Try our new research platform with insights from 80,000+ expert users

Intercept X Endpoint vs VMware Carbon Black App Control comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Intercept X Endpoint
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (12th), Endpoint Detection and Response (EDR) (11th), ZTNA (10th), Managed Detection and Response (MDR) (7th), Extended Detection and Response (XDR) (12th), Ransomware Protection (3rd)
VMware Carbon Black App Con...
Average Rating
9.2
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
Application Control (3rd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Intercept X Endpoint is designed for Endpoint Protection Platform (EPP) and holds a mindshare of 1.6%, down 2.7% compared to last year.
VMware Carbon Black App Control, on the other hand, focuses on Application Control, holds 15.4% mindshare, down 32.8% since last year.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
Intercept X Endpoint1.6%
Microsoft Defender for Endpoint10.0%
CrowdStrike Falcon8.2%
Other80.2%
Endpoint Protection Platform (EPP)
Application Control Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black App Control15.4%
ThreatLocker Zero Trust Endpoint Protection Platform22.7%
Ivanti Application Control15.3%
Other46.599999999999994%
Application Control
 

Q&A Highlights

TT
Dec 03, 2020
 

Featured Reviews

Suwandhi Suraweera - PeerSpot reviewer
Offers advanced filtering features and benefits from improved licensing and performance
There is a licensing issue with Intercept X Endpoint. Their licenses are user-based. Most of our customers use per device licenses, and they need per device licenses because they use one PC for multiple accounts. This creates a problem. There was one customer who complained about the slowness of PCs using Intercept X Endpoint. They use minor performance PCs, which causes their PCs to become slow.
AM
We can isolate problem machines and limit their access
We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access.  More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the best features of Sophos Intercept is that it repairs without slowing down the system."
"This solution is easy to configure."
"We have found the pricing to be reasonable."
"The security on offer is pretty good. We are happy with it."
"This solution can be used with any device, mobiles, desktops, or any appliances."
"The package we use also comes with spam filtering features, which are quite useful."
"The most valuable feature is the CryptoGuard in Sophos. In a case of a ransomware attack, this feature comes into action to protect us."
"What I have found the most valuable about Sophos Intercept X is the ease of use with management administration and the solution's ability to stop exploits and ransomware."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"The effectiveness of application whitelisting is very good."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"The API integration is good."
"I use the console to check for threats and I find it to be very user-friendly."
"The visibility is valuable."
"All the functions within VMware Carbon Black App Control are valuable."
 

Cons

"I would inquire why it is not sold directly to end users."
"It has a performance hit on a local laptop. There's an agent installed and we are bothered a lot by it because it seems to be using a lot of computer resources."
"The deployment part needs to be improved."
"Stability-wise, we had issues with some clients which had to be dealt with manually. The issue was with that installation part."
"Sophos has a lot of different features. Some of them are tied to different clients, which may mean that different prices or licenses have to be added on. It can be a little bit confusing if you're not familiar with the logic of how they work. They can make it a little bit clearer."
"They should work on the logs and events. Sophos Intercept X needs to increase the interface test so that it can export to a live event."
"Technical support is too slow to schedule meetings."
"The initial setup was not very user-friendly."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"I would like to see the addition of some more features that are in other, similar solutions."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"The reporting is not good and needs to be improved."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"The initial setup is somewhat complex."
"I rate App Control six out of 10 for scalability."
 

Pricing and Cost Advice

"You are able to purchase more licenses for the number of devices or servers that you require. There are many other features available but our license does not include them, such as XDR, which is endpoint detection and response. We have not explored the new features as of yet but plan to in the coming future."
"Compared to other solutions, such as CrowdStrike, we are most certainly happy with its pricing. We did a three year-business deal."
"Licensing costs are not expensive."
"We have an annual subscription."
"The solution requires an annual subscription."
"The pricing is average for software like this, but you can purchase additional services if you wish."
"We are happy with the pricing across all Sophos products."
"You can purchase a license for one to three years."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"Its price is reasonable and what is expected for these types of products."
"We pay a fee for support, which is renewed annually."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
867,497 professionals have used our research since 2012.
 

Answers from the Community

TT
Dec 3, 2020
Dec 3, 2020
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
2 out of 3 answers
BA
Dec 12, 2019
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
AL
Dec 13, 2019
I’m not sure but if you are using Sophos Intercept X I would suggest just adding the Sophos EDR component.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Comms Service Provider
7%
Manufacturing Company
7%
Financial Services Firm
5%
Financial Services Firm
13%
Computer Software Company
10%
Construction Company
8%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business72
Midsize Enterprise22
Large Enterprise21
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine learning are very valuable features. Crowdstrike Falcon also successfully prevents ...
What is your experience regarding pricing and costs for Sophos Intercept X?
I would describe it as economical, but not much cheaper than other solutions.
Ask a question
Earn 20 points
 

Also Known As

Sophos Intercept X
CB Protection, Carbon Black CB Protection
 

Overview

 

Sample Customers

Flexible Systems
Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Find out what your peers are saying about Microsoft, CrowdStrike, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: September 2025.
867,497 professionals have used our research since 2012.