BlackBerry Cylance Cybersecurity vs SentinelOne Singularity Endpoint comparison

BlackBerry and SentinelOne are both solutions in the Endpoint Protection Platform (EPP) category. BlackBerry is ranked #25 with an average rating of 7.8, while SentinelOne is ranked #3 with an average rating of 8.9. BlackBerry holds a 1.5% mindshare in EPP, compared to SentinelOne’s 4.5% mindshare. Additionally, 85% of BlackBerry users are willing to recommend the solution, compared to 98% of SentinelOne users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 9, 2026

SentinelOne Singularity Complete and BlackBerry Cylance Cybersecurity are top contenders in endpoint protection. SentinelOne takes the lead with its automated threat management and centralized console, enhancing threat detection and response times.

Features: SentinelOne Singularity Complete provides centralized endpoint visibility, AI-driven threat detection, and automated remediation. It offers features such as file-less monitoring and integration with other security products. BlackBerry Cylance Cybersecurity is notable for its protection against zero-day threats using machine learning, combined with a lightweight, resource-efficient agent.

Room for Improvement: SentinelOne could enhance reporting customization, improve integration with IT management tools, and speed up console loads. BlackBerry Cylance needs to reduce false positives, simplify its interface, and expand third-party tool integration, alongside improving alert detailing.

Ease of Deployment and Customer Service: SentinelOne is easily deployable across various environments, receiving positive feedback for its customer support's responsiveness. BlackBerry Cylance offers flexible deployment options and an intuitive interface, though users note areas for improvement in resolving issues faster.

Pricing and ROI: SentinelOne may initially be more expensive but offers a good ROI due to strong threat management and downtime reduction, ideal for large enterprises. BlackBerry Cylance is budget-friendly for smaller organizations, offering competitive pricing with robust protection based on machine learning capabilities.

To learn more, read our detailed BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint Report (Updated: April 2026).

Buyer's Guide

BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint

April 2026

Download the complete report

Helped 896,034 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.5%, up from 1.1% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 4.5%, up from 4.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Endpoint	4.5%
Cortex XDR by Palo Alto Networks	3.6%
BlackBerry Cylance Cybersecurity	1.5%
Other	90.4%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a simple platform to use."

"The anti-exploit is impenetrable."

"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."

"It is an easy-to-use tool."

"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."

"I recognize that Cortex XDR by Palo Alto Networks is one of the best products in its category regarding capabilities."

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

More Cortex XDR by Palo Alto Networks pros

"One of the best features of the solution is that it's easy to deploy."

"It is extremely simple to manage and deploy."

"I like the AI and mathematical components that they use, and I like the pre-execution method of protection that prevents infection."

"The solution is stable."

"The ROI is immense, particularly in less dedicated labor hours, and much more in terms of security, particularly when new security flaws have recently appeared."

"It provides good insight into the programs, applications, or websites that may need attention."

"Specifically for a Windows domain environment, the product can be customized and pushed via GPO or SCCM without issue."

"Two or three years ago when the WannaCry virus struck, the people that were on Cylance were the ones that weren't affected."

More BlackBerry Cylance Cybersecurity pros

"Prevents ransomware getting through."

"We saw a return of investment within the first month."

"The protection and management provided by SentinelOne is good."

"I have found the activity timeline and threat analysis to be particularly useful."

"The EDR functionality of the platform is what we use the most. That was the primary reason why we got SentinelOne. That is what we use the most in terms of functionality."

"The most valuable feature varies from client to client but having absolute clarity of what happened and the autonomous actions of SentinelOne are what most people find the most assuring."

"Singularity Complete is a good product in its area and, obviously, when comparing to other organizations or companies providing endpoint detection solutions, it is an end-to-end solution for antimalware and XDR."

"We made the switch because SentinelOne is not signature-based, it's an AI solution."

More SentinelOne Singularity Endpoint pros

Cons

"Currently, if you use Palo Alto endpoint protection as the only solution it's very complicated to remove pre-existing threats."

"There are a large number of false positives."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"In an upcoming release, the solution could improve by providing hard disk encryption."

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"Product might have some bugs."

"When it comes to core analysis, and security analysis, Cortex needs to provide more information."

"The solution eats memory of the computer, unlike anything I've ever seen."

More Cortex XDR by Palo Alto Networks cons

"The process of whitelisting a script that you want to be able to run can be a little bit difficult, or awkward."

"I'd like them to do software distribution too, but they said that that's architecturally not at the product line."

"They could improve on the false positives, reporting and whitelisting features."

"Work on the math model. We are catching a lot of false positives, which gets to be a pain at the start of a deployment."

"The OPTICS component could be made more user-friendly with respect to giving people more information."

"Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal."

"It's a good solution but some features just need to be updated."

"I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable."

More BlackBerry Cylance Cybersecurity cons

"It is difficult to manage users in SentinelOne."

"When comparing SentinelOne to CrowdStrike, I find that CrowdStrike has more comprehensive vulnerability assessment tools."

"SentinelOne Singularity Complete needs more connectors for integration with more solutions."

"Some reports could be better."

"A needed improvement for SentinelOne Singularity Complete is faster console load time."

"The compatibility with new legacy systems should be enhanced as other EDR products support these systems, which Singularity does not."

"An area for improvement in SentinelOne is the search feature. You can't go beyond twenty thousand events, which ruins the task because it isn't enough when you're doing your investigation."

"The solution can use up a lot of resources when scanning. It would be ideal if it was lighter."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"It's about $55 per license on a yearly basis."

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

"The price of the solution is high for the license and in general."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"Cortex XDR's pricing is ok."

"The pricing is a little bit on the expensive side."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

"The solution provides me with competitive pricing."

"The license price for this solution could be better. It's on the expensive side."

"This cost of the license is approximately $5 USD monthly per user."

"We went through a third party initially to do the renewal, but we won't be renewing, we will move on to something else."

"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."

"The tool is not that expensive."

"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"I do not know much about the pricing. What I do know is that the person who negotiates most of the pricing is quite a hard bargainer. In that regard, he often says that he managed to get a very good deal. When we first looked at replacing our old system with Singularity Complete, its price was definitely a big factor. Back then, Singularity Complete was fairly new to the marketplace. We got quite a good deal as an early adopter. They have honored that and respected that we were an early adopter, and I feel we are still getting a very good price."

"After negotiations, the pricing was found to be fair."

"Overall, it was a good experience. It is pretty easy for us to increase the number."

"The price for it is very competitive compared to other Next Gen EPP."

"The price of SentinelOne is on the higher side compared to other solutions, such as Symantec."

"SentinelOne Singularity Complete is fairly priced."

"The one I use is $6 a month per device. Some are $4 and there are some that are more than that."

"The product's pricing is at par with what you see among major competitors. It's higher than McAfee, yet cheaper than CrowdStrike."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

896,034 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

Construction Company

10%

Manufacturing Company

Comms Service Provider

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	20
Large Enterprise	51

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	112
Midsize Enterprise	60
Large Enterprise	84

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What do you like most about Blackberry Protect?

It is a good endpoint solution. It is very easy to manage and detect the threat immediately. It will take the necessa...

See all answers

What is your experience regarding pricing and costs for Blackberry Protect?

The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.

See all answers

What needs improvement with Blackberry Protect?

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we conta...

See all answers

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

See all answers

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

See all answers

What needs improvement with SentinelOne Singularity?

I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 10% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

VMware Carbon Black Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

Symantec Endpoint Security vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

Check Point Harmony Endpoint vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

Cisco Secure Endpoint vs BlackBerry Cylance Cybersecurity

Compared 3% of the time

More BlackBerry Cylance Cybersecurity Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 4% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Huntress Managed EDR vs SentinelOne Singularity Endpoint

Compared 2% of the time

Darktrace vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BlackBerry Cylance Cybersecurity

May 2026

Download BlackBerry Cylance Cybersecurity product report

Buyer's Guide

SentinelOne Singularity Endpoint

May 2026

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackberry Protect

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

BlackBerry Cylance Cybersecurity leverages AI and machine learning for efficient malware detection and zero-day threat protection, offering robust endpoint security with high detection accuracy and low false positive rates.

BlackBerry Cylance Cybersecurity delivers advanced threat protection with AI-driven algorithms and machine learning. Its lightweight design ensures low system resource usage, making it both efficient and effective. It's recognized for centralized management, easy deployment, and a clean interface, providing comprehensive endpoint protection against diverse threats. The integration of features like CylanceOPTICS and behavioral monitoring enhances security insights. While the system excels in malware detection, enhancements are needed in areas like user interface design, reporting, deeper threat analysis, and integration with third-party systems. Support and pricing improvements could also increase competitiveness.

What are the key features of BlackBerry Cylance Cybersecurity?

AI and Machine Learning: Utilizes cutting-edge technology for malware and threat detection.
Zero-Day Protection: Safeguards against emerging threats without the need for constant updates.
Centralized Management: Simplifies deployment and management across devices.
CylanceOPTICS: Provides advanced security insights and behavioral monitoring.
Low Resource Usage: Ensures efficient operation with minimal system impact.

What benefits should users expect from BlackBerry Cylance Cybersecurity?

High Detection Accuracy: Reduces risk with minimal false positives.
Efficient Resource Management: Enhances performance with its lightweight design.
Proactive Threat Defense: Protects against a wide range of threats with centralized management.
Advanced Insights: Offers unique features for detailed security analysis.

Organizations deploy BlackBerry Cylance Cybersecurity for threat analytics, log management, and endpoint protection. As an antivirus replacement, it protects against zero-day malware, ransomware, and various threats. Its AI algorithms detect anomalies, minimizing risks in both internet-connected and isolated environments. Many businesses incorporate it into wider security strategies, appreciating its centralized management and proactive defense capabilities.

BlackBerry

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Buyer's Guide

BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint

April 2026

Free Report: BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint

Find out what your peers are saying about BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint and other solutions. Updated: April 2026.

DOWNLOAD NOW

896,034 professionals have used our research since 2012.

See our BlackBerry Cylance Cybersecurity vs. SentinelOne Singularity Endpoint report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.