Try our new research platform with insights from 80,000+ expert users

Cybereason Endpoint Detection & Response vs WatchGuard Threat Detection and Response comparison

Cybereason and WatchGuard are both solutions in the Endpoint Detection and Response (EDR) category. Cybereason is ranked #23 with an average rating of 8.2, while WatchGuard is ranked #38 with an average rating of 8.3. Cybereason holds a 1.0% mindshare in EDR, compared to WatchGuard’s 0.5% mindshare. Additionally, 89% of Cybereason users are willing to recommend the solution, compared to 100% of WatchGuard users who would recommend it.
Cybereason Endpoint Detecti...
Read 21 Cybereason Endpoint Detection & Response reviews
  • 2,717 Views
  • 1,536 Comparison Views
89% willing to recommend
WatchGuard Threat Detection...
Read 13 WatchGuard Threat Detection and Response reviews
  • 921 Views
  • 693 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

Cybereason Endpoint Detection & Response and WatchGuard Threat Detection and Response are two competitive endpoint security solutions. Cybereason has an advantage in ease of deployment and customer service, while WatchGuard stands out for feature richness and ROI.

Features: Cybereason is praised for its robust threat detection capabilities, intuitive management console, and user-friendly interface. WatchGuard offers comprehensive threat intelligence, automation features, and a strong integration ecosystem. Users find WatchGuard more versatile for advanced use cases due to its extensive feature sets and integration possibilities.

Room for Improvement: Cybereason could improve its reporting functions, reduce false positives, and enhance scalability. WatchGuard users call for better documentation, enhanced scalability, and a more polished deployment process. Cybereason is noted for its consistency in updates, while WatchGuard could use ongoing support enhancements.

Ease of Deployment and Customer Service: Cybereason's straightforward deployment process and responsive customer support make it easy for organizations to integrate and use. WatchGuard requires more intricate initial setup and has mixed reviews on customer service efficiency. This makes Cybereason more suitable for organizations seeking quick deployment and strong support.

Pricing and ROI: WatchGuard is viewed as a cost-effective solution with high return on investment due to its robust features. Cybereason, though more expensive, is praised for its efficiency and lower long-term operational costs. While WatchGuard offers a better upfront value, Cybereason's operational benefits justify its higher price for some organizations.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response Report (Updated: April 2025).
Buyer's Guide
Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response
April 2025
Download the complete report
Helped 851,371 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cybereason Endpoint Detecti...
Ranking in Endpoint Detection and Response (EDR)
23rd
Average Rating
8.0
Reviews Sentiment
7.9
Number of Reviews
21
Ranking in other categories
Endpoint Protection Platform (EPP) (34th)
WatchGuard Threat Detection...
Ranking in Endpoint Detection and Response (EDR)
38th
Average Rating
8.0
Reviews Sentiment
7.9
Number of Reviews
13
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cybereason Endpoint Detection & Response is 1.0%, down from 1.2% compared to the previous year. The mindshare of WatchGuard Threat Detection and Response is 0.5%, down from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Chad Kliewer - PeerSpot reviewer
We can make more informed decisions on whether an action is malicious
The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.
Read full review
Jose Fos - PeerSpot reviewer
The solution provides automated responses and helps protect our systems
We use the solution to protect our systems. We also use it for real-time detection The tool provides automated responses. It has a lot of features. The interface is not the best. I do not like it. The reports must also be improved. I am currently using the solution. I have contacted the…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup was easy and straightforward."
"The initial setup is not overly complicated."
"The dashboard is very good and you can consider it as an interactive UI."
"It gives all the information in a clear response."
"Their EDR solution, the ability to mitigate issues through their command line, is probably the best feature that we've had. We use that all the time. It's very useful for doing investigations."
"Cybereason's threat hunting and investigation are the most valuable features. Threat hunting is a user-friendly feature that keeps you safe. Investigation offers an added value that I haven't seen with other EDR services. It allows you to find specific policy problems within your environment."
"The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running."
"We didn't have the visibility that we now have. It has increased our visibility by a lot. So, we put a lot more time into really looking at our environment and what is happening throughout our different networks. It has increased our visibility by around fivefold."
More Cybereason Endpoint Detection & Response pros
"The basic functionality is fantastic. It has been performing well. I generated a report on one machine, using that as the deployment machine. When scanning the network, it discovered machines on the network and deployed the same endpoint protection from that one machine I have on my network."
"The protection that it provides from ransomware is valuable. The awareness that it has is also valuable. It didn't have a central console earlier, but now it has a central console, which is pretty good."
"When you download the executable file from the internet, it automatically sandboxes to make sure it's not doing anything incorrectly."
"The interface is very good."
"I like WatchGuard's network segmentation features. It's easy to configure user policies."
"WatchGuard Threat Detection and Response is a reliable solution."
"The most valuable feature is the correlation of logs from different devices."
"The tool provides automated responses."
More WatchGuard Threat Detection and Response pros
 

Cons

"The integration with Microsoft solutions and Microsoft capabilities needs to be improved."
"The product's reporting isn't great."
"I would like to see improvements on the operational side, specifically in grouping."
"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."
"I feel it is a shame that I cannot create groups of groups with inheritance."
"While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper."
"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."
"Ad hoc higher-level reporting to senior management can be improved or can be implemented. That's definitely an area of improvement that they need to focus on."
More Cybereason Endpoint Detection & Response cons
"I'd like a few extra features, especially around threat severity assessment."
"WatchGuard should offer more visibility into user activity. For example, we should have more details when WatchGuard denies a user access to a port."
"It can have a couple of false positives, but after you add them to your allow list, it works fine. It could have better Mac support. I am pretty sure it doesn't have much support for Mac. It can be installed on a Mac, but it is not that good."
"When it comes to live-monitoring, the user-interface could be improved to make things easier."
"The website must provide more information on the product."
"The interface is not the best."
"The pricing of WatchGuard Threat Detection and Response could be improved."
"This product needs to be fully integrated with the firewall. Currently, it only sends logs to the cloud and asks the firewall to correlate them."
More WatchGuard Threat Detection and Response cons
 

Pricing and Cost Advice

"In terms of pricing, it's a good solution."
"I do not have experience with the licensing of the product."
"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."
"The pricing is manageable."
"I had to go through a third-party to purchase it, which I wasn't really pleased about."
"This product is somewhat expensive and should be cheaper."
"In terms of cost, this is a good choice for our needs."
More Cybereason Endpoint Detection & Response pricing and cost advice
"The solution is a bit more expensive than other options."
"The price is very good."
"The solution is cheap."
"The price is comparable."
"There is a license required to use the solution and we pay annually. The price could be reduced because it is a bit expensive."
"The pricing is competitive."
"The price of WatchGuard is very good."
report
See which vendors are best for you
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
See recommendations
851,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
11%
Manufacturing Company
8%
Government
6%
Computer Software Company
18%
Comms Service Provider
10%
Retailer
10%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?
Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...
See all answers
What is your primary use case for Cybereason Endpoint Detection & Response?
We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...
See all answers
What do you like most about Cybereason Endpoint Detection & Response?
The interface is user-friendly.
See all answers
What do you like most about WatchGuard Threat Detection and Response?
The tool provides automated responses.
See all answers
What needs improvement with WatchGuard Threat Detection and Response?
The pricing of WatchGuard Threat Detection and Response could be improved. It's not the cheapest option available. That said, it often meets our needs effectively. There are areas for improvement i...
See all answers
What is your primary use case for WatchGuard Threat Detection and Response?
WatchGuard Threat Detection and Response is used to monitor traffic and give alarms to the administration if something goes wrong. It reacts when services protected by it are attacked and sends not...
See all answers
 

Comparisons

Darktrace vs Cybereason Endpoint Detection & Response Logo
Darktrace vs Cybereason Endpoint Detection & Response
Compared 27% of the time
CrowdStrike Falcon vs Cybereason Endpoint Detection & Response Logo
CrowdStrike Falcon vs Cybereason Endpoint Detection & Response
Compared 15% of the time
SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response Logo
SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response
Compared 10% of the time
Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response Logo
Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response
Compared 9% of the time
Fortinet FortiEDR vs Cybereason Endpoint Detection & Response Logo
Fortinet FortiEDR vs Cybereason Endpoint Detection & Response
Compared 5% of the time
More Cybereason Endpoint Detection & Response Competitors
CrowdStrike Falcon vs WatchGuard Threat Detection and Response Logo
CrowdStrike Falcon vs WatchGuard Threat Detection and Response
Compared 42% of the time
Darktrace vs WatchGuard Threat Detection and Response Logo
Darktrace vs WatchGuard Threat Detection and Response
Compared 14% of the time
Microsoft Defender for Endpoint vs WatchGuard Threat Detection and Response Logo
Microsoft Defender for Endpoint vs WatchGuard Threat Detection and Response
Compared 8% of the time
SentinelOne Singularity Complete vs WatchGuard Threat Detection and Response Logo
SentinelOne Singularity Complete vs WatchGuard Threat Detection and Response
Compared 8% of the time
ESET Inspect vs WatchGuard Threat Detection and Response Logo
ESET Inspect vs WatchGuard Threat Detection and Response
Compared 8% of the time
More WatchGuard Threat Detection and Response Competitors
 

Product Reports

Buyer's Guide
Cybereason Endpoint Detection & Response
May 2025
Cybereason Endpoint Detection & Response reportDownload Cybereason Endpoint Detection & Response product report
Buyer's Guide
WatchGuard Threat Detection and Response
April 2025
WatchGuard Threat Detection and Response reportDownload WatchGuard Threat Detection and Response product report
 

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond
WatchGuard TDR
 

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Hackers are designing malware to be more sophisticated than ever. Through packing, encryption, and polymorphism, cyber criminals are able to disguise their attacks to avoid detection. Zero day threats and advanced malware easily slip by antivirus solutions that are simply too slow to respond to the constant stream of emerging threats. Organizations of all sizes need a solution that leverages a holistic approach to security from the network to the endpoint. WatchGuard Threat Detection and Response (TDR) is a powerful collection of advanced malware defense tools that correlate threat indicators from Firebox appliances and Host Sensors to stop known, unknown and evasive malware threats.

WatchGuard
 

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital
Goodwill New York / New Jersey, F4 IT, Café Comunicação Integrada
Buyer's Guide
Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response
April 2025
Free Report: Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response
Find out what your peers are saying about Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response and other solutions. Updated: April 2025.
DOWNLOAD NOW
851,371 professionals have used our research since 2012.
See our Cybereason Endpoint Detection & Response vs. WatchGuard Threat Detection and Response report.
See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.