Try our new research platform with insights from 80,000+ expert users
Cybereason Endpoint Detection & Response Logo

Cybereason Endpoint Detection & Response pros and cons

Vendor: Cybereason
3.9 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cybereason Endpoint Detection & Response enables real-time mitigation and isolation of threats.
The command line mitigation feature is highly valued for handling investigations.
Threat hunting and investigation capabilities offer significant added value.
Cybereason Endpoint Detection & Response dramatically increases network visibility.
The ease and clarity of Cybereason Endpoint Detection & Response setup is frequently praised.

CONS

Cybereason Endpoint Detection & Response initially took some time to deploy and can be complicated for smaller organizations.
There are frequent issues with false positives and duplication of alerts, leading to increased alerts to manage.
The PowerShell compatibility of Cybereason Endpoint Detection & Response has certain limitations, impacting day-to-day business operations.
The device control features, particularly USB management, require enhancement for better network coverage and connectivity.
Grouping functionality in Cybereason Endpoint Detection & Response needs improvement, and users are looking for enhanced operational capabilities, including the ability to create groups of groups with inheritance.
 

Cybereason Endpoint Detection & Response Pros review quotes

it_user940596 - PeerSpot reviewer
Security Analyst at a manufacturing company with 1,001-5,000 employees
Oct 8, 2018
Immediately we can pick up the computers in the network if any malicious operation that is triggered.
Security01c2 - PeerSpot reviewer
Security Specialist at a tech services company with 201-500 employees
Oct 8, 2018
It gives all the information in a clear response.
it_user821649 - PeerSpot reviewer
Global IT Project Manager at a manufacturing company with 10,001+ employees
Dec 23, 2019
For me, the technical support is good.
Learn what your peers think about Cybereason Endpoint Detection & Response. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,986 professionals have used our research since 2012.
FP
Senior Project Manager at a transportation company with 10,001+ employees
Aug 24, 2020
The solution is efficient.
reviewer1319712 - PeerSpot reviewer
Systems Engineer at a tech services company with 11-50 employees
Jan 10, 2021
The dashboard is very good and you can consider it as an interactive UI.
NL
Information Security Administrator at a insurance company with 1,001-5,000 employees
Jun 9, 2021
Cybereason absolutely enables us to mitigate and isolate on the fly. Our managed detection response telemetry has dropped dramatically since we began using it. It's very top-of-mind. We were running some tabletop exercises and none of the detections were getting triggered by the managed security services provider. So we needed to find a solution that would trigger high-fidelity alerts. That was Cybereason and it dramatically changed our landscape from the detection and response perspective.
reviewer1678386 - PeerSpot reviewer
Senior Security Engineer at a financial services firm with 1,001-5,000 employees
Sep 23, 2021
Their EDR solution, the ability to mitigate issues through their command line, is probably the best feature that we've had. We use that all the time. It's very useful for doing investigations.
it_user1388868 - PeerSpot reviewer
Security Consultant at a computer software company with 10,001+ employees
Nov 3, 2021
The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running.
JB
Director of Learning and Development at ACA - Ateliers de conversation anglaise
Dec 21, 2021
Cybereason's threat hunting and investigation are the most valuable features. Threat hunting is a user-friendly feature that keeps you safe. Investigation offers an added value that I haven't seen with other EDR services. It allows you to find specific policy problems within your environment.
DH
Information Security Analyst at a comms service provider with 51-200 employees
Jan 15, 2022
We didn't have the visibility that we now have. It has increased our visibility by a lot. So, we put a lot more time into really looking at our environment and what is happening throughout our different networks. It has increased our visibility by around fivefold.
 

Cybereason Endpoint Detection & Response Cons review quotes

it_user940596 - PeerSpot reviewer
Security Analyst at a manufacturing company with 1,001-5,000 employees
Oct 8, 2018
It initially took some time to deploy.
Security01c2 - PeerSpot reviewer
Security Specialist at a tech services company with 201-500 employees
Oct 8, 2018
There can be problems with the EDI.
it_user821649 - PeerSpot reviewer
Global IT Project Manager at a manufacturing company with 10,001+ employees
Dec 23, 2019
The integration with Microsoft solutions and Microsoft capabilities needs to be improved.
Learn what your peers think about Cybereason Endpoint Detection & Response. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,986 professionals have used our research since 2012.
FP
Senior Project Manager at a transportation company with 10,001+ employees
Aug 24, 2020
Reporting could be a bit more granular so that we had the ability to check regions and countries. I just noticed that, for instance, if I look at our servers, it's either "contained" or it's "not contained". I don't have the option, for instance, to look at countries. It only allows me to look at users as one big group.
reviewer1319712 - PeerSpot reviewer
Systems Engineer at a tech services company with 11-50 employees
Jan 10, 2021
Cybereason does not have sandbox functionality.
NL
Information Security Administrator at a insurance company with 1,001-5,000 employees
Jun 9, 2021
Ad hoc higher-level reporting to senior management can be improved or can be implemented. That's definitely an area of improvement that they need to focus on.
reviewer1678386 - PeerSpot reviewer
Senior Security Engineer at a financial services firm with 1,001-5,000 employees
Sep 23, 2021
Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts.
it_user1388868 - PeerSpot reviewer
Security Consultant at a computer software company with 10,001+ employees
Nov 3, 2021
The product's reporting isn't great.
JB
Director of Learning and Development at ACA - Ateliers de conversation anglaise
Dec 21, 2021
The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor.
DH
Information Security Analyst at a comms service provider with 51-200 employees
Jan 15, 2022
Its Microsoft PowerShell protections still need some compatibility improvements. We have run across just a few. It is compatible with 90% of what we have in our network, but there is that 10% that we are still struggling with as far as compatibility with the type of PowerShell scripts needed to run our day-to-day business.