BlackBerry Protect (CylancePROTECT) vs. Kaspersky EDR Optimum

If I had to recommend an endpoint AV solution, [BlackBerry Protect (CylancePROTECT)] would be on the list...in fact at the top of the current list. It is a cost effective solution. When we did the bakeoff in our selection we built 3 generic W10 PCs. We located a Malware repository on the internet and downloaded a package of 100. The first solution stopped 80% from installing, the second stopped 100%, [BlackBerry (CylancePROTECT)] would not let the package download! Winner winner chicken dinner :)

Incentivized

We have been using Kaspersky EDR Optimum for over 10 years, with the evolution of products reaching EDR now, we can verify the integrated responsiveness and visibility of our environment. Great protection tool on all OS. Very good value for money, with the new licensing, all business plans will now have native EDR.

Incentivized

• Fast and Unobtrusive, users hardly notice that Cylance is running on their computer, except when it detects something malicious
• User interface is simple for end users, and the management interface is streamlined and easy to get started with. The management interface has a quick tutorial that comes up upon first login that explains all the different aspects of how to configure CylanceProtect.
• Customer support is fantastic - in that if you get stuck or need help understanding a feature/setting, they are quick to respond and help to ensure that your configuration is set as optimal as possible for your scenarios.

Incentivized

• KEDR Optimum is helping to see threat kill chain formation, which helps to get clear picture of the what exactly attacker was trying to do during attack.
• We are crating prevent execution rules to block the threat in our complete infra.
• Ioc scan to validate and remove the any active threat entry from our endpoints

Incentivized

• It would be great if there was a way for an administrator to make a file as safe from the end user device when a false positive has occurred (which is rare). At present and administrator has to log into the web console, create an exception and then wait 60-120 seconds for this to be effective on the end user device, still great, but this can be frustrating for users that are urgently trying to use the file.
• Executive reporting could be better. Just a single page dashboard report that could be included in other monthly reporting.

Incentivized

• Agent package size is little big, if it can be optimize with lite package would be great
• If possible Host Integrity functionality can be added, to take action as quarantine the non-compliance machine to connect our enterprise network
• Many times KSC cloud operating slow, if it can optimized for the faster response

Incentivized

It's simply been the best product I've used and tested within the past four years.

Incentivized

At the moment and unfortunately we'll not renew our licenses, due to the Russian conflict and the company policy that has forced us to get rid of any Russian related product. Before that incident, we were very happy with the product and we did not even think once about changing it... Maybe on the future...

Incentivized

1. Great product
2. Great technology
3. Great people
4. Great leader (Stuart McClure)
5. Great Service

I work with hundreds of complex suppliers in healthcare and tech, and this company is more than just an extension of our business.

This item can always be improved, perhaps by pre-elaborating very long reports, such that they are built progressively so that when the user wants to consult them, the delay is minimal. It would also be interesting to have a warehouse of reports, which serves as a repository where they can be consulted whenever needed, adding AI capabilities that allow data to be linked together and improve the analysis and possible correlations of events.

Incentivized

I have only used CylancePROTECT support one time and they were very fast and responsive with the answers that solved my issue. That is the only reason I gave them a 7 as I have only had one interaction with them.

Incentivized

Cylance, I believe is the only one that uses the predict and prevent execution of advanced threats and malware at the endpoint. Cylance is by far a superior product.

Incentivized

After several evaluations we concluded that the kasprsky provider has a solution for each processing environment we have.This impacts an excellent cost-benefit for achieving economies of scale on the company's infrastructure. On the other hand, we verified that during its operation, its level of effectiveness in terms of malware detection is excellent. Finally, it provides a desktop patch management solution that we found efficient and effective. Allowing you to automate the distribution of patches with a minimum staffing of technical personnel.

Incentivized

• We have the piece of mind that our endpoints are protected.
• We have more time to work on other projects as we don't have to worry about computers being on to have scheduled scans.
• Our computers CPU and RAM aren't going to be taken up with big process like typical anti-virus programs do.

Incentivized

• In mayor aspect, saving time for IT/Cybersecurity teams.
• Agile process to short the operations outages.
• Centralized view and relevant data for SOC team.

Incentivized