Morphisec vs VMware Carbon Black Cloud comparison

Morphisec and Broadcom are both solutions in the Endpoint Detection and Response (EDR) category. Morphisec is ranked #61, while Broadcom is ranked #55 with an average rating of 6.0. Morphisec holds a 0.7% mindshare in EDR, compared to Broadcom’s 0.4% mindshare. Additionally, 100% of Morphisec users are willing to recommend the solution, compared to 93% of Broadcom users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

VMware Carbon Black Cloud and Morphisec are two leading security solutions. VMware Carbon Black Cloud has a comprehensive feature set, whereas Morphisec is noted for ease of deployment and customer satisfaction.

Features: VMware Carbon Black Cloud offers advanced threat hunting, real-time visibility, and robust integration capabilities. Morphisec provides lightweight endpoint protection and zero-day attack prevention. VMware Carbon Black Cloud is suitable for complex environments due to its extensive features.

Room for Improvement: VMware Carbon Black Cloud needs improvement in system performance and reduction in false positives. Morphisec requires enhancements in reporting capabilities and more detailed analytics. VMware Carbon Black Cloud requires performance optimization, whereas Morphisec needs better reporting tools.

Ease of Deployment and Customer Service: VMware Carbon Black Cloud's deployment process is straightforward but has a steep learning curve. Morphisec's deployment is quick and simple, with high user satisfaction in support responsiveness.

Pricing and ROI: VMware Carbon Black Cloud has a high setup cost, but users feel the investment is justified by the comprehensive features. Morphisec offers a more cost-effective solution, yielding fast ROI due to its efficiency and lower setup costs.

To learn more, read our detailed Morphisec vs. VMware Carbon Black Cloud Report (Updated: March 2026).

Buyer's Guide

Morphisec vs. VMware Carbon Black Cloud

March 2026

Download the complete report

Helped 885,376 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Morphisec is 0.7%, up from 0.5% compared to the previous year. The mindshare of VMware Carbon Black Cloud is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
VMware Carbon Black Cloud	0.4%
Morphisec	0.7%
Other	95.5%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

reviewer2771742

Sec consultant at a tech services company with 5,001-10,000 employees

Has supported consistent deployment across departments but needs better OS compatibility and detection performance

I am not really looking for a new solution, actually, I was preparing for an interview and wanted to have a comparison between both tools. I have not worked with any of these products before, but we had a training demonstration yesterday with Dynatrace, and I have investigated the Wiz solution better. In terms of experience, it will be my first time with CDR. I am working with something for EDR, specifically, we have an EDR, it's VMware Carbon Black Cloud. They have a hybrid environment, both on-prem and cloud. I would usually recommend this product for big companies, because it's not cheap, so only big companies would I expect to pay for that. The review rating for VMware Carbon Black Cloud is 6 out of 10.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."

"The protection offered by this product is good, as is the endpoint reporting."

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

"Cortex XDR features advanced threat detection capabilities."

"Threat identification and detection are the most valuable features of this solution."

"The tool is easy to use."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."

More Cortex XDR by Palo Alto Networks pros

"Morphisec also provides full visibility into security events for Microsoft Defender and Morphisec in one dashboard... in the single pane of glass provided by Morphisec, it's all right there at your fingertips: easy to access and easy to understand. And if you choose to go down further to know everything from the process to the hash behind it, you can."

"We have not had one machine that has been taken down due to malware now in almost four and a half years, with 600 machines that we don't have routine infections on because nothing can execute."

"Morphisec has absolutely helped save money on our security stack. The ransomware at the end of the day can cost organizations millions upon millions of dollars. Investing in tools like Morphisec is a great reduction in that cost. If I can spend $10,000 in a year to protect assets that could be ransomed for $20,000,000, that's definitely a bet that one should pursue. Morphisec absolutely it's worth the investment."

"We don't have to do anything as a user or as an admin. It does everything by default with its coding and inbuilt AI-based intelligence. We don't have to instruct it about what to do. It automatically takes corrective actions and quarantines or deletes a virus, malware, etc. That is the best part that I like about it."

"Morphisec has given our security team's operations peace of mind and more time for patching."

"Morphisec is a straightforward solution that is efficient and very stable."

"We have seen it successfully block attacks that a traditional antivirus did not pick up."

"I really like the integration with Microsoft Defender. In addition to having third-party endpoint protection, we're also enabling Defender... I like the reporting that we get from Defender, when it comes in. I like that it's one console showing both Morphisec and Defender where it provides me with full visibility into security events from Defender and Morphisec."

More Morphisec pros

"Carbon Black Cb Response significantly reduced time to containment in the environment which enabled the isolation of incidents to single hosts or network segments."

"The most valuable feature of VMware Carbon Black Cloud is the possibility of securing any PC worldwide."

"Carbon Black insures the probability that any ransomware will be stopped before spreading."

"I would usually recommend this product for big companies, because it's not cheap, so only big companies would I expect to pay for that."

"Setting up and managing the setup for this solution is okay. It is stable, scalable, and it runs just fine. No issues with technical support."

"Integration and scalability are the most valuable."

"The most valuable features are its lightweight design, ensuring minimal impact on end-users, and its real-time protection."

"The most valuable feature is its ability to seek out abnormal activity and to create alerts."

More VMware Carbon Black Cloud pros

Cons

"Managing the product should be easier."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."

"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."

"The product's pricing could be better."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"A little bit more automation would be nice."

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."

More Cortex XDR by Palo Alto Networks cons

"We sometimes have to depend on the support team to know what action we should take."

"Having to have an on-prem server required a lot of administration."

"Overall, I don't know 100% if it's increasing our security posture, but it does give us a nice peace of mind."

"If anything, tech support might be their weakest link. The process of getting someone involved sometimes takes a little time. It seems to me that they should have all the data they need to let me know whether an alert is legitimate or not, but they tend to need a lot of information from me to get to the bottom of something. It usually takes a little longer than I would expect."

"Morphisec is a venture startup. They are still early in their growth stage. They need to get mature on their customer support and on how they interface with system tools. For example, they need to get multifactor in place and an API for the major multi-factor systems, e.g., Okta, Duo, Ping, and Microsoft. They don't have them built in yet. They are working on them. It is just not there yet. Also, their stability, customer support, and processes need improvement, which is just part of maturity."

"We wanted to have multi-tenants in their cloud platform, so every entity can look into their own systems and not see other systems in other entities."

"It would be nice if they could integrate Morphisec with other traditional antivirus solutions beyond Microsoft Defender. That is probably my biggest gripe."

"The only problem is that their support lives in Israel, so the time zones are a bit off, but I've never had any complaint beyond that."

More Morphisec cons

"The support team of Carbon Black CB Response needs improvement. At present, they need a lot of information. Then they give you an answer that they already gave you. You tell them it didn't work, and then they take a long time."

"The cloud console has a lot of bugs and issues in the analysis part."

"The product detects too many false positives initially and it could integrate better with other security solutions."

"This product has room for improvement in the cloud console. The cloud console has a lot of bugs and issues in the analysis part."

"They need to improve the batch console. It needs more capabilities. We are limited by the ones it provides..."

"If Carbon Black could improve in the area or reducing the number of false positives or if there was a better way to filter out false positives that would enhance efficiency and utility."

"We are subscribed to FS-ISAC threat indicator, but have been unsuccessful in adding it to our alliance feeds."

"The dashboard should be more user-friendly."

More VMware Carbon Black Cloud cons

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"I don't recall what the cost was, but it wasn't really that expensive."

"The pricing is a little bit on the expensive side."

"I feel it is fairly priced."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"It is priced correctly for what it does. They end up doing a good deal of discounting, but I think it is priced appropriately."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."

"The pricing is definitely fair for what it does."

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

More Morphisec pricing and cost advice

"You need to pay for the licensing of the product. The pricing is costly."

"We had no issues purchasing through our preferred reseller and were able to get a fair price even when not purchasing direct. Carbon Black Enterprise Response didn’t break the bank, though adding on the matching antivirus and anti-malware components of the Protect product was more than we could afford, even with some discounting. Cb Response is really designed to complement Carbon Black’s Defense product. While Response can be used on its own, coupling with Defense seems like the best strategy if you can afford the price tag."

"Purchase Professional Services up front as part of the implementation package, then renew hours annually to ensure you have adequate support for upgrades and enhancements. Overbuy by at least 10% to account for infrastructure growth."

"VMware Carbon Black Cloud is an expensive solution."

"The solution is very inexpensive so there is great cost savings to using it."

"Pricing for this solution could be made lower."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,376 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Outsourcing Company

17%

Manufacturing Company

10%

Construction Company

Financial Services Firm

Comms Service Provider

Construction Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	4
Large Enterprise	8

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) s...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoin...

See all answers

What needs improvement with Carbon Black CB Response?

I see room for improvement as I remember some problems on compatibility with some operating systems; I recall we coul...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Halcyon vs Morphisec

Compared 7% of the time

CrowdStrike Falcon vs Morphisec

Compared 6% of the time

FortiCNAPP vs Morphisec

Compared 5% of the time

Deep Instinct Prevention Platform vs Morphisec

Compared 4% of the time

SentinelOne Singularity Complete vs Morphisec

Compared 4% of the time

More Morphisec Competitors

Splunk SOAR vs VMware Carbon Black Cloud

Compared 14% of the time

Palo Alto Networks Cortex XSOAR vs VMware Carbon Black Cloud

Compared 11% of the time

VMware Carbon Black Endpoint vs VMware Carbon Black Cloud

Compared 7% of the time

ServiceNow Security Operations vs VMware Carbon Black Cloud

Compared 7% of the time

Fidelis Elevate vs VMware Carbon Black Cloud

Compared 6% of the time

More VMware Carbon Black Cloud Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Morphisec

March 2026

Download Morphisec product report

Buyer's Guide

VMware Carbon Black Cloud

March 2026

Download VMware Carbon Black Cloud product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Morphisec, Morphisec Moving Target Defense

Carbon Black CB Response

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Morphisec delivers signatureless endpoint-specific protection, effectively blocking zero-day threats and ransomware without affecting performance, making it a preferred choice for enhancing security strategies.

Morphisec empowers users by providing comprehensive protection against advanced threats with its innovative signatureless and in-memory security features. Its seamless integration with Microsoft Defender ensures complete visibility and automatic threat blocking through a unified dashboard. The Moving Target Defense technology enhances deployment efficiency while its lightweight design maintains system performance. Despite some challenges in cloud deployment and feature updates, users find value in its ease of use and minimal administrative effort.

What are the key features of Morphisec?

Signatureless Protection: Blocks threats without relying on signatures, ensuring up-to-date defense.
In-Memory Protection: Prevents attacks targeting system memory to safeguard endpoints.
Zero-Day Threat Blocking: Offers proactive defense against undiscovered threats.
Unified Dashboard: Provides comprehensive security event visibility and integration with Microsoft Defender.
Lightweight Design: Ensures smooth operation without system performance issues.

What benefits can users expect when evaluating Morphisec?

Enhanced Security: Strengthens defense layers against ransomware and memory attacks.
Seamless Integration: Works alongside existing antivirus solutions like Microsoft Defender.
Minimal Administration: Requires low maintenance due to its set-and-forget nature.
Automatic Updates: Keeps protection current without manual intervention.
Broad Coverage: Suitable for desktops, servers, and cloud platforms.

In industries with high security needs, deploying Morphisec adds a robust defense against advanced threats. Its compatibility with antivirus solutions and cloud platforms makes it adaptable to diverse environments, ensuring effective threat mitigation and detection.

Morphisec

Fortify Endpoint and Workload Protection

Legacy approaches fall short as cybercriminals update tactics and obscure their actions. Get advanced cybersecurity fueled by behavioral analytics to spot minor fluctuations and adapt in response.

Recognize New Threats

Analyze attackers’ behavior patterns to detect and stop never-before-seen attacks with continuous endpoint activity data monitoring. Don’t get stuck analyzing only what’s worked in the past.

Simplify Your Security Stack

Streamline the response to potential incidents with a unified endpoint agent and console. Minimize downtime responding to incidents and return critical CPU cycles back to the business.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

ALLETE belk

Buyer's Guide

Morphisec vs. VMware Carbon Black Cloud

March 2026

Free Report: Morphisec vs. VMware Carbon Black Cloud

Find out what your peers are saying about Morphisec vs. VMware Carbon Black Cloud and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,376 professionals have used our research since 2012.

See our Morphisec vs. VMware Carbon Black Cloud report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.