BlackBerry Cylance

BlackBerry Cylance BlackBerry Cylance is a cybersecurity company originally founded as Cylance, known for applying machine learning and artificial intelligence to endpoint security, threat prevention, and threat intelligence. The company gained attention for a prevention-first approach to malware based on statistical models and was later acquired by BlackBerry Limited. Cylance's technology has been integrated into enterprise security stacks and cited in discussions involving Microsoft, Amazon Web Services, Google Cloud Platform, IBM, and regulatory scrutiny in contexts tied to United States Department of Homeland Security and standards from National Institute of Standards and Technology.

History

Cylance was founded in 2012 by former McAfee executives Stuart McClure and Ryan Permeh, emerging from a Silicon Valley and Irvine, California startup ecosystem that included contemporaries like Palantir Technologies, CrowdStrike, and Symantec. Early milestones included seed funding rounds with investors tied to Sequoia Capital, Kleiner Perkins, and partnerships with enterprises such as AT&T and Cisco Systems. Public visibility rose through presentations at conferences like RSA Conference and Black Hat USA, where researchers compared Cylance approaches to those from Trend Micro and FireEye. In 2019 Cylance was acquired by BlackBerry Limited in a transaction covered alongside firms like VMware and Accenture for integration into BlackBerry's secure communications and endpoint management strategy.

Products and Technology

Cylance developed endpoint products leveraging machine learning models trained on large datasets from sources including telemetry partners like Microsoft, Amazon, and Google. Core offerings included CylancePROTECT for malware prevention, CylanceOPTICS for endpoint detection and response (EDR), and CylanceV for managed detection services, competing with products from Sophos, McAfee, and CrowdStrike Falcon. The underlying technology used static analysis and predictive models similar in scope to research at institutions such as MIT, Stanford University, and Carnegie Mellon University on adversarial machine learning. Integration tools connected to orchestration platforms like ServiceNow, Splunk, and IBM QRadar, while mobile and IoT considerations paralleled work by Apple, Samsung, and Cisco Systems on device security. Cylance also published white papers and technical briefs referencing standards from ISO and guidance from National Institute of Standards and Technology.

Deployment and Integration

Enterprises deployed Cylance solutions across sectors including finance with firms like JPMorgan Chase, healthcare organizations interacting with Mayo Clinic-adjacent infrastructure, manufacturing sites akin to General Electric facilities, and government-adjacent contractors collaborating with Lockheed Martin and Raytheon Technologies. Integration patterns included endpoint agents, cloud connectors for Amazon Web Services and Microsoft Azure, and APIs for Palo Alto Networks firewalls and VMware virtualization stacks. Deployment cases cited by partners involved centralized management via consoles interoperable with Splunk, Elastic, and ServiceNow—echoing integration efforts by Okta for identity and Zscaler for network security.

Security Research and Threat Intelligence

Cylance's research team published analyses on advanced persistent threats (APTs) and malware campaigns that drew comparisons to published work from Kaspersky Lab, Mandiant, and Recorded Future. Public reports detailed attribution challenges similar to debates involving Fancy Bear and Sandworm operations, and Cylance researchers participated in disclosures at forums like DEF CON and Black Hat USA. Threat intelligence feeds from Cylance were consumed by SIEM vendors including Splunk and IBM Security, and used in conjunction with vulnerability data from CVE Program and advisories from United States Computer Emergency Readiness Team. Academic and industry citations referenced Cylance analyses alongside research from SANS Institute, ENISA, and university programs at University of California, Berkeley.

Corporate Structure and Acquisitions

After its 2012 founding, Cylance operated as a private company with venture backing before being acquired by BlackBerry Limited in 2019, a move paralleling acquisitions by VMware and Cisco Systems in the endpoint security market. Within BlackBerry, Cylance technology was folded into the BlackBerry Spark platform and aligned with units focusing on secure communications and automotive cybersecurity in collaboration with firms like Ford Motor Company and Toyota. Leadership changes involved executives with backgrounds from McAfee, Intel Security Group, and Symantec, and partnerships extended to managed security service providers such as AT&T Cybersecurity and BT Group. Post-acquisition, integration efforts referenced compliance frameworks used by HIPAA-covered entities and procurement processes of large vendors like Dell Technologies and Hewlett Packard Enterprise.

Category:Cybersecurity companies Category:BlackBerry Limited subsidiaries