IBM Resilient vs VMware Carbon Black Endpoint comparison

IBM and VMware are both solutions in the Security Incident Response category. IBM is ranked #3 with an average rating of 7.5, while VMware is ranked #1 with an average rating of 7.7. IBM holds a 10.9% mindshare in IRP, compared to VMware’s 7.7% mindshare. Additionally, 75% of IBM users are willing to recommend the solution, compared to 88% of VMware users who would recommend it.

IBM Resilient

Read 18 IBM Resilient reviews

212 Views
133 Comparison Views

75% willing to recommend

VMware Carbon Black Endpoint

Read 63 VMware Carbon Black Endpoint reviews

333 Views
253 Comparison Views

88% willing to recommend

IBM Resilient

VMware Carbon Black Endpoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 2, 2025

VMware Carbon Black Endpoint and IBM Resilient are key players in the security solutions category. VMware Carbon Black is praised for its competitive pricing and customer support, whereas IBM Resilient stands out for its advanced incident response capabilities and comprehensive features, giving it a slight edge in handling robust security incidents.

Features: VMware Carbon Black Endpoint offers behavioral monitoring, resource efficiency, and high detection rates with minimal user impact. It provides detailed analysis of the kill chain and uses cloud-based deployment for continuous protection. IBM Resilient is known for its customizable incident response, dynamic playbooks, and robust integration capabilities.

Room for Improvement: VMware Carbon Black Endpoint could improve on on-premise installation, mobile device support, and query handling within the cloud console. Incident response and cloud integration also require enhancement. IBM Resilient needs to focus on better integration, simplifying the initial setup, and reducing complexity to broaden its usability.

Ease of Deployment and Customer Service: VMware Carbon Black Endpoint is adaptable across public, private, and hybrid cloud environments, though user customer service experiences vary. IBM Resilient, mainly on-premises, is lauded for its consistent technical support, though some users report occasional slow resolutions.

Pricing and ROI: VMware Carbon Black Endpoint offers a significant return on investment with competitive pricing, especially for larger implementations. IBM Resilient is seen as costly; however, its robust incident response provides substantial value, with flexible pricing models for varying user needs.

To learn more, read our detailed IBM Resilient vs. VMware Carbon Black Endpoint Report (Updated: March 2025).

Buyer's Guide

IBM Resilient vs. VMware Carbon Black Endpoint

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Resilient

Ranking in Security Incident Response

3rd

Average Rating

7.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (13th)

VMware Carbon Black Endpoint

Ranking in Security Incident Response

1st

Average Rating

7.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (21st), Endpoint Detection and Response (EDR) (15th), Ransomware Protection (5th)

Mindshare comparison

As of April 2025, in the Security Incident Response category, the mindshare of IBM Resilient is 10.9%, up from 7.0% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 7.7%, down from 20.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Incident Response

Featured Reviews

Usman Bhatti

Senior Officer Security Operations Center at a financial services firm with 10,001+ employees

Simple deployment, scalable, but lacking third-party solution compatibility

Integrating IBM Resilient with other applications can be very difficult and technically challenging. Often, they use the excuse that you are using the latest version of an application, such as an endpoint security system, and they don't have an API or support for it at the moment. There is no automation in the SOAR solution. It's worth noting that many third-party add-on applications needed to be purchased separately to integrate with IBM Resilient. While there were built-in applications available for incident remediation, the selection was limited. Additionally, integrating third-party applications was often a difficult and time-consuming process due to the technical complexity involved.

Read full review

Nikunj Kamboj

Cybersecurity Analyst at OnX Canada

Integrates well with our existing SIEM tool and helps in identifying suspicious activities

The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its flexibility is the most valuable."

"The solution is very easy to use."

"Stability-wise, I rate the solution a ten out of ten...Scalability-wise, I rate the solution a ten out of ten."

"It's really simple and has a flexible interface."

"What I like most about IBM Resilient is that it has a complete stack, which means you don't need to use different OEM products because you have all you need under the IBM Resilient umbrella. You don't need to worry much about integrations and components because you're working with tested and proven architecture."

"The most valuable features of IBM Resilient are its flexibility and customization options for incident response."

"The UBA, User Behavior Analytics, is very good."

"The initial setup of IBM Resilient is not that complex since my company already has a support license that we use internally. In general, the product's deployment phase is not that complex."

More IBM Resilient pros

"Carbon Black Defense has a higher detection ratio because it's cloud-based and it also does a lookup to virus total."

"Behavioral Monitoring stops known malicious events before they even begin."

"It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."

"It actually does some heuristics, and some behavioral analysis."

"This product has the capability of uploading scripts to the tool and this is a very comprehensive feature."

"The EDR and reports were helpful in improving our organization."

"It has intelligent learning behind it and we have been very successful in preventing attacks."

"VMware Carbon Black Endpoint is a highly stable solution."

More VMware Carbon Black Endpoint pros

Cons

"The product must provide more integration with other tools."

"The initial setup is complex."

"What could make IBM Resilient better is if IBM increased the number of built-in integrations with different products from other vendors or third-party products."

"There are shortcomings with IBM Resilient's technical support team that can be considered for improvement in the future."

"The integration could be improved so that it is easy to integrate with other solutions."

"One thing to improve is how it handles data formats, which currently might require scripting for conversion to CSV before uploading."

"IBM Resilient is quite complex, including its configuration."

"IBM Resilient could integrate better with my tools."

More IBM Resilient cons

"The tech support communicates, but it's just not with movement."

"In our company, we also wanted to have network detection, like a host-based IDS on VMware Carbon Black Endpoint, but we did not get it."

"There are many different controls that are needed to be put into place for upgrading that makes it difficult. Having to re-engineer your IT infrastructure to match their software, as opposed to having it integrate and work independently causes difficulties. When there is an update to any software everyone has to be involved."

"I'm not sure as to the logic of how we've decided to customize it. We've only really used it since February and therefore there may be more to do on that front. That's why it's hard to say if something is missing or if we just aren't utilizing it."

"It could be a bit complicated. You have to be very familiar with Carbon Black to understand what it is doing and why it is doing. I would like to have more explanations and simplification in the user interface. It would be good to get help and see more explanations. It should tell us that a software is blocked and the reason for it. It would be good to be able to build chains in terms of what caused what, what worked, and what caused an issue. We are now moving from Carbon Black to Cortex XDR. While choosing antivirus software, we were also looking at Carbon Black because it also has an antivirus package, and it is next-generation, but we were told that Carbon Black doesn't support firewalls. We have Palo Alto firewalls. We would have chosen this solution if it supported firewalls, in particular next-generation firewalls, but unfortunately, it doesn't. Therefore, we decided on Cortex XDR because it integrates with Palo Alto firewalls."

"Sensor deployment requires extensive fine-tuning, and creating deployment packages is time-consuming."

"Certain settings have limitations. For example, I cannot manually block some malware activities."

"With the on-prem one, the bug has been reported by the community in early January or February, something like that, at the beginning of the year, and it's still not addressed. They have released two versions since then, and yet neither of them addresses this specific issue."

More VMware Carbon Black Endpoint cons

Pricing and Cost Advice

"It is very expensive."

"I would rate the tool’s pricing a three out of ten. The tool’s pricing is on a yearly basis."

"There are no costs except for the support services that our company pays in addition to the licensing charges attached to the solution."

"Pricing for the solution is good, in my opinion."

"The cost of the product is quite high."

"We could create unlimited users using the license we had purchased."

"The licensing cost for IBM Resilient is not too expensive, but it's not affordable, so it's moderately expensive. Regarding price, I'm rating the solution seven out of ten. The company pays for the license yearly, based on the number of users. Apart from the cost of the license you need to pay for each user, you also need to spend an initial investment for the base platform. You also have to pay for IBM Resilient support."

"There is a license you need to pay for in order to use this product."

More IBM Resilient pricing and cost advice

"The product’s price is less expensive than other vendors."

"Price-wise, VMware Carbon Black Endpoint is a highly-priced solution. Regarding the licensing cost of the solution, one needs to opt for an annual subscription."

"It's reasonable in price"

"CB Defense is available on a yearly subscription and is priced by the number of endpoints."

"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."

"The cost is a considerable factor, but the benefit factor is the most important. When you compare it with other products, the price is high. Carbon Black will negotiate the price."

"I am not really involved in the pricing of this product. But, from my understanding, it is OK for us."

"The cost/benefit factor has great relevance in Cb Defense implementations."

More VMware Carbon Black Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

33%

Computer Software Company

11%

Manufacturing Company

Government

Computer Software Company

15%

Financial Services Firm

11%

Government

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about IBM Resilient?

It is a stable solution...It is a scalable solution.

See all answers

What is your experience regarding pricing and costs for IBM Resilient?

I am not the one in charge of pricing, so I am not sure about the costs.

See all answers

What needs improvement with IBM Resilient?

Integration with some devices, including Cisco PowerPower and certain antivirus products, has limitations.

See all answers

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...

See all answers

What do you like most about Carbon Black CB Defense?

VMware Carbon Black Endpoint is a highly stable solution.

See all answers

Comparisons

Palo Alto Networks Cortex XSOAR vs IBM Resilient

Compared 38% of the time

IBM Security QRadar vs IBM Resilient

Compared 22% of the time

Splunk SOAR vs IBM Resilient

Compared 19% of the time

Fortinet FortiSOAR vs IBM Resilient

Compared 11% of the time

ServiceNow Security Operations vs IBM Resilient

Compared 11% of the time

More IBM Resilient Competitors

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 16% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 14% of the time

SentinelOne Singularity Complete vs VMware Carbon Black Endpoint

Compared 10% of the time

Trellix Endpoint Security vs VMware Carbon Black Endpoint

Compared 9% of the time

Trend Micro Deep Security vs VMware Carbon Black Endpoint

Compared 8% of the time

More VMware Carbon Black Endpoint Competitors

Product Reports

Buyer's Guide

IBM Resilient

March 2025

Download IBM Resilient product report

Buyer's Guide

VMware Carbon Black Endpoint

March 2025

Download VMware Carbon Black Endpoint product report

Also Known As

No data available

Carbon Black CB Defense, Bit9, Confer

Overview

The Resilient Incident Response Platform (IRP) is the leading platform for orchestrating and automating incident response processes.

The Resilient IRP quickly and easily integrates with your organization’s existing security and IT investments. It makes security alerts instantly actionable, provides valuable intelligence and incident context, and enables adaptive response to complex cyber threats.

IBM

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?

Intelligent learning: Improves detection capabilities over time.
Whitelisting: Allows only approved applications to run.
Integration with other security tools: Enhances overall security posture.
Centralized cloud control: Manages endpoints from a single interface.
Command shell access: Offers deeper investigation capabilities.
Dynamic grouping: Facilitates organized endpoint management.
Simplified policy management: Streamlines security policy implementation.
API for system remoting: Allows remote system access and management.
Twenty-four-seven support: Provides continuous assistance and response.

What are the benefits of VMware Carbon Black Endpoint?

Real-time monitoring: Offers constant vigilance against threats.
Threat hunting: Identifies and mitigates threats proactively.
Historical data analysis: Assists in understanding past incidents and patterns.
Improved endpoint protection: Enhances overall endpoint security.
Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

VMware

Sample Customers

Golden Living, Health Equity, USA Funds

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Buyer's Guide

IBM Resilient vs. VMware Carbon Black Endpoint

March 2025

Free Report: IBM Resilient vs. VMware Carbon Black Endpoint

Find out what your peers are saying about IBM Resilient vs. VMware Carbon Black Endpoint and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our IBM Resilient vs. VMware Carbon Black Endpoint report.

See our list of best Security Incident Response vendors.

We monitor all Security Incident Response reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.