Try our new research platform with insights from 80,000+ expert users

ThreatLocker Zero Trust Endpoint Protection Platform vs VMware Carbon Black App Control comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ThreatLocker Zero Trust End...
Ranking in Application Control
1st
Average Rating
9.2
Reviews Sentiment
7.4
Number of Reviews
40
Ranking in other categories
Network Access Control (NAC) (4th), Endpoint Protection Platform (EPP) (6th), Advanced Threat Protection (ATP) (6th), ZTNA (4th), Ransomware Protection (1st)
VMware Carbon Black App Con...
Ranking in Application Control
4th
Average Rating
9.2
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Application Control category, the mindshare of ThreatLocker Zero Trust Endpoint Protection Platform is 20.2%, up from 10.8% compared to the previous year. The mindshare of VMware Carbon Black App Control is 12.3%, down from 26.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Control Market Share Distribution
ProductMarket Share (%)
ThreatLocker Zero Trust Endpoint Protection Platform20.2%
VMware Carbon Black App Control12.3%
Other67.5%
Application Control
 

Featured Reviews

CL
Supervisor, Client Security at a consultancy with 11-50 employees
World-class support and highly effective for application control and elevation
Their product is solid. I have a hard time complaining much about it because when we do find little things, they are usually interface-related or related to things that would be nice to have. Their idea portal, unlike so many other vendors we deal with, shows movement. At least four to eight features of ThreatLocker exist because I made a request in the last five years, and it became a feature of the actual product. When it comes to improvements, we moved the product as customers, and we got to move the product by making suggestions. They seem to be very reactive to it, so there is not a whole lot that they actively need to change right now. It is one of those situations where when we run into something that would be nice to have, it happens. They make it work.
AM
Cybersecurity Consultant at KAFD DMC
We can isolate problem machines and limit their access
We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access.  More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The sandbox functionality is fantastic."
"Ringfencing is a valuable feature."
"The application control is a key feature of ThreatLocker."
"If all of our vendors would act and support us like ThreatLocker does, we would be happy."
"ThreatLocker has significantly improved numerous techniques that mitigate vulnerabilities and viruses initiated on the back end of a network."
"ThreatLocker saves me a couple of hours per day dealing with threats and encrypting efforts elsewhere."
"Allowlisting, in general, is valuable because it allows us to have a lot more granular control over what is executed on a desktop. We are also able to ringfence known vectors of attack through Office applications, email, browsers, etc."
"ThreatLocker stands out because they understand application whitelisting and elevation controls deeply, addressing real issues effectively."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"I use the console to check for threats and I find it to be very user-friendly."
"The API integration is good."
"The visibility is valuable."
"The effectiveness of application whitelisting is very good."
"All the functions within VMware Carbon Black App Control are valuable."
 

Cons

"It has not reduced helpdesk tickets. It has probably increased them by blocking applications and doing its job, resulting in people raising more tickets to know why they cannot use certain things."
"ThreatLocker's technical support process could be streamlined by reducing the number of steps required to reach a human agent."
"I was discussing with someone the other day, and it seems there is currently no solution for mobile users."
"Something we have come up against a couple of times is that we have two clients that are software developers. They create software that doesn't have digital signatures and that's not easy to categorize or whitelist with ThreatLocker. We have to go in and make custom rules to allow them to do their work and to be protected from malicious threats."
"The support could be quicker. There are times when there is a delay in getting a response. This is problematic when immediate attention is needed."
"If you have a thousand computers with ThreatLocker agents on them, when you approve or create a new policy saying that Adobe Reader that matches this hashtag and meets certain criteria is allowed to be installed, it applies at the top level or the organization level. It applies to every computer in the company. When you make that new policy and push it out and it goes out and updates all of the clients. Unfortunately, at this time, it does not look like they stagger the push-out."
"ThreatLocker would benefit from incorporating an antivirus feature or comprehensive 24-hour log monitoring, a valuable enhancement for both business and enterprise-level users."
"A valuable addition to ThreatLocker would be a column in the audit page displaying a VirusTotal score for each file."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"The reporting is not good and needs to be improved."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"I rate App Control six out of 10 for scalability."
"The initial setup is somewhat complex."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"I would like to see the addition of some more features that are in other, similar solutions."
 

Pricing and Cost Advice

"ThreatLocker's pricing seems justifiable."
"Although the pricing seems good, there have been inconsistencies in contract negotiations."
"The price of ThreatLocker Allowlisting is reasonable in the market, but it is not fantastic."
"The pricing is fair and there is no hard sell."
"I do not deal with pricing, but I assume it is cost-effective for us. We choose a solution based on functionality and affordability."
"The pricing is pretty fair, considering other solutions. Licensing-wise, it did not take long."
"I can't complain. Cheaper would always be nice, but I think it's reasonable compared to other software in the cybersecurity market."
"I do not know about the licensing and price as it comes bundled from our MSP. However, it seems fairly reasonable for us, which is why we chose it."
"Its price is reasonable and what is expected for these types of products."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"We pay a fee for support, which is renewed annually."
report
Use our free recommendation engine to learn which Application Control solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Retailer
8%
Manufacturing Company
8%
Financial Services Firm
7%
Financial Services Firm
17%
Computer Software Company
10%
Government
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise4
Large Enterprise3
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

What do you like most about ThreatLocker Allowlisting?
The interface is clean and well-organized, making it simple to navigate and find what we need.
What is your experience regarding pricing and costs for ThreatLocker Allowlisting?
Pricing, setup costs, and licensing have been pretty accessible and manageable. It was not too expensive to get started, especially at a small scale for a smaller MSP. It is very accessible, easy t...
What needs improvement with ThreatLocker Allowlisting?
Going with the theme of ThreatLocker Zero Trust Endpoint Protection Platform being a one-stop shop where they have just about everything, and they have a really good product stack as is. However, t...
Ask a question
Earn 20 points
 

Also Known As

Protect, Allowlisting, Network Control, Ringfencing
CB Protection, Carbon Black CB Protection
 

Overview

 

Sample Customers

Information Not Available
Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Find out what your peers are saying about ThreatLocker Zero Trust Endpoint Protection Platform vs. VMware Carbon Black App Control and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.