No more typing reviews! Try our Samantha, our new voice AI agent.

BlackBerry Cylance Cybersecurity vs WatchGuard EPDR comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
118
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
BlackBerry Cylance Cybersec...
Ranking in Endpoint Protection Platform (EPP)
30th
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
44
Ranking in other categories
No ranking in other categories
WatchGuard EPDR
Ranking in Endpoint Protection Platform (EPP)
16th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
38
Ranking in other categories
Endpoint Detection and Response (EDR) (19th)
 

Mindshare comparison

As of September 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.8% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.6%, up from 1.1% compared to the previous year. The mindshare of WatchGuard EPDR is 1.5%, down from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
WatchGuard EPDR1.5%
BlackBerry Cylance Cybersecurity1.6%
Other93.1%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Sooraj Makkancherrry - PeerSpot reviewer
Security Operations Manager at Philips
Doesn't have daily updates, which is important for healthcare IT
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.
Petri Alhainen - PeerSpot reviewer
Administrator at Sulbana Oy
Balanced endpoint protection has improved forensic visibility and speeds threat investigation
I think there's always something that needs to be improved about WatchGuard EPDR, but I don't have something specific to say that you should do this or that. They are listening to the users, so they are fixing things as they've been found. I don't have any example to give. The pricing is always a thing where you need to be in the line that the balance to get it right is a challenging thing with WatchGuard EPDR. If you have good features, then you can have a little bigger price, but if you just get the balance right, that's important. I haven't used automated incident response in WatchGuard EPDR.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"From a single pane of glass, you can easily manage all of your endpoints."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"The initial setup is pretty easy."
"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."
"I recommend this solution to others because it is easy to manage, reliable, and overall good to use."
"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."
"Palo Alto is constantly adding new features."
"It is extremely simple to manage and deploy."
"The most valuable features are script blocking and macros within Word documents for stopping unwanted applications from running in the background."
"The initial endpoint cost may seem a little high (~$55/device/year), but when you look at the total peace of mind that the solution of Cylance endpoint protection provides, with no reboots for updates, and negligible performance impact, it is well worth it."
"The platform's most valuable features are the malware detection capabilities."
"What's most valuable in CylancePROTECT is the optics feature. I also like its easy-to-use and user-friendly dashboard and monitoring system."
"The solution’s AI is its most valuable feature."
"Two or three years ago when the WannaCry virus struck, the people that were on Cylance were the ones that weren't affected."
"The Application Guard and ByteGuard are useful features."
"It offers an easy initial setup."
"I think there's quite a good balance in everything with WatchGuard EPDR, with tools to do things and watch what's happening, and everything is in the same tools and quite well designed or thought about how to do things, which is the reason I've been enjoying them."
"The most valuable feature is the web filter application control."
"The product so far has been good at protecting us. We haven't faced a breach."
"Panda Security solution has a feature to block any unknown process and that is what is best about it."
"It prevents our users from circumventing security. Everything is password protected so they can't get into it. They can't uninstall it. They can't do anything."
"The detection capabilities for malicious activities are effective."
"The reporting feature is valuable."
 

Cons

"The configuration could be simplified. I would like to see better protection, specifically to protect email applications."
"Basically, they don't provide customer support tools just to investigate the logs."
"Cortex XDR by Palo Alto Networks is a strong tool, but it is true that digesting information sometimes makes the tool go a little bit slower."
"The solution could improve by providing better integration with their own products and others."
"It is an enterprise-level solution. Its price could be less expensive."
"It'll help if customization was easier."
"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."
"The solution should offer more dashboards and they should be better customized."
"It should provide more details about the events that they have detected."
"The security scripting needs improvement. It needs deeper security for scripting."
"The process of whitelisting a script that you want to be able to run can be a little bit difficult, or awkward."
"It's a good solution but some features just need to be updated."
"The product needs to continue to offer better alerts, in particular around false positives, and it needs to reduce them from happening."
"rom my experience interacting with the primary or the central administrative console, it's quite complex. You would need a fair bit of technical experience to set it up, implement and maintain it. That would be one area for improvement."
"Having worked with SentinelOne, Cylance is good, however, it probably needs to add a feature similar to SentinelOne's rollback functionality. With this feature, if you get infected, with a click, you can go back to the pre-infection state. If Cylance could add this functionality to their offering as well, that would be ideal."
"The solution’s user interface could be improved."
"It would be nice if Panda Security Adaptive Defense could come out with remote desktop usage."
"Panda Security Adaptive Defense is stable. However, when updates are being done on the computers we can experience some troubles because the computers need to be restarted. When we start the computers they are not functioning correctly and we have not received proper feedback regarding this random issue."
"t would help if it would monitor the network better."
"Improvements could be made in terms of how the reporting is structured."
"Needs a service desk system to link up with endpoint protection and email protection."
"The product is available at a very high price, making it an area where improvements are required."
"WatchGuard EPDR does have areas for improvement. One significant gap is the lack of a virtual patching feature integrated into the endpoint security. This would be particularly useful for endpoints running operating systems that are no longer supported, such as Windows 7."
"I'd like them to offer a better way to scan the hardware to detect whether they are valid."
 

Pricing and Cost Advice

"Cortex XDR’s pricing is very reasonable."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"The price was fine."
"It has a yearly renewal."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"It is "expensive" and flexible."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"CylancePROTECT's pricing is reasonable, at about €18 per user, per year."
"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."
"The licensing part of the product is too expensive compared to other solutions in the market."
"The solution provides me with competitive pricing."
"The monthly fee is $55 USD per user."
"The solution's pricing is around the same as most EDRs but slightly behind some of the major ones."
"​Shop around for sure and be assured the price you pay will be close to other solutions available, but even at a slight mark-up from the other solutions, you are getting real endpoint protection versus nothing more than a cheap security blanket that might keep you warm at night."
"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."
"The price is excellent."
"The licensing costs are not too high. We pay about 20 Euros a year. It's a reasonable amount to pay."
"The solution is priced well for what features it provides."
"I don't think Panda's license is too expensive, but they're charging more than it's worth. It's a yearly license. For 1,000 endpoints, it's around $18,000."
"Customers need to pay monthly licensing costs for Panda Security Adaptive Defense, which is not expensive."
"Our licensing fee is 1M Euro per month, so it is about 80 Euro's per user."
"The solution's pricing is better compared to other products."
"The price of this solution depends on the number of licenses that you are purchasing."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
12%
Construction Company
11%
Financial Services Firm
9%
Construction Company
12%
Outsourcing Company
11%
Comms Service Provider
7%
Financial Services Firm
7%
Comms Service Provider
11%
Computer Software Company
9%
Outsourcing Company
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise21
Large Enterprise55
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise5
Large Enterprise14
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise8
Large Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Blackberry Protect?
The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.
What needs improvement with Blackberry Protect?
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we conta...
What is your primary use case for Blackberry Protect?
I am using CylancePROTECT as an active learning algorithm. We installed it on almost 20,000 servers and virtual machi...
What needs improvement with WatchGuard EPDR?
I think there's always something that needs to be improved about WatchGuard EPDR, but I don't have something specific...
What is your primary use case for WatchGuard EPDR?
I'm talking about WatchGuard EPDR, which is endpoint protection. I try to remember if we have them in our system, and...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Blackberry Protect
Panda Adaptive Defense 360
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit
Indra, Valea AB, Fineit, Aemcom, Data Solutions INC., Gloucestershire NHS, Golden Star Resources Ltd, Hispania Racing Team, Instituto Dos Museus e da ConserÊo, Escuelas Pias Provincia Emaus, Axiom Housing Association, Municipality of Bjuv, Lesedi Nuclear, Mullsj_ municipality, Eng. skolan Norr AB, Dalakraft AB, Peter Green Haulage Ltd
Find out what your peers are saying about BlackBerry Cylance Cybersecurity vs. WatchGuard EPDR and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.