BlackBerry Protect (CylancePROTECT) vs. IBM Security QRadar EDR

If I had to recommend an endpoint AV solution, [BlackBerry Protect (CylancePROTECT)] would be on the list...in fact at the top of the current list. It is a cost effective solution. When we did the bakeoff in our selection we built 3 generic W10 PCs. We located a Malware repository on the internet and downloaded a package of 100. The first solution stopped 80% from installing, the second stopped 100%, [BlackBerry (CylancePROTECT)] would not let the package download! Winner winner chicken dinner :)

Incentivized

IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.

Incentivized

• Cylance uses AI Math-Model algorithms/machine-learning solutions, compared to other solutions which use signature-based solutions.
• The Cylance client is very light-weight and is not as resource hungry.
• The blocking capability is completely customizable through policies. Macro blocking, script blocking, and device blocking (USB, CDROM, iPhone, Android, etc.) can all be customized per organization needs.
• Management interface is easy to use. The dashboard gives administrators a quick glance at threat events, threat protection, and device protection. Reports give you quick glances at infections, stale versions, and computers that have been offline for a period of time. Updates are easy to roll out in a tiered fashion to properly test.
• Customer support is great! You can open up a ticket within the management portal and get help within a few hours. Most of the support is over email unless it is complicated, then they will do a remote session.

Incentivized

• Uses advanced analytics to detect threats and malwares and vulnerabilities in real time.
• Intuitive interface so everyone can use it.
• Easy to implement and set it up.

Incentivized

• It would be great if there was a way for an administrator to make a file as safe from the end user device when a false positive has occurred (which is rare). At present and administrator has to log into the web console, create an exception and then wait 60-120 seconds for this to be effective on the end user device, still great, but this can be frustrating for users that are urgently trying to use the file.
• Executive reporting could be better. Just a single page dashboard report that could be included in other monthly reporting.

Incentivized

• use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
• easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
• apply the remediation to a range of endpoint instead to only the endpoint of the current alert
• use ajax for example to update the alert page automatically while actions are happening
• for api have profiles that allow only get actions, or just post on some actions
• create users in bulk

Incentivized

It's simply been the best product I've used and tested within the past four years.

Incentivized

1. Great product
2. Great technology
3. Great people
4. Great leader (Stuart McClure)
5. Great Service

I work with hundreds of complex suppliers in healthcare and tech, and this company is more than just an extension of our business.

I have only used CylancePROTECT support one time and they were very fast and responsive with the answers that solved my issue. That is the only reason I gave them a 7 as I have only had one interaction with them.

Incentivized

At the time we were looking to upgrade to the Blackberry version, we already had the Dell branded version of Cylance installed on our machines and we really liked it. Once we got the pricing comparison between Carbon Black and Blackberry we made the decision to stick with Cylance since we knew it was proven to work well in our environment with some of our unique software.

Incentivized

Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).

Incentivized

• We are spending less time troubleshooting potential attacks - all alerts go to our management interface and we can globally clear/block items.
• Users are not getting upset at the resources taken by antivirus - they feel they got their speedy machine back.

Incentivized

• NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
• IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
• In general, IBM Security QRadar EDR enhances enterprise security posture

Incentivized