18% of the time

Trend Micro Deep Security vs Symantec Endpoint Security

Compared 8% of the time

Kaspersky Endpoint Security for Business vs Symantec Endpoint Security

Compared 7% of the time

Cortex XDR by Palo Alto Networks vs Symantec Endpoint Security

Compared 4% of the time

More Symantec Endpoint Security Competitors

Product Reports

Cybereason Endpoint Detection & Response

Download Cybereason Endpoint Detection & Response product report

Cybereason Endpoint Detection & Response report

Symantec Endpoint Security

Download Symantec Endpoint Security product report

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond

Symantec EPP, Symantec Endpoint Protection (SEP)

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Symantec Endpoint Security is a robust and reliable product that provides complete protection against viruses, malware, Trojans, and malicious files. It offers application and device control, ease of use in deploying and updating, a central control console, stability, scalability, auto-discovery capabilities, patch management, endpoint detection and response capabilities, intrusion detection module.

The Symantec Global Intelligence Network (GIN) provides threat intelligence and detection across endpoints, email, and web traffic. It has helped organizations reduce downtime, increase productivity, and improve security posture. Symantec Endpoint Security is easy to use, has a flexible administration, and offers more value than expected.

Broadcom

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.

Cybereason Endpoint Detection & Response vs. Symantec Endpoint Security