BlackBerry Cylance Cybersecurity vs Cisco Secure Cloud Analytics [EOL] comparison

Why PeerSpot?

The compared BlackBerry and Cisco solutions aren't in the same category. BlackBerry is ranked #34 in EPP , and holds a 1.8% mindshare in the category. Additionally, 85% of BlackBerry users are willing to recommend the solution, compared to 100% of Cisco users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between BlackBerry Cylance Cybersecurity and Cisco Secure Cloud Analytics [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP).

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: October 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download the complete report

Helped 921,523 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Sudhanshu Pandey

Security Analyst at Orange España

Efficiently generates alerts for suspicious activities and scales easily

There are two areas of improvement. Firstly, extend the log retrieval limit to at least three months. For example, there is a limit on the number of log messages that can be received. So, I would like to expand the log retrieval limit. And another thing, if we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration. If a new user wants to learn how it should work, how policies work, and where we can configure policies, there should be some learning material for this product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex XDR by Palo Alto Networks should be a stable solution."

"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."

"Cortex XDR by Palo Alto Networks has helped lighten the load of our security analysts because it was the major tool that we were using and the one we utilized most."

"They did what they said, and this solution could apply to any scenario."

"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"They have a new GUI which is just fantastic."

"If you are looking for security, mainly for advanced threat prevention from ransomware and malware attacks, I would recommend Cortex."

More Cortex XDR by Palo Alto Networks pros

"The most valuable features of CylancePROTECT are its powerful machine-learning capabilities and predictive intelligence."

"This technology is very good, very stable, and we have great trust in it and what it delivers."

"The most functional item that we use is the process to turn off the false flags that it causes."

"The non-daily requirement to update signatures is the most valuable feature. From a functional point of view, it is pretty spot on. For instance, we compared an algorithm from five years ago to today's algorithm, and it was 98% accurate. It has the ability to detect and mitigate. In the industrial environment that we work in, there's what we call OT versus IT. You are IT Central, but this is OT. Generally, we don't have the same level of skillset as IT individuals or IT professionals have. This particular product doesn't require you to be a computer scientist to be able to understand its proprietary algorithm and to be able to deploy, use, and work within it. It integrates well with a robust SIEM or SOAR solution, and it plays nice with others. We use other detection solutions like CyberX or site provision with Cisco, and it plays nice. That's one of the things we really liked about it."

"The Application Guard and ByteGuard are useful features."

"It secures different entry points into the network."

"I've found the AI engine in CylancePROTECT to be particularly effective for technology and in preventing unknown threats."

"It actively monitors the behavior and activity of processes and will, without hesitation, terminate at root anything it determines to be suspect."

More BlackBerry Cylance Cybersecurity pros

"Cisco Stealthwatch Cloud is scalable because it is on the cloud."

"It tells you if there is any communication going to command and control servers, or if there is any traffic that violates your internal policy, or if any data hoarding is happening where data is being dumped from your machine to outside of the environment. It provides all such meaningful reports to help you understand what's happening."

"The logs in Cisco Stealthwatch Cloud are very good when doing the API integration in the team. It is able to give you important information for the correlations."

"I would recommend Cisco Stealthwatch Cloud 100 percent."

"We were able to prevent an electric fraud of almost $200,000."

"When it comes to scalability, there's no size limit. It varies based on licenses and requirements."

"My advice to others is Cisco has great solutions and I would recommend them."

"Monitoring the traffic, making sure you have the visibility."

More Cisco Secure Cloud Analytics [EOL] pros

Cons

"The solution should enhance the ADR and reporting."

"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."

"It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control. Currently, Cortex is good in terms of the security of the endpoints, but it is not as good as other vendors in terms of the management of the endpoint."

"It'll help if customization was easier."

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."

"To jump from the partner to Palo Alto directly was challenging."

"The technical support is not very good. I find the process difficult."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

More Cortex XDR by Palo Alto Networks cons

"The security scripting needs improvement. It needs deeper security for scripting."

"The company that sells us the licenses sometimes doesn't know how to do certain things."

"It should have better support for Windows and Mac."

"An area for improvement in CylancePROTECT is its pricing, as it's a bit costly."

"It should provide more details about the events that they have detected."

"I'd like them to do software distribution too, but they said that that's architecturally not at the product line."

"It needs real analysis of quarantined files. The EDR product isn't showing much right now."

"I would like to see a better UI in terms of sifting through more specific data and providing analytics. A little bit more would be nice."

More BlackBerry Cylance Cybersecurity cons

"The product's price is high."

"The initial setup of Cisco Stealthwatch Cloud is complex."

"If we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface."

"The product needs to improve its user-friendliness. It is very tricky and you need to study it before using the standard functionalities."

"The initial setup is a bit complex in terms of deployment and configuration."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface. so that. Not everybody's a cyber security professional, most of the customers that I deal with are not very skilled. The terms that they use in the solution are quite understandable for a normal CIO."

"When I used to work on it, I just didn't see anything new happening for about a year and a half. Providing newer data and newer reports constantly would help. There should be more classifications and more interesting data."

Pricing and Cost Advice

"Very costly product."

"Cortex XDR by Palo Alto Networks is an expensive solution."

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"The price was fine."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"Our customers have expressed that the price is high."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"Its pricing is kind of in line with its competitors and everybody else out there."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"CylancePROTECT's pricing is reasonable, at about €18 per user, per year."

"I think that the price we are paying is good for what it is."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."

"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

"My company is on a yearly CylancePROTECT subscription. Price-wise, the solution is slightly expensive, so I'd rate it as eight out of ten."

"It is expensive, but not unreasonable."

"The initial end-point cost may seem a little high (~$55/device/year) but when you look at the total peace of mind that the solution provides, with no reboots for updates, and negligible performance impact, it is well worth it."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"The solution is quite expensive."

"Cisco Stealthwatch Cloud is an expensive enterprise solution."

"The price of Cisco Stealthwatch Cloud is expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

921,523 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Outsourcing Company

12%

Construction Company

11%

Manufacturing Company

Financial Services Firm

Construction Company

13%

Comms Service Provider

12%

Outsourcing Company

12%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	1
Midsize Enterprise	2
Large Enterprise	6

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

VMware Carbon Black Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

Intercept X Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

More BlackBerry Cylance Cybersecurity Competitors

Darktrace vs Cisco Secure Cloud Analytics [EOL]

Compared 16% of the time

CrowdStrike Falcon vs Cisco Secure Cloud Analytics [EOL]

Compared 12% of the time

Qualys Exposure Management vs Cisco Secure Cloud Analytics [EOL]

Compared 8% of the time

BigFix vs Cisco Secure Cloud Analytics [EOL]

Compared 6% of the time

Tanium vs Cisco Secure Cloud Analytics [EOL]

Compared 6% of the time

More Cisco Secure Cloud Analytics [EOL] Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

November 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BlackBerry Cylance Cybersecurity

November 2026

Download BlackBerry Cylance Cybersecurity product report

Buyer's Guide

Cisco Secure Cloud Analytics [EOL]

November 2026

Cisco Secure Cloud Analytics [EOL] report

Download Cisco Secure Cloud Analytics [EOL] product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackberry Protect

Cisco Stealthwatch Cloud, Observable Networks

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

BlackBerry Cylance Cybersecurity, renowned for its AI-driven approach, provides comprehensive endpoint protection against sophisticated threats, including ransomware and zero-day attacks, ensuring security without frequent updates.

Known for its lightweight design, BlackBerry Cylance integrates artificial intelligence and machine learning to deliver a powerful cybersecurity platform. Businesses benefit from its low CPU usage and advanced threat detection, utilizing a centralized dashboard for seamless management. Cylance's predictive intelligence and ability to block unauthorized applications make it invaluable in safeguarding both internal networks and endpoints. Despite its high pricing, users seek improvements in information display, post-incident details, and reporting features, alongside better script whitelisting and modernized interface.

What are its most important features?

Lightweight Design: Ensures minimal impact on system resources.
AI and Machine Learning: Enhances threat detection capabilities without relying on constant updates.
Endpoint Protection: Provides robust security for desktops, servers, and virtual machines.
Script Blocking: Prevents unauthorized scripts from running.
Centralized Dashboard: Simplifies management and monitoring tasks.

What benefits should users look for in reviews?

Predictive Intelligence: Offers proactive threat prevention, reducing risks of zero-day attacks.
Ease of Deployment: Facilitates faster, streamlined implementation across global systems.
Low CPU Usage: Maintains system performance while providing security.
Comprehensive Threat Analytics: Delivers actionable insights for enhanced security planning.

Organizations in sectors such as finance and healthcare deploy BlackBerry Cylance for its sophisticated security measures, enhanced threat analytics, and device control capabilities, ensuring operations remain secure even within closed network environments.

BlackBerry

Cisco Secure Cloud Analytics is a cloud-based security solution that provides visibility and threat detection for cloud environments. It offers software mapping and automation for incident response, forensic analysis, and segmentation of IT architecture. The solution can be used on-premise or on the cloud and is used in various sectors such as insurance and government.

The logs in Cisco Secure Cloud Analytics are valuable for API integration in a team as they provide important information for correlations. The solution also offers automated incident response and integration with next-generation firewalls and antivirus solutions."

Cisco

Sample Customers

CBI Health Group, University Honda, VakifBank

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Options, Schneider Electric, Washington University in St Louis, Gotcha, Kraft Kennedy, PartnerRe, Sumologic, Veterans United, AFGE, Agraform, Artesys, Dynamic Ideas Financials, Department of Agriculture and Commerce

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download Free Report

Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.

DOWNLOAD NOW

921,523 professionals have used our research since 2012.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.