CIOPages
For vendors— is your company listed?
Claim a listing Submit a listing Promote your companyPricing & info
DirectoryCybersecurityEndpoint Security & EDRCarbon Black (VMware)

Carbon Black (VMware)

About Carbon Black (VMware)

Carbon Black, a VMware company, delivers a robust Endpoint Detection and Response (EDR) solution designed to protect enterprises against sophisticated cyber threats. The platform continuously monitors and records endpoint activity, enabling security teams to detect, investigate, and respond to malicious behavior in real-time. It leverages cloud-native architecture to provide scalable, centralized threat intelligence and analytics across diverse IT environments.

Targeted primarily at large enterprises with complex security needs, Carbon Black's solution integrates threat hunting, behavioral analytics, and automated response capabilities to reduce dwell time and mitigate risks effectively. Its comprehensive visibility into endpoint activity empowers CIOs and security leaders to proactively manage vulnerabilities and comply with regulatory requirements, enhancing overall organizational resilience against evolving cyber threats.

How to evaluate Endpoint Security & EDR

CIOPages Research Team evaluation framework for this category — not an assessment of Carbon Black (VMware). From our Endpoint Detection & Response (EDR/XDR) buyer guide.

25%
Prevention & Detection Efficacy
Pre-execution and behavioral prevention, fileless and living-off-the-land detection, ransomware rollback, credential-theft detection, and breadth of MITRE ATT&CK technique coverage proven in independent and ATT&CK evaluations — not just the vendor’s own benchmark
18%
Investigation & Threat Hunting
Real-time endpoint search across the fleet, raw-telemetry retention and query language, process-tree and attack-timeline visualization, IOC and behavioral hunting, remote-shell live forensics, and how much of the triage an AI assistant can credibly take off the analyst
17%
Response & Remediation
Automated containment and network isolation, one-click and policy-driven response, ransomware and malicious-change rollback, host remediation without reimaging, and the granularity of response authority you can safely delegate to automation versus a human
15%
XDR Correlation & Telemetry Breadth
Native correlation across endpoint, identity, email, cloud-workload, and network signal; unified incident view with attack-chain reconstruction; quality of first-party telemetry versus third-party connectors; and whether correlation genuinely reduces alert volume or just renames it
15%
Endpoint Performance & Operations
Agent CPU, memory, and I/O footprint on laptops, servers, and VDI; single-agent versus multi-module sprawl; OS and architecture coverage (Windows, macOS, Linux, ARM, legacy); deployment and update controls including staged rollout and rollback; console scalability and API depth
10%
Managed Services & Ecosystem Fit
Quality and response-authority of the vendor’s own MDR option, openness to third-party MDR and SIEM/SOAR, threat-intelligence depth and attribution, marketplace and integration breadth, and the realism of support and professional-services coverage for your geographies

Related Buyer Guides

Independent evaluation frameworks for this category.

API Security Platforms
The API is now the primary attack surface, and a WAF pointed at it isn't API security. Evaluate Salt, Akamai (Noname), Imperva, F5, Traceable, Wallarm, Cequence, and Data Theorem on whether they actually discover your shadow APIs and catch BOLA and business-logic abuse at runtime — not just sign endpoints off as “protected.”
Attack Surface Management (ASM / CTEM)
Evaluate Wiz, CrowdStrike Falcon Surface, Microsoft Defender EASM, Cortex Xpanse, Censys, CyCognito, Tenable, and runZero across EASM, CAASM, and platform-embedded camps — judged on discovery accuracy and how cleanly the surface feeds prioritization, not how many assets it claims to find.
Cloud Access Security Broker (CASB)
Evaluate Netskope, Microsoft Defender for Cloud Apps, Zscaler, and Palo Alto for SaaS security, shadow IT discovery, and data protection.

This profile was compiled by CIOPages from public sources with AI assistance, and may be incomplete or out of date. It is informational only and not an endorsement. Represent this vendor? Claim this listing or .

Quick Facts

www.vmware.com/products/carbon-black-endpoint.html
CategoryCybersecurity
SubcategoryEndpoint Security & EDR
PricingSubscription
Founded2002
HeadquartersWaltham, USA
DeploymentSaaS
Target SizeEnterprise