


CylanceOPTICS and Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro compete in device security and threat detection. Dell Trusted Device outperforms with superior features and integration capabilities.
Features: CylanceOPTICS includes AI-driven predictive threat detection, minimal resource usage, and proactive device security. Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro integrates robust endpoint protection with advanced threat intelligence, combines hardware and software security, and offers enhanced remote management via Intel vPro.
Ease of Deployment and Customer Service: Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro provides comprehensive deployment guidance and responsive customer service for smooth implementation. CylanceOPTICS is easy to deploy due to its lightweight infrastructure but offers less integration support.
Pricing and ROI: CylanceOPTICS offers affordable initial setup costs with quick ROI due to efficient threat detection. Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro requires a higher investment but promises substantial ROI from its integrated and enhanced security functionalities.
With Cortex XDR by Palo Alto Networks' incident correlation, behavioral detection, and process tree visibility, similar initial triage can often be completed in roughly 10 to 20 minutes, depending on the incident.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Many customers observe a return on investment with CylanceOPTICS since it works effectively without the need for an internet connection.
We have not experienced downtime, yielding return on investment, and manual investigations have been eliminated—everything is handled by their product, ultimately saving a lot of engineering hours, which translates to money saved.
Utilizing Intel vPro hardware control allows my IT team to remotely isolate, re-image, or wipe corrupted firmware on remote laptops, even if the operating system fails to boot.
When you look at the damage it could do, especially in our industry, where we are growing bell peppers, tomatoes, and cucumbers, any downtime can result in a crop loss and other issues.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
When it comes to technical support provided by BlackBerry, my experience has been somewhat slow; if a problem arises, we often have to wait for a reply.
I would rate the customer support a perfect ten.
I think they had a negative reputation tied to them several years ago, but in the past few years, they have really improved their game and they provide great support and they are always following up.
With every interaction that I have had with CrowdStrike on their technical support side, it has been a 10 out of 10.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro scales very well with the growing needs of my company.
The cloud-based nature of Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro makes it easier to add and manage devices without needing significant additional infrastructure.
The license can be reused on other devices if any server or device is decommissioned.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
Regarding stability, I have no complaints as CylanceOPTICS has proven to be totally stable, and as of now, we have not encountered any instability.
I would assess the stability and reliability of Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro as completely stable.
I would assess the stability and reliability of Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro as very stable.
We have not had any downtime since we have integrated CrowdStrike with Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
When a Cortex XDR by Palo Alto Networks incident is confirmed, it would be useful to automatically create a ServiceNow or Jira ticket with the incident summary, including affected endpoints, user indicators, process tree, severity, and recommended response actions.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Whenever a ticket is raised by one of our customers, we have to wait for responses which can take a whole day due to the time zone differences, and a local team could expedite this process.
Pricing and multi-tier licensing appear to be areas that could be enhanced, as securing the stack requires premium commercial Dell hardware along with specific Intel vPro chips and CrowdStrike Falcon licensing.
It has so many functions because it can go below the OS layer and already has amazing functions.
It's not really designed for servers. It's designed more for workstation fleet.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
In terms of cost, I find CylanceOPTICS to be reasonable; it's not overly expensive, nor is it at the lower end of the market—it's positioned in the medium range.
The initial setup cost is very high, but over time, it becomes cheaper on a per-person basis, while the licensing remains very costly compared to other EDR solutions.
CrowdStrike Falcon licensing necessitates a separate EDR and XDR software license subscription with commercial tiers such as Falcon Pro or Falcon Enterprise, costing approximately $100 to $200 per endpoint annually, depending on the selected bundle or modules such as Falcon Complete or Falcon Flex.
It is set it and forget it, and you usually do not have to go back and look at your licenses again and worry about what you are going to lose or if certain things are going to change.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
I view the critical feature of advanced memory scanning that is enabled by my PC as essential because there are malware and malicious tools out there that embed themselves in memory and kernel memory.
The remote management capabilities provided by Intel vPro are also very valuable, especially for supporting users who work remotely, since I can troubleshoot and remediate devices without needing physical access.
Improved endpoint visibility, faster threat detection and response, stronger hardware-level protection, and reduced time spent troubleshooting devices through remote management, which helps reduce security risk and improve operational efficiency.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.8% |
| Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro | 0.5% |
| CylanceOPTICS | 0.7% |
| Other | 95.0% |



| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 21 |
| Large Enterprise | 57 |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 2 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 4 |
| Large Enterprise | 12 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
CylanceOPTICS utilizes cutting-edge AI and ML to offer proactive threat management, ensuring robust security even when offline. Its integration with SIEM systems provides enhanced network visibility and behavior analytics to detect and mitigate threats effectively.
CylanceOPTICS is an AI-driven endpoint detection and response tool engineered to tackle zero-day threats with offline functionality, AI monitoring, and auto-containment features. Its behavior analytics rapidly identifies anomalies, while lightweight construction ensures seamless SIEM integration. Designed for proactive threat anticipation, it creates effective logs and collects endpoint data to boost network visibility. Though highly trusted, there’s room for improvement in detection speed, management processes, and scalability for larger enterprises. Some users report frequent false positives, limited reporting, and automation, while contextual analysis and alerting require refinement. Adequate technical and local support presence is needed for broader market reach.
What are the key features of CylanceOPTICS?Organizations in finance and healthcare sectors predominantly implement CylanceOPTICS for its intelligent intrusion detection capabilities and offline functionality. It's instrumental in detecting, quarantining malware, and mitigating threats like ransomware while ensuring processes revert to recovery points post updates, adding value to its exceptional threat detection capabilities in these industries.
Dell Endpoint Security powered by CrowdStrike Falcon is a hardware-assisted security integration designed to protect endpoints from the silicon layer to the cloud. By combining Dell Trusted Device (DTD), CrowdStrike Falcon, and Intel vPro, it detects "below-the-OS" attacks that traditional software-only solutions may miss.
The Three Core Pillars
Key Benefits
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.