Solution Categories
Community Directory
Compare solutions
Benchmark my program
VMware Carbon Black Cloud
VMware Carbon Black Cloud provides threat detection and response by analyzing endpoint data to identify malicious behavior. It integrates cloud-native analytics with real-time endpoint visibility to support investigation and remediation efforts.
Why these ratings?
Cyberse perspective
Summary by Cyberse
Microsoft Sentinel may be considered a good fit for you due to its powerful capabilities.
Here’s a few tips on how to maximize its capabilities:
We use the following criteria to rate this product’s functionality:
Cost considerations
Carbon Black Cloud uses per-endpoint pricing that is comparable to many enterprise options, yet advanced EDR, XDR, and audit modules are billed separately. Organizations that need these extras see higher spend than with all-inclusive bundles. Overall cost lands in the mid-market range rather than the budget or premium extremes.
Functionality
VMware Carbon Black Cloud combines machine-learning threat blocking with continuous endpoint visibility and can auto-isolate or rollback compromised devices, while included firewall and device-use policies reduce gaps. Cloud analytics fuse data from endpoints and workloads to flag attacks almost instantly. This breadth of prevention, detection, and automated response places its functionality at the top of current endpoint offerings.
Compatibility
Sensors run on Windows, macOS and Linux and there is a tie-in with Workspace ONE that extends coverage to Android and iOS. Out-of-the-box APIs stream alerts to Splunk and other SIEMs, letting teams slot the data into existing workflows without custom coding.
User experience
Carbon Black Cloud gives users a modern web console and visual attack chain views, yet dense menus and noisy alerts slow navigation. Many administrators rely on training guides to learn policy setup and query syntax. Day-to-day use becomes smooth over time, but the initial learning curve is steeper than leading rivals.
Customer support
Customers can reach VMware Carbon Black Cloud by phone around the clock for critical issues and search a well-populated knowledge base. Normal tickets are typically handled within one business day and users receive frequent threat-intel watchlists. Support lacks an always-assigned incident-response team, so it sits just below the highest tier.