VMware Carbon Black Cloud
VMware Carbon Black Cloud
VMware Carbon Black Cloud provides threat detection and response by analyzing endpoint data to identify malicious behavior. It integrates cloud-native analytics with real-time endpoint visibility to support investigation and remediation efforts.
VMware Carbon Black Cloud provides threat detection and response by analyzing endpoint data to identify malicious behavior. It integrates cloud-native analytics with real-time endpoint visibility to support investigation and remediation efforts.
Cost considerations
Functionality
Compatibility
User experience
Customer support
Why these ratings?
Cyberse perspective
Solution details
Cloud ecosystem partners
Amazon Web Services
Microsoft Azure Cloud
Google Cloud Platform
Services support
In-house services
Managed services
Subcategory
Endpoint Detection & Response
Endpoint Protection Platform
Key features
API access
Platform solution
Target industry
Technology
Public sector
Industrials
Healthcare
Retail
Manufacturing
Financial services
Market segment
Small business
Enterprise
Midmarket
Product features
Behavioral-based detection
Deployment
Cloud-native
Integrations
Security automation
Vulnerability management
Pricing
Free trial available
We use the following criteria to evaluate this product:
Cost considerations
Carbon Black Cloud uses per-endpoint pricing that is comparable to many enterprise options, yet advanced EDR, XDR, and audit modules are billed separately. Organizations that need these extras see higher spend than with all-inclusive bundles. Overall cost lands in the mid-market range rather than the budget or premium extremes.
Cost considerations
Carbon Black Cloud uses per-endpoint pricing that is comparable to many enterprise options, yet advanced EDR, XDR, and audit modules are billed separately. Organizations that need these extras see higher spend than with all-inclusive bundles. Overall cost lands in the mid-market range rather than the budget or premium extremes.
Functionality
VMware Carbon Black Cloud combines machine-learning threat blocking with continuous endpoint visibility and can auto-isolate or rollback compromised devices, while included firewall and device-use policies reduce gaps. Cloud analytics fuse data from endpoints and workloads to flag attacks almost instantly. This breadth of prevention, detection, and automated response places its functionality at the top of current endpoint offerings.
Functionality
VMware Carbon Black Cloud combines machine-learning threat blocking with continuous endpoint visibility and can auto-isolate or rollback compromised devices, while included firewall and device-use policies reduce gaps. Cloud analytics fuse data from endpoints and workloads to flag attacks almost instantly. This breadth of prevention, detection, and automated response places its functionality at the top of current endpoint offerings.
Compatibility
Sensors run on Windows, macOS and Linux and there is a tie-in with Workspace ONE that extends coverage to Android and iOS. Out-of-the-box APIs stream alerts to Splunk and other SIEMs, letting teams slot the data into existing workflows without custom coding.
Compatibility
Sensors run on Windows, macOS and Linux and there is a tie-in with Workspace ONE that extends coverage to Android and iOS. Out-of-the-box APIs stream alerts to Splunk and other SIEMs, letting teams slot the data into existing workflows without custom coding.
User experience
Carbon Black Cloud gives users a modern web console and visual attack chain views, yet dense menus and noisy alerts slow navigation. Many administrators rely on training guides to learn policy setup and query syntax. Day-to-day use becomes smooth over time, but the initial learning curve is steeper than leading rivals.
User experience
Carbon Black Cloud gives users a modern web console and visual attack chain views, yet dense menus and noisy alerts slow navigation. Many administrators rely on training guides to learn policy setup and query syntax. Day-to-day use becomes smooth over time, but the initial learning curve is steeper than leading rivals.
Customer support
Customers can reach VMware Carbon Black Cloud by phone around the clock for critical issues and search a well-populated knowledge base. Normal tickets are typically handled within one business day and users receive frequent threat-intel watchlists. Support lacks an always-assigned incident-response team, so it sits just below the highest tier.
Customer support
Customers can reach VMware Carbon Black Cloud by phone around the clock for critical issues and search a well-populated knowledge base. Normal tickets are typically handled within one business day and users receive frequent threat-intel watchlists. Support lacks an always-assigned incident-response team, so it sits just below the highest tier.