Idira Endpoint Privilege Manager vs VMware Carbon Black App Control comparison

Why PeerSpot?

Idira by Palo Alto Networks and Broadcom are both solutions in the Application Control category. Idira by Palo Alto Networks is ranked #5 with an average rating of 8.8, while Broadcom is ranked #7. Idira by Palo Alto Networks holds a 9.9% mindshare in AC, compared to Broadcom’s 9.7% mindshare. Additionally, 86% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 100% of Broadcom users who would recommend it.

Idira Endpoint Privilege Ma...

Read 38 Idira Endpoint Privilege Manager reviews

8,324 Views
666 Comparison Views

86% willing to recommend

VMware Carbon Black App Con...

Read 8 VMware Carbon Black App Control reviews

1,622 Views
1,525 Comparison Views

100% willing to recommend

Idira Endpoint Privilege Ma...

VMware Carbon Black App Con...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Endpoint Privilege Manager and VMware Carbon Black App Control compete in the endpoint security and application control category. While both offer strong features, Idira has an edge in scalability and integration capabilities, and VMware is favored for its effective application whitelisting.

Features: Idira Endpoint Privilege Manager provides granular control over privileges, effective auditing, and reporting, benefiting organizations that need to manage endpoint access tightly. It is scalable and integrates well without interfering with productivity. VMware Carbon Black App Control is praised for its strong application control and ensures only approved applications run, offering excellent visibility and reporting in security.

Room for Improvement: Idira users report challenges with performance, complex setups, and automation in onboarding. The need for stronger support and more intuitive policy configurations is noted. VMware Carbon Black App Control users suggest improvements in support for Mac OS, reduction of false positives, and better support for non-standard operating systems, with a need for improved integration.

Ease of Deployment and Customer Service: Idira's deployment is flexible, offering hybrid cloud options, but faces mixed reviews regarding slow support, albeit competent. Users appreciate the e-learning resources offered. VMware Carbon Black App Control primarily focuses on on-premises and private cloud deployment with difficulties noted in obtaining timely support, highlighting a need for better response times.

Pricing and ROI: Idira is noted for being costly, especially for small businesses, but valued for security enhancements. Its pricing is based on users and sessions. VMware Carbon Black App Control is seen as competitively priced, offering cost-effectiveness in application control and endpoint security. Both solutions offer positive ROI, with Idira noted for reducing IT support needs, while VMware focuses on application control benefits.

To learn more, read our detailed Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control Report (Updated: September 2026).

Buyer's Guide

Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control

September 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Endpoint Privilege Ma...

Ranking in Application Control

5th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Compliance (5th), Privileged Access Management (PAM) (7th), Anti-Malware Tools (12th), Ransomware Protection (5th)

VMware Carbon Black App Con...

Ranking in Application Control

7th

Average Rating

9.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of November 2026, in the Application Control category, the mindshare of Idira Endpoint Privilege Manager is 9.9%, up from 5.7% compared to the previous year. The mindshare of VMware Carbon Black App Control is 9.7%, down from 13.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Control Mindshare Distribution
Product	Mindshare (%)
Idira Endpoint Privilege Manager	9.9%
VMware Carbon Black App Control	9.7%
Other	80.4%

Application Control

Featured Reviews

Sumit Chavan

Lead Consultant at a tech vendor with 501-1,000 employees

Helps secure the infrastructure and control users with admin rights

There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.

Read full review

Abdelattim Abdelattim

Security Administrator at EJADA

We can isolate problem machines and limit their access

We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access. More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is that their database is completely encrypted and protected with multiple layers."

"We have not had issues with CyberArk. It works very smoothly. We can do many things with CyberArk. It helps us to see exactly what is happening."

"This is the number one product for privilege account security."

"The feature called PTA, which stands for Privileged Threat Analytics keeps track of what admins are doing and works with Centimeters. If something fishy is going on with a user's credentials, it alerts the security team so they can act fast. Plus, it automates stuff like resetting credentials or blocking users. So, if there's a potential hack, CyberArk can change passwords and lock out users in a snap. It also gives you a heads-up if anything unusual is going on with server activities, like someone creating new users with uncontrolled credentials."

"The password rotation and the session recording are the most valuable features."

"Regarding the granularity of the managed controls in CyberArk Endpoint Privilege Manager, we have different levels of features to define compensations and capabilities, which help us verify configurations and access, ultimately keeping the safety of rights intact."

"We were able to reduce the number of privileged accounts by 50%, which helped to simplify our privileged access management environment."

"The biggest benefit of CyberArk EPM for our customers is control over privileged access for endpoints. Endpoints are often the starting point for attackers to enter and move within a network. CyberArk EPM bridges the gap between security and operations teams. Operations teams are happy because work isn't stopped due to admin rights issues, while security teams are satisfied that full admin rights aren't given to all users."

More Idira Endpoint Privilege Manager pros

"It offers a sense of security where anything that comes in, regardless of what it is, unless you approve it manually, it's not going to run."

"The effectiveness of application whitelisting is very good."

"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."

"I use the console to check for threats and I find it to be very user-friendly."

"The visibility is valuable."

"All the functions within VMware Carbon Black App Control are valuable."

"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."

"The API integration is good."

More VMware Carbon Black App Control pros

Cons

"One area that has room for improvement is in managing the credentials for network devices."

"The main issues I experience are related to deployment, which requires dependency on other solutions like AD or SCCM. These tools need to be defined and synced with the client or agent and master, sometimes needing manual checks."

"CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications."

"The price of the solution should improve."

"While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity Behavior Analytics, it would be great."

"The solution is good but can be improved by allowing computers to be excluded from policies."

"A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good."

"The solution can be complex to use at times."

More Idira Endpoint Privilege Manager cons

"Its initial setup is very complex. We got help from their implementation team because if it is not set up properly, you can really hinder the operation of your environment and things won't execute or run."

"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."

"I would like to see the addition of some more features that are in other, similar solutions."

"The solution should have overhead in keeping lists of applications that you want don't want to run."

"I rate App Control six out of 10 for scalability."

"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."

"Carbon Black does not use the database for identifying the file, the fields, or malware."

"The initial setup is somewhat complex."

More VMware Carbon Black App Control cons

Pricing and Cost Advice

"The professional services for one eight-hour day would be $1,800."

"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."

"I feel that the price of the product is nominal. It must be around 10 to 15 USD per installation. I rate the product price an eight to nine out of ten, where one is high price, and ten is low price."

"It is an expensive solution."

"The cost for CyberArk is very high."

"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."

"The solution's pricing is reasonable compared to other vendors' products."

"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."

More Idira Endpoint Privilege Manager pricing and cost advice

"We pay a fee for support, which is renewed annually."

"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."

"Its price is reasonable and what is expected for these types of products."

See which vendors are best for you

Use our free recommendation engine to learn which Application Control solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Manufacturing Company

11%

Outsourcing Company

11%

Construction Company

Financial Services Firm

20%

Outsourcing Company

16%

Manufacturing Company

11%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	8
Large Enterprise	20

By reviewers
Company Size	Count
Small Business	4
Large Enterprise	4

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats

This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...

See all answers

What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?

I believe it's quite a reasonably priced solution. It's not very common to use CyberArk because it's a niche solution, but customers who are willing to control administrative accounts are willing t...

See all answers

What needs improvement with CyberArk Endpoint Privilege Manager?

While CyberArk Endpoint Privilege Manager is a great tool, I believe the functionality could be wider. If it could work not only with permissions but also involve pure EDR tasks or User and Entity ...

See all answers

Ask a question

Earn 20 points

Comparisons

Idira Privileged Access Manager vs Idira Endpoint Privilege Manager

Compared 5% of the time

Intercept X Endpoint vs Idira Endpoint Privilege Manager

Compared 5% of the time

BeyondTrust Endpoint Privilege Management vs Idira Endpoint Privilege Manager

Compared 5% of the time

Symantec Endpoint Security vs Idira Endpoint Privilege Manager

Compared 4% of the time

Fortinet FortiClient vs Idira Endpoint Privilege Manager

Compared 4% of the time

More Idira Endpoint Privilege Manager Competitors

Airlock Digital Application Control vs VMware Carbon Black App Control

Compared 22% of the time

ThreatLocker Zero Trust Platform vs VMware Carbon Black App Control

Compared 14% of the time

Zscaler Zero Trust Exchange Platform vs VMware Carbon Black App Control

Compared 13% of the time

McAfee Application Control vs VMware Carbon Black App Control

Compared 13% of the time

WatchGuard Firebox vs VMware Carbon Black App Control

Compared 5% of the time

More VMware Carbon Black App Control Competitors

Product Reports

Buyer's Guide

Idira Endpoint Privilege Manager

October 2026

Download Idira Endpoint Privilege Manager product report

Buyer's Guide

VMware Carbon Black App Control

October 2026

Download VMware Carbon Black App Control product report

Also Known As

Viewfinity

CB Protection, Carbon Black CB Protection

Overview

CyberArk Endpoint Privilege Manager enhances security by controlling access, removing admin rights, and managing privileges. It supports diverse environments with simple integration, focusing on credential detection, threat protection, and compliance.

CyberArk Endpoint Privilege Manager secures enterprise passwords, monitors session connections, and enhances cybersecurity by controlling privileged access. It blocks unauthorized applications, monitors user activities, and secures credentials across platforms. Key areas include Just-In-Time Access, privilege separation, and local administrator password rotation. While robust, challenges exist with performance, complexity, and setup. Integration with Linux and Unix needs improvement, requiring advanced reporting tools and easier policy management. Pricing concerns and maintenance issues with Windows servers persist, as well as database issues in the on-prem version.

What are the key features of CyberArk Endpoint Privilege Manager?

Admin Rights Removal: Eliminates unnecessary permissions to enhance security.
Privilege Management: Offers detailed control over user access rights.
Password Rotation: Automatically updates passwords to protect sensitive data.
Threat Protection: Blocks malicious applications and threats proactively.
Audit Capabilities: Provides comprehensive security and compliance tracking.
Application Control: Confines access to authorized applications only.
Automatic Updates: Ensures security protocols and software remain current.

What benefits should organizations expect from CyberArk Endpoint Privilege Manager?

Enhanced Security: Reduces risks by controlling credential and application access.
Compliance Assurance: Meets industry standards through thorough tracking and reporting.
Scalable Integration: Adapts to different environments smoothly.
Reduced Management Efforts: Automates credential and policy management.

Organizations deploying CyberArk Endpoint Privilege Manager in industries such as finance, healthcare, and technology benefit from secure credential management across Unix, AWS, and GCP. By implementing privilege separation and monitoring user activities, they achieve effective risk mitigation and compliance across multiple platforms.

Idira by Palo Alto Networks

VMware Carbon Black App Control offers sophisticated application whitelisting, endpoint protection, and security for end-of-life systems through a user-friendly console that supports threat detection and incident response.

Designed for effective application control, VMware Carbon Black App Control strengthens security by preventing unauthorized installations and controlling application execution. It enhances visibility and reporting for comprehensive threat analysis. However, users report frequent false positives, especially with system processes and occasionally with approved software. Integration with Mac OS and reporting features need improvement, and the setup process can be complex without assistance. It utilizes user behavior for identifying files or malware, which some find cumbersome.

What are the key features of VMware Carbon Black App Control?

Application Whitelisting: Prevents unauthorized applications from running.
Granular Analysis: Offers in-depth threat analysis for effective security management.
Endpoint Protection: Secures endpoints against unauthorized changes.
Open API Integration: Facilitates seamless integration with security systems.
Detailed Reporting: Provides comprehensive visibility into potential threats.

What benefits and ROI should users expect?

Enhanced Security: Strengthens protection against unauthorized installations and threats.
Improved Visibility: Offers detailed insights for better threat management.
Efficient Incident Response: Supports quick and effective responses to incidents.
Simplified Management: User-friendly interface aids in managing applications effectively.

Deployed across industries such as finance, healthcare, and government, VMware Carbon Black App Control is used for securing both virtual and physical servers. It acts as a host-based intrusion detection system, and is ideal for lockdown protection, threat analysis, and controlling application access to protect against attacks. Organizations use it to scan for unauthorized virtual machines, enforcing stricter security protocols.

Broadcom

Sample Customers

Information Not Available

Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide

Buyer's Guide

Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control

September 2026

Free Report: Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control

Find out what your peers are saying about Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our Idira Endpoint Privilege Manager vs. VMware Carbon Black App Control report.

See our list of best Application Control vendors.

We monitor all Application Control reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.