VMware Carbon Black

Behavioral EDR platform with continuous endpoint activity recording

Endpoint & EDRFrom $52.99/endpoint/year / Enterprise custom
How we work:This listing is aggregated from VMware Carbon Black's official documentation, public pricing pages, community discussions (Reddit, HN, forums), and real user feedback. We do not do hands-on testing. We aggregate and organize what's already out there. Last verified February 2026.

What is VMware Carbon Black?

VMware Carbon Black Cloud is an endpoint protection platform that consolidates endpoint security using a single agent and console. Known for its behavioral EDR capabilities, it provides next-gen antivirus, EDR, managed detection, and audit and remediation. Its strength lies in continuous recording of endpoint activity for detailed threat analysis and compliance.

Best for: Enterprises needing deep behavioral analytics and continuous endpoint recording for compliance
Pros
  • Excellent behavioral analytics and event recording
  • Strong compliance and audit capabilities
  • Deep VMware infrastructure integration
  • Continuous recording enables retroactive threat hunting
  • Competitive entry-level pricing
Cons
  • Agent can be heavier than competitors on endpoints
  • Console UI can feel dated compared to newer platforms
  • Broadcom acquisition has created uncertainty
  • Detection rates lag behind CrowdStrike and SentinelOne in some tests

Key Features

Continuous endpoint activity recording
Behavioral threat detection and analytics
Next-generation antivirus
Live response for remote remediation
Managed detection and response (MDR)
Audit and remediation workflows
Workload protection for VMs and containers
VMware infrastructure integration