


VMware Carbon Black Endpoint and Comodo Advanced Endpoint Protection compete in the endpoint protection sector. Comodo Advanced Endpoint Protection seems to have the upper hand due to its superior features, though VMware Carbon Black Endpoint is preferred for pricing and support.
Features: VMware Carbon Black Endpoint is praised for threat detection, administrative tools, and integration capabilities. Comodo Advanced Endpoint Protection is highlighted for auto-containment technology, integrated threat intelligence, and advanced malware detection. Comodo's auto-containment stands out as a significant advantage.
Room for Improvement: VMware Carbon Black Endpoint needs improvements in system performance impact, reporting capabilities, and better integration with third-party tools. Comodo Advanced Endpoint Protection could benefit from enhanced usability, reduced false positives, and a more user-friendly interface.
Ease of Deployment and Customer Service: VMware Carbon Black Endpoint is noted for its straightforward deployment process and effective customer service. Comodo Advanced Endpoint Protection has mixed reviews regarding deployment ease but is recognized for responsive customer support. VMware’s more consistent deployment experience provides an edge, yet both offer solid customer service.
Pricing and ROI: Users find VMware Carbon Black Endpoint competitively priced with a good return on investment. Comodo Advanced Endpoint Protection is also cost-effective and delivers strong ROI due to its comprehensive feature set. Despite VMware’s attractive pricing, Comodo’s features contribute to a perceived higher ROI.
With Cortex XDR by Palo Alto Networks' incident correlation, behavioral detection, and process tree visibility, similar initial triage can often be completed in roughly 10 to 20 minutes, depending on the incident.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Without this type of solution, work becomes hampered and files become inaccessible.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Customer support is generally satisfactory but could be improved, especially in terms of response time.
Regarding the technical support of Broadcom, they are responsive and helpful.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
The solution's scalability has had a medium impact on the IT environment.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
When deploying on old PCs, servers, or laptops, optimal performance cannot be expected.
The stability of Comodo Advanced Endpoint Protection is rated at ninety-five to ninety-seven percent.
VMware Carbon Black Endpoint is slow for the stability rating.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
When a Cortex XDR by Palo Alto Networks incident is confirmed, it would be useful to automatically create a ServiceNow or Jira ticket with the incident summary, including affected endpoints, user indicators, process tree, severity, and recommended response actions.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Comodo Advanced Endpoint Protection could improve by extending its auto containment feature to Mac and Linux systems since it currently only supports Windows.
The main areas for improvement are support responsiveness and the additional enhancement with the DLP integration.
I think VMware Carbon Black Endpoint should improve in every area, because currently the NetGen AV, even from Microsoft and even from CrowdStrike, is better than VMware Carbon Black Endpoint.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
Pricing is competitive and considered average compared to other solutions.
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive as I would prefer.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
It includes an auto containment feature, ensuring files and folders remain secure.
If anything happens or any suspicious activities are detected, an alert is generated, allowing for quick response.
I assess VMware Carbon Black Endpoint's machine learning capabilities in detecting unknown threats as fantastic.
VMware Carbon Black Endpoint does facilitate endpoint protection and incident response, and it is an EDR.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.8% |
| VMware Carbon Black Endpoint | 2.1% |
| Comodo Advanced Endpoint Protection | 0.9% |
| Other | 93.2% |

| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 21 |
| Large Enterprise | 57 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 1 |
| Large Enterprise | 1 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 9 |
| Large Enterprise | 33 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Comodo Advanced Endpoint Protection offers robust cybersecurity with AI-driven threat detection, sandboxing, and auto containment features that protect networks from ransomware, malware, and advanced threats, providing stability and easy scalability.
Comodo Advanced Endpoint Protection delivers comprehensive defense against cyber threats with its advanced capabilities. It enhances network security with sandbox and auto containment, targeting ransomware, Trojans, and persistent threats. It integrates seamlessly with applications, supports remote management, and offers patch management alongside its AI-driven detection. Its Zero Day capabilities and open-source EDR bolster its defense mechanisms. Although it faces challenges like high resource consumption and agent performance issues, it remains valuable for safeguarding company and personal devices.
What makes Comodo Advanced Endpoint Protection effective?In industries like finance and healthcare, Comodo Advanced Endpoint Protection is deployed to maintain stringent security measures, protecting sensitive data and ensuring compliance. Organizations use it for endpoint protection and data loss prevention, leveraging its cloud-based solutions for remote management and patch updates.
VMware Carbon Black Endpoint uses behavioral analysis and cloud management to detect threats, stop suspicious activities, and ensure security with features like real-time monitoring and machine learning.
VMware Carbon Black Endpoint provides robust threat detection with centralized cloud management and behavioral analysis to prevent security breaches. Suitable for both cloud and on-premise environments, it enhances cybersecurity with seamless scaling, integrates with software for advanced threat hunting, and ensures policy management through application control.
What are the most important features of VMware Carbon Black Endpoint?In industries like finance and healthcare, VMware Carbon Black Endpoint is implemented to secure sensitive data from cyber threats. It supports organizations in minimizing risks associated with malware and ransomware, protecting their endpoint environments through AI-driven detection and real-time monitoring.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.