No more typing reviews! Try our Samantha, our new voice AI agent.

BigFix vs BlackBerry Cylance Cybersecurity comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
BigFix
Ranking in Endpoint Protection Platform (EPP)
21st
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
100
Ranking in other categories
Configuration Management (9th), Patch Management (7th), Unified Endpoint Management (UEM) (10th), Autonomous Endpoint Management (7th)
BlackBerry Cylance Cybersec...
Ranking in Endpoint Protection Platform (EPP)
34th
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
44
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of BigFix is 2.0%, up from 1.1% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.8%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
BigFix2.0%
BlackBerry Cylance Cybersecurity1.8%
Other92.4%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
InderjeetSingh4 - PeerSpot reviewer
Administrator at a tech vendor with 10,001+ employees
End-to-end automation has simplified patching and software deployment across thousands of servers
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initiated through the patch policy, it appears on the console but arrives in chunks. When targeting hundreds of servers from the patch policy, the actions come in chunks such as ten out of six, ten out of nine, or ten out of fifteen. This fragmented approach creates a significant challenge for the patching team to monitor the action status. I would recommend that the development team provide a single action or one to two actions instead of multiple actions requiring individual monitoring. A broad status update could be provided to the client indicating the overall progress of the patch policy implementation rather than requiring monitoring of every individual action. This would reduce the bandwidth required by the team to track multiple actions on the console.
Sooraj Makkancherrry - PeerSpot reviewer
Security Operations Manager at Philips
Doesn't have daily updates, which is important for healthcare IT
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The protection offered by this product is good, as is the endpoint reporting."
"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."
"The integrations are out-of-the-box, as are the playbooks."
"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."
"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"Cortex XDR by Palo Alto Networks should be a stable solution."
"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."
"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"The most valuable feature is the patching."
"IBM BigFix is one of the easiest client management tools to install."
"Before we had BigFix, we had problems with some malware. BigFix allows us to immediately patch all instances of endpoints that were vulnerable to antivirus and initiate scans. That's key."
"BigFix is value for money - You get a simple, robust, dynamic and very powerful solution for a very reasonable price."
"In terms of vulnerability management, it gives tough competition by providing a single management console with multiple benefits."
"We've actually fixed the patching by improving our patch application by almost 60%."
"The solution has many useful features; its main advantage is simplicity—you can do everything from one console, regardless of the task, and it supports many operating systems and is scalable to up to 250,000 clients."
"It has plugins development options, which are great."
"Endpoints are protected in real-time without the need of a centralized server, whitelist, or the ability to connect to a central host in the cloud."
"The solution is easy to deploy."
"From an administrative overhead point of view, there is a 75% reduction in administrating the solution."
"In most cases, the solution's ability to detect in the MITRE framework, and its ability to be able to detect attacks in any one of seven or eight different areas of the life cycle of an attack is very useful."
"The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background."
"I find the actual overall endpoint malware protection the most valuable feature of CylancePROTECT."
"We chose the solution because it doesn't have daily updates, which is important for us in healthcare IT, where network usage and connectivity to hospitals matter."
"The deployment of updates is easy."
 

Cons

"The solution needs better reports. I think they should let the customer go in and customize the reports."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"The MAC agent is not as robust feature-wise as the PC version."
"The encryption is not up to the mark."
"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"The deployment is pretty hard."
"The relevant language takes a little getting used to since it's not used anywhere else in the industry. It's just in the BigFix environment."
"The console interface is not friendly, and requires training before using it in production."
"While performing integration, we face many issues with IBM solution. We need detailed information about those issues that can help users to mitigate them."
"The deployment has room for improvement and can be more streamlined."
"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."
"The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that."
"It could use better integration with Hypervisor products like VMware."
"I'd definitely like to see additional feature parody in the web UI versus the console."
"The security scripting needs improvement. It needs deeper security for scripting."
"The product does not do a lot of reporting on what it is taking care of. Enhanced reporting would be a welcome improvement."
"Additionally, their channel management has been lacking, with a notable disregard for small and medium-sized businesses, focusing primarily on large enterprises and very large MSPs."
"Technical support is bad. I am not happy with the level of support they offer."
"The high price of the product is an area of concern where improvements are required. The product's price should be more competitive."
"The AI of CylancePROTECT has room for improvement. I'm on a trial license of SentinelOne, and its AI is much better than what's on CylancePROTECT."
"The user interface could be improved, it's very outdated."
"It just doesn't make you feel like you're getting covered or have the best protection, which you should have."
 

Pricing and Cost Advice

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The tool's price is moderate."
"I feel it is fairly priced."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"This is an expensive solution."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"The price is very fair."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"When purchasing, buying with other IBM tools provided us with a very good discount in pricing."
"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"The price is reasonable, but our customers find it expensive."
"Compliance, inventory, and licensing are really pricey. They should lower the price. It discourages users from getting onboard."
"I would stay with the Managed Virtual Server license model, which is a 1-to-1 license per OS whether it is virtual or physical."
"The tool is not that expensive."
"I think that the price we are paying is good for what it is."
"This cost of the license is approximately $5 USD monthly per user."
"Our licensing cost for the solution is around $4,000 for six months. There are no costs in addition to the standard licensing fees."
"The monthly fee is $55 USD per user."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a seven out of ten."
"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."
"​Shop around for sure and be assured the price you pay will be close to other solutions available, but even at a slight mark-up from the other solutions, you are getting real endpoint protection versus nothing more than a cheap security blanket that might keep you warm at night."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
6%
Outsourcing Company
12%
Construction Company
11%
Manufacturing Company
8%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise68
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise5
Large Enterprise14
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for BigFix?
I rate the price for BigFix as medium, neither low nor high.
What needs improvement with BigFix?
There is one feature in BigFix called the automation patch policy that requires enhancement. When an action is initia...
What is your primary use case for BigFix?
My current use case involves being one of the products and one of the clients implementing this tool.
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Tivoli Endpoint Manager
Blackberry Protect
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit
Find out what your peers are saying about BigFix vs. BlackBerry Cylance Cybersecurity and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.