No more typing reviews! Try our Samantha, our new voice AI agent.

BlackBerry Cylance Cybersecurity vs OpenText EnCase eDiscovery comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
BlackBerry Cylance Cybersec...
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
44
Ranking in other categories
Endpoint Protection Platform (EPP) (34th)
OpenText EnCase eDiscovery
Average Rating
7.8
Reviews Sentiment
7.7
Number of Reviews
8
Ranking in other categories
eDiscovery (8th)
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
BlackBerry Cylance Cybersecurity1.8%
Microsoft Defender for Endpoint6.4%
CrowdStrike Falcon5.5%
Other86.3%
Endpoint Protection Platform (EPP)
eDiscovery Mindshare Distribution
ProductMindshare (%)
OpenText EnCase eDiscovery4.6%
Commvault Cloud5.6%
kCura Relativity5.2%
Other84.6%
eDiscovery
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Sooraj Makkancherrry - PeerSpot reviewer
Security Operations Manager at Philips
Doesn't have daily updates, which is important for healthcare IT
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.
Alejandro Stromer - PeerSpot reviewer
Director Consulting SAP OpenText en Entelgy at DCL Consultores EIM SL
A stable and scalable hybrid solution with easy setup
The solution is scalable. It has three levels. You have the presentation area that can be escalated to the balance sheet. You have the back-end area that can be escalated using higher viability to configure more application servers. Also, the area of storage can be increased. We usually cater to enterprise solutions but have small- and medium-sized customers. It starts with 25 users and goes up to 100s and 1000s.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Palo Alto Networks Traps improves our security posture and lowers risk by providing next-gen methods to combat against modern threats on all the major platforms."
"The user interface of the solution is sophisticated and straightforward."
"The most valuable features of this product are the management capabilities, which allow an IT organization to get quite a good picture of attempted cyber attacks, and its out-of-the-box investigation capabilities."
"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."
"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."
"These days it's machine-learning technology and behavior-based analytics features that make us more secure."
"The solution helps find bugs, and it is safe to use to prevent attacks by hackers."
"We have been trained to learn how to use the product and now we have a very good experience with it."
"The solution is stable; it was no problem and all went quite well, with no bugs or freezes."
"The non-daily requirement to update signatures is the most valuable feature. From a functional point of view, it is pretty spot on. For instance, we compared an algorithm from five years ago to today's algorithm, and it was 98% accurate. It has the ability to detect and mitigate. In the industrial environment that we work in, there's what we call OT versus IT. You are IT Central, but this is OT. Generally, we don't have the same level of skillset as IT individuals or IT professionals have. This particular product doesn't require you to be a computer scientist to be able to understand its proprietary algorithm and to be able to deploy, use, and work within it. It integrates well with a robust SIEM or SOAR solution, and it plays nice with others. We use other detection solutions like CyberX or site provision with Cisco, and it plays nice. That's one of the things we really liked about it."
"The Application Guard and ByteGuard are useful features."
"What's most valuable in CylancePROTECT is the optics feature. I also like its easy-to-use and user-friendly dashboard and monitoring system."
"The solution runs in the background, and I do not need to care about it."
"​Centralized dashboard online which can be used for managing a huge product."
"Has good RAM capacity for the power I need"
"The technical support is excellent."
"The most important feature we've found is the Enscripts, as it allows me to customize the scripts and deploy them as and how I need them, for example to segregate and index files efficiently."
"The solution is very stable."
"The solution has been quite good, and, overall, the features we need are available to us."
"It speeds up the process, so I can meet my deadlines."
"The most important feature we've found is the Enscripts. That is one powerful feature that I, personally, love to use."
"Image creation and image analysis in one program, basically for ease of use."
"It indexes much faster, and is more reflexive because of the Enscripts."
 

Cons

"When it comes to malware files, it should be a little quick because, at times, it would give a wrong result in the sense of what it might be on malware, even if it still might be a normal one."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"I think Cortex XDR by Palo Alto Networks could be improved by having tiered pricing by device, especially since we have not covered mobile devices because the cost is very high."
"The solution lacks real-time, on-demand antivirus."
"The configuration could be simplified. I would like to see better protection, specifically to protect email applications."
"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."
"The company that sells us the licenses sometimes doesn't know how to do certain things."
"​Work on the math model. We are catching a lot of false positives, which gets to be a pain at the start of a deployment."
"Reporting is an area with shortcomings in CylancePROTECT that needs to be improved."
"Technical support is bad. I am not happy with the level of support they offer."
"The initial setup was quite complicated, it took us a month or two with the reseller doing a good job assisting us with the initial configuration."
"The AI of CylancePROTECT has room for improvement. I'm on a trial license of SentinelOne, and its AI is much better than what's on CylancePROTECT."
"The product does not do a lot of reporting on what it is taking care of. Enhanced reporting would be a welcome improvement."
"They could improve on the false positives, reporting and whitelisting features."
"We have come across problems with the end-case. We could not find an email discovery type of module and there was not flexibility with the email."
"I suggest that if the mobile phone acquisition is embedded in the Encase law enforcement version, it would be very useful."
"​Sometimes the application can take more time to complete the image processing or fail at the end of the process.​"
"In the past, incident response time for tech support was slow."
"This is not the program I would suggest for a newbie using to learn. It is just too expensive for the full experience, and the student versions, while very good, are just for that, students."
"From a customer service standpoint, this is unacceptable."
"Ease of use and learning curve need improvement."
"I would like to see a capability to ingest and absorb more data. That would be really good. It currently is lacking this function."
 

Pricing and Cost Advice

"The pricing is okay, although direct support can be expensive."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"The pricing is a little high. It is per user per year."
"I don't like that they have different types of licenses."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"I think that the price we are paying is good for what it is."
"The monthly fee is $55 USD per user."
"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."
"CylancePROTECT is an affordable solution."
"The license price for this solution could be better. It's on the expensive side."
"My company is on a yearly CylancePROTECT subscription. Price-wise, the solution is slightly expensive, so I'd rate it as eight out of ten."
"The solution provides me with competitive pricing."
"The tool is not that expensive."
"​The product is affordable and user-friendly.​"
"EnCase is an affordable solution."
"We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution."
"We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,939 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
11%
Manufacturing Company
8%
Financial Services Firm
6%
Outsourcing Company
13%
Construction Company
8%
Performing Arts
8%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise5
Large Enterprise14
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Ask a question
Earn 20 points
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Blackberry Protect
EnCase eDiscovery
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit
Ontario Ministry of Government, Aerospace Company, Chesterfield Police Department
Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.
920,939 professionals have used our research since 2012.