Try our new research platform with insights from 80,000+ expert users

CylanceOPTICS vs VMware Carbon Black Cloud comparison

BlackBerry and VMware are both solutions in the Endpoint Detection and Response (EDR) category. BlackBerry is ranked #42 with an average rating of 7.8, while VMware is ranked #48 with an average rating of 7.7. BlackBerry holds a 0.3% mindshare in EDR, compared to VMware’s 0.2% mindshare. Additionally, 80% of BlackBerry users are willing to recommend the solution, compared to 93% of VMware users who would recommend it.
CylanceOPTICS
Read 11 CylanceOPTICS reviews
  • 475 Views
  • 456 Comparison Views
80% willing to recommend
VMware Carbon Black Cloud
Read 18 VMware Carbon Black Cloud reviews
  • 628 Views
  • 383 Comparison Views
93% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

VMware Carbon Black Cloud and CylanceOPTICS are leading-endpoint security solutions. Users are happier with the features and support of VMware Carbon Black Cloud, but CylanceOPTICS is favored for its advanced threat detection capabilities, making it worth the price.

Features: VMware Carbon Black Cloud offers robust threat hunting, incident response functionalities, and highly-rated analytics and extended detection capabilities. CylanceOPTICS is praised for its AI-based prevention, autonomous threat detection abilities, and more advanced AI-driven approach.

Room for Improvement: VMware Carbon Black Cloud users suggest performance enhancements, reducing false positives, and more streamlined integration processes. For CylanceOPTICS, the main areas for improvement include reporting capabilities, expanding the range of integrations, and refining user interface aspects.

Ease of Deployment and Customer Service: VMware Carbon Black Cloud users mention straightforward deployment and responsive customer support. CylanceOPTICS gets mixed reviews on deployment complexity but receives praise for its customer service, though response times are slower compared to VMware Carbon Black Cloud.

Pricing and ROI: VMware Carbon Black Cloud is considered more cost-effective with a quicker ROI. CylanceOPTICS, although perceived as more expensive, justifies its price with superior AI-driven features and overall performance. Users find VMware’s pricing more attractive, but Cylance’s advanced capabilities may provide long-term value.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed CylanceOPTICS vs. VMware Carbon Black Cloud Report (Updated: July 2025).
Buyer's Guide
CylanceOPTICS vs. VMware Carbon Black Cloud
July 2025
Download the complete report
Helped 863,679 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CylanceOPTICS
Ranking in Endpoint Detection and Response (EDR)
42nd
Average Rating
7.4
Reviews Sentiment
4.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
VMware Carbon Black Cloud
Ranking in Endpoint Detection and Response (EDR)
48th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
18
Ranking in other categories
Security Incident Response (7th)
 

Mindshare comparison

As of July 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of CylanceOPTICS is 0.3%, up from 0.1% compared to the previous year. The mindshare of VMware Carbon Black Cloud is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Q&A Highlights

PB
Dec 20, 2021
Carbon Black and Cylance Comparison for EDR
We didn't consider either of these after demo and comparison from reviews of multiple EDR solutions we came up with SentinelOne on top and are now POCg it as an endpoint solution.
See all answers
 

Featured Reviews

HERNAN RODRIGUEZ - PeerSpot reviewer
Easy to use
CylanceOPTICS is easy to use.  The product's technical support is slow.  I have been using the product for three years.  CylanceOPTICS is easy to use.  I rate the solution a nine out of ten. 
Read full review
Tom Kar - PeerSpot reviewer
Shows promise for endpoint detection and response, with room for improvement in complexity and pricing
VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network. Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps. CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution. Additionally, it is complex to use, and the pricing should be improved.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has a high level of trust in the industry."
"It automatically blocks the threats, helping us investigate if they harm the environment."
"I would rate the stability a nine out of ten. I would give it a close ten as possible because, like SentinelOne, I've seen incompatibility. Whereas Cylance, I've seen none."
"It is a bit early in our evaluation process to give proper feedback, although so far, the overall feedback is good."
"The initial setup was fairly straightforward. To get a large health care organization sorted, we had to create exemptions because some of the scripts and some of the automations were broken."
"CylanceOPTICS is easy to use."
"It's pretty unintrusive"
"The most valuable feature is the ability to respond to zero-day and unknown threats."
More CylanceOPTICS pros
"Carbon Black Cb Response excels at providing context to indicators when responding to incidents. It allows responders to understand the entire scope of an incident and quickly contain it to minimize impact and disruption."
"The ability to quickly isolate a system from the network, while still being able to perform some forensics and mitigation work remotely, was of great value to us since we had many mobile and distributed systems."
"Integration and scalability are the most valuable."
"Threat hunting is the most valuable feature of VMware Carbon Black Cloud."
"For setup, the server can be given to you as a VM image and with minimal configuration needed."
"​The ability to isolate an endpoint with only the host name and a click of a button is a major time saver."
"VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network."
"The most valuable features are the threat-hunting and the batch console."
More VMware Carbon Black Cloud pros
 

Cons

"Too many false positives are reported."
"One minor issue that somebody mentioned was that they didn't like their management console."
"It takes more time to investigate or dig up and understand what's going on."
"Our customers would like to see more automation with respect to how threats are handled once they have been detected."
"The technical support could be improved although it's probably better than you get with a lot of the other traditional antivirus solutions"
"The tools are ineffective. It flags a lot of things. To give you an example, it detected Google Chrome and blocked the user's access to it. That it mistook for malicious, which turned out to be a false positive."
"The reporting is very weak and not very good at all."
"The product's technical support is slow."
More CylanceOPTICS cons
"There have been some performance issues when deploying on Windows Server, but I believe Carbon Black is working on that."
"The solution's support could be improved."
"It's not simple."
"The dashboard should be more user-friendly."
"The solution can only handle about 500 bans or blocks."
"The support team of Carbon Black CB Response needs improvement. At present, they need a lot of information. Then they give you an answer that they already gave you. You tell them it didn't work, and then they take a long time."
"The product detects too many false positives initially and it could integrate better with other security solutions."
"Additionally, it is complex to use, and the pricing should be improved."
More VMware Carbon Black Cloud cons
 

Pricing and Cost Advice

"CylanceOPTICS is probably priced equal to other EDRs in the market."
"We pay for the number of endpoints we have and that is about it. On a monthly basis, the licensing cost is $55 per user."
"I would rate the pricing a three out of five."
"The pricing for CylanceOPTICS is very good; I would rate it around a nine on a scale of one to ten, with ten being the lowest. It's one of the most affordable options I've seen."
"VMware Carbon Black Cloud is an expensive solution."
"Pricing for this solution could be made lower."
"Purchase Professional Services up front as part of the implementation package, then renew hours annually to ensure you have adequate support for upgrades and enhancements. Overbuy by at least 10% to account for infrastructure growth."
"The solution is very inexpensive so there is great cost savings to using it."
"We had no issues purchasing through our preferred reseller and were able to get a fair price even when not purchasing direct. Carbon Black Enterprise Response didn’t break the bank, though adding on the matching antivirus and anti-malware components of the Protect product was more than we could afford, even with some discounting. Cb Response is really designed to complement Carbon Black’s Defense product. While Response can be used on its own, coupling with Defense seems like the best strategy if you can afford the price tag."
"You need to pay for the licensing of the product. The pricing is costly."
report
See which vendors are best for you
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
See recommendations
863,679 professionals have used our research since 2012.
 

Answers from the Community

PB
Dec 20, 2021
Dec 20, 2021
Carbon Black and Cylance Comparison for EDR
Hiya Paul, I'm a bit biased as we are partnered with Cynet Security. We've done extensive testing on Cynet 360 using two recipes: MITRE Framework and Atomic Red Team's collection of small, highly portable detection tests mapped to MITRE ATT&CK®. Value Proposition is very good with a 24/7 SOC support. Fully automated D&R agent with ability to integrate to external SIEM. Also has User Beh...
2 out of 5 answers
SP
Aug 7, 2020
If you're looking for a NextGen, Machine Learning & AI-driven Active EDR with automated remediation, that has not been breached and is backed by a one million USD ransomware warranty.  Contact me and I'll provide you with detailed comparisons between SentinelOne, Cylance and Carbon Black, showing how SentinelOne is superior to both Cylance and Carbon Black.  It will also be my pleasure to demonstrate the SentinelOne solution to you. The future of your company's cybersecurity is in your hands.
Read full answer
PM
Aug 7, 2020
Capability                               Cylance                   Carbon Black Leverages local ML Model        Yes                          No Leverages cloud ML Model.      Not required but      No                                               adds to efficacy Predictive Advantage              Yes                          No Prevents attacks from  zero-day threats                     Yes                          Partial Daily or frequent updates        No                           Yes Allows malware to execute      No                           Yes Cloud vs. On-Premise Mgmt     Cloud & On-Premise  On-Premise Single Agent                           Yes                           No Scale of Agents                       Infinite                    Limited Single Console                        Yes                          No Requires continual scans         No                           Yes Capable of convicting offline   Yes                         No Avg mem/cpu                         <70MB/1%                High Agent Update Cycle                Quarterly                 Daily ML Update Cycle                    3x Yearly                  N/A
Read full answer
See all 5 answers
 

Top Industries

By visitors reading reviews
Manufacturing Company
22%
Computer Software Company
11%
Insurance Company
7%
Financial Services Firm
7%
Healthcare Company
9%
Real Estate/Law Firm
8%
Financial Services Firm
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Blackberry Optics?
I would rate the stability a nine out of ten. I would give it a close ten as possible because, like SentinelOne, I've seen incompatibility. Whereas Cylance, I've seen none.
See all answers
What is your experience regarding pricing and costs for Blackberry Optics?
CylanceOPTICS is probably priced equal to other EDRs in the market. Price-wise, considering what it has to offer, you could probably get a better product.
See all answers
What needs improvement with Blackberry Optics?
The solution's contextual analysis is sometimes not very clear compared to some modern EDRs like CrowdStrike. Compared to other EDR tools, CylanceOPTICS lacks some information. It takes more time t...
See all answers
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
See all answers
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
See all answers
What do you like most about Carbon Black CB Response?
Threat hunting is the most valuable feature of VMware Carbon Black Cloud.
See all answers
 

Comparisons

CrowdStrike Falcon vs CylanceOPTICS Logo
CrowdStrike Falcon vs CylanceOPTICS
Compared 37% of the time
Rapid7 InsightIDR vs CylanceOPTICS Logo
Rapid7 InsightIDR vs CylanceOPTICS
Compared 37% of the time
Microsoft Defender for Endpoint vs CylanceOPTICS Logo
Microsoft Defender for Endpoint vs CylanceOPTICS
Compared 27% of the time
More CylanceOPTICS Competitors
Splunk SOAR vs VMware Carbon Black Cloud Logo
Splunk SOAR vs VMware Carbon Black Cloud
Compared 35% of the time
Palo Alto Networks Cortex XSOAR vs VMware Carbon Black Cloud Logo
Palo Alto Networks Cortex XSOAR vs VMware Carbon Black Cloud
Compared 27% of the time
Rapid7 InsightIDR vs VMware Carbon Black Cloud Logo
Rapid7 InsightIDR vs VMware Carbon Black Cloud
Compared 20% of the time
VMware Carbon Black Endpoint vs VMware Carbon Black Cloud Logo
VMware Carbon Black Endpoint vs VMware Carbon Black Cloud
Compared 18% of the time
More VMware Carbon Black Cloud Competitors
 

Product Reports

Buyer's Guide
CylanceOPTICS
July 2025
CylanceOPTICS reportDownload CylanceOPTICS product report
Buyer's Guide
VMware Carbon Black Cloud
July 2025
VMware Carbon Black Cloud reportDownload VMware Carbon Black Cloud product report
 

Also Known As

No data available
Carbon Black CB Response
 

Overview

Our cloud-native BlackBerry® Optics provide visibility, on-device threat detection and remediation across your organization. In milliseconds. And our EDR approach effectively and efficiently hunts threats while eliminating response latency. It’s the difference between a minor security event—and one that’s widespread and uncontrolled.

BlackBerry
Fortify Endpoint and Workload Protection Legacy approaches fall short as cybercriminals update tactics and obscure their actions. Get advanced cybersecurity fueled by behavioral analytics to spot minor fluctuations and adapt in response. Recognize New Threats Analyze attackers’ behavior patterns to detect and stop never-before-seen attacks with continuous endpoint activity data monitoring. Don’t get stuck analyzing only what’s worked in the past. Simplify Your Security Stack Streamline the response to potential incidents with a unified endpoint agent and console. Minimize downtime responding to incidents and return critical CPU cycles back to the business.
VMware
 

Sample Customers

Cerdant, Washoe County School District
ALLETE belk
Buyer's Guide
CylanceOPTICS vs. VMware Carbon Black Cloud
July 2025
Free Report: CylanceOPTICS vs. VMware Carbon Black Cloud
Find out what your peers are saying about CylanceOPTICS vs. VMware Carbon Black Cloud and other solutions. Updated: July 2025.
DOWNLOAD NOW
863,679 professionals have used our research since 2012.
See our CylanceOPTICS vs. VMware Carbon Black Cloud report.
See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.