CylanceOPTICS vs Red Canary comparison

BlackBerry and Red Canary, a Zscaler company are both solutions in the Endpoint Detection and Response (EDR) category. BlackBerry is ranked #53 with an average rating of 4.0, while Red Canary, a Zscaler company is ranked #39 with an average rating of 9.0. BlackBerry holds a 0.6% mindshare in EDR, compared to Red Canary, a Zscaler company’s 0.6% mindshare. Additionally, 80% of BlackBerry users are willing to recommend the solution, compared to 100% of Red Canary, a Zscaler company users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

CylanceOPTICS and Red Canary are two leading products in the cybersecurity market, each offering distinct advantages over the other. Based on the results of the data comparisons in each section, Red Canary seems to have the upper hand due to its comprehensive feature set, superior customer support, and higher perceived ROI.

Features: CylanceOPTICS has powerful AI-driven threat detection, minimal resource usage, and proactive security measures. Red Canary provides comprehensive incident response, continuous monitoring capabilities, and effective threat intelligence.

Room for Improvement: CylanceOPTICS needs better integration with other security tools, more detailed reporting, and improved threat remediation. Red Canary can enhance automated threat remediation, optimize for faster detection times, and expand its integration capabilities.

Ease of Deployment and Customer Service: CylanceOPTICS has a straightforward deployment process but occasionally slow customer support. Red Canary offers a smooth deployment and prompt, helpful customer service.

Pricing and ROI: CylanceOPTICS is cost-effective but some users are concerned about its value relative to feature limitations. Red Canary's pricing is considered high, yet the ROI justifies the cost due to its extensive feature set and effective results.

To learn more, read our detailed CylanceOPTICS vs. Red Canary Report (Updated: March 2026).

Buyer's Guide

CylanceOPTICS vs. Red Canary

March 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

4.9

Cortex XDR reduces security incidents, personnel needs, and costs, offering quick ROI, enhanced performance, and competitive pricing.

Sentiment score

3.2

Users saw positive ROI from CylanceOPTICS with improved threat detection, cost savings, faster responses, and a user-friendly interface.

Sentiment score

8.5

Red Canary improved security ROI by efficiently detecting threats, reducing incident response times, and offering detailed alerts and cost savings.

They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.

Eddie Chu

Cyber Security Manager at Welab bank

Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.

MahmoudOsama Abdo

Detection and Response Consultant at Inovasys

In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.

Pasan Jayarathna

Network Security Engineer at Cyberwell Solution

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

Many customers observe a return on investment with CylanceOPTICS since it works effectively without the need for an internet connection.

GauthamVakapalli

Account Manager at Teksalah

For more quotes and insights, download the CylanceOPTICS report

We have probably spent maybe 15% of the time that we were spending on incident investigation and system monitoring, demonstrating a return on investment.

John Hoffoss

Head of Information Security and Privacy at Ovative Group

For more quotes and insights, download the Red Canary report

Customer Service

Sentiment score

7.0

Cortex XDR support is effective and fast but faces issues with language, delays, and high costs, yet generally satisfactory.

Sentiment score

5.2

CylanceOPTICS' customer service is mixed, with effective higher-tier support but lacking initial assistance and geographical challenges.

Sentiment score

8.7

Red Canary's customer service is highly rated for excellent communication, frequent interactions, and effective emergency response.

The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.

AmjadKhan1

Head of data centers at a non-profit with 10,001+ employees

There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.

reviewer1412415

Chief of IT Architecture at a financial services firm with 10,001+ employees

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

When it comes to technical support provided by BlackBerry, my experience has been somewhat slow; if a problem arises, we often have to wait for a reply.

GauthamVakapalli

Account Manager at Teksalah

For more quotes and insights, download the CylanceOPTICS report

In emergencies, there is an on-call person available to resolve issues immediately.

Shubham Biradar

SOC Analyst at Valorant

Their customer support is excellent.

John Hoffoss

Head of Information Security and Privacy at Ovative Group

For more quotes and insights, download the Red Canary report

Scalability Issues

Sentiment score

7.5

Cortex XDR is scalable, supports diverse enterprises, integrates with endpoints, and enables easy expansion with cloud infrastructure.

Sentiment score

4.5

CylanceOPTICS is praised for scalability but faces mixed reviews, especially with larger enterprises and virtual machine demands.

Sentiment score

7.0

Red Canary is praised for scalability and seamless data integration, suitable for diverse clients, though cost may affect smaller enterprises.

You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.

Ankit Pandagre

Assistant Security Architect at Cloudnomics

Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.

AmjadKhan1

Head of data centers at a non-profit with 10,001+ employees

I think scalability for Cortex XDR by Palo Alto Networks is good.

reviewer2798475

Threat Analyst II at a tech vendor with 1,001-5,000 employees

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

No quotes available

For more quotes and insights, download the CylanceOPTICS report

We've been able to connect and throw all of the data that we have access to over to their systems to parse, process, and monitor without issue.

John Hoffoss

Head of Information Security and Privacy at Ovative Group

For more quotes and insights, download the Red Canary report

Stability Issues

Sentiment score

8.0

Cortex XDR is highly regarded for stability, reliable performance, and well-received updates, despite minor occasional disruptions.

Sentiment score

9.2

CylanceOPTICS is praised for its stability, reliability, and compatibility, excelling over McAfee despite minor issues with SentinelOne.

Sentiment score

8.4

Red Canary is praised for its stable and reliable performance, running smoothly without issues, ensuring user satisfaction.

Cortex remains fast and responsive, even with increasing data and alerts.

Surya Kumar Gedala

Final Year Student at Gitam University

The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Cortex XDR is stable, offering high quality and reliable performance.

Eddie Chu

Cyber Security Manager at Welab bank

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

Regarding stability, I have no complaints as CylanceOPTICS has proven to be totally stable, and as of now, we have not encountered any instability.

GauthamVakapalli

Account Manager at Teksalah

For more quotes and insights, download the CylanceOPTICS report

No quotes available

For more quotes and insights, download the Red Canary report

Room For Improvement

Cortex XDR requires enhancements in UI, integration, reporting, and pricing, while addressing false positives and improving automation and mobile support.

CylanceOPTICS needs enhancements in threat automation, detection, and management, facing issues with false positives and scalability.

Red Canary MDR needs improvements in pricing, language support, system features, and integration to better serve diverse clients.

Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.

Surya Kumar Gedala

Final Year Student at Gitam University

The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.

NiteshSharma

Pre Sales Architect at network techlab

If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.

Pratham K

Cyber Security Information Security Specialist at MHM Holding GmbH

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process.

GauthamVakapalli

Account Manager at Teksalah

For more quotes and insights, download the CylanceOPTICS report

Red Canary can be improved by continuing to add new features and capabilities.

John Hoffoss

Head of Information Security and Privacy at Ovative Group

Red Canary's pricing spectrum may not be ideal for smaller financial institutions.

Shubham Biradar

SOC Analyst at Valorant

For more quotes and insights, download the Red Canary report

Setup Cost

Cortex XDR offers flexible pricing from $55 to $90 per endpoint annually, considered cost-effective for its advanced features.

CylanceOPTICS pricing is competitive and affordable, with annual costs under $100 per client, often bundled with services.

Despite higher costs, Red Canary's pricing is considered fair and valuable, enhancing security for enterprises at around $100/device.

The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.

Olive Kusumbara

Consultant at a tech services company with 1,001-5,000 employees

I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.

Eddie Chu

Cyber Security Manager at Welab bank

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

In terms of cost, I find CylanceOPTICS to be reasonable; it's not overly expensive, nor is it at the lower end of the market—it's positioned in the medium range.

GauthamVakapalli

Account Manager at Teksalah

For more quotes and insights, download the CylanceOPTICS report

The services are higher priced.

Shubham Biradar

SOC Analyst at Valorant

For more quotes and insights, download the Red Canary report

Valuable Features

Cortex XDR provides advanced threat detection with AI analytics, real-time blocking, and seamless integration for enhanced security.

CylanceOPTICS provides AI-driven threat detection with auto-containment, script control, and behavior analytics, offering trusted, real-time security solutions.

<p>Red Canary streamlines MITRE ATT&CK processes, EDR integration, and compliance, enhancing security and resource allocation in key industries.</p>

It incorporates AI for normal behavior detection, distinguishing unusual operations.

Eddie Chu

Cyber Security Manager at Welab bank

The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.

NiteshSharma

Pre Sales Architect at network techlab

It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.

Surya Kumar Gedala

Final Year Student at Gitam University

For more quotes and insights, download the Cortex XDR by Palo Alto Networks report

No quotes available

For more quotes and insights, download the CylanceOPTICS report

Red Canary detects threats and attack patterns, allowing us to assess any significant damage caused to the banking environment, particularly if protected data has been damaged or corrupted.

Shubham Biradar

SOC Analyst at Valorant

John Hoffoss

Head of Information Security and Privacy at Ovative Group

For more quotes and insights, download the Red Canary report

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of CylanceOPTICS is 0.6%, up from 0.2% compared to the previous year. The mindshare of Red Canary is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Red Canary	0.6%
CylanceOPTICS	0.6%
Other	95.4%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

GauthamVakapalli

Account Manager at Teksalah

Provides reliable threat detection and response but requires better regional support

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitate towards popular EDRs like CrowdStrike or Sophos, largely due to better marketing, despite BlackBerry Cylance being a superior product. The lack of marketing from distributors or vendors is a critical area where they are falling short. Apart from marketing, it would be beneficial for CylanceOPTICS to establish a dedicated team in GCC since I coordinate with the UK team to handle support. Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process. In terms of scalability, CylanceOPTICS is indeed easy to scale, but one issue I face is related to visibility; while it is scalable, the security teams struggle with limited visibility as we need to gather data from multiple sources.

Read full review

John Hoffoss

Head of Information Security and Privacy at Ovative Group

Gained trusted 24/7 threat coverage and now focus security efforts on architecture and design

In my experience, the best features Red Canary offers are their team, their monitoring team, their expertise at incident investigation, and a focus on suspicious or actual indicators of compromise to ensure that we're not spending time just reviewing logs, but that we're actually looking at things that may indicate we have broader issues. The Red Canary team's expertise stands out compared to others I've worked with because their team is organized into smaller pods that support a given number of clients, so they're not just a bevy of operators going around the clock. The teams themselves have coordination and cohesion, and they get to know us. Their integrations into the different platforms and systems that we use all line up with our needs, whereas a number of other platforms offered a different variety of integrations that did not line up with our requirements. Red Canary has positively impacted my organization because I don't have to spend and hire resources to look at logs, which has enabled us to do much more in terms of improving security across the organization. With the freed-up resources, we've been able to implement CSPM, SAST, software testing tooling, and engage much more closely with our developers and engineers to focus on secure architecture and design.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Healthcare Company

11%

Manufacturing Company

10%

Construction Company

Financial Services Firm

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	2
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	2

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Blackberry Optics?

In terms of cost, I find CylanceOPTICS to be reasonable; it's not overly expensive, nor is it at the lower end of the...

See all answers

What needs improvement with Blackberry Optics?

One improvement I suggest for CylanceOPTICS is more robust marketing efforts from their side. Many customers gravitat...

See all answers

What is your primary use case for Blackberry Optics?

One of the main use cases for CylanceOPTICS is endpoint detection and response, which even works without internet, un...

See all answers

What is your experience regarding pricing and costs for Red Canary MDR?

The services are higher priced.

See all answers

What needs improvement with Red Canary MDR?

Red Canary's pricing spectrum may not be ideal for smaller financial institutions.

See all answers

What is your primary use case for Red Canary MDR?

We use Red Canary ( /products/red-canary-reviews ) to monitor incoming and outgoing traffic. For example, when we rec...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs CylanceOPTICS

Compared 12% of the time

Cisco Secure Endpoint vs CylanceOPTICS

Compared 9% of the time

Rapid7 InsightIDR vs CylanceOPTICS

Compared 8% of the time

Microsoft Defender for Endpoint vs CylanceOPTICS

Compared 8% of the time

Kaspersky Endpoint Security for Business vs CylanceOPTICS

Compared 5% of the time

More CylanceOPTICS Competitors

Expel vs Red Canary

Compared 6% of the time

SentinelOne Vigilance vs Red Canary

Compared 6% of the time

Huntress Managed EDR vs Red Canary

Compared 5% of the time

CrowdStrike Falcon Complete MDR vs Red Canary

Compared 5% of the time

Arctic Wolf Managed Detection and Response vs Red Canary

Compared 4% of the time

More Red Canary Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

CylanceOPTICS

March 2026

Download CylanceOPTICS product report

Buyer's Guide

Managed Detection and Response (MDR)

February 2026

Download Red Canary product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Red Canary Managed Detection and Response (MDR)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Our cloud-native BlackBerry® Optics provide visibility, on-device threat detection and remediation across your organization. In milliseconds. And our EDR approach effectively and efficiently hunts threats while eliminating response latency. It’s the difference between a minor security event—and one that’s widespread and uncontrolled.

BlackBerry

Red Canary Managed Detection and Response (MDR) offers robust threat detection, rapid response capabilities, continuous security monitoring, and seamless integration with existing tools. Valued for its actionable reporting and proactive threat intelligence, it streamlines operations and enhances organizational efficiency and security.

Red Canary, a Zscaler company

Sample Customers

CBI Health Group, University Honda, VakifBank

Cerdant, Washoe County School District

DuPont, Quanta Services, Microchip Technology, Hopkins Public Schools, Henny Penny, Schumacher Homes

Buyer's Guide

CylanceOPTICS vs. Red Canary

March 2026

Free Report: CylanceOPTICS vs. Red Canary

Find out what your peers are saying about CylanceOPTICS vs. Red Canary and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our CylanceOPTICS vs. Red Canary report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.