No more typing reviews! Try our Samantha, our new voice AI agent.

Intercept X Endpoint vs VMware Carbon Black App Control comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Intercept X Endpoint
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (15th), Endpoint Detection and Response (EDR) (13th), ZTNA (12th), Managed Detection and Response (MDR) (15th), Extended Detection and Response (XDR) (16th), Ransomware Protection (3rd)
VMware Carbon Black App Con...
Average Rating
9.2
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
Application Control (7th)
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Intercept X Endpoint1.8%
Microsoft Defender for Endpoint6.4%
CrowdStrike Falcon5.5%
Other86.3%
Endpoint Protection Platform (EPP)
Application Control Mindshare Distribution
ProductMindshare (%)
VMware Carbon Black App Control9.7%
ThreatLocker Zero Trust Platform14.6%
Zscaler Zero Trust Exchange Platform12.8%
Other62.900000000000006%
Application Control
 

Q&A Highlights

TT
IT Manager at a wellness & fitness company with 51-200 employees
Dec 03, 2020
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has prevented attacks and keeps our daily work productive and secure
I rate Intercept X Endpoint a 10 out of 10 because it is working very fine for my environment and has prevented loss of productivity. I choose 10 out of 10 because Intercept X Endpoint protects my environment well, featuring web control, peripheral control, Threat Analysis Center, application control, and DLP alongside being accessible from cloud services. I advise others looking into using Intercept X Endpoint to choose Sophos for a cloud solution due to its AI and behavior-based detection capabilities. I believe Intercept X Endpoint is the best EDR solution, and I would always recommend it to customers because it is very effective. My overall review rating for Intercept X Endpoint is 10 out of 10.
AS
Security Administrator at EJADA
We can isolate problem machines and limit their access
We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access.  More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud."
"Palo Alto Networks Traps improves our security posture and lowers risk by providing next-gen methods to combat against modern threats on all the major platforms."
"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"Traps pays for itself within the first 16 months of a three-year subscription."
"Traps has drastically reduced our endpoint attack surface via advanced detection capabilities, sandboxing of never before seen programs, and by drastically limiting where executables can launch in the first place."
"It's a nice product that's stable and scalable."
"Palo Alto is the best security solution in the market."
"We most value the price and interface quality with Sophos Intercept X. We focus on solution quality."
"It is easy to change the size of its capabilities, i.e. to expand processes or scale the size of users."
"So far, the solution has met all our expectations."
"Sophos Intercept X is a complete endpoint solution."
"The most valuable feature is the supervisory side of it where we can watch the throughputs, and even the loading of the device, to see how much traffic is happening."
"It provides a feature for scanning and analyzing endpoints, which is a value-add for our infrastructure. With the advancements in the Advanced Persistent Threats (APTs), Sophos Intercept X analyzes an APT and the behavior of the endpoints. It then gives us a detailed dashboard with more information about the endpoints and their security and risk level. While deploying Sophos Intercept X, we identified a lot of vulnerability and risky endpoints that our previous solution didn't cover, which proved that this solution is the best."
"Overall, I am perfectly satisfied with the product."
"The setup was simple; it took us about one day to set up and configure the software."
"The effectiveness of application whitelisting is very good."
"We have been dealing with VMware Carbon Black App Control for one year, and during this time we have already made sure that this is the best solution to protect our user machines and servers."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"All the functions within VMware Carbon Black App Control are valuable."
"The API integration is good."
"Carbon Black offers a total lockdown solution; it shows us the attacks that are being attempted against our infrastructure and how we are being protected."
"Overall, this is a good product and one that I recommend."
 

Cons

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."
"As an improvement, I would like to see enhanced connection speeds."
"Based on our experience so far, its implementation is quite complex."
"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."
"In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution."
"Cortex XDR could improve its sales support team, including better commission structures and referral programs."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"The solution's pricing could be better."
"I would inquire why it is not sold directly to end users."
"While the solution does not seem to lack any features, it should offer better security updates."
"I'm not clear on what features need improvement. Everything is mostly fine."
"We would like more application control in order to be able to schedule times and access."
"There should be a report including a flowchart or diagram. It will be useful to evaluate the software’s effectiveness."
"We would like to deploy across a variety of machines simultaneously through the network."
"They need to focus on their SLA or technical support. They also need to focus on their UI. They should also improve their content filtering tool and update it so that correct categories are there. Sometimes, when I want to block an online gaming website, it is not shown under the correct category. It is shown under another category. They need to review their content filtering tool on a bi-weekly or monthly basis and update the sites and categories. This will be really helpful for them."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"Its initial setup is very complex. We got help from their implementation team because if it is not set up properly, you can really hinder the operation of your environment and things won't execute or run."
"I rate App Control six out of 10 for scalability."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"The initial setup is somewhat complex."
"I would like to see the addition of some more features that are in other, similar solutions."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
 

Pricing and Cost Advice

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"I don't recall what the cost was, but it wasn't really that expensive."
"The pricing is a little high. It is per user per year."
"It's about $55 per license on a yearly basis."
"Cortex XDR’s pricing is very reasonable."
"It has a yearly renewal."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"I don't like that they have different types of licenses."
"It's not bad, but compared to competitors, it's a little bit on the high side. The price could be more competitive."
"The pricing is average for software like this, but you can purchase additional services if you wish."
"It was fairly and reasonably priced."
"While I do not have much experience dealing with the price, we have been entitled to a substantial discount on the solution in our use of it as an educational tool."
"The pricing is actually quite reasonable."
"Intercept X for endpoints is around $35 per user per year. The server version is $95 per server per year."
"The price of this product should be reduced because it is a little high."
"One can pay for the license annually, or at two and five year intervals."
"We pay a fee for support, which is renewed annually."
"Its price is reasonable and what is expected for these types of products."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Answers from the Community

TT
IT Manager at a wellness & fitness company with 51-200 employees
Dec 3, 2020
Dec 3, 2020
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
2 out of 3 answers
BA
Sales and Mktg Manager at a tech vendor with 11-50 employees
Dec 12, 2019
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
AL
President/Owner at LibreTech
Dec 13, 2019
I’m not sure but if you are using Sophos Intercept X I would suggest just adding the Sophos EDR component.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
10%
Comms Service Provider
9%
Manufacturing Company
9%
Financial Services Firm
20%
Outsourcing Company
16%
Manufacturing Company
11%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business76
Midsize Enterprise21
Large Enterprise22
By reviewers
Company SizeCount
Small Business4
Large Enterprise4
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine lea...
What is your experience regarding pricing and costs for Sophos Intercept X?
Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protecti...
What needs improvement with Sophos Intercept X?
Intercept X Endpoint can be improved in several ways. Currently, it is only available on the cloud, and having it ava...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Sophos Intercept X
CB Protection, Carbon Black CB Protection
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Flexible Systems
Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.
920,769 professionals have used our research since 2012.