BlackBerry Cylance Cybersecurity vs Symantec Endpoint Security comparison

Why PeerSpot?

BlackBerry and Broadcom are both solutions in the Endpoint Protection Platform (EPP) category. BlackBerry is ranked #34, while Broadcom is ranked #8 with an average rating of 7.2. BlackBerry holds a 1.8% mindshare in EPP, compared to Broadcom’s 4.0% mindshare. Additionally, 85% of BlackBerry users are willing to recommend the solution, compared to 80% of Broadcom users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 8, 2026

Symantec Endpoint Security and BlackBerry Cylance Cybersecurity are leading competitors in the cybersecurity market. Symantec appears to have an edge in comprehensive endpoint protection, whereas BlackBerry Cylance is favored for its innovative AI-driven security.

Features: Symantec Endpoint Security offers extensive antivirus protection with intrusion prevention, SONAR, and application control. It supports multiple platforms like Windows, Mac, and Linux and allows centralized management. BlackBerry Cylance excels with its AI and machine learning-driven protection, minimal system resource usage, and powerful defense against zero-day threats. Its lightweight design is particularly appreciated.

Room for Improvement: Symantec faces criticism for heavy resource usage, affecting system performance. Improvements in real-time monitoring and zero-day threat detection are needed. BlackBerry Cylance, despite its efficiency, frequently generates false positives and lacks detailed post-incident reporting. Enhancements in its interface and support documentation are also suggested by users.

Ease of Deployment and Customer Service: Symantec supports primarily on-premises deployment, with some cloud flexibility. Customer service feedback is mixed, with concerns about response times post-Broadcom acquisition. BlackBerry Cylance offers flexible deployment options like public, private, and hybrid cloud, and users find the setup straightforward. However, some inefficiencies in channel management and support response speed are noted.

Pricing and ROI: Symantec is perceived as expensive, yet offers good protection and support value, resulting in positive ROI through reduced downtime. BlackBerry Cylance's pricing is similar to other EDR solutions and considered reasonable but slightly high. Users find Cylance's protection capabilities justify its cost, though more competitive pricing is desired.

To learn more, read our detailed BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security Report (Updated: September 2026).

Buyer's Guide

BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security

September 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.8%, up from 1.2% compared to the previous year. The mindshare of Symantec Endpoint Security is 4.0%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Symantec Endpoint Security	4.0%
BlackBerry Cylance Cybersecurity	1.8%
Other	90.4%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Sooraj Makkancherrry

Security Operations Manager at Philips

Doesn't have daily updates, which is important for healthcare IT

I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.

Read full review

Abhimanyu Das

Senior Cybersecurity Engineer at Kyndryl

Behavioral protection has blocked ransomware and now saves extensive recovery and audit time

The best feature of Symantec Endpoint Security is its effectiveness in malware protection. Its malware protection capabilities stand out due to their ease of management. Although multiple tools assist in this process, managing them all can sometimes be challenging. In terms of malware protection, Symantec Endpoint Security performs well, and its mechanisms, tactics, and techniques are effective. Symantec Endpoint Security offers robust features such as advanced reporting capabilities with a customizable dashboard that integrates EDR timelines, threat maps, and compliance metrics into a single view. Additionally, reports can be exported to PDF or CSV formats, making reporting one of its strong points. It also provides comprehensive device control features, which block unauthorized USB devices and support whitelisting. This helps prevent data exfiltration and phishing scenarios without disrupting user workflows.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The behavior-based detection feature is valuable."

"The policy configuration is great, the granularity of policies that are available is very helpful, it is straightforward to set up, and it has pretty much everything we need and works well within the Palo Alto ecosystem."

"From the Palo Alto side, whatever they buy, they integrate that really well into their integration suite, and that makes a massive difference."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."

"Cortex XDR by Palo Alto Networks's ability to block sophisticated threats in real time is quite good and is on par with SentinelOne's."

"Cortex XDR is a very capable solution for protecting large networks and a lot of endpoints. It's very useful because the automation is very high, and if you combine it with the features on Palo Alto firewalls, it provides very strong protection."

More Cortex XDR by Palo Alto Networks pros

"We are quite security-focused. Blackberry Protect as an endpoint solution for our service really delivers what we are expecting."

"The Application Guard and ByteGuard are useful features."

"It handles situations that the other threat management tools wouldn't find. It has worked well covering the weaker sides of the other products that we're integrating."

"The deployment of updates is easy."

"The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background."

"It works well and covers a good number of the bases you need covered for general cybersecurity and vulnerability management."

"I rate the tool a ten out of ten when it comes to the ease of use or management part."

"CylancePROTECT works really well with the way we work."

More BlackBerry Cylance Cybersecurity pros

"As a service-centric company, we have advised Symantec endpoint solution to various clients, and they have been satisfied with the quality Symantec offers."

"Symantec centralized our intrusion detection system while creating additional layers of security at the endpoint level."

"The anti-virus and firewall policies are the most valuable features of this solution."

"There are no issues with scalability."

"It just works, we have a console and I can see it at a glance, I don't have any problems with it at all, and all the antivirus updates are managed from a single central point."

"What I like most about Symantec is the intrusion detection module. If you are scanning the environment, it will flag a possible intruder and tell you the IP and where the attack is coming from. Traditional antivirus solutions will never flag that. If you have a traditional SIEM, you might be able to pick that up. Symantec is a holistic endpoint security solution, so when you scan an endpoint, Symantec will let you know that something is happening to it."

"Easy to use solution."

"If there is exposure, we need to investigate the source of the attack, e.g., whether it came from the network or externally. We view the firewall logs, and if there has been exposure, then we use the Application Isolation feature. When there is an attack with on-prem, that system will go into isolation mode, removing connectivity to other internal systems. We also restrict the WLAN part to avoid that system broadcasting to other networks."

More Symantec Endpoint Security pros

Cons

"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."

"Cortex XDR by Palo Alto Networks could improve by adding a sandbox feature to better compete with their competitors which have it."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."

"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."

"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."

"The solution needs better reports. I think they should let the customer go in and customize the reports."

More Cortex XDR by Palo Alto Networks cons

"Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal."

"The high price of the product is an area of concern where improvements are required. The product's price should be more competitive."

"While you are working, you are finding these things that were supposed to be waived have come back to being blocked. That's frustrating."

"They could improve on the false positives, reporting and whitelisting features."

"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."

"The solution’s technical support could be improved."

"The price for this EPP platform is expensive and could be improved."

"It's a good solution but some features just need to be updated."

More BlackBerry Cylance Cybersecurity cons

"The product must be uploaded, keeping all the sites with threats and virus signatures. We have to deploy or push EXE files to the endpoints like Kaspersky."

"It needs to die."

"Difficult to set up on older systems."

"Using the management console is a bit complex. There are many features that we cannot use and we could use some help. We need some assistance to make them work better. They need to add features to make it simpler."

"Using Symantec for application control has been hectic, so I use Carbon Black to do the lockdown."

"The solution could improve by adding encryption. If it had encryption along with antivirus it would be better."

"It would be interesting if Symantec Endpoint protection could also manage Windows Defender. If they were to add a feature, it would be nice if you could see the Symantec client and the Windows Defender client in case you choose to deploy both."

"The agent shouldn't use up so many resources at the endpoint when scanning and protecting."

More Symantec Endpoint Security cons

Pricing and Cost Advice

"Its pricing is kind of in line with its competitors and everybody else out there."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"This is an expensive solution."

"I don't have any issues with the pricing. We are satisfied with the price."

"It has reasonable pricing for the use cases it provides to the company."

"I don't like that they have different types of licenses."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"It is expensive, but not unreasonable."

"The solution provides me with competitive pricing."

"CylancePROTECT is worth the money, but I'm not sure of its exact price. I can't remember off the top of my head."

"Review closely how many endpoints you actually need before buying into a pricing level. Deal and deal with the VAR of your choice."

"The initial end-point cost may seem a little high (~$55/device/year) but when you look at the total peace of mind that the solution provides, with no reboots for updates, and negligible performance impact, it is well worth it."

"The tool is not that expensive."

"The licensing part of the product is too expensive compared to other solutions in the market."

"We would just add more if there are new users, but right now you just need one license for per user."

More BlackBerry Cylance Cybersecurity pricing and cost advice

"The licensing costs are huge compared to what is normally included in the licensing with other products such as the Microsoft products that we're using. We're paying between $300 and $400 per seat."

"The pricing is a little bit more expensive than other competitors, if you compare it to Kaspersky, for example, or McAfee."

"Its price should be reasonable."

"We pay on a yearly basis..."

"We pay our licensing fees on a yearly basis, and everything is included in that price."

"It is cheap. It is especially cheaper than Malwarebytes, which is three times higher than this. It is also cheaper than Cisco. Its price is almost similar to Bitdefender, Gravity, and CloudZone."

"Its price is fair."

"Regarding the licensing, it was important negotiate a long contract to get a more attractive price, including advanced support in case of crisis."

More Symantec Endpoint Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Outsourcing Company

12%

Construction Company

11%

Manufacturing Company

Financial Services Firm

Outsourcing Company

13%

Financial Services Firm

10%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	33
Midsize Enterprise	5
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	32
Large Enterprise	63

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

Which is better - Cortex XDR or Symantec End-User Endpoint Security?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior sol...

See all answers

What is your experience regarding pricing and costs for Symantec End-User Endpoint Security?

Symantec Endpoint Security's pricing is better than most offerings based on my research. It seems to be half the cost...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

VMware Carbon Black Endpoint vs BlackBerry Cylance Cybersecurity

Compared 8% of the time

Intercept X Endpoint vs BlackBerry Cylance Cybersecurity

Compared 7% of the time

CrowdStrike Falcon vs BlackBerry Cylance Cybersecurity

Compared 5% of the time

Cybereason Endpoint Detection & Response vs BlackBerry Cylance Cybersecurity

Compared 4% of the time

More BlackBerry Cylance Cybersecurity Competitors

Microsoft Defender for Endpoint vs Symantec Endpoint Security

Compared 7% of the time

Morphisec vs Symantec Endpoint Security

Compared 5% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Security

Compared 5% of the time

Kaspersky Next XDR Optimum vs Symantec Endpoint Security

Compared 4% of the time

Bitdefender GravityZone EDR vs Symantec Endpoint Security

Compared 3% of the time

More Symantec Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

BlackBerry Cylance Cybersecurity

October 2026

Download BlackBerry Cylance Cybersecurity product report

Buyer's Guide

Symantec Endpoint Security

October 2026

Download Symantec Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackberry Protect

Symantec EPP, Symantec Endpoint Protection (SEP)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

BlackBerry Cylance Cybersecurity leverages AI and machine learning for efficient malware detection and zero-day threat protection, offering robust endpoint security with high detection accuracy and low false positive rates.

BlackBerry Cylance Cybersecurity delivers advanced threat protection with AI-driven algorithms and machine learning. Its lightweight design ensures low system resource usage, making it both efficient and effective. It's recognized for centralized management, easy deployment, and a clean interface, providing comprehensive endpoint protection against diverse threats. The integration of features like CylanceOPTICS and behavioral monitoring enhances security insights. While the system excels in malware detection, enhancements are needed in areas like user interface design, reporting, deeper threat analysis, and integration with third-party systems. Support and pricing improvements could also increase competitiveness.

What are the key features of BlackBerry Cylance Cybersecurity?

AI and Machine Learning: Utilizes cutting-edge technology for malware and threat detection.
Zero-Day Protection: Safeguards against emerging threats without the need for constant updates.
Centralized Management: Simplifies deployment and management across devices.
CylanceOPTICS: Provides advanced security insights and behavioral monitoring.
Low Resource Usage: Ensures efficient operation with minimal system impact.

What benefits should users expect from BlackBerry Cylance Cybersecurity?

High Detection Accuracy: Reduces risk with minimal false positives.
Efficient Resource Management: Enhances performance with its lightweight design.
Proactive Threat Defense: Protects against a wide range of threats with centralized management.
Advanced Insights: Offers unique features for detailed security analysis.

Organizations deploy BlackBerry Cylance Cybersecurity for threat analytics, log management, and endpoint protection. As an antivirus replacement, it protects against zero-day malware, ransomware, and various threats. Its AI algorithms detect anomalies, minimizing risks in both internet-connected and isolated environments. Many businesses incorporate it into wider security strategies, appreciating its centralized management and proactive defense capabilities.

BlackBerry

Symantec Endpoint Security is a comprehensive protection tool designed for antimalware and antivirus defense. Providing centralized management and smooth deployment, it effectively secures environments from small businesses to extensive networks.

Symantec Endpoint Security serves organizations by offering robust protection with features like rapid deployment and centralized management, critical for securing workstations and servers. While appreciated for efficient resource utilization and stable operation, some users report issues with virus detection and cumbersome updates. Pricing is often considered high. It is a popular choice among IT consultants, academic institutions, and service providers for its ability to manage broad and varied security needs efficiently.

What are the key features of Symantec Endpoint Security?

Centralized Management: Streamlines security operations for ease of handling across networks.
Malware and Antivirus Protection: Provides real-time threat detection and EDR capabilities.
Application and Device Control: Manages access and control policies effectively.
SONAR and IPS: Enhances proactive malware scanning and intrusion prevention.
Active Directory Integration: Supports seamless integration with existing systems.

What benefits should be considered when evaluating Symantec Endpoint Security?

Reliable Support: Offers assistance which, while helpful, can vary in effectiveness.
Advanced Reporting: Enables detailed security analysis, though customization is limited.
Efficient Resource Usage: Provides stable performance across platforms with minimal impact.
Proactive Scanning: Ensures threats are detected early, enhancing security measures.

In industries like academia and IT consulting, Symantec Endpoint Security fulfills specific needs for robust endpoint protection. Its centralized management and application control make it suitable for educational institutions managing large network systems, while service providers benefit from its flexible deployment options.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit

Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.

Buyer's Guide

BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security

September 2026

Free Report: BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security

Find out what your peers are saying about BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our BlackBerry Cylance Cybersecurity vs. Symantec Endpoint Security report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.