Blackberry Optics | Endpoint Detection & Response Solution

What's New in Prevention-First EDR

Registry Introspection
Intel® Threat Detection
DNS Visibility
Windows Logon Event Visibility
RFC 1918 Address Space Visibility
Enhanced WMI Introspection Via Windows API
Enhanced PowerShell Introspection Via Windows API

Why Choose BlackBerry Optics?

BlackBerry Optics is AI-driven endpoint detection and response. It provides the endpoint visibility necessary for exacting functions including root cause analysis, threat hunting, and incident response.

Prevent Widespread Incidents With Machine Learning

By turning the endpoint into a virtual SOC, BlackBerry Optics continuously hunts for threats without human intervention.

Quickly Detect and Respond

Combining static, machine learning, and custom rules to identify and block advanced threats.

Learn and Improve, with Every Attack

Use attack data to improve your security posture. Close gaps in your security framework to minimize your attack surface.

Simplify Effective Threat Hunting

BlackBerry Optics simplifies the process of advanced threat hunting, making it accessible to every member of your team.

Right Size Data Collection with Relevance

BlackBerry Optics provides built-in playbook-driven incident responses that can be customized to meet your business needs.

Right Size Data Collection with Relevance

BlackBerry Optics employs a focused approach to data collection. It retrieves only relevant security data from endpoints.

Introducing Powerful New Capabilities

Check out our webinar that outlined the latest BlackBerry Optics features and how they improve threat detection, response, and remediation.

Watch > Webinar on CylanceOPTICS 2.4 - Extended Visibility and Unparalleled Prevention

Work Smarter, Not Harder

AI-driven threat prevention, response, and attack mitigation stop attacks that legacy products miss while dramatically reducing alert fatigue.

Continuous Situational Awareness

Let BlackBerry Optics discover hidden vulnerabilities in your environment. Use this insight to perform on-demand threat hunting across the enterprise.

Workflow-Based Incident Response

React to threats at machine speed. When a threat is detected, automated playbooks can drive responses so your system takes immediate action without requiring human intervention.

CylanceAPI: Automate Your Workflows

Scalable, Repeatable, and Automated Workflow Integration

CylanceAPI is a series of RESTful APIs that deliver easy access to BlackBerry Protect and Blackberry Optics data , administration, and investigation tasks. They enable full integration of Cylance security solutions into existing security frameworks and workflows.