The product's most valuable feature is its ability to be fully integrated with the VMware environment.
Easy-to-scale product with a straightforward installation process
Pros and Cons
- "The product's most valuable feature is its ability to be fully integrated with the VMware environment."
- "The product's stability could be improved."
What is most valuable?
What needs improvement?
The product's stability could be improved.
For how long have I used the solution?
I have been using VMware Carbon Black Endpoint for one or two years as a system integrator.
What do I think about the stability of the solution?
Stability-wise, the product could be better.
Buyer's Guide
VMware Carbon Black Endpoint
March 2026
Learn what your peers think about VMware Carbon Black Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,311 professionals have used our research since 2012.
What do I think about the scalability of the solution?
The platform is very easy to scale. It is suitable for small and medium businesses.
How are customer service and support?
The technical support services are good.
How was the initial setup?
VMware Carbon Black Endpoint's installation is easy. The deployment takes one or two days, but the training administrator takes more time.
What other advice do I have?
I rate VMware Carbon Black Endpoint a ten out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Has good technical support, but it is challenging to check the status of ongoing scans
Pros and Cons
- "It has the best live response feature."
- "It is difficult to extract reports for ongoing scans"
What is our primary use case?
We use the solution for threat detection and endpoint protection. It generates alerts in case of invalid signatures while installing software.
What is most valuable?
The solution's most valuable feature is live response. We can verify and view the task list and the processes. Also, we can create policies with its help.
What needs improvement?
It is challenging to extract a report on the status of ongoing scans. They should work on this particular area of the solution.
How are customer service and support?
The solution's customer service team responds quickly.
How would you rate customer service and support?
Positive
What other advice do I have?
I rate the solution as seven.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
VMware Carbon Black Endpoint
March 2026
Learn what your peers think about VMware Carbon Black Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,311 professionals have used our research since 2012.
ICT/Systems Application Engineer at Honeywell
Works well and instantly, responsive technical support, with high scalability
Pros and Cons
- "The whole purpose of the product, like application control, is very good, and also if you need to update some policies, it works well and instantly."
- "I would like to see the user credentials feature improved. I would also like to see more reporting features and better ways to roll the reports out."
What is our primary use case?
Our primary use case is for application control.
What is most valuable?
The whole purpose of the product, like application control, is very good, and also if you need to update some policies, it works well and instantly.
What needs improvement?
I would like to see the user credentials feature improved. I would also like to see more reporting features and better ways to roll the reports out.
For how long have I used the solution?
I have been using Carbon Black CB Defense for more than a year.
What do I think about the stability of the solution?
I would say the stability is high a nine on a scale of one to ten.
What do I think about the scalability of the solution?
On a scale of one to ten, I would give it a nine for being highly scalable.
How are customer service and support?
Technical support is pretty responsive. I have not had to use them a lot and when we need them we route them through our team.
How was the initial setup?
The initial setup was straightforward I had some minor issues with the web application I logged in and fixed them. The initial deployment only took about half a day. We have deployed to around one hundred systems.
What about the implementation team?
The deployment was done in-house.
What's my experience with pricing, setup cost, and licensing?
The pricing is annually based and operates through another department than mine.
What other advice do I have?
I would rate Carbon Black CB Defense an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
IT Manager at a financial services firm with 51-200 employees
Straightforward to set up, provides automatic site blocking, and forwards information to our SOC
Pros and Cons
- "One of the most valuable features is that it will block vulnerable sites. If there was a connection between one of our devices to a known malware site, it will block it."
- "One of the most valuable features is that it will block vulnerable sites."
- "This product should be cheaper."
- "This product should be cheaper."
What is our primary use case?
We primarily use this product to provide threat intelligence to our SOC about our endpoints.
What is most valuable?
One of the most valuable features is that it will block vulnerable sites. If there was a connection between one of our devices to a known malware site, it will block it. Then also alerts our SOC.
What needs improvement?
This product should be cheaper.
For how long have I used the solution?
I have been working with Carbon Black CB Defense for three years.
What do I think about the stability of the solution?
Stability-wise, it is good.
What do I think about the scalability of the solution?
I am satisfied with the scalability. We use it across the company and all of the users have it on their laptops. It's a mixture of IT people, finance, doctors, lawyers, dentists, and other professional services. It's a wide range of people and there are about 180 in total.
How are customer service and support?
The technical support is okay.
Which solution did I use previously and why did I switch?
We also use Sophos Intercept X in our business.
How was the initial setup?
CB Defense is pretty straightforward to set up.
What about the implementation team?
The implementation was done by my own team.
What's my experience with pricing, setup cost, and licensing?
This is a really expensive product and we pay licensing fees on a yearly basis. The subscription includes technical support.
What other advice do I have?
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Administrator at a manufacturing company with 501-1,000 employees
Puts very little load on the servers, does an excellent job, and has very good pricing
Pros and Cons
- "I found it very valuable as a whole. It is good at detecting anything and has kept us very safe. It is also very easy to use."
- "I found it very valuable as a whole; it is good at detecting anything and has kept us very safe, and it is also very easy to use."
- "I haven't run into anything that needs improvement. The website interface can be a little bit better, but it's still good as compared to most others."
What is our primary use case?
It is used for protecting our file servers. Its version is kept up to date, so it should be fairly current.
How has it helped my organization?
We found that Trend Micro was producing a little bit more load on our servers than what we wanted. So, we went to Carbon Black because it was integrated with VMware. It is great on the servers. It puts very little load, and it does an excellent job.
What is most valuable?
I found it very valuable as a whole. It is good at detecting anything and has kept us very safe. It is also very easy to use.
What needs improvement?
I haven't run into anything that needs improvement. The website interface can be a little bit better, but it's still good as compared to most others.
For how long have I used the solution?
I have been using it for close to a year.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
I believe it is very scalable. In terms of its users, for the most part, there are only two of us using it. I am the IT administrator and primary user, and we have an IT support person who handles PCs and backs me up on servers. We are taking care of its deployment and maintenance.
We are looking at the possibility of expanding its usage in the future to include desktops.
How are customer service and support?
I've never had to call technical support.
Which solution did I use previously and why did I switch?
We were using Trend Micro Apex One on our servers, and we found that Trend Micro tended to load the servers up a little bit. That's why we switched to Carbon Black.
How was the initial setup?
It was very straightforward. It was very easy to set up.
Its deployment didn't take that long at all. We purchased it and then just installed it on different servers, one at a time.
What about the implementation team?
We did it ourselves.
What was our ROI?
I've never calculated an ROI on it.
What's my experience with pricing, setup cost, and licensing?
Its pricing was very good, which is one of the reasons I went to it as an alternative. It is on a yearly basis. There are no additional fees.
Which other solutions did I evaluate?
We did not evaluate other options.
What other advice do I have?
If you're running a VMware environment, you can definitely go ahead and use it.
I would rate it a 10 out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
SOC Manager at Nais Srl
Informative, dependable, and ideal for a medium-sized companies
Pros and Cons
- "It is a very complete platform."
- "It is a very complete platform."
- "They will most likely need to create or include a feature that checks the network."
- "They will most likely need to create or include a feature that checks the network."
What is most valuable?
It is a very complete platform. It is very useful for my customers.
Carbon Black CB Defense is ideal for a medium-sized business. It is not, in my opinion, suited for large enterprise companies.
Carbon Black works very well for the endpoint. It explains the situation very clearly.
What needs improvement?
I believe they could improve the new intelligence solution to monitor activity, in the network. They will most likely need to create or include a feature that checks the network.
For how long have I used the solution?
I have worked with Carbon Black CB Defense for three or four years.
What do I think about the stability of the solution?
Carbon Black CB Defense is a very stable product.
What do I think about the scalability of the solution?
The scalability of Carbon Black CB Defense is very good.
What other advice do I have?
I would rate Carbon Black CB Defense an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Senior IT Security Engineer at a financial services firm with 5,001-10,000 employees
Its security features and signatures are constantly updated, so it is more effective than other solutions
Pros and Cons
- "CB Defense is more powerful, and you can take more actions than others. Its security features and signatures are constantly updated, so it is more effective than other security solutions."
- "CB Defense is more powerful, and you can take more actions than others, and its security features and signatures are constantly updated, so it is more effective than other security solutions."
- "Integration is difficult, but CB Defense is more powerful than others. It is difficult to implement but easy to pick up many detections."
- "Integration is difficult, but CB Defense is more powerful than others."
What is our primary use case?
CB Defense is a threat identification and protection solution. In general, it's more often deployed on the cloud than on-prem. The customer decides.
What is most valuable?
CB Defense is more powerful, and you can take more actions than others. Its security features and signatures are constantly updated, so it is more effective than other security solutions. We can integrate with XCDR. Carbon Black EDR integrates with Carbon Black EDE. But you don't need to integrate CB Defense with other external security solutions.
What needs improvement?
Integration is difficult, but CB Defense is more powerful than others. It is difficult to implement but easy to pick up many detections.
For how long have I used the solution?
I've used CB Defense for a couple of years.
What do I think about the stability of the solution?
CB Defense is stable.
How are customer service and support?
Carbon Black support is easy to access and helpful.
How was the initial setup?
The installation is straightforward, but it requires two to four members of our team to implement it, and deployment takes a couple of hours. You need admins to install it because it involves setting permissions and requires documentation.
What's my experience with pricing, setup cost, and licensing?
All EVV requires licenses for the appliances as well as the security features.
What other advice do I have?
I rate CB Defense nine out of 10. It's different, so it stands out among all the others. Carbon Black is more costly but also more powerful and effective, so I recommend it.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Infrastructure and support manager at a healthcare company with 51-200 employees
Amazing EDR that is responsive but there is no support for MAC and Linux
Pros and Cons
- "The EDR and reports were helpful in improving our organization."
- "For the Windows endpoints, it was incredibly useful, nothing got through it, which is a bad thing in some cases because we hadn't tagged the certificate platform appropriately."
- "Based on all the security roles and the release privilege, it could take time for an application to be whitelisted and approved for use."
- "The Mac support needs improvement, as it had next to none."
What is our primary use case?
We used it for EDR, as well as endpoint protection, the whitelisting feature.
How has it helped my organization?
The EDR and reports were helpful in improving our organization.
What is most valuable?
The EDR was amazing. It was very responsive. It did an excellent job of providing us the information we needed in a timely fashion, as long as the latest agent was up-to-date on the client.
What needs improvement?
The whitelisting system, and the concept of it, overall, is pretty decent. The problem with the whitelisting capability is that it's pretty archaic. Based on all the security roles and the release privilege, it could take time for an application to be whitelisted and approved for use.
The Mac support needs improvement, as it had next to none.
The biggest problem we had was the Mac support. It had very little, and my C-suite is almost exclusively Mac, as is my marketing and development department.
For how long have I used the solution?
We had used the Carbon Black CB Defense for two years. We changed to another solution approximately nine months ago.
We were using the latest version at the time.
What do I think about the stability of the solution?
The stability of the on-premises servers had no issues but the resource allocation on the clients was a bit high, especially with having to run two agents. The detection agent, the Whitelist, and the control agent.
What do I think about the scalability of the solution?
We didn't have any problems scaling this solution.
It did the job. It was great for Windows, but it had no Mac support and had nothing for Linux, which makes it hard.
We had 150 users in our organization. Their roles varied from CSF departments through to my C-suite.
How are customer service and technical support?
Technical support seemed pretty good and I didn't have any problems with it.
If we had a problem or a question, and they would get back to us in a reasonable amount of time.
The only place that we ran into trouble was with Macs. That's my general theme here with Carbon Black, unfortunately.
I would rate them an eight or a nine. They were good for the most part.
Which solution did I use previously and why did I switch?
Previously, we were on the Kaspersky Enterprise Solution for a couple of years. It was a signature-based system. Signature-based systems are getting easier to get around by the attackers these days, so we swapped over to something that is a little closer to attack vectors, which says, don't run anything that we don't approve.
How was the initial setup?
The initial setup was moderate.
What other advice do I have?
For others who are interested in using Carbon Black, I would recommend checking your use case. If your use case is Linux and Mac, then it will be problematic, based on my experience.
These days, with VMware taking them over, I'm willing to bet that that's going to change.
I see some redemption in their future, with VMware owning them. VMware is a very strong player in the workspace, and especially with their workspace tool that VMware's building to work with Windows, Mac, and Linux clients, in order to do VDI.
For the Windows endpoints, it was incredibly useful, nothing got through it, which is a bad thing in some cases because we hadn't tagged the certificate platform appropriately. So, it's a bit of an improvement needed there, but the biggest complaint is around the operating systems not being available.
I would rate Carbon Black CB Defense a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free VMware Carbon Black Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2026
Product Categories
Endpoint Protection Platform (EPP) Security Incident Response Endpoint Detection and Response (EDR) Ransomware ProtectionPopular Comparisons
CrowdStrike Falcon
Microsoft Defender for Endpoint
Cortex XDR by Palo Alto Networks
SentinelOne Singularity Complete
Fortinet FortiEDR
HP Wolf Security
Huntress Managed EDR
Elastic Security
Microsoft Defender XDR
Trellix Endpoint Security Platform
WatchGuard Firebox
TrendAI Vision One
Fortinet FortiClient
Check Point Harmony Endpoint
Buyer's Guide
Download our free VMware Carbon Black Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- I would like to compare CrowdStrike and Carbon Black. On what basis should I decide?
- What Is The Biggest Difference Between BigFix And Carbon Black Cb Defense?
- What is the biggest difference between Carbon Black CB Defense, CrowdStrike, and SentinelOne?
- What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
- Running Carbon Black Defense Along with Windows Defender
- What Is The Biggest Difference Between Carbon Black Cb Defense And ESET Endpoint Security?
- Which product has better reputation: Carbon Black CB Defense or CrowdStrke Falcon?
- How does Microsoft Defender for Endpoint compare with Carbon Black CB Defense?
- What is the biggest difference between EPP and EDR products?
- Can Cylance be used with Symantec or Kaspersky endpoint solutions without conflict?














