Try our new research platform with insights from 80,000+ expert users

CyberArk Endpoint Privilege Manager vs VMware Carbon Black App Control comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Endpoint Privilege...
Ranking in Application Control
5th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
36
Ranking in other categories
Endpoint Compliance (4th), Privileged Access Management (PAM) (3rd), Anti-Malware Tools (5th), Ransomware Protection (7th)
VMware Carbon Black App Con...
Ranking in Application Control
1st
Average Rating
9.2
Reviews Sentiment
7.1
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Application Control category, the mindshare of CyberArk Endpoint Privilege Manager is 3.8%. The mindshare of VMware Carbon Black App Control is 24.3%, down from 33.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Control
 

Featured Reviews

Sumit Chavan - PeerSpot reviewer
Helps secure the infrastructure and control users with admin rights
There are many features that are currently missing. A customization option is required for certain policies. For instance, if we need to stop PowerShell scripting, we have to create a different policy for that. Being able to create a sub-level policy within a top-level policy would be good. Currently, no user-based policy option is available inside the EPM console. We can only create computer-based policies. The database is available, but there is a drawback in not being able to create local groups on the EPM console. We only have to depend on Active Directory. This limits infrastructure security as we depend on the Active Directory team to manage user groups. If they remove any users, we lose control. If we could create groups locally and block them or set specific policies, we would have more control. Local endpoint management is missing from the EPM site. Moreover, there is an issue with policies not running as expected when we make enhancements. We have to find multiple ways to whitelist applications or enhance policies.
reviewer1535181 - PeerSpot reviewer
Very stable, reasonable price, works well, and provides good visibility and reporting
We are small potatoes. We only have around 200 machines. We are actually in the middle of a review with it, which we are doing for the first time since we installed it. We're having the original guy who helped us through the implementation, which is rare these days because people usually don't stick around or you wouldn't get them back. He is an excellent security guy who works for VMware, and he told me of a 30,000 plus installation that he has done with 30,000 devices, machines, and servers, which is pretty big.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is that it does lifecycle management and that it will change to whatever the end target is."
"The feature called PTA, which stands for Privileged Threat Analytics keeps track of what admins are doing and works with Centimeters. If something fishy is going on with a user's credentials, it alerts the security team so they can act fast. Plus, it automates stuff like resetting credentials or blocking users. So, if there's a potential hack, CyberArk can change passwords and lock out users in a snap. It also gives you a heads-up if anything unusual is going on with server activities, like someone creating new users with uncontrolled credentials."
"Our setup process is moving to the cloud, which is very good. It reduces complexity."
"The most valuable feature of CyberArk Endpoint Privilege Manager is its high performance, it's the best identity security platform. The security is good. It's easy to showcase the feature and capabilities and compare it with other competitors. It competes well with other solutions. Additionally, it is a complete solution."
"The biggest benefit of CyberArk EPM for our customers is control over privileged access for endpoints. Endpoints are often the starting point for attackers to enter and move within a network. CyberArk EPM bridges the gap between security and operations teams. Operations teams are happy because work isn't stopped due to admin rights issues, while security teams are satisfied that full admin rights aren't given to all users."
"This is the number one product for privilege account security."
"CyberArk Endpoint Privilege Manager has significantly improved our security posture by preventing virus incidents and restricting users from downloading unwanted applications."
"We did immediately begin to see results when using CyberArk."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"I use the console to check for threats and I find it to be very user-friendly."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"All the functions within VMware Carbon Black App Control are valuable."
"The API integration is good."
"The visibility is valuable."
"The effectiveness of application whitelisting is very good."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
 

Cons

"The solution can be complex to use at times."
"Technical support is slow to respond when we run into issues."
"It cannot be on-prem. It is only cloud-based. Sometimes, that's a restriction in terms of usage."
"The CyberArk team is working on a feature to identify devices without the Endpoint Privilege Manager running, which is currently missing."
"For an experienced system implementer it will take approximately one day. However, for somebody who is inexperienced it may take up to five days."
"The price of the solution should improve."
"It's an old product and has many areas that can be improved."
"CyberArk is a pretty heavy solution."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"I rate App Control six out of 10 for scalability."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"I would like to see the addition of some more features that are in other, similar solutions."
"The reporting is not good and needs to be improved."
"The initial setup is somewhat complex."
 

Pricing and Cost Advice

"I rate the solution's pricing an eight out of ten since the price can be too high for smaller businesses."
"The price of CyberArk Endpoint Privilege Manager is expensive. The solution is priced based on the number of accounts onboarded and the number of concurrent sessions. Everyone else is included in the price, such as support."
"It is an expensive solution."
"CyberArk Endpoint Privilege Manager has a very high price, so it's a one out of ten for me in terms of pricing."
"Although I do not deal directly with the pricing, CyberArk Endpoint Privilege Manager is costly compared to other solutions. However, it offers beneficial features."
"The tool is priced high. I would rate its pricing an eight out of ten."
"The cost for CyberArk is very high."
"The professional services for one eight-hour day would be $1,800."
"Its price is reasonable and what is expected for these types of products."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"We pay a fee for support, which is renewed annually."
report
Use our free recommendation engine to learn which Application Control solutions are best for your needs.
849,963 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
11%
Government
8%
Educational Organization
47%
Financial Services Firm
7%
Computer Software Company
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Looking for recommendations and a pros/cons template for software to detect insider threats
This is an inside-out --- outside-in --- inside-in question, as an insider can be an outsider as well. There is no short answer other than a blend of a PAM tool with Behavioral Analytics and Endpo...
What do you like most about CyberArk Endpoint Privilege Manager?
The most valuable feature of the solution is its performance.
What is your experience regarding pricing and costs for CyberArk Endpoint Privilege Manager?
I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost. It's really one of the best solutions.
Ask a question
Earn 20 points
 

Also Known As

Viewfinity
CB Protection, Carbon Black CB Protection
 

Overview

 

Sample Customers

Information Not Available
Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Find out what your peers are saying about CyberArk Endpoint Privilege Manager vs. VMware Carbon Black App Control and other solutions. Updated: April 2025.
849,963 professionals have used our research since 2012.