VMware Carbon Black Cloud Reviews

Name: VMware Carbon Black Cloud
Brand: VMware
Rating: 4.2 (18 reviews)

4.2 out of 5

18 reviews
93% willing to recommend

219 followers

What is VMware Carbon Black Cloud?

Fortify Endpoint and Workload ProtectionLegacy approaches fall short as cybercriminals update tactics and obscure their actions. Get advanced cybersecurity fueled by behavioral analytics to spot minor fluctuations and adapt in response.Recognize New ThreatsAnalyze attackers’ behavior patterns to detect and stop never-before-seen attacks with continuous endpoint activity data monitoring. Don’t get stuck analyzing only what’s worked in the past.Simplify Your Security StackStreamline the response to potential incidents with a unified endpoint agent and console. Minimize downtime responding to incidents and return critical CPU cycles back to the business.

Get the VMware Carbon Black Cloud Buyer's Guide and find out what your peers are saying about VMware Carbon Black Cloud, Rapid7 InsightIDR, VMware Carbon Black Endpoint and more!

VMware Carbon Black Cloud is the #7 ranked solution in top Security Incident Response solutions and #48 ranked solution in EDR tools. PeerSpot users give VMware Carbon Black Cloud an average rating of 8.4 out of 10. VMware Carbon Black Cloud is most commonly compared to Rapid7 InsightIDR: VMware Carbon Black Cloud vs Rapid7 InsightIDR. VMware Carbon Black Cloud is popular among the large enterprise segment, accounting for 66% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

VMware Carbon Black Cloud

June 2025

Get the report

Helped 859,579 peers since 2012

Featured VMware Carbon Black Cloud reviews

Tom Kar

Senior Security Specialist at Sopra

VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network. Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps. CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution. Additionally, it is complex to use, and the pricing should be improved.

Read full review

Matthew Weisler

Sole Proprietor at Core-Infosec

The solution can only handle about 500 bans or blocks. You will start having performance issues and lagging for the agent and endpoint if you go beyond 500 blocks. If you need to add additional stuff, you really should move to Carbon Black Defense. Training is needed to understand the built-in Python library because there is no console access. You need to build the back-end system or understand the server to utilize the Python library scripts for running reports. Otherwise, the library's capabilities are unutilized.

Read full review

Nhut Vu

Presales Project Manager at FPT

The education and awareness of customers here in Vietnam for Carbon Black CB Response is not good at the moment. Not a lot of customers know about this solution. Here in Vietnam, we mostly use Symantec and Trend Micro. I know Carbon Black CB Response is a very good product, but educating customers on why and how to use it, and how to market it, VMware Vietnam has not been doing a very good job, so that area could be improved. Areas for improvement would be training and education for both partner and customer, plus the marketing, particularly how to reach out to the customers. The customers are not well educated on the product, so once they use it, they don't know what more they can do with it. They don't know that they can integrate Carbon Black CB Response with other VMware solutions or other products.

Read full review

VMware Carbon Black Cloud mindshare

Product category:

As of July 2025, the mindshare of VMware Carbon Black Cloud in the Security Incident Response category stands at 7.3%, down from 8.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Incident Response

PeerResearch reports based on VMware Carbon Black Cloud reviews

Type	Title	Date
Category	Security Incident Response	Jul 1, 2025	Download
Product	Reviews, tips, and advice from real users	Jul 1, 2025	Download
Comparison	VMware Carbon Black Cloud vs ServiceNow Security Operations	Jul 1, 2025	Download
Comparison	VMware Carbon Black Cloud vs VMware Carbon Black Endpoint	Jul 1, 2025	Download
Comparison	VMware Carbon Black Cloud vs IBM Resilient	Jul 1, 2025	Download

Title	Rating	Mindshare	Recommending
Rapid7 InsightIDR	4.2	N/A	95%	32 interviews Add to research
VMware Carbon Black Endpoint	3.9	8.3%	88%	63 interviews Add to research

Valuable Features

Intrusion alerts and quarantine, host isolation, cost-effectiveness with process-level management, comprehensive data collection with effective search functionality, global PC security, lightweight design with real-time protection, and threat hunting are the most valued features of VMware Carbon Black Cloud.

"Threat hunting is the most valuable feature of VMware Carbon Black Cloud."
"The most valuable features are its lightweight design, ensuring minimal impact on end-users, and its real-time protection."
"The most valuable feature of VMware Carbon Black Cloud is the possibility of securing any PC worldwide."

Room for Improvement

Users suggest VMware Carbon Black Cloud should reduce false positives, offer better integration to avoid multiple agents, and enhance customer education in Vietnam. They also recommend improving support response and granularity of network communication data. Users find it complex and believe pricing needs adjustment, and feel its vulnerability features lack maturity. Improvements in technical support are needed, particularly in regions like the Middle East.

"Technical support for the solution should be improved because there is a scarcity of support teams in the Middle East."
"One area for improvement is the maturity of its vulnerability features."
"The solution's support could be improved."

ROI

Users found that VMware Carbon Black Cloud significantly reduced security risks and improved incident response times, leading to fewer breaches and lower costs on remediation efforts. Additionally, it provided valuable insights and comprehensive visibility into their environments, which helped in streamlining security operations and achieving compliance requirements efficiently. These benefits contributed positively to the ROI, with many users reporting enhanced security posture and resource savings.

Pricing

VMware Carbon Black Cloud offers a transparent pricing model without setup costs, ensuring a seamless integration process for users. Pricing methods typically revolve around subscription-based models, accommodating per-user or per-device licensing options. The pricing range is adaptable, catering to organizations of varying sizes and security requirements, providing comprehensive endpoint security solutions.

"VMware Carbon Black Cloud is an expensive solution."
"You need to pay for the licensing of the product. The pricing is costly."
"The solution is very inexpensive so there is great cost savings to using it."

Popular Use Cases

Organizations primarily use VMware Carbon Black Cloud for detecting malicious activities and responding to them. They receive alerts, quarantine devices, manage cybersecurity across various sectors, and ensure endpoint protection against threats like ransomware, malware, and viruses. It is used for back-end architecture, device compliance tracking, and as part of Zero Trust networking strategies. Companies value its flexibility, robustness, and effectiveness in securing endpoints and providing peace of mind.

Service and Support

Customers generally do not have direct interaction with VMware Carbon Black Cloud technical support, often relying on security teams or third-party partners. Most users haven't encountered any negative experiences or issues. Some mention having direct contacts for pre-sales and post-sales inquiries, but they aren't sure about production line support. Users typically escalate issues through partners who involve VMware support if necessary.

Deployment

Many found VMware Carbon Black Cloud's initial setup either straightforward or manageable, though some encountered difficulties due to their existing infrastructure. Collaboration with partners and third parties often smoothed the process. Common issues included agent communication and setup within complex environments. Users noted the setup required some troubleshooting, but with tools like Microsoft Intune and Workspace One, it became efficient. Typically, one person could handle ongoing maintenance and monitoring.

Scalability

VMware Carbon Black Cloud is highly scalable, easily managing both small and large implementations. Users mention handling thousands of devices and many servers without issues. They report seamless scalability after proper setup, rating it very highly for this capability. The scalability works well for various sizes of organizations, from those with hundreds of machines to those with thousands.

Stability

Initial instability due to false positives improved after baselining. Some users experienced performance issues on Windows Server and lagging beyond 500 blocks, though Carbon Black is addressing these. Generally stable with high marks for reliability. Users report stability issues requiring device resets, impacting work. Ratings range from 8 to a perfect 10 for stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our VMware Carbon Black Cloud Buyer's Guide for additional reliable information.