Try our new research platform with insights from 80,000+ expert users

VMware Carbon Black App Control vs Zscaler Zero Trust Exchange Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 20, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VMware Carbon Black App Con...
Ranking in Application Control
1st
Average Rating
9.2
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Zscaler Zero Trust Exchange...
Ranking in Application Control
3rd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
63
Ranking in other categories
Data Loss Prevention (DLP) (3rd), Cloud Access Security Brokers (CASB) (3rd), ZTNA as a Service (1st), Secure Access Service Edge (SASE) (2nd), Cloud Security Posture Management (CSPM) (13th), Cloud-Native Application Protection Platforms (CNAPP) (10th), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

As of April 2025, in the Application Control category, the mindshare of VMware Carbon Black App Control is 24.6%, down from 32.9% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 8.5%, up from 7.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Control
 

Featured Reviews

reviewer1535181 - PeerSpot reviewer
Very stable, reasonable price, works well, and provides good visibility and reporting
We are small potatoes. We only have around 200 machines. We are actually in the middle of a review with it, which we are doing for the first time since we installed it. We're having the original guy who helped us through the implementation, which is rare these days because people usually don't stick around or you wouldn't get them back. He is an excellent security guy who works for VMware, and he told me of a 30,000 plus installation that he has done with 30,000 devices, machines, and servers, which is pretty big.
Sumit Bhanwala - PeerSpot reviewer
Cloud-based platform simplifies device and data center management
I find it to be good. The solution is cloud-based with the latest inspection engines, which I find to be amazing. We are less dependent on data centers and device management, which reduces our efforts significantly. It improves our device management, data center management, and updating devices. We need fewer engineers for this management, and it reduces time and efforts for data center management, device upgrades, and IT support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I use the console to check for threats and I find it to be very user-friendly."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"All the functions within VMware Carbon Black App Control are valuable."
"The API integration is good."
"The effectiveness of application whitelisting is very good."
"The visibility is valuable."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
"The most valuable feature of Zscaler Private Access is the categorization of the dynamic URLs which keeps the customer's environment protected. The threats and the malware are correctly categorized."
"It is a stable solution."
"Yes, it is very stable. I have never seen it go down, not once."
"SASE's most valuable features are proxy and content filtering."
"The Live Logs are a cool feature. We can directly identify issues and divert user traffic."
"It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple."
"The most valuable feature of Zscaler Private Access is we do not have to connect to a VPN, it is seamless. It is more convenient for us because we use one agent to cover the internet and VPN access."
"Overall, the solution does a pretty good job at web filtering."
 

Cons

"The initial setup is somewhat complex."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"The reporting is not good and needs to be improved."
"I would like to see the addition of some more features that are in other, similar solutions."
"I rate App Control six out of 10 for scalability."
"Conflicts arise if you do not have the same management teams on the product."
"Zscaler CASB breaks down at times."
"We have issues with the tool's maintenance and networking. It should be able to work in offline mode as well."
"There are some performance issues with the solution once the module addition begins"
"It would be better if the Zscaler Private Access team made it easier for people to find subscriptions on the portal, mainly information on what my customers subscribed to or the type of licenses purchased."
"The product is not reliable."
"They should work on a replica account. There could be alerts and replica files sent to the DLP team during data collection."
"The only issue with Zscaler Cloud DLP is that it only gives you DLP protection from web traffic, which is flowing out, while a full-blown DLP solution such as Forcepoint or Symantec gives you DLP coverage for multiple channels. Zscaler Cloud DLP doesn't give you coverage for email, fax, and USB channels, and this is the only challenge or room for improvement in the solution. It's just an extension on top of what you're buying on the proxy, so it's just an added layer, and it doesn't cover DLP on a very broad level. I'm unsure if Zcaler is in the business of competing with a full-blown DLP solution, and if there's a plan to expand the features of Zscaler Cloud DLP beyond the web channel because you'll have to deploy a full-blown agent for it. I'm unsure if this is on the cards because the solution is just an added layer that you get with your proxy. I've asked the Zcaler team whether there's a plan to go full DLP in the future, but I didn't get a positive response. There isn't any feature I'd like added to Zscaler Cloud DLP currently, because anything you could think of that should be in cloud or SaaS solutions is already there, except for machine learning, as it's the only functionality that seems to be lacking in the solution. Machine learning is an additional policy available in other DLP solutions in the market, but my team didn't find it in Zscaler Cloud DLP."
 

Pricing and Cost Advice

"We pay a fee for support, which is renewed annually."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"Its price is reasonable and what is expected for these types of products."
"In terms of market positioning, I would describe Zscaler Private Access as offering optimal pricing. Based on our experience, Cato Networks tends to be slightly more expensive."
"Pricing for Zscaler Private Access is moderate. It's acceptable, though I can't give you the exact price currently. It's not too expensive, and on a scale of one to five, I would rate it a four out of five in terms of pricing."
"Zscaler Private Access can be an expensive solution, depending on the license type you will purchase."
"The solution has increased prices this year."
"The product has reasonable pricing."
"Zscaler DLP solution is expensive, with a fixed pricing structure that is billed annually and monthly. There are no additional costs for licenses."
"It's expensive currently. But when purchasing for a large number of users, there's room to negotiate. It's really up to the procurement team."
"It has been relatively reasonable for what it does. Some of the additional license costs based on the advanced next-generation firewall functions are quite high, and they should have certain features ready and available as a baseline rather than having to purchase additional licenses for it. Overall, the cost seems reasonable."
report
Use our free recommendation engine to learn which Application Control solutions are best for your needs.
849,210 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
48%
Financial Services Firm
7%
Computer Software Company
7%
Government
5%
Computer Software Company
16%
Financial Services Firm
13%
Manufacturing Company
10%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Ask a question
Earn 20 points
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...
What do you like most about Zscaler SASE?
The most valuable features of Zscaler Private Access are reliability, scalability, and availability.
What is your experience regarding pricing and costs for Zscaler SASE?
Zscaler SASE is quite expensive compared to other solutions. The price is not fixed and it does not include all of the features, so my advice for organizations would be to evaluate their specific n...
 

Also Known As

CB Protection, Carbon Black CB Protection
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about VMware Carbon Black App Control vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: April 2025.
849,210 professionals have used our research since 2012.