No more typing reviews! Try our Samantha, our new voice AI agent.

BlackBerry Cylance Cybersecurity vs WithSecure Elements Endpoint Protection comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
BlackBerry Cylance Cybersec...
Ranking in Endpoint Protection Platform (EPP)
32nd
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
44
Ranking in other categories
No ranking in other categories
WithSecure Elements Endpoin...
Ranking in Endpoint Protection Platform (EPP)
36th
Average Rating
8.0
Reviews Sentiment
4.3
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.9%, up from 3.7% compared to the previous year. The mindshare of BlackBerry Cylance Cybersecurity is 1.6%, up from 1.0% compared to the previous year. The mindshare of WithSecure Elements Endpoint Protection is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.9%
BlackBerry Cylance Cybersecurity1.6%
WithSecure Elements Endpoint Protection0.9%
Other93.6%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Sooraj Makkancherrry - PeerSpot reviewer
Security Operations Manager at Philips
Doesn't have daily updates, which is important for healthcare IT
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we contact support, they tell us to update the latest agent, but we can't do that immediately due to medical device protocols and validation testing. I wish support would try to understand our issues better instead of giving this standard response. The machine learning feature they use often tells us to upgrade the agent or add things to the exclusion list, which isn't unacceptable. It's a very good and new technology as a tool and antivirus. But sometimes, it doesn't work properly with our medical devices and products, quarantining files it shouldn't even after we add them to exclusions. This is tricky for us.
Mark Feldman - PeerSpot reviewer
IT-Manager at MKF-Schimanski-ERGIS GmbH
Central console streamlines patch monitoring and device management effortlessly
WithSecure Elements Endpoint Protection is good and easy to set up. I provide an installation file for every client through my domain controller and GPO, and it works properly. We have faced no incidents with viruses or network breaches, and it's easy to monitor patches. I can use remote desktop from the central console. The solution also saves my time because, being the only one handling it, I can monitor all devices easily.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The behavior-based detection feature is valuable."
"Stability is one of the features we like the most."
"From a single pane of glass, you can easily manage all of your endpoints."
"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."
"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"WildFire AI is the best option for this product."
"In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy."
"The anti-exploit is impenetrable."
"What I like best about CylancePROTECT is its accuracy, as it doesn't give many false positives."
"On the management side, we liked the way it displays things."
"With Cylance AI and Machine Learning, it's ensuring that all types of malware, PUP (Potential Unwanted Programs) and Memory Protection your endpoint devices are fully protected, even with day zero threats."
"CylancePROTECT is a fairly decent antivirus."
"Has good RAM capacity for the power I need"
"It does a good job of protecting us."
"The most valuable features of CylancePROTECT are its powerful machine-learning capabilities and predictive intelligence."
"CylancePROTECT is going to tell you if there are any issues and you are going to be able to see everything from one single dashboard."
"There is a layer of security to prevent a malicious agent (malware) from interrupting or stopping services, deleting or modifying registry entries or even stopping the antivirus from acting, ensuring that there will be no interruption of protection."
"The most valuable features of WithSecure Elements Endpoint Protection are the clear useful portal and overall company protection."
"We use the product for detecting network vulnerabilities and for software update purposes."
"The customer portal by WithSecure is a lot better with WithSecure Elements Endpoint Protection than it was with Countercept."
"On the cloud management page, the solution scales up very highly."
"It's a very good and reliable product as we have no problems with it generally."
"It's pretty simple to use, with the console and the dashboard there is no information overload, it's easy to follow, and it's pretty straightforward to do things like web filtering, generating reports, creating profiles, and deploying it to machines remotely, which is convenient for us."
"Both incoming and outgoing traffic is protected."
 

Cons

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."
"It would be good to have a better way to search for a file within the UI."
"In general, the price could be more competitive."
"If they had pulse rate detection, it would be better."
"I have faced some issues with Cortex XDR by Palo Alto Networks; there is room for improvement in the sense that certain options prevent us from seeing and segregating data."
"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."
"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."
"For example, the interface and the Cylance Optics need to be improved a fair bit."
"Additionally, their channel management has been lacking, with a notable disregard for small and medium-sized businesses, focusing primarily on large enterprises and very large MSPs."
"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions. This is the industrial environment where you have a control center for all the automation that's happening, whether it is oil, gas, or chemical manufacturing. They often have to set up a computer at the back and watch the other stuff to get alerts. In these autonomous or on-premises environments, they often don't have access to email readily. Integration with other industrial solutions, such as HMIS, will allow them to communicate and get an alert that something has been found. This way, they can react to it sooner than having somebody watch the screen and keep checking the screen. Rockwell has its own suite. Similarly, Honeywell has its own suite. There's also an independent HMI/historian solution provider out there called VTSCADA. We actually get asked if we can get it to show up on a screen, which is difficult. Getting those alerts to work within an industrial environment would be a huge plus."
"rom my experience interacting with the primary or the central administrative console, it's quite complex. You would need a fair bit of technical experience to set it up, implement and maintain it. That would be one area for improvement."
"It could have integration with industrial base HMIS or Human Machine Interfaces Solutions."
"If they can improve the technical support SLA, that aspect of the product will be much appreciated."
"The AI of CylancePROTECT has room for improvement. I'm on a trial license of SentinelOne, and its AI is much better than what's on CylancePROTECT."
"If they can add more features on top of their Persona feature that would be ideal."
"The program and cloud service management is in English. It's not a problem for me, however, it might be for users who don't speak English or use it regularly."
"There is no technical support available in the Middle East."
"One problem is that the solution takes too much RAM from the client."
"Resource consumption is suboptimal and could be improved."
"The solution could improve by having more real-time responses. For example, when a license gets removed from a computer it does not update the records of the change. Additionally, when I installed Microsoft Windows Defender I was not able to send licenses through email to our tenants. The integration with other solutions could improve."
"I would like the part of Hash Analysis by external sources to be improved."
"There could be a dedicated security partner with essential knowledge."
"But the biggest one for us is patch management because this has been our top priority when looking at alternatives. Every solution needs to have patch management, if that's possible. It would cut costs on our side if that feature were included, so we don't need to pay for two separate pieces of software."
 

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"The cost depends on your chosen license type, like Pro or other licenses."
"The price was fine."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"It's not so heavily priced; rather, it's average and decent."
"The license price for this solution could be better. It's on the expensive side."
"The licensing part of the product is too expensive compared to other solutions in the market."
"​Shop around for sure and be assured the price you pay will be close to other solutions available, but even at a slight mark-up from the other solutions, you are getting real endpoint protection versus nothing more than a cheap security blanket that might keep you warm at night."
"We pay our license on a yearly basis and have just renewed for two years."
"The price is reasonable for us at the moment. I rate the overall solution an eight out of ten."
"Currently, we have competitive pricing for Cylance, which is affordable enough to consider."
"The tool is not that expensive."
"The cost of the solution depends on the size of the company and where the licenses are being ordered from."
"The product has average pricing."
"We pay a yearly licensing fee of about €20 per computer."
"The price is comparable."
"If you purchase licenses in bulk the price of the licenses can decrease."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Construction Company
12%
Comms Service Provider
7%
Manufacturing Company
7%
Outsourcing Company
7%
Comms Service Provider
20%
Manufacturing Company
12%
University
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise5
Large Enterprise14
By reviewers
Company SizeCount
Small Business7
Large Enterprise1
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Blackberry Protect?
The price is reasonable for us at the moment. I rate the overall solution an eight out of ten.
What needs improvement with Blackberry Protect?
I face challenges with the exclusion policy - it still scans folders we told it not to, causing issues. When we conta...
What is your primary use case for Blackberry Protect?
I am using CylancePROTECT as an active learning algorithm. We installed it on almost 20,000 servers and virtual machi...
What is your experience regarding pricing and costs for F-Secure Protection Service for Business?
The pricing is scalable. We can purchase more licenses if needed. It's a more cost-effective solution compared to Dar...
What needs improvement with F-Secure Protection Service for Business?
In my opinion, there is room for improvement for WithSecure Elements Endpoint Protection, especially in the deploymen...
What is your primary use case for F-Secure Protection Service for Business?
The product I am working with currently is WithSecure Elements Endpoint Protection. We are currently using WithSecure...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Blackberry Protect
F-Secure Elements Endpoint Protection, F-Secure Protection Service for Business
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Panasonic, Noble Energy, Apria Healthcare Group Inc., Charles River Laboratories, Rovi Corporation, Toyota, Kiewit
Information Not Available
Find out what your peers are saying about BlackBerry Cylance Cybersecurity vs. WithSecure Elements Endpoint Protection and other solutions. Updated: June 2026.
908,834 professionals have used our research since 2012.