Skip Navigation

BlackBerry Optics

Prevent. Detect. Respond.

BlackBerry® Optics pushes all detection and response decisions down to the endpoint, eliminating response latency that can mean the difference between a minor security event and a widespread, uncontrolled security incident.

What’s New in BlackBerry Optics

What's New in Prevention-First EDR

  • Registry Introspection
  • Intel® Threat Detection
  • DNS Visibility
  • Windows Logon Event Visibility
  • RFC 1918 Address Space Visibility
  • Enhanced WMI Introspection Via Windows API
  • Enhanced PowerShell Introspection Via Windows API
Read What's New

Why Choose BlackBerry Optics?

BlackBerry Optics is AI-driven endpoint detection and response. It provides the endpoint visibility necessary for exacting functions including root cause analysis, threat hunting, and incident response.

Prevent Widespread Incidents With Machine Learning

By turning the endpoint into a virtual SOC, BlackBerry Optics continuously hunts for threats without human intervention.

Quickly Detect and Respond

Combining static, machine learning, and custom rules to identify and block advanced threats.

Learn and Improve, with Every Attack

Use attack data to improve your security posture. Close gaps in your security framework to minimize your attack surface.

Simplify Effective Threat Hunting

BlackBerry Optics simplifies the process of advanced threat hunting, making it accessible to every member of your team.

Right Size Data Collection with Relevance

BlackBerry Optics provides built-in playbook-driven incident responses that can be customized to meet your business needs.

Right Size Data Collection with Relevance

BlackBerry Optics employs a focused approach to data collection. It retrieves only relevant security data from endpoints.


Introducing Powerful New Capabilities

Check out our webinar that outlined the latest BlackBerry Optics features and how they improve threat detection, response, and remediation.

SC Media Innovator "Hall of Fame"

BlackBerry Protect and BlackBerry Optics are not only SC Labs approved solutions, SC Media has also recognized us as an "Innovator" three years in a row. Now they've inducted us into their "Hall of Fame."

Learn More

The Total Economic Impact of BlackBerry Protect and BlackBerry Optics

Determining the cost of a cybersecurity investment is easy. Calculating its overall value requires deeper analysis. The Forrester Total Economic Impact study provides you with a framework for assessing the potential ROI of investing in Cylance security.

Read the Study

Gain and Maintain an Edge Over Attackers

Work Smarter, Not Harder

AI-driven threat prevention, response, and attack mitigation stop attacks that legacy products miss while dramatically reducing alert fatigue.

Continuous Situational Awareness

Let BlackBerry Optics discover hidden vulnerabilities in your environment. Use this insight to perform on-demand threat hunting across the enterprise.

Workflow-Based Incident Response

React to threats at machine speed. When a threat is detected, automated playbooks can drive responses so your system takes immediate action without requiring human intervention.

Solution Brief

CylanceAPI: Automate Your

Repeatable, and Automated Workflow Integration

CylanceAPI is a series of RESTful APIs that deliver access to BlackBerry Protect and BlackBerry Optics data, administration, and investigation tasks. They enable full integration of Cylance security solutions into existing security frameworks and workflows.


Learn More

Find the Perfect Package for You

Choose the BlackBerry® Suite that Meets Your Needs

BlackBerry Spark® Suite


UEM Suite + UES Suite features for full Unified Endpoint Security and Unified Endpoint Management

BlackBerry® Cyber Suite

UES – full features

AI-Driven Endpoint Protection, Detection & Response, integrated Mobile Threat Defense, continuous authentication and adaptive risk scoring.


Video: Single Prevention and EDR Agent

Watch Video

Solution Brief: AI-driven Threat Prevention, Detection and Response 


Third-party Evaluation: BlackBerry MITRE ATT&CK® APT20

Learn More

Infographic: The Case for a New Approach to Endpoint Detection and Response