We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money.

We conducted demo sessions for different products. Comparatively, Cybereason Endpoint Detection & Response has an inbuilt algorithm within GUI. We need to connect the dots and get the output. It processes incident response faster. At the same time, other tools rely on writing queries.

We can mitigate and isolate on the fly. Anytime there is an alert, it gives me the option to block the threat, quarantine the threat, or isolate a device. It is very important to have these different levels. We have seen other products that only isolate the device. This is sometimes a bit of an overkill, since it usually interrupts the end user's day more than necessary. Having multiple options to:

1. Block the process
2. Quarantine a file.
3. Isolate the device. 

That gives me a bit more granularity on my response rather than just isolating or blocking.

Before choosing Cybereason Endpoint Detection & Response, I evaluated a couple of brands, including products named CrowdStrike and SentinelOne. Cybereason is good and provides high performance while also helping my team to manage incidents.

I previously considered CylancePROTECT and CrowdStrike. However, we found Cybereason a better solution for our needs. 

We have evaluated Seqrite Endpoint Security, F-Secure Endpoint Detection and Response, Kaspersky Endpoint Security, Avast Endpoint, and Avira Endpoint Security.