Cylance (BlackBerry)

Overview

Cylance, a BlackBerry product, offers AI-powered endpoint security solutions designed to prevent cyberattacks. It focuses on proactive threat prevention rather than reactive detection and response, utilizing machine learning to identify and block malware before it can execute. The platform is developed for organizations seeking to protect their endpoints from a wide range of advanced persistent threats and zero-day attacks.

Key Features

• AI-Driven Prevention — Utilizes artificial intelligence and machine learning models to predict and prevent known and unknown threats from executing on endpoints.
• Threat Detection and Response — Provides capabilities to detect and respond to advanced threats that bypass initial prevention layers, offering visibility into endpoint activities.
• Device Policy Enforcement — Allows administrators to define and enforce security policies across all managed endpoints, ensuring compliance and control.
• Application Control — Restricts the execution of unauthorized applications, reducing the attack surface and preventing the introduction of malicious software.
• Memory Protection — Defends against fileless attacks and exploits that target system memory, preventing advanced evasion techniques.
• Script Control — Monitors and controls the execution of scripts, mitigating risks associated with malicious scripting languages.

Who It's For

Cylance is designed for IT security professionals and organizations across various sizes, from small businesses to large enterprises, that require robust endpoint protection. It is particularly suited for environments where proactive threat prevention is prioritized to minimize the impact of cyberattacks. Industries with stringent security requirements, such as healthcare, finance, and government, may find its AI-driven approach beneficial.

Notable Strengths

Cylance's primary strength lies in its AI-first approach to threat prevention, which aims to stop malware pre-execution using machine learning models rather than relying solely on signatures. This proactive methodology is intended to provide protection against zero-day threats and advanced persistent threats that traditional antivirus solutions might miss. The solution's ability to operate effectively offline also offers a distinct advantage for endpoints with intermittent network connectivity.