No more typing reviews! Try our Samantha, our new voice AI agent.

D3 Security vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

D3 Security
Ranking in Security Incident Response
11th
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (21st), AI-Powered Security Automation (6th)
VMware Carbon Black Endpoint
Ranking in Security Incident Response
3rd
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
65
Ranking in other categories
Endpoint Protection Platform (EPP) (30th), Endpoint Detection and Response (EDR) (30th), Ransomware Protection (8th)
 

Mindshare comparison

As of August 2026, in the Security Incident Response category, the mindshare of D3 Security is 6.2%, up from 3.3% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 6.8%, down from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Incident Response Mindshare Distribution
ProductMindshare (%)
VMware Carbon Black Endpoint6.8%
D3 Security6.2%
Other87.0%
Security Incident Response
 

Featured Reviews

Muhammad Aamir Riaz - PeerSpot reviewer
Senior Manager Security Operation Center at The Bank of Punjab
Offers open API for integrating any available tools without any recurring costs
Before committing, I recommend a Proof of Concept (POC) or demo first. This way, you can see if the product aligns with your specific use cases and security needs. Knowledge transfer is key, and D3 Security's team excels in this area. During the POC, your analysts gain valuable product knowledge, putting them ahead of the curve for deployment. In our case, the learning curve was steep initially, but by the end of the POC, my team was already building playbooks independently. D3 Security also schedules dedicated knowledge transfer sessions during the POC, making it a win-win for both parties. Since technology transfer is crucial for government entities like ours, this approach eliminates the need for additional learning after deployment, unlike with certain competitors like the Fortinet FortiSOAR case. While Fortinet FortiSOAR achieved the desired tasks, its knowledge transfer process was lacking, leaving us with a shaky foundation. D3 Security's approach solidifies the learning and empowers our team. Overall, I would rate the solution an eight out of ten.
PM
CTO at Microsoft
Improved incident investigation has supported response while core protection still needs progress
VMware Carbon Black Endpoint does not have easy integration, as there are many complexities with the Ribitava API, which is very deep. I rate this solution overall as a five or six on a scale from one to ten. I have integrated VMware Carbon Black Endpoint with other tools that are helpful. I think this solution should be targeted at small clients, because adoption will grow more with small businesses tomorrow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's valuable feature is its GUI. It has more than 450 connectors, which are excellent for connecting devices and automating integration. The solution has all the features we need. We deployed it in our environment, and it's fully integrated. Thanks to their open APIs, the seamless integration makes everything work well together."
"It is an out-of-the-box automated integration with our 20 departments. We perform L1 LiveOps automatically through the portal."
"During the company’s transition, we had a memory scraper infiltrate our network, and with the help of Carbon Black, we isolated the outbreak to a few point of sale machines."
"The solution has a very nice API on the back end for remoting into a system and executing scripts or utilizing self automation."
"It is a stable solution...The initial setup of VMware Carbon Black Endpoint was easy."
"The product itself works quite well, it's pretty intuitive, but there is so much more data and capabilities at your fingertips."
"This product has the capability of uploading scripts to the tool and this is a very comprehensive feature."
"What I like the most about it is the dynamic grouping, where you get to group endpoints based on setup criteria. That's pretty cool. I like the simplified policy management and simplified white-listing process."
"For Carbon Black Endpoint, the possibility of integration with different other software's log servers is the important thing. Having just one point of view is more interesting so you don't need to go to different places to see all the information."
"The protection of the user machines has been great, for example, if a laptop gets stolen, or an employee gets let go, the product provides us with the ability to actually lock people out of the network and handle remote wipes and stuff like that."
 

Cons

"Reporting needs improvement. MTTR and MTTD metrics aren't directly available in playbooks and require manual effort to achieve."
"The reporting, especially custom reporting, needs to be improved. Additionally, it would be better if it could be hosted on Linux."
"The EDR portion could be better. I'm not a big fan, but it works."
"Enterprise capabilities are probably a hindrance for a large organization to take up such a product."
"As far as I know, Carbon Defense has nothing that can be installed on mobile devices. It lacks a defense solution for mobile devices, especially mobile tablets. I would like to see support for mobile devices and the pricing should be less than the pricing for a normal workstation."
"Integration is difficult, but CB Defense is more powerful than others. It is difficult to implement but easy to pick up many detections."
"The GUI and reporting should be addressed and the product's administration features need fine tuning."
"This solution could have greater granular control on how certain applications work."
"Stability is one thing that's not robust. Other products are faster, but as far as the CB Defense, it's slow."
"A search bar in the investigation page and some AI-related tasks like outgoing alerts, or recent tactics that are being used in the market, must be embedded in the tool so that it's easier to find alerts."
 

Pricing and Cost Advice

Information not available
"The price for the solution is completely at government level, meaning one which is very high."
"Its pricing was very good, which is one of the reasons I went to it as an alternative. It is on a yearly basis. There are no additional fees."
"The platform is expensive."
"Carbon Black provides competitive pricing."
"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."
"The product’s price is less expensive than other vendors."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."
"The pricing is very high."
report
Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
909,679 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
25%
Computer Software Company
14%
Outsourcing Company
11%
Construction Company
10%
Financial Services Firm
9%
Construction Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise33
 

Questions from the Community

Ask a question
Earn 20 points
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What is your experience regarding pricing and costs for Carbon Black CB Defense?
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive as I would prefer.
 

Also Known As

No data available
Carbon Black CB Defense, Bit9, Confer
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

S&P Global, Scotiabank, Cybereason, Cummins
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about D3 Security vs. VMware Carbon Black Endpoint and other solutions. Updated: June 2026.
909,679 professionals have used our research since 2012.