Cybereason Endpoint Detection & Response vs VMware Carbon Black Endpoint comparison

Cybereason and VMware are both solutions in the Endpoint Protection Platform (EPP) category. Cybereason is ranked #32 with an average rating of 8.2, while VMware is ranked #21 with an average rating of 7.7. Cybereason holds a 0.9% mindshare in EPP, compared to VMware’s 1.9% mindshare. Additionally, 89% of Cybereason users are willing to recommend the solution, compared to 88% of VMware users who would recommend it.

Cybereason Endpoint Detecti...

Read 21 Cybereason Endpoint Detection & Response reviews

4,101 Views
2,280 Comparison Views

89% willing to recommend

VMware Carbon Black Endpoint

Read 63 VMware Carbon Black Endpoint reviews

6,949 Views
4,774 Comparison Views

88% willing to recommend

Cybereason Endpoint Detecti...

VMware Carbon Black Endpoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cybereason Endpoint Detection & Response and VMware Carbon Black Endpoint are leading solutions in cybersecurity. VMware Carbon Black Endpoint appears superior due to its extensive features and perceived value, even though users report higher satisfaction with Cybereason's pricing and customer support.

Features:Cybereason Endpoint Detection & Response users highlight its easy-to-use threat detection, rapid response capabilities, and intuitive design. VMware Carbon Black Endpoint users appreciate its advanced threat hunting, comprehensive reporting, and broad integration capabilities. VMware Carbon Black's extensive feature set gives it an edge.

Room for Improvement:Users of Cybereason Endpoint Detection & Response see a need for enhanced reporting features and streamlined integration processes. VMware Carbon Black Endpoint users suggest improvements in its resource use and reduction of false positives. Both products have areas to grow, but VMware Carbon Black's resource management issues are more prominent.

Ease of Deployment and Customer Service:Cybereason Endpoint Detection & Response is praised for its straightforward deployment and reliable customer service. VMware Carbon Black Endpoint, while offering a robust deployment model, encounters more complexity and mixed reviews on customer service quality. Cybereason stands out in ease of deployment and support experience.

Pricing and ROI:Cybereason Endpoint Detection & Response is valued for competitive pricing and strong ROI from user reviews. VMware Carbon Black Endpoint, though more costly, is seen as worth the investment due to its advanced capabilities. Cybereason is favored for cost-effectiveness, but VMware Carbon Black justifies its price with powerful features.

To learn more, read our detailed Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint Report (Updated: February 2025).

Buyer's Guide

Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint

February 2025

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Endpoint Detecti...

Ranking in Endpoint Protection Platform (EPP)

32nd

Ranking in Endpoint Detection and Response (EDR)

26th

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

No ranking in other categories

VMware Carbon Black Endpoint

Ranking in Endpoint Protection Platform (EPP)

21st

Ranking in Endpoint Detection and Response (EDR)

15th

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Security Incident Response (1st), Ransomware Protection (4th)

Mindshare comparison

As of February 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Cybereason Endpoint Detection & Response is 0.9%, down from 1.1% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 1.9%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

Chad Kliewer

Information Security Officer at PTCI

We can make more informed decisions on whether an action is malicious

The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.

Read full review

Matthew Weisler

Sole Proprietor at Core-Infosec

Great granularity for policies or applications without needing hash values

The solution is cloud based which makes it easy to use for remote devices or work-at-home situations. The solution supports full trust or signature-based approvals. You can get very granular and band out policies or applications without having to do hash values. You can band through the entire environment by execution of the name or desk IDXE. This can be achieved on the policy side because of the signature, IOC, or naming convention itself. This is very effective for pushing more blockage or removing threats across the board. The solution has a very nice API on the back end for remoting into a system and executing scripts or utilizing self automation. This is useful for monitoring several different companies in a workspace or workbook-type format. For example, I report and send out mass emails from a clickable button in an Excel workbook. The APIs all exist for each client. I push out automatic endpoint monitoring and reports every single day at a particular time, with a simple clickable button that serves as a scheduled task for fifty clients.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The initial setup is not overly complicated."

"The initial setup process is straightforward."

"What I find most valuable is the clarity of the platform. It is very straightforward."

"What I like most about Cybereason Endpoint Detection & Response is the support because the support is good. The solution is also easy to use, and it has a dashboard. Everything is good, and there's no problem with it."

"The solution is efficient."

"The dashboard is very good and you can consider it as an interactive UI."

"What I find most valuable is the clarity of the platform."

"Cybereason's threat hunting and investigation are the most valuable features. Threat hunting is a user-friendly feature that keeps you safe. Investigation offers an added value that I haven't seen with other EDR services. It allows you to find specific policy problems within your environment."

More Cybereason Endpoint Detection & Response pros

"The data analysis is the most valuable because of the whitelist database. It is different than standard IDS solutions."

"Carbon Black CB Defense has helped improve my organization by allowing us to have better data so that we can do correlation and get visibility into the alerts."

"Once the solution is installed and configured correctly it does not require a lot of hands-on attention until you need upgrading."

"It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."

"I like its reporting."

"The product's most valuable feature is its ability to be fully integrated with the VMware environment."

"The solution is very useful and easy to handle. You don't need much intervention with this product."

"The initial setup is very easy."

More VMware Carbon Black Endpoint pros

Cons

"It initially took some time to deploy."

"I feel that the product lacks reporting features and needs improvement."

"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."

"There can be problems with the EDI."

"Cybereason does not have sandbox functionality."

"It should be more stable, and the sensor needs improvement in terms of connectivity."

"While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper."

"I feel it is a shame that I cannot create groups of groups with inheritance."

More Cybereason Endpoint Detection & Response cons

"The UI interface needs improvement. The management needs further work in future versions."

"The node management could be much better. The one thing that they cannot do very easily is change the tenant from a backend."

"There is room for improvement in the support and service team."

"There's some disparity between the on-premise and the cloud type of application."

"Performing a malware scan usually takes a lot of time, more than 24 hours."

"In the past, we've seen some stability issues in the latest version releases. We tend to hang back one version just to make sure issues are fully resolved to avoid user disruption."

"With the on-prem one, the bug has been reported by the community in early January or February, something like that, at the beginning of the year, and it's still not addressed. They have released two versions since then, and yet neither of them addresses this specific issue."

"This product should be cheaper."

More VMware Carbon Black Endpoint cons

Pricing and Cost Advice

"In terms of cost, this is a good choice for our needs."

"The pricing is manageable."

"This product is somewhat expensive and should be cheaper."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"In terms of pricing, it's a good solution."

"I do not have experience with the licensing of the product."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

More Cybereason Endpoint Detection & Response pricing and cost advice

"The license is annual. It's a standard license."

"In terms of licensing costs, Carbon Black CB Defense was all associated with CROW and the services my company is using with them, so it came all-inclusive."

"The product is quite reasonable."

"The pricing is very high."

"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."

"The pricing is annually based and operates through another department than mine."

"This is a really expensive product and we pay licensing fees on a yearly basis."

"CB Defense is available on a yearly subscription and is priced by the number of endpoints."

More VMware Carbon Black Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

Manufacturing Company

Government

Computer Software Company

15%

Financial Services Firm

10%

Government

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

See all answers

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

See all answers

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

See all answers

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...

See all answers

What do you like most about Carbon Black CB Defense?

VMware Carbon Black Endpoint is a highly stable solution.

See all answers

Comparisons

Darktrace vs Cybereason Endpoint Detection & Response

Compared 26% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 23% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 8% of the time

Kaspersky Endpoint Security for Business vs Cybereason Endpoint Detection & Response

Compared 5% of the time

More Cybereason Endpoint Detection & Response Competitors

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 15% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 15% of the time

SentinelOne Singularity Complete vs VMware Carbon Black Endpoint

Compared 10% of the time

Trellix Endpoint Security vs VMware Carbon Black Endpoint

Compared 9% of the time

Trend Micro Deep Security vs VMware Carbon Black Endpoint

Compared 8% of the time

More VMware Carbon Black Endpoint Competitors

Product Reports

Buyer's Guide

Cybereason Endpoint Detection & Response

February 2025

Cybereason Endpoint Detection & Response report

Download Cybereason Endpoint Detection & Response product report

Buyer's Guide

VMware Carbon Black Endpoint

January 2025

Download VMware Carbon Black Endpoint product report

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond

Carbon Black CB Defense, Bit9, Confer

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?

Intelligent learning: Improves detection capabilities over time.
Whitelisting: Allows only approved applications to run.
Integration with other security tools: Enhances overall security posture.
Centralized cloud control: Manages endpoints from a single interface.
Command shell access: Offers deeper investigation capabilities.
Dynamic grouping: Facilitates organized endpoint management.
Simplified policy management: Streamlines security policy implementation.
API for system remoting: Allows remote system access and management.
Twenty-four-seven support: Provides continuous assistance and response.

What are the benefits of VMware Carbon Black Endpoint?

Real-time monitoring: Offers constant vigilance against threats.
Threat hunting: Identifies and mitigates threats proactively.
Historical data analysis: Assists in understanding past incidents and patterns.
Improved endpoint protection: Enhances overall endpoint security.
Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

VMware

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Buyer's Guide

Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint

February 2025

Free Report: Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint

Find out what your peers are saying about Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint and other solutions. Updated: February 2025.

DOWNLOAD NOW

838,713 professionals have used our research since 2012.

See our Cybereason Endpoint Detection & Response vs. VMware Carbon Black Endpoint report.

See our list of best Endpoint Protection Platform (EPP) vendors and best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.