Cylance

Cylance Cylance was an American cybersecurity company known for applying machine learning and artificial intelligence to endpoint security. Founded in 2012, it developed predictive antivirus and threat-detection products aimed at reducing reliance on signature-based methods. The company attracted venture capital, strategic partnerships, and later acquisition by a Canadian technology firm.

History

Founded in 2012 by Stuart McClure and Ryan Permeh, the company emerged during a period of rapid expansion in the cybersecurity startup ecosystem alongside firms such as CrowdStrike, Palo Alto Networks, FireEye, and Symantec Corporation. Early investment rounds included participation from venture firms and strategic investors comparable to Accel Partners, Kleiner Perkins, and Blackstone Group in the broader technology market. The firm grew through product launches, channel partnerships, and attendance at industry events like RSA Conference and Black Hat Briefings. In 2018–2019, amid consolidation in the cybersecurity sector exemplified by acquisitions such as VMware's buys and Microsoft Corporation's purchases, the company agreed to be acquired by BlackBerry Limited in a transaction that closed in 2019.

Products and Technology

The company offered endpoint protection products including CylancePROTECT, CylanceOPTICS, and managed services akin to offerings from McAfee, Trend Micro, and Sophos. Its approach emphasized machine learning models trained on malware specimens and benign binaries, paralleling research published by institutions such as MIT, Stanford University, and vendors like Google's security teams. The technology claimed to perform predictive prevention without relying on traditional signature updates, a model contrasted with legacy solutions from Symantec Corporation and Kaspersky Lab. Integration and telemetry capabilities were marketed alongside cloud management consoles similar to platforms provided by Amazon Web Services, Microsoft Azure, and Google Cloud Platform. The company published technical blogs and whitepapers that referenced threat actors profiled by organizations such as Mandiant and Recorded Future and participated in cooperative programs with authorities like Federal Bureau of Investigation partners in coordinated disclosure contexts.

Corporate Structure and Ownership

Initially venture-backed and privately held, the firm’s executive leadership included founders with prior experience at firms such as Foundstone, ISC2-affiliated initiatives, and other security startups. Board advisors and investors reflected ties to firms and persons prominent in technology finance such as Sequoia Capital-type entities and former executives from Intel Corporation and Cisco Systems. In 2019 the company became a subsidiary of BlackBerry Limited as part of that firm’s strategic shift toward endpoint security and enterprise software. Post-acquisition, governance and product roadmaps were coordinated with BlackBerry units, aligning with BlackBerry’s Enterprise of Things and secure communications initiatives similar to integrations seen between IBM and acquired security vendors.

Market Reception and Criticism

Market analysts from firms analogous to Gartner and Forrester Research evaluated the company against competitors including CrowdStrike, SentinelOne, and Sophos, noting strengths in machine learning-driven prevention and criticisms around telemetry coverage and enterprise feature parity. Industry press outlets like Wired, The Wall Street Journal, Bloomberg, and The New York Times covered both technical claims and business performance, while specialized outlets such as SC Magazine and Dark Reading ran product comparisons. Some security researchers from labs at Kaspersky Lab, ESET, and university programs raised questions about evasion techniques, false positives, and the limits of static machine-learning approaches compared with behavior-based detection used by firms like Carbon Black and Cylance competitors in third-party reviews. Customer testimonials from organizations resembling Fortune 500 companies and public-sector agencies expressed mixed experiences regarding deployment, management, and incident response effectiveness.

Notable Incidents and Legal Matters

The company was involved in several public incidents and disputes typical of high-profile cybersecurity vendors. Legal and procurement scrutiny paralleled cases seen with firms such as McAfee and Symantec Corporation over contract performance and claims in competitive bids. Post-acquisition integration raised governance questions similar to those observed in acquisitions by VMware and Cisco Systems, and the firm faced litigation and regulatory review typical for technology transactions of comparable scale. Security incidents and vulnerability research reports, sometimes shared by independent researchers at conferences like DEF CON and Black Hat USA, prompted product updates and advisories comparable to coordinated disclosures involving vendors such as Microsoft Corporation and Apple Inc..

Category:Cybersecurity companies