App Review Sophos Vs Cylance

[Tempnexus]

Obviously made by Sophos after getting bashed by Cylance , The Empire Strike Back ! (and hard)
for information , both Sophos and Cylance developed the Next-Gen type (AI thingy) solutions.

I had doubt about Cylance since the beginning since you are not allowed to have any control over it, all is done remotely by their tech... , after watching this i know why lol.

Thank you so much for this!!!! You might have saved taxpayers a lot of $$$

I was about to bring this tech up onto our current agency tech refresh planning meeting. Mainly since the stellar reviews and the stupid "shh" ads all over airports. Also because they are on GSA purchase list so easier to procure. But now I will know decide against it after spending a good 5 hours of my personal time combing through and theese posts and other posts made on other sites. Yeap market research for the win.

 

[_CyberGhosT_]

Thats right Temp, Cylance and companies like them count on the fact that many are too busy to do their homework.
An ignorant customer base is a lucrative customer base, isn't that right Malware Managed

 

[FleischmannTV]

Batoru rowaiaru continues:

Thoughts on comparative testing | Sophos Blog

 

[Deleted member 178]

Batoru rowaiaru continues:

Thoughts on comparative testing | Sophos Blog

"Cylance ! when hypocrisy becomes a lifestyle"

 

[TheMalwareMaster]

Is there any Free version of cylance for home?

 

[_CyberGhosT_]

@TheMalwareMaster
Yes but it's not free, its quite expensive.
see the link in my previous post in this thread.
PeAcE

 

[NullByte]

Video removed by the user ??? that's funny.

Both products are really bad, Sophos is that good because they bought HitmanPro and added to the product.

 

[TheMalwareMaster]

@TheMalwareMaster
Yes but it's not free, its quite expensive.
see the link in my previous post in this thread.
PeAcE

So, Basically this product is used mostly for endpoints? Can you please link me a guide about how it works? I've seen some youtube videos from them and still can't understand.. No signatures, no heuristics, no sandboxing? Regards

 

[SHvFl]

So, Basically this product is used mostly for endpoints? Can you please link me a guide about how it works? I've seen some youtube videos from them and still can't understand.. No signatures, no heuristics, no sandboxing? Regards

They use math and AI and based on parameters it decides if a program is good or bad. Some say it's smoke and mirrors show, some others that they are just an antivirus and some that they are awesome next gen endpoint solution.
if you read the topic you will see most point of view.

EDIT: Saw this on the other forum. A more info version of mine.
New Dell partnership casts doubt on traditional antivirus programs

 

[cruelsister]

Let's consider the traditional (pure) AV solution: it will have a local scanner containing definitions against malware that would be uploaded to the system using the product at certain intervals. There will also be a Cloud component that would contain new malware definitions created after the last upload but still not pushed out. What can we expect in a test for this product?

1). When disconnected from the network, one can reasonably expect only the malware for which a local definition exists will be detected. It will not detect anything for which Cloud protection exists buy still not uploaded to the local system. In short detection should be lower with the Network disconnected.

2). A pure AV cannot detect anything for which it does not have a definition. So take an existing malicious file, nop out some redundant code and you get a brand new zero day file that the AV (Local or Cloud) cannot detect.

Now let's review what the original video showed about C.

1). Detection went down in the absence of a Network connection
2). It did not detect malware files that have been modified.

If it looks like a duck and quacks like a duck, then...

 

[Malware Managed]

Thats right Temp, Cylance and companies like them count on the fact that many are too busy to do their homework.
An ignorant customer base is a lucrative customer base, isn't that right Malware Managed

I would not presume to say that our customers are ignorant but I can say that most of them are not security professionals; though we do have some security professionals who use PROTECT as well. Our goal is to make PROTECT available to a customer base that previously didn't have access. My Co-Founder and I have been using PROTECT for over two years in the enterprise space and have not had to deal with a single peace of ransomware during that time; which, unfortunately for us, was not the situation before we started using PROTECT.

I would also say that anyone, who has worked in the IT security space for over twenty years, would agree that no security solution is unbeatable by red team.

 

[Deleted member 178]

I would not presume to say that our customers are ignorant but I can say that most of them are not security professionals; though we do have some security professionals who use PROTECT as well. Our goal is to make PROTECT available to a customer base that previously didn't have access.

by Pay first, try it then ask for refund if not satisfied? sorry it won't work.

My Co-Founder and I have been using PROTECT for over two years in the enterprise space and have not had to deal with a single peace of ransomware during that time; which, unfortunately for us, was not the situation before we started using PROTECT.

Ransomware are overrated, any properly set anti-exe/HIPS can block them. lets throw some FUD encrypted RAT with signed certificates, that is where the real game start.

I would also say that anyone, who has worked in the IT security space for over twenty years, would agree that no security solution is unbeatable by red team.

Indeed , problem with Cylance , is that you bombard the net with claims you can't deliver and use shady behaviors to get those "unskilled" people to believe those claims.

lets talk about CylanceProtect for home users :

- No trial available , must pay first. come on...
- no prevention features, just hoping your AI algorithm will catch the intruders, problem it may be too late. ok....
- no controls over the software, users have to believe your techs, sorry i can do it better , i don't need them to set up a product for my system. /facepalm
- use of cloud when you say you don't. The Sophos Video clearly shows it with the hash file modification. /uber-facepalm

Then when Cylance does its "Unbelievable Tour" you compare it with others products, but when Sophos strike back with the same procedure, you ask the video to be removed?! Come on dude !

And after all this you expect to be taken seriously?

You want look honest ? let people download and trial your product, test it against malwares, and then if your claims are true, the truth will come out by itself and you will gain huge popularity. But i won't believe you may do that anytime soon, because i single video from Sophos threw you off balance.

For example give a licensed version to @cruelsister so she can test Cylance against high end malwares as she did with many other famous vendors, let see how Cylance performs? would you?

 

[hjlbx]

Webroot and Cylance should join forces...

 

[Malware Managed]

If the owner of the forum doesn't mind, we (Malware Managed) would be glad to provide @cruelsister with an evaluation subscription for PROTECT. Sound fair?

 

[FleischmannTV]

Webroot and Cylance should join forces...

Funny thing is, a former Webroot marketing person is now in the Cylance marketing team.

 

[Deleted member 178]

If the owner of the forum doesn't mind, we (Malware Managed) would be glad to provide @cruelsister with an evaluation subscription for PROTECT. Sound fair?

That sounds fair, let her decide, In case she refuses which i doubt , plenty will surely be happy to test it.

i warn you she will do a video ^^

 

[hjlbx]

Funny thing is, a former Webroot marketing person is now in the Cylance marketing team.

Now it all makes sense...

Webroot <-> Poison Root : am I seeing a pattern here ?

 

[_CyberGhosT_]

i warn you she will do a video ^^

Yes Umbra they seem to be allergic to video's or the truth,
can't figure out which.

 

[Duotone]

What if CS test didn't go the way they wanted would they ask her to remove the video as well?!

 

[FleischmannTV]

What if CS test didn't go the way they wanted would they ask her to remove the video as well?!

In this case one of the involved parties probably was in violation of licensing terms for giving Sophos access to their software.

That's the thing about them. They don't hand out their software for independent open reviews. You're only ever gonna see it on their computers and on their terms and their customers probably have to sign contracts, which bind them not to give access to the software to any third party.

They, on the other hand, buy their competitors software and use it in video "reviews". Tells me all I need to know about them.