CylanceOPTICS vs Heimdal Endpoint Security comparison

BlackBerry and Heimdal are both solutions in the Endpoint Detection and Response (EDR) category. BlackBerry is ranked #53 with an average rating of 4.0, while Heimdal is ranked #37 with an average rating of 9.0. BlackBerry holds a 0.6% mindshare in EDR, compared to Heimdal’s 0.6% mindshare. Additionally, 80% of BlackBerry users are willing to recommend the solution, compared to 100% of Heimdal users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CylanceOPTICS and Heimdal Endpoint Security based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR).

To learn more, read our detailed Endpoint Detection and Response (EDR) Report (Updated: March 2026).

Buyer's Guide

Endpoint Detection and Response (EDR)

March 2026

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of CylanceOPTICS is 0.6%, up from 0.2% compared to the previous year. The mindshare of Heimdal Endpoint Security is 0.6%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Heimdal Endpoint Security	0.6%
CylanceOPTICS	0.6%
Other	95.4%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

GauthamVakapalli

Account Manager at Teksalah

Provides reliable threat detection and response but requires better regional support

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitate towards popular EDRs like CrowdStrike or Sophos, largely due to better marketing, despite BlackBerry Cylance being a superior product. The lack of marketing from distributors or vendors is a critical area where they are falling short. Apart from marketing, it would be beneficial for CylanceOPTICS to establish a dedicated team in GCC since I coordinate with the UK team to handle support. Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process. In terms of scalability, CylanceOPTICS is indeed easy to scale, but one issue I face is related to visibility; while it is scalable, the security teams struggle with limited visibility as we need to gather data from multiple sources.

Read full review

DEEPAK KUMAR PACHDEO DUBEY

Senior IT Support Specialist at PXGEO

Delivers efficiency and agility with USB control limitations

One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use the privilege manager feature called Elevation. What we lack is granular USB control. We have an issue where we can only switch USB on or off. I want to whitelist specific devices in the network, which I currently cannot do.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The initial setup is pretty easy."

"WildFire AI is the best option for this product."

"Traps has drastically reduced our endpoint attack surface via advanced detection capabilities, sandboxing of never before seen programs, and by drastically limiting where executables can launch in the first place."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"The tool is designed to scale for large enterprises and handle large volumes of data."

"Palo Alto is constantly adding new features."

"Cortex XDR is a simple platform that's easy for administrators and users. You have a lot of flexibility to change or customize the features."

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

More Cortex XDR by Palo Alto Networks pros

"CylanceOPTICS is easy to use."

"The most valuable feature is the ability to respond to zero-day and unknown threats."

"CylanceOPTICS is pretty stable."

"It is a bit early in our evaluation process to give proper feedback, although so far, the overall feedback is good."

"This feature is something people should be looking into; the threat monitoring in CylanceOPTICS is very good, and while CrowdStrike has similar features, CylanceOPTICS is more cost-effective."

"The solution has a high level of trust in the industry."

"It's pretty unintrusive"

"You can use the solution to query certain things."

More CylanceOPTICS pros

"As compared to multiple solutions I have used in the past, Heimdal is a very agile and lightweight solution."

"Heimdal is a very agile and lightweight solution."

Cons

"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."

"If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity."

"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"The solution could improve by providing better integration with their own products and others."

"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."

"In general, the price could be more competitive."

"To jump from the partner to Palo Alto directly was challenging."

More Cortex XDR by Palo Alto Networks cons

"The reporting is very weak and not very good at all."

"It takes more time to investigate or dig up and understand what's going on."

"The support is inadequate because their technical people are not supportive. Since the support is not based in India, there are numerous issues."

"Our customers would like to see more automation with respect to how threats are handled once they have been detected."

"The product's initial setup process could be easy."

"The technical support could be improved although it's probably better than you get with a lot of the other traditional antivirus solutions"

"The detection component is something that they have to work on."

"The tools are ineffective. It flags a lot of things. To give you an example, it detected Google Chrome and blocked the user's access to it. That it mistook for malicious, which turned out to be a false positive."

More CylanceOPTICS cons

"What we lack is granular USB control. We have an issue where we can only switch USB on or off."

"What we lack is granular USB control."

Pricing and Cost Advice

"Cortex XDR's pricing is ok."

"I don't recall what the cost was, but it wasn't really that expensive."

"The price is on the higher side, but it's okay."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"It has a yearly renewal."

"The pricing is a little high. It is per user per year."

"The cost depends on your chosen license type, like Pro or other licenses."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"CylanceOPTICS is probably priced equal to other EDRs in the market."

"The pricing for CylanceOPTICS is very good; I would rate it around a nine on a scale of one to ten, with ten being the lowest. It's one of the most affordable options I've seen."

"We pay for the number of endpoints we have and that is about it. On a monthly basis, the licensing cost is $55 per user."

"I would rate the pricing a three out of five."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Manufacturing Company

11%

Healthcare Company

10%

Comms Service Provider

Financial Services Firm

Computer Software Company

15%

Comms Service Provider

Non Profit

Media Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	2
Large Enterprise	4

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Blackberry Optics?

In terms of cost, I find CylanceOPTICS to be reasonable; it's not overly expensive, nor is it at the lower end of the...

See all answers

What needs improvement with Blackberry Optics?

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitat...

See all answers

What is your primary use case for Blackberry Optics?

One of the main use cases for CylanceOPTICS is endpoint detection and response, which even works without internet, un...

See all answers

What is your experience regarding pricing and costs for Heimdal Endpoint Security?

Pricing, compared to what we had before, was quite economical. There was a difference of about twenty percent or some...

See all answers

What needs improvement with Heimdal Endpoint Security?

One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use th...

See all answers

What is your primary use case for Heimdal Endpoint Security?

My company colleagues and I use this antivirus solution. I am part of a company where I deploy solutions, and I also ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs CylanceOPTICS

Compared 13% of the time

Cisco Secure Endpoint vs CylanceOPTICS

Compared 10% of the time

Microsoft Defender for Endpoint vs CylanceOPTICS

Compared 9% of the time

Rapid7 InsightIDR vs CylanceOPTICS

Compared 8% of the time

Malwarebytes Endpoint Detection and Response (EDR) vs CylanceOPTICS

Compared 4% of the time

More CylanceOPTICS Competitors

CrowdStrike Falcon vs Heimdal Endpoint Security

Compared 12% of the time

Microsoft Defender for Endpoint vs Heimdal Endpoint Security

Compared 8% of the time

Cisco Umbrella vs Heimdal Endpoint Security

Compared 6% of the time

Coro vs Heimdal Endpoint Security

Compared 5% of the time

Infoblox BloxOne Threat Defense vs Heimdal Endpoint Security

Compared 5% of the time

More Heimdal Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

CylanceOPTICS

March 2026

Download CylanceOPTICS product report

Buyer's Guide

Endpoint Protection Platform (EPP)

February 2026

Download Heimdal Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Heimdal Next-Gent Endpoint Antivirus, Thor Vigilance Enterprise, Heimdal Endpoint Detection and Response, Heimdal DNS Security - Endpoint, Heimdal Threat Prevention, Heimdal Ransomware Encryption Protection

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Our cloud-native BlackBerry® Optics provide visibility, on-device threat detection and remediation across your organization. In milliseconds. And our EDR approach effectively and efficiently hunts threats while eliminating response latency. It’s the difference between a minor security event—and one that’s widespread and uncontrolled.

BlackBerry

Heimdal Endpoint Security, is a comprehensive suite of security tools designed to safeguard devices from a range of cyber threats. Offering functionalities like Next-Generation Antivirus, Endpoint Detection and Response, Application Control, Firewall, and Mobile Device Management, Heimdal ensures a multi-layered defense against malware, suspicious activities, and unauthorized applications. Its benefits include proactive threat detection, enhanced efficiency through task automation, centralized management for streamlined administration, and dedicated mobile device security features. Targeted primarily at businesses and organizations of all sizes, Heimdal Endpoint Security caters to the diverse cybersecurity needs of modern enterprises, providing robust protection against evolving threats.

Heimdal

Sample Customers

CBI Health Group, University Honda, VakifBank

Cerdant, Washoe County School District

Brother, Symbion, CPH West

Buyer's Guide

Endpoint Detection and Response (EDR)

March 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: March 2026.

DOWNLOAD NOW

884,873 professionals have used our research since 2012.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.