Attivo Endpoint Detection Net (EDN) vs. BlackBerry Protect (CylancePROTECT)

Attivo Endpoint Detection Net (EDN) is a suitable option in mid level and large companies to detect insider threats and stealthy attackers. It is highly recommended where data is highly sensitive and there are chances of attack to get access to critical revers to get saves credentials and stored files. for small and medium business this solution is not recommended where perimeter security is already configured.

Incentivized

The policies that you make is where it's key. The "less you let people do, the better it will be" so to speak. So if you really clamp down on a policy and don't let people do specific things, then it'll be better for you. It also helps to protect the "not so tech savvy" people as well. Basically the same thing as above, if you have users that need more flexibility, on occasion the policies might come into play and interfere if you're not careful.

Incentivized

• To mimic production servers to deceive attackers
• To detect the lateral movements of adversary through machine learning algorithms
• To feed dummy data on production servers through threat strike feature

Incentivized

• Fast and Unobtrusive, users hardly notice that Cylance is running on their computer, except when it detects something malicious
• User interface is simple for end users, and the management interface is streamlined and easy to get started with. The management interface has a quick tutorial that comes up upon first login that explains all the different aspects of how to configure CylanceProtect.
• Customer support is fantastic - in that if you get stuck or need help understanding a feature/setting, they are quick to respond and help to ensure that your configuration is set as optimal as possible for your scenarios.

Incentivized

• Attivo Endpoint Detection Net (EDN) should have capability for getting forensics packages from compromised systems in my opinion.
• I believe Auto phishing email detection capability should be improved to meet industry requirements to tackle phishing attack vector
• Malware detection capabilities should be improved to work to kernel level for better visibility in my opinion.

Incentivized

• It would be great if there was a way for an administrator to make a file as safe from the end user device when a false positive has occurred (which is rare). At present and administrator has to log into the web console, create an exception and then wait 60-120 seconds for this to be effective on the end user device, still great, but this can be frustrating for users that are urgently trying to use the file.
• Executive reporting could be better. Just a single page dashboard report that could be included in other monthly reporting.

Incentivized

It's simply been the best product I've used and tested within the past four years.

Incentivized

1. Great product
2. Great technology
3. Great people
4. Great leader (Stuart McClure)
5. Great Service

I work with hundreds of complex suppliers in healthcare and tech, and this company is more than just an extension of our business.

I have only used CylancePROTECT support one time and they were very fast and responsive with the answers that solved my issue. That is the only reason I gave them a 7 as I have only had one interaction with them.

Incentivized

Attivo provides a user friendly management with a centralized manager. We can do configuration of Attivo Endpoint Detection Net (EDN) from a centralized console and deploy the Attivo Endpoint Detection Net (EDN) very easily. In other deception tool like forti deceptor etc, they have a bit poor user interface in my opinion and use-ability feature are improved in Attivo as compared to its competitors solutions I believe

Incentivized

Cylance, I believe is the only one that uses the predict and prevent execution of advanced threats and malware at the endpoint. Cylance is by far a superior product.

Incentivized

• Attivo Endpoint Detection Net (EDN) helps to protect information hence Attivo Endpoint Detection Net (EDN) is securing sensitive data therefore ROI is better as loosing the data is much more costlier as per Business Impact Analysis.
• In small organization ROI is not effective as cost of Attivo Endpoint Detection Net (EDN) is a bit high and data being protected through EDN is not high value asset in my opinon.
• It is a better technology to detect cyber threats so anyway it is recommended to use for better security posture.

Incentivized

• We have the piece of mind that our endpoints are protected.
• We have more time to work on other projects as we don't have to worry about computers being on to have scheduled scans.
• Our computers CPU and RAM aren't going to be taken up with big process like typical anti-virus programs do.

Incentivized