Try our new research platform with insights from 80,000+ expert users
VMware Carbon Black Endpoint Logo

VMware Carbon Black Endpoint Reviews

Vendor: VMware
3.9 out of 5
Badge Leader
Leave a review

What is VMware Carbon Black Endpoint?

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

Get the VMware Carbon Black Endpoint Buyer's Guide and find out what your peers are saying about VMware Carbon Black Endpoint, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
VMware Carbon Black Endpoint is the #2 ranked solution in top Security Incident Response solutions, #7 ranked solution in top Ransomware Protection solutions, #23 ranked solution in EDR tools, and #29 ranked solution in endpoint security software. PeerSpot users give VMware Carbon Black Endpoint an average rating of 7.8 out of 10. VMware Carbon Black Endpoint is most commonly compared to CrowdStrike Falcon: VMware Carbon Black Endpoint vs CrowdStrike Falcon. VMware Carbon Black Endpoint is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 13% of all views.
Buyer's Guide
VMware Carbon Black Endpoint
August 2025
Get the report
Helped 866,218 peers since 2012

Featured VMware Carbon Black Endpoint reviews

Read more reviews

VMware Carbon Black Endpoint mindshare

Product category:
Endpoint Protection Platform (EPP)
As of August 2025, the mindshare of VMware Carbon Black Endpoint in the Endpoint Protection Platform (EPP) category stands at 1.6%, down from 2.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black Endpoint1.6%
CrowdStrike Falcon10.5%
Microsoft Defender for Endpoint10.2%
Other77.7%
Endpoint Protection Platform (EPP)

PeerResearch reports based on VMware Carbon Black Endpoint reviews

TypeTitleDate
CategoryEndpoint Protection Platform (EPP)Aug 29, 2025Download
ProductReviews, tips, and advice from real usersAug 29, 2025Download
ComparisonVMware Carbon Black Endpoint vs Microsoft Defender for EndpointAug 29, 2025Download
ComparisonVMware Carbon Black Endpoint vs CrowdStrike FalconAug 29, 2025Download
ComparisonVMware Carbon Black Endpoint vs SentinelOne Singularity CompleteAug 29, 2025Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.310.5%96%132 interviewsAdd to research
Microsoft Defender for Endpoint4.110.2%94%198 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

VMware Carbon Black Endpoint excels in offline networking, centralized cloud control, dynamic grouping, threat analysis, and intelligent learning. It offers simplified policy management, historical data features, robust protection, easy setup, live response, sandboxing, customizable settings, effective endpoint detection, and scalability. The platform integrates well with other systems, provides continuous monitoring and powerful APIs, and supports remote work. It is highly stable, provides comprehensive security, and offers extensive online documentation.
  • "One significant advantage of VMware Carbon Black Endpoint was that while CrowdStrike experienced a big outage, VMware Carbon Black Endpoint remained unaffected and continued protecting us."
  • "It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."
  • "The portal is easy to use and manage."

Room for Improvement

VMware Carbon Black Endpoint needs to enhance endpoint performance, streamline deployment, and improve educational resources for users. It should offer better mobile support, refine the alert system, and increase compatibility with other products. Enhancements in user interface explanations, report generation, and cloud console responsiveness are necessary. They must also address slow query processing, improve Mac support, and integrate with existing firewalls. Pricing could be made more competitive.
  • "It did most of what we wanted it to do and protected us from the notifications we received, though we didn't have it tied into a SIEM, which led to a more ad hoc response as opposed to being proactive."
  • "The product cannot perform an on-demand scan. They could add this particular feature."
  • "Certain settings have limitations. For example, I cannot manually block some malware activities."

ROI

Users found significant ROI with VMware Carbon Black Endpoint, often noticing improvements within six months. Many companies avoided costly malware attacks after implementation. ROI is sometimes difficult to quantify precisely in antivirus contexts, but users highlighted reduced security incidents and stated a 10% cost saving against other vendors.

Pricing

VMware Carbon Black Endpoint's pricing is generally seen as high, with annual subscription models common. Users report inflexible licensing requiring a minimum of 100 licenses, even for smaller offices needing fewer. While some find the costs competitive, others consider them higher than similar solutions. License costs range from $15 per node to $28 per employee, with typical payments between $5,000 to $7,000 for monitoring agents, and expressed dissatisfaction with the lack of flexibility for existing customers.
  • "The platform is expensive."
  • "The product is quite reasonable."
  • "The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."

Popular Use Cases

VMware Carbon Black Endpoint is used by organizations for endpoint protection, detecting malware, blocking ransomware, threat hunting, securing servers, and monitoring endpoint activity. It helps stop spyware, viruses, and provides EDR capabilities. Companies use it for advanced threat defense, integrating with existing security measures, and ensuring compliance. It is deployed on both cloud and on-premises environments, providing robust security by intelligent learning and machine learning, widely utilized by MSPs and distributors.

Service and Support

Customers often find VMware Carbon Black Endpoint's support responsive and knowledgeable, with good support available locally and globally. Some note slow response times and the need for tier escalation. Several highlight good support but encounter delays, particularly for documentation and portal communication. There's mixed feedback about local support, with some satisfied and others noting slow responses. Many users have not needed to contact support, trusting self-help resources and documentation.

Deployment

Many users find VMware Carbon Black Endpoint's initial setup straightforward, although some mention complexity due to extensive configuration options. Deployment time varies from a few minutes for a single endpoint to several months for larger environments. Common challenges include the need for thorough testing and policy tuning. Adequate training and knowledge are essential for smooth implementation, and the cloud version is generally perceived as easier to set up than the on-premises version.

Scalability

VMware Carbon Black Endpoint is highly scalable, accommodating various company sizes ranging from small to enterprise levels. Users report ease of scalability with cloud deployment, successful large-scale implementations with thousands of endpoints, and no significant issues. Trained staff can manage numerous endpoints efficiently. While some experience limitations, particularly in regulated environments or with specific OS support, users generally find it effective and adaptable. Ratings frequently range from eight to ten out of ten for scalability.

Stability

Users report VMware Carbon Black Endpoint as generally stable with minimal resource use. Some note occasional issues with sensors and slow performance in specific scenarios. Stability is rated highly by many, with no significant bugs or crashes observed. Regular updates and proper configuration help improve performance. However, some users mention fluctuations in stability between versions and instances of the software interrupting installations. It is commonly used daily without major problems and is found to be reliable.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our VMware Carbon Black Endpoint Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business27
Midsize Enterprise10
Large Enterprise23
By reviewers
By visitors reading reviews
Company SizeCount
Small Business288
Midsize Enterprise176
Large Enterprise565
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
11%
Government
9%
Manufacturing Company
8%
Comms Service Provider
6%
Retailer
6%
Energy/Utilities Company
5%
University
4%
Educational Organization
3%
Real Estate/Law Firm
3%
Healthcare Company
3%
Non Profit
3%
Performing Arts
3%
Insurance Company
2%
Construction Company
2%
Hospitality Company
2%
Media Company
2%
Outsourcing Company
2%
Wholesaler/Distributor
2%
Transportation Company
2%
Legal Firm
2%
Recreational Facilities/Services Company
2%
Logistics Company
1%
Consumer Goods Company
1%

Compare VMware Carbon Black Endpoint with alternative products

Go!

Learn more about VMware Carbon Black Endpoint

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?
  • Intelligent learning: Improves detection capabilities over time.
  • Whitelisting: Allows only approved applications to run.
  • Integration with other security tools: Enhances overall security posture.
  • Centralized cloud control: Manages endpoints from a single interface.
  • Command shell access: Offers deeper investigation capabilities.
  • Dynamic grouping: Facilitates organized endpoint management.
  • Simplified policy management: Streamlines security policy implementation.
  • API for system remoting: Allows remote system access and management.
  • Twenty-four-seven support: Provides continuous assistance and response.
What are the benefits of VMware Carbon Black Endpoint?
  • Real-time monitoring: Offers constant vigilance against threats.
  • Threat hunting: Identifies and mitigates threats proactively.
  • Historical data analysis: Assists in understanding past incidents and patterns.
  • Improved endpoint protection: Enhances overall endpoint security.
  • Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

VMware Carbon Black Endpoint was previously known as Carbon Black CB Defense, Bit9, Confer.

VMware Carbon Black Endpoint customers

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Related questions

  • 46
I would like to compare CrowdStrike and Carbon Black. On what basis should I decide?
  • 14
What Is The Biggest Difference Between BigFix And Carbon Black Cb Defense?
  • 75
What is the biggest difference between Carbon Black CB Defense, CrowdStrike, and SentinelOne?
  • 366
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
  • 101
Running Carbon Black Defense Along with Windows Defender
  • 3
What Is The Biggest Difference Between Carbon Black Cb Defense And ESET Endpoint Security?
  • 3
Which product has better reputation: Carbon Black CB Defense or CrowdStrke Falcon?
  • 47
How does Microsoft Defender for Endpoint compare with Carbon Black CB Defense?
  • 830
What is the biggest difference between EPP and EDR products?
  • 67
Can Cylance be used with Symantec or Kaspersky endpoint solutions without conflict?

Product Categories

Product Categories
Endpoint Protection Platform (EPP)
Security Incident Response
Endpoint Detection and Response (EDR)
Ransomware Protection

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs VMware Carbon Black Endpoint Logo
CrowdStrike Falcon vs VMware Carbon Black Endpoint
Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint Logo
Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint
Fortinet FortiEDR vs VMware Carbon Black Endpoint Logo
Fortinet FortiEDR vs VMware Carbon Black Endpoint
SentinelOne Singularity Complete vs VMware Carbon Black Endpoint Logo
SentinelOne Singularity Complete vs VMware Carbon Black Endpoint
Cortex XDR by Palo Alto Networks vs VMware Carbon Black Endpoint Logo
Cortex XDR by Palo Alto Networks vs VMware Carbon Black Endpoint
HP Wolf Security vs VMware Carbon Black Endpoint Logo
HP Wolf Security vs VMware Carbon Black Endpoint
Fortinet FortiClient vs VMware Carbon Black Endpoint Logo
Fortinet FortiClient vs VMware Carbon Black Endpoint
Elastic Security vs VMware Carbon Black Endpoint Logo
Elastic Security vs VMware Carbon Black Endpoint
WatchGuard Firebox vs VMware Carbon Black Endpoint Logo
WatchGuard Firebox vs VMware Carbon Black Endpoint
Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint Logo
Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint
Tanium vs VMware Carbon Black Endpoint Logo
Tanium vs VMware Carbon Black Endpoint
Symantec Endpoint Security vs VMware Carbon Black Endpoint Logo
Symantec Endpoint Security vs VMware Carbon Black Endpoint
Huntress Managed EDR vs VMware Carbon Black Endpoint Logo
Huntress Managed EDR vs VMware Carbon Black Endpoint
Kaspersky Endpoint Security for Business vs VMware Carbon Black Endpoint Logo
Kaspersky Endpoint Security for Business vs VMware Carbon Black Endpoint
Trend Vision One vs VMware Carbon Black Endpoint Logo
Trend Vision One vs VMware Carbon Black Endpoint
See all alternatives
 
VMware Carbon Black Endpoint Reviews Summary
Author infoRatingReview Summary
Director-International Trade Operations - India Middle East at Dow4.0We use VMware Carbon Black Endpoint on workstations to monitor and verify logs for malicious content. Its 24/7 support is valuable, but writing custom rules is challenging due to complex UI. Stability and pricing also need improvement.
IT Manager at a educational organization with 51-200 employees4.0I used VMware Carbon Black Endpoint in a hospital setting for security and found it cost-effective, stable, and easy to manage, though integration with SIEM systems and alignment with other hospitals led us to consider alternatives.
Cybersecurity Analyst at OnX Canada4.0I find VMware Carbon Black Endpoint to be a highly stable log system for managing client endpoint logs. However, a significant drawback is that malware scans can be quite time-consuming, often taking over 24 hours to complete.
Cyber Security and Compliance Consultant at Caretower2.5Our clients use VMware Carbon Black Endpoint for extended visibility and integration, aiming to consolidate measures and reduce costs. While the tool is stable, it needs improved integration with SIEM services like Rapid7 for better functionality.
Senior IT Expertise at All Saints Home2.5We use VMware Carbon Black for endpoint security, like antivirus software. The alert system requires manual management and could improve in ease of use. It saves us 10% in costs compared to other vendors, providing a solid return on investment.
Business Owner at ARARAT TECHNOLOGIES1.0I find VMware Carbon Black Endpoint valuable for its endpoint detection and response capabilities. However, obtaining the right technical support is challenging. Although I prefer CrowdStrike for its additional features, both solutions offer strong market strategies.
Consultant at NCR Corporation3.5I use VMware Carbon Black Endpoint for protection and as an EDR solution, valuing its threat detection and machine learning features. However, compatibility issues with various operating systems and a complex deployment process need improvement for better efficiency.
Sole Proprietor at Core-Infosec4.5I use VMware Carbon Black Endpoint as an EDR tool due to its cloud-based nature, ease of remote use, and comprehensive policies without hash values. It could benefit from additional forensic capabilities and has occasional issues with threat intel feeds.