Try our new research platform with insights from 80,000+ expert users

D3 Security vs VMware Carbon Black Endpoint comparison

D3 Security and VMware are both solutions in the Security Incident Response category. D3 Security is ranked #7 with an average rating of 9.0, while VMware is ranked #2 with an average rating of 7.9. D3 Security holds a 3.2% mindshare in IRP, compared to VMware’s 7.7% mindshare. Additionally, 100% of D3 Security users are willing to recommend the solution, compared to 88% of VMware users who would recommend it.
D3 Security
Read 2 D3 Security reviews
  • 401 Views
  • 104 Comparison Views
100% willing to recommend
VMware Carbon Black Endpoint
Read 63 VMware Carbon Black Endpoint reviews
  • 6,029 Views
  • 181 Comparison Views
88% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jan 2, 2025

VMware Carbon Black Endpoint and D3 Security compete in the cybersecurity solutions category. VMware Carbon Black has the upper hand in threat detection, whereas D3 Security leads in incident response capabilities.

Features: VMware Carbon Black Endpoint uses behavior analysis and cloud-based analytics for real-time threat detection and prevention. It effectively identifies and stops threats instantly. D3 Security offers advanced incident response with streamlined management and automation. It integrates strongly with various security tools, improving incident handling processes.

Ease of Deployment and Customer Service: VMware Carbon Black Endpoint is straightforward to deploy and integrates seamlessly with minimal disruption, backed by effective customer service. It adapts to different infrastructures easily. D3 Security offers a smooth deployment experience with an emphasis on automation and easy configuration, reducing dependency on customer support. Both provide strong support with varying ease based on specific use cases.

Pricing and ROI: VMware Carbon Black Endpoint provides significant ROI through effective threat prevention, justifying setup costs in environments needing strong security measures. D3 Security's pricing reflects its extensive incident response features, offering good ROI for prioritized incident management. Though initial costs might be higher, its automation benefits potentially lead to long-term savings, making it a valuable investment for incident management efficiency.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed D3 Security vs. VMware Carbon Black Endpoint Report (Updated: July 2025).
Buyer's Guide
D3 Security vs. VMware Carbon Black Endpoint
July 2025
Download the complete report
Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

D3 Security
Ranking in Security Incident Response
7th
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (17th), AI-Powered Security Automation (4th)
VMware Carbon Black Endpoint
Ranking in Security Incident Response
2nd
Average Rating
7.8
Reviews Sentiment
6.9
Number of Reviews
63
Ranking in other categories
Endpoint Protection Platform (EPP) (29th), Endpoint Detection and Response (EDR) (23rd), Ransomware Protection (7th)
 

Mindshare comparison

As of August 2025, in the Security Incident Response category, the mindshare of D3 Security is 3.2%, up from 3.1% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 7.7%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Incident Response
 

Featured Reviews

Muhammad Aamir Riaz - PeerSpot reviewer
Offers open API for integrating any available tools without any recurring costs
Before committing, I recommend a Proof of Concept (POC) or demo first. This way, you can see if the product aligns with your specific use cases and security needs. Knowledge transfer is key, and D3 Security's team excels in this area. During the POC, your analysts gain valuable product knowledge, putting them ahead of the curve for deployment. In our case, the learning curve was steep initially, but by the end of the POC, my team was already building playbooks independently. D3 Security also schedules dedicated knowledge transfer sessions during the POC, making it a win-win for both parties. Since technology transfer is crucial for government entities like ours, this approach eliminates the need for additional learning after deployment, unlike with certain competitors like the Fortinet FortiSOAR case. While Fortinet FortiSOAR achieved the desired tasks, its knowledge transfer process was lacking, leaving us with a shaky foundation. D3 Security's approach solidifies the learning and empowers our team. Overall, I would rate the solution an eight out of ten.
Read full review
Nikunj Kamboj - PeerSpot reviewer
Integrates well with our existing SIEM tool and helps in identifying suspicious activities
The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's valuable feature is its GUI. It has more than 450 connectors, which are excellent for connecting devices and automating integration. The solution has all the features we need. We deployed it in our environment, and it's fully integrated. Thanks to their open APIs, the seamless integration makes everything work well together."
"It is an out-of-the-box automated integration with our 20 departments. We perform L1 LiveOps automatically through the portal."
"I feel that the initial setup was straightforward and not complex."
"The tool is pretty stable."
"The triage feature that shows you the whole chain of the malware is useful."
"The portal is easy to use and manage."
"There's lots of very useful documentation online to help troubleshoot and learn about the product."
"The solution is stable."
"You can deploy it through the cloud so that even if your stuff is outside of your controlled environment, you are still under control, based on the policies you create. The policies are controlled through the cloud. For example, if I don't allow anyone to do a certain activity or to install a particular app, and a consultant or a partner who is not part of our environment is doing so, it will stop them as well."
"Behavioral Monitoring stops known malicious events before they even begin."
More VMware Carbon Black Endpoint pros
 

Cons

"Reporting needs improvement. MTTR and MTTD metrics aren't directly available in playbooks and require manual effort to achieve."
"The reporting, especially custom reporting, needs to be improved. Additionally, it would be better if it could be hosted on Linux."
"The application control can be improved. It should also have an automatic update of the agents."
"The solution needs better overall compatibility with other products."
"At this point, we're test-bedding several other providers right now to see if there's anything that does equally or better and that comes at a better price point."
"The product's stability could be improved."
"The feature set for the firewall needs improvement."
"The pricing could be more reasonable."
"The EDR portion could be better. I'm not a big fan, but it works."
"The endpoint machines need improvement."
More VMware Carbon Black Endpoint cons
 

Pricing and Cost Advice

Information not available
"Carbon Black provides competitive pricing."
"This is a really expensive product and we pay licensing fees on a yearly basis."
"The cost is a considerable factor, but the benefit factor is the most important. When you compare it with other products, the price is high. Carbon Black will negotiate the price."
"In terms of licensing costs, Carbon Black CB Defense was all associated with CROW and the services my company is using with them, so it came all-inclusive."
"The price for the solution is completely at government level, meaning one which is very high."
"Price-wise, VMware Carbon Black Endpoint is a highly-priced solution. Regarding the licensing cost of the solution, one needs to opt for an annual subscription."
"​The cost/benefit factor has great relevance in Cb Defense implementations​."
"The pricing is very high."
More VMware Carbon Black Endpoint pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
See recommendations
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
23%
Comms Service Provider
15%
Outsourcing Company
10%
University
6%
Computer Software Company
13%
Financial Services Firm
11%
Government
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about D3 Security?
It is an out-of-the-box automated integration with our 20 departments. We perform L1 LiveOps automatically through the portal.
See all answers
What is your experience regarding pricing and costs for D3 Security?
We follow a different procurement process. For example, Fortinet qualified technically but lost out in the financial stage due to a two-stage bidding process. So, pricing can be subjective and depe...
See all answers
What needs improvement with D3 Security?
The reporting, especially custom reporting, needs to be improved. Additionally, it would be better if it could be hosted on Linux.
See all answers
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
See all answers
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
See all answers
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
See all answers
 

Comparisons

Palo Alto Networks Cortex XSOAR vs D3 Security Logo
Palo Alto Networks Cortex XSOAR vs D3 Security
Compared 36% of the time
Fortinet FortiSOAR vs D3 Security Logo
Fortinet FortiSOAR vs D3 Security
Compared 34% of the time
Splunk SOAR vs D3 Security Logo
Splunk SOAR vs D3 Security
Compared 30% of the time
More D3 Security Competitors
CrowdStrike Falcon vs VMware Carbon Black Endpoint Logo
CrowdStrike Falcon vs VMware Carbon Black Endpoint
Compared 18% of the time
Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint Logo
Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint
Compared 12% of the time
SentinelOne Singularity Complete vs VMware Carbon Black Endpoint Logo
SentinelOne Singularity Complete vs VMware Carbon Black Endpoint
Compared 8% of the time
Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint Logo
Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint
Compared 8% of the time
Trend Micro Deep Security vs VMware Carbon Black Endpoint Logo
Trend Micro Deep Security vs VMware Carbon Black Endpoint
Compared 6% of the time
More VMware Carbon Black Endpoint Competitors
 

Product Reports

Buyer's Guide
Security Incident Response
July 2025
D3 Security reportDownload D3 Security product report
Buyer's Guide
VMware Carbon Black Endpoint
July 2025
VMware Carbon Black Endpoint reportDownload VMware Carbon Black Endpoint product report
 

Also Known As

No data available
Carbon Black CB Defense, Bit9, Confer
 

Interactive Demo

D3 Security
Demo not available
VMware
 

Overview

D3 Security provides a full-lifecycle incident management platform—one that enables multiple detection sources, enriches standards-based workflows with threat intelligence, orchestrates response, and always guides its users to conclusive remediation. The system is unique in its ability to eliminate incident recurrence, through root cause and corrective action discovery, digital forensics case management, and by generating a foundation of actionable intelligence that supports policies, countermeasures and controls.

D3 Security

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?
  • Intelligent learning: Improves detection capabilities over time.
  • Whitelisting: Allows only approved applications to run.
  • Integration with other security tools: Enhances overall security posture.
  • Centralized cloud control: Manages endpoints from a single interface.
  • Command shell access: Offers deeper investigation capabilities.
  • Dynamic grouping: Facilitates organized endpoint management.
  • Simplified policy management: Streamlines security policy implementation.
  • API for system remoting: Allows remote system access and management.
  • Twenty-four-seven support: Provides continuous assistance and response.
What are the benefits of VMware Carbon Black Endpoint?
  • Real-time monitoring: Offers constant vigilance against threats.
  • Threat hunting: Identifies and mitigates threats proactively.
  • Historical data analysis: Assists in understanding past incidents and patterns.
  • Improved endpoint protection: Enhances overall endpoint security.
  • Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

VMware
 

Sample Customers

S&P Global, Scotiabank, Cybereason, Cummins
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Buyer's Guide
D3 Security vs. VMware Carbon Black Endpoint
July 2025
Free Report: D3 Security vs. VMware Carbon Black Endpoint
Find out what your peers are saying about D3 Security vs. VMware Carbon Black Endpoint and other solutions. Updated: July 2025.
DOWNLOAD NOW
865,384 professionals have used our research since 2012.
See our D3 Security vs. VMware Carbon Black Endpoint report.
See our list of best Security Incident Response vendors.

We monitor all Security Incident Response reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.