By mid-2016, the cybersecurity industry had produced two companies that were reshaping the competitive landscape in ways that even the incumbents could not ignore. CrowdStrike and Cylance had each reached billion-dollar valuations with fundamentally different approaches: CrowdStrike's threat intelligence and behavioral detection platform, and Cylance's AI-based prevention model. Forbes' Thomas Brewster captured the competitive dynamic between them in a piece that the industry widely read as a marker of how far both companies had come from their early-stage origins.
The "brutal battle" framing was accurate. Both companies were competing for the same enterprise security budgets, making overlapping claims about the inadequacy of legacy antivirus and endpoint protection, and going head-to-head in competitive evaluations at major enterprises. The product philosophies were different enough to generate genuine technical disagreements about which approach was superior — differences that manifested in public debate between the companies and their advocates.
Stuart McClure's Cylance argued that prevention was categorically superior to detection: if you prevent the attack from executing, you eliminate the breach. CrowdStrike's model accepted some level of compromise and focused on identifying and evicting attackers before they could cause lasting damage. Both companies had compelling empirical results. The market was large enough for both to succeed, but the competition for position in the new paradigm was intense.
Looking back from the present — CrowdStrike became one of the most valuable cybersecurity companies in history; Cylance was acquired by BlackBerry in a transaction that valued it at $1.4 billion — the duelling unicorns story is a chapter in the history of how AI transformed endpoint security, and Stuart was one of the two people most responsible for writing it.