No more typing reviews! Try our Samantha, our new voice AI agent.

OpenText Core Endpoint Protection​ vs VMware Carbon Black Endpoint comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
118
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
OpenText Core Endpoint Prot...
Ranking in Endpoint Protection Platform (EPP)
34th
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
31
Ranking in other categories
No ranking in other categories
VMware Carbon Black Endpoint
Ranking in Endpoint Protection Platform (EPP)
28th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
65
Ranking in other categories
Security Incident Response (3rd), Endpoint Detection and Response (EDR) (27th), Ransomware Protection (8th)
 

Mindshare comparison

As of September 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.8% compared to the previous year. The mindshare of OpenText Core Endpoint Protection​ is 1.8%, up from 0.8% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 2.0%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
VMware Carbon Black Endpoint2.0%
OpenText Core Endpoint Protection​1.8%
Other92.4%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2584380 - PeerSpot reviewer
vCIO At Grove Networks Inc. at a computer software company with 11-50 employees
Improving threat detection is critical for enhanced protection
We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…
PM
CTO at Microsoft
Improved incident investigation has supported response while core protection still needs progress
VMware Carbon Black Endpoint does not have easy integration, as there are many complexities with the Ribitava API, which is very deep. I rate this solution overall as a five or six on a scale from one to ten. I have integrated VMware Carbon Black Endpoint with other tools that are helpful. I think this solution should be targeted at small clients, because adoption will grow more with small businesses tomorrow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."
"The protection offered by this product is good, as is the endpoint reporting."
"It collects and caches and the knowledge of machine learning from different customers to take to the cloud, it makes it better to use for everybody, it allows for quick learning and updates and can, therefore, offer zero-day malware security, and this sharing of metadata helps make the solution very safe."
"The solution is a new generation XDR that has a lot of artificial intelligence modules."
"It's a perfect solution. It integrates well into the environment."
"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."
"Cortex XDR by Palo Alto Networks has helped us a lot with securing the whole environment and the whole IT structure, giving us full knowledge of what is happening on the client and enabling us to take action right away from a single point for managing security operations on the hosts."
"The initial setup is not complex at all. It's very straightforward."
"The solution is very simple and straightforward to use."
"It is very light, it is the only solution that can be installed on a machine that already has an antivirus, and it is a pretty complete solution."
"I rate the initial setup phase a ten on a scale of one to ten, where one is difficult, and ten is easy."
"Overall, the solution is stable."
"To date, I haven't had any malware in my system."
"It is pretty unintrusive. It doesn't take over the system like McAfee or Norton. It doesn't use a whole lot of resources. McAfee and Norton use a lot of resources."
"The most valuable features of the solution include the endpoint navigation protection, the protection related to the EMS service, as well as the control and the cloud integration capabilities."
"Once the solution is installed and configured correctly it does not require a lot of hands-on attention until you need upgrading."
"The most valuable asset is the time-lining capability for any breach activity."
"The initial setup is very easy."
"The product is very smooth and pretty simple."
"Carbon Black Defense has a higher detection ratio because it's cloud-based and it also does a lookup to virus total."
"The solution is stable and the policy can be configured with flexibility, as it comes with its own pre-built standard policy and also allows us to write our own, which means the solution serves us going forward."
"I like its protection very much. It protects and allows us to lock the environment pretty tightly. Nothing that is not approved through Carbon Black can run in the environment. There is no default. Everything goes through Carbon Black Protect, and everything has to be first approved. Every software is considered to be guilty before prove innocent."
"The solution is stable."
 

Cons

"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."
"There are some false positives."
"Based on our experience so far, its implementation is quite complex."
"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."
"There is a severe gap in functionality between Windows, Linux, and Mac versions. For example all folder restriction settings are Windows only. Traps 5.0+ does not have SAML / LDAP integration."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."
"The console spins up relatively slowly, and some of the configuration items are obscure (e.g., reporting back one time per day is a default setting) and need to be tweaked."
"An updated UI would be nice, but is not hardly used."
"Their customer support should be better. We started having some issues with it, and we didn't get the required support."
"It doesn't do anything proactive. The virus has to hit the machine before it detects it."
"Technical support is not the best. It's hard to get a hold of them if we need help. It's something that definitely needs improvement."
"There is one thing that is deplorable with the product that I would change as soon as I found a better one. However, the reports are worthless."
"It needs to improve the problems with the faster connection, and have a huge reduction in false positives."
"I want Webroot to be easier to use and set up. It is not very intuitive."
"Sometimes the solution blocks items that were previously approved and we don't know why."
"It would be nice to have additional forensic tools that you can build into the back end."
"But here, we hardly can take any kind of a report out of Carbon Black, so I think that should be something that should be more user-friendly."
"I would like to see improvements made so that we can better see all of the processes."
"We did have a bug that was persistent for it's now going on two months and it hasn't been fixed."
"Stability is one thing that's not robust. Other products are faster, but as far as the CB Defense, it's slow."
"The product's reporting capabilities are an area of concern where improvements are required."
"In the next release, it would help if we can get better control over containers."
 

Pricing and Cost Advice

"I feel it is fairly priced."
"Our customers have expressed that the price is high."
"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"It has a yearly renewal."
"I don't have any issues with the pricing. We are satisfied with the price."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"The tool's price is moderate."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"From a pricing standpoint, I would rate it a four out of five."
"We evaluate other options using multiple choices, best value, management and functionality."
"Get a trial, then a multi-year license."
"I think the price is fairly reasonable. I was really prepared to pay more, but the price is fine."
"With Webroot Business Endpoint Protection, I can select a yearly billing cycle."
"The pricing is high."
"Its cost is not much per month. Our price is a couple of bucks a user."
"If you purchase for clients, then you are the managing billing entity. It's better to either get a monthly subscription check from your clients, or to prepay for the year (so as to not keep cash in reserve to pay the bill each month) IMHO."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."
"Price-wise, VMware Carbon Black Endpoint is a highly-priced solution. Regarding the licensing cost of the solution, one needs to opt for an annual subscription."
"The product is quite reasonable."
"The platform is expensive."
"It is more expensive, but it's worth it. There are no additional costs beyond the standard licensing fee."
"VMware Carbon Black Endpoint is an expensive product."
"The pricing is very high."
"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
12%
Construction Company
11%
Financial Services Firm
9%
Construction Company
12%
Outsourcing Company
11%
Comms Service Provider
9%
Financial Services Firm
8%
Outsourcing Company
10%
Financial Services Firm
9%
Construction Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise21
Large Enterprise55
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise33
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?
Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...
What needs improvement with Webroot Business Endpoint Protection?
Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...
What is your primary use case for Webroot Business Endpoint Protection?
We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) s...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoin...
What is your experience regarding pricing and costs for Carbon Black CB Defense?
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Webroot SecureAnywhere Business Endpoint Protection
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Mytech Partners
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about OpenText Core Endpoint Protection​ vs. VMware Carbon Black Endpoint and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.