What’s New in BlackBerry Optics

What's New in Prevention-First EDR
- Registry Introspection
- Intel® Threat Detection
- DNS Visibility
- Windows Logon Event Visibility
- RFC 1918 Address Space Visibility
- Enhanced WMI Introspection Via Windows API
- Enhanced PowerShell Introspection Via Windows API
Why Choose BlackBerry Optics?
BlackBerry Optics is AI-driven endpoint detection and response. It provides the endpoint visibility necessary for exacting functions including root cause analysis, threat hunting, and incident response.
Prevent Widespread Incidents With Machine Learning
By turning the endpoint into a virtual SOC, BlackBerry Optics continuously hunts for threats without human intervention.
Quickly Detect and Respond
Combining static, machine learning, and custom rules to identify and block advanced threats.
Learn and Improve, with Every Attack
Use attack data to improve your security posture. Close gaps in your security framework to minimize your attack surface.
Simplify Effective Threat Hunting
BlackBerry Optics simplifies the process of advanced threat hunting, making it accessible to every member of your team.
Right Size Data Collection with Relevance
BlackBerry Optics provides built-in playbook-driven incident responses that can be customized to meet your business needs.
Right Size Data Collection with Relevance
BlackBerry Optics employs a focused approach to data collection. It retrieves only relevant security data from endpoints.







Introducing Powerful New Capabilities
Check out our webinar that outlined the latest BlackBerry Optics features and how they improve threat detection, response, and remediation.
Gain and Maintain an Edge Over Attackers

AI-driven threat prevention, response, and attack mitigation stop attacks that legacy products miss while dramatically reducing alert fatigue.

Let BlackBerry Optics discover hidden vulnerabilities in your environment. Use this insight to perform on-demand threat hunting across the enterprise.

React to threats at machine speed. When a threat is detected, automated playbooks can drive responses so your system takes immediate action without requiring human intervention.
CylanceAPI: Automate Your
Workflows
Repeatable, and Automated Workflow Integration
CylanceAPI is a series of RESTful APIs that deliver access to BlackBerry Protect and BlackBerry Optics data, administration, and investigation tasks. They enable full integration of Cylance security solutions into existing security frameworks and workflows.
Find the Perfect Package for You
Choose the BlackBerry® Spark Suite that Meets Your Needs
UEM & UES
UEM Suite + UES Suite features for full Unified Endpoint Security and Unified Endpoint Management
UES only
AI-Driven Endpoint Protection, Detection & Response, integrated Mobile Threat Defense, continuous authentication, adaptive risk scoring and dynamic policy adoption.