Enterprise subscription
Contact sales
Custom
Official pricing is not publicly listed. Quotes are provided by Arctic Wolf and may vary by endpoint volume, deployment model, and selected services.
Check current pricing →C
CylancePROTECT
AI-based endpoint protection for preventing malware, fileless attacks, memory exploits, and script-based threats across enterprise devices.
Editorial overview
Aggregated Overview
The product provides broad endpoint controls, cross-platform agents, REST APIs, SIEM forwarding, and restricted-network deployment options. Independent review platforms report strong overall satisfaction, while reviews also mention configuration effort, false positives, and price concerns. Public pr
This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.
CylancePROTECT Decision Snapshot
A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.
Platforms
Android, API, iOS, Linux, macOS, Web
TechZella assessment
8.1/10
Overview
CylancePROTECT is an enterprise endpoint protection product originally developed by Cylance and later sold by BlackBerry to Arctic Wolf on February 3, 2025. Arctic Wolf now presents the technology through Aurora Endpoint Security, formerly CylancePROTECT.
The product uses machine-learning-based analysis and policy controls to prevent malware and suspicious activity before execution. Its controls include threat prevention, memory protection, script control, application control, device control, and configurable exclusions.
Organizations can manage supported Windows, macOS, and Linux endpoints through a web console. Related mobile protection capabilities support Android and iOS through the CylancePROTECT Mobile product family.
CylancePROTECT Pros & Cons
Pros
- Broad endpoint operating-system coverage across Windows, macOS, and Linux.
- Combines malware prevention with memory, script, application, and device controls.
- Provides REST API access and SIEM or syslog forwarding.
- Supports restricted-network and air-gapped deployment scenarios.
- Strong independent review scores from Capterra and GetApp.
Cons
- Official pricing is not publicly disclosed.
- Policy tuning may require experienced security administrators.
- Independent reviews mention false positives and configuration effort.
- Ownership and product naming changed after the 2025 Arctic Wolf acquisition.
- Direct SIEM forwarding is documented for one destination and is not intended for real-time monitoring.
Security & Privacy
For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.
Security posture at a glance
| Deployment model | Cloud, hybrid, and on-premises options |
|---|
Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.
CylancePROTECT Pricing & Plans
Pricing may change. Verify current plans on the vendor's website.
CylancePROTECT Features
Prevention and Detection
- AI-based malware analysis
- Threat prevention before execution
- Fileless attack protection
- Ransomware prevention
- Threat event monitoring
Endpoint Controls
- Memory protection
- Script control
- Application control
- Device control
- Configurable exclusions
- Policy-based response actions
Management
- Web-based administration console
- Device policies and zones
- Endpoint deployment management
- Administrative roles and integrations
- Cross-platform agent management
Integrations and Automation
- Authenticated REST API
- Custom application credentials
- SIEM event forwarding
- Syslog forwarding
- Microsoft Entra ID single sign-on
- Microsoft Intune integration for mobile threat response
Deployment Options
- Cloud-managed deployment
- CylanceHYBRID for restricted networks
- CylanceON-PREM for air-gapped environments
Alternatives
CrowdStrike Falcon is a cloud-native endpoint security platform with prevention, detection, response, and managed security options.
SentinelOne Singularity provides autonomous endpoint prevention, detection, response, and rollback capabilities.
Microsoft Defender for Endpoint suits organizations already invested in Microsoft 365, Entra ID, and Microsoft security services.
Sophos Intercept X combines endpoint prevention, exploit protection, ransomware controls, and managed detection options.
Trellix Endpoint Security provides enterprise endpoint protection, threat prevention, and centralized policy management.
CylancePROTECT Specifications
| Current product name | Aurora Endpoint Security, formerly CylancePROTECT |
|---|---|
| Vendor | Arctic Wolf Networks |
| Original developer | Cylance |
| Acquisition history | BlackBerry sold Cylance endpoint security assets to Arctic Wolf on February 3, 2025 |
| Deployment model | Cloud, hybrid, and on-premises options |
| Desktop platforms | Windows, macOS, Linux |
| Mobile platforms | Android and iOS through CylancePROTECT Mobile |
| Management interface | Web console |
| Integrations | Microsoft Entra ID, Microsoft Intune, SIEM, syslog, and custom applications through API |
| API | Authenticated RESTful API for registered organizations |
| Free trial | Not publicly verified |
| Pricing model | Custom enterprise quote |
| On-premises options | CylanceON-PREM and CylanceHYBRID |
| Primary audience | Enterprise security and IT teams |
Our evidence-based assessment
TechZella Score
A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.
8.1/10Moderate confidence
The product provides broad endpoint controls, cross-platform agents, REST APIs, SIEM forwarding, and restricted-network deployment options. Independent review platforms report strong overall satisfaction, while reviews also mention configuration effort, false positives, and price concerns. Public pricing remains unavailable.
Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.
Community feedback
Reviews
No reviews yet. Be the first to share your experience.
Write a Review
Please log in to submit a review.
FAQ
Is CylancePROTECT still available?
Its technology remains available through Arctic Wolf’s Aurora Endpoint Security portfolio. Arctic Wolf identifies Aurora Endpoint Security as formerly CylancePROTECT.
Who owns CylancePROTECT?
Arctic Wolf acquired BlackBerry’s Cylance endpoint security assets on February 3, 2025. BlackBerry retained reseller rights for certain government customers.
Does CylancePROTECT have a free trial?
No current official free-trial offer was verified in the reviewed product and documentation pages.
What operating systems does it support?
Desktop documentation covers Windows, macOS, and Linux. Mobile protection documentation covers Android and iOS through CylancePROTECT Mobile.
Does it provide an API?
Yes. The current Aurora Endpoint Security documentation describes authenticated REST APIs and application credentials with configurable privileges.
Can it integrate with SIEM tools?
Yes. Administrators can forward endpoint events to a SIEM solution or syslog server. The documented integration supports one destination directly.
Is CylancePROTECT an EDR product?
CylancePROTECT primarily provides endpoint prevention and control. Detection and response capabilities are associated with related products such as CylanceOPTICS and the broader Aurora Endpoint Security platform.
Recently added software
- Mailjet · Email Marketing
- Mintsoft · Warehouse Management
- Clarus WMS · Warehouse Management
- Extensiv 3PL Warehouse Manager · Warehouse Management
- Fishbowl Drive · Warehouse Management
- Logiwa WMS · Warehouse Management
- NetSuite WMS · Warehouse Management
- Softeon WMS · Warehouse Management