Morphisec vs VMware Carbon Black Endpoint comparison

Morphisec and Broadcom are both solutions in the Endpoint Protection Platform (EPP) category. Morphisec is ranked #54, while Broadcom is ranked #33 with an average rating of 7.4. Morphisec holds a 0.5% mindshare in EPP, compared to Broadcom’s 1.8% mindshare. Additionally, 100% of Morphisec users are willing to recommend the solution, compared to 89% of Broadcom users who would recommend it.

Morphisec

Read 21 Morphisec reviews

1,975 Views
1,067 Comparison Views

100% willing to recommend

VMware Carbon Black Endpoint

Read 63 VMware Carbon Black Endpoint reviews

5,175 Views
3,778 Comparison Views

89% willing to recommend

Morphisec

VMware Carbon Black Endpoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

VMware Carbon Black Endpoint and Morphisec are competing in the endpoint security category. Based on user feedback and various reports, Morphisec seems to have the upper hand due to its innovative approach and lightweight footprint, which offer compelling advantages.

Features: VMware Carbon Black Endpoint is noted for advanced threat detection, response capabilities, and integration capabilities. Morphisec stands out with its moving target defense, simplicity, and proactive attack prevention. While both have strong features, Morphisec's simplicity and proactive defense are particularly appreciated.

Room for Improvement: VMware Carbon Black Endpoint users report system performance impacts, complexity in configuration, and challenges with resource consumption. Morphisec users suggest enhancements in logging, reporting features, and adding some advanced functionalities. VMware's issues are mainly performance-related, while Morphisec focuses on expanding functionality.

Ease of Deployment and Customer Service: VMware Carbon Black Endpoint receives mixed feedback on deployment ease due to a steep learning curve but has excellent customer support. Morphisec is praised for its straightforward deployment process and solid customer service. Users find Morphisec simpler to deploy but value VMware's robust support.

Pricing and ROI: VMware Carbon Black Endpoint is considered pricier, offset by comprehensive security features that provide good ROI. Morphisec is notable for its cost-effectiveness and strong ROI driven by its lightweight and proactive model. Despite VMware's higher cost, both products offer compelling value in their own ways.

To learn more, read our detailed Morphisec vs. VMware Carbon Black Endpoint Report (Updated: September 2025).

Buyer's Guide

Morphisec vs. VMware Carbon Black Endpoint

September 2025

Download the complete report

Helped 868,787 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Morphisec

Ranking in Endpoint Protection Platform (EPP)

54th

Ranking in Endpoint Detection and Response (EDR)

61st

Average Rating

9.2

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Vulnerability Management (63rd), Advanced Threat Protection (ATP) (34th), Cloud Workload Protection Platforms (CWPP) (31st), Threat Deception Platforms (15th)

VMware Carbon Black Endpoint

Ranking in Endpoint Protection Platform (EPP)

33rd

Ranking in Endpoint Detection and Response (EDR)

27th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Security Incident Response (4th), Ransomware Protection (7th)

Mindshare comparison

As of October 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Morphisec is 0.5%, up from 0.4% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 1.8%, down from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Market Share Distribution
Product	Market Share (%)
VMware Carbon Black Endpoint	1.8%
Morphisec	0.5%
Other	97.7%

Endpoint Protection Platform (EPP)

Featured Reviews

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

Nikunj Kamboj

Cybersecurity Analyst at OnX Canada

Integrates well with our existing SIEM tool and helps in identifying suspicious activities

The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Morphisec Guard enables us to see at a glance whether our users have device control and disk encryption enabled properly. This is important because we are a global company operating with multiple entities. Previously, we didn't have that visibility. Now, we have visibility so we can pinpoint some locations where there are machines that are not really protected, offline, etc. It gives us visibility, which is good."

"Morphisec is a straightforward solution that is efficient and very stable."

"Morphisec has enabled us to become a lot less paranoid when it comes to staff clicking on things or accessing things that they shouldn't that could infect the whole system. Our original ransomware attack that happened came from someone's Google drive and then just filtered on through that. It has put our minds at ease a lot more in running it. It's also another layer of security that has been proven to be effective for us."

"Since using Morphisec we have seen a downturn in attacks because Morphisec protects us versus Defenders and whatnot that are signature-based. I know we have not had any issues with ransomware or other zero-day attacks that we've seen with machines that, all of a sudden, have become before we instituted the product. Now the machine had to be re-imaged and there was a loss of data because something was on the machine. You couldn't really determine what was on the machine because nothing was picking it up. The products we were using weren't picking it up."

"All the alerts are on the dashboard, which is quite simple and useful for us. You can easily check all the alerts that are being blocked or allowed, or whatever the action is. You can easily see that and you can take the necessary actions. You can add a PowerShell extension or any activities for blocking at your network level or for endpoints."

"What's valuable is really the whole kit and caboodle of the Morphisec agent. What it does is genius, in a way, until the bad guys get wise to it. You set it up and then you watch the dashboard. There isn't really much tinkering."

"The fact that Morphisec uses deterministic attack prevention that does not require human intervention has affected our security team's operations by making things much simpler. We don't have to really track down various alerts anymore, they've just stopped. At that point, we can go in and we can clean up whatever needs to be cleaned up. There are some things that Morphisec detects that we can't really remove, it's parts of Internet Explorer, but it's being blocked anyway. So we're happy with that."

"Morphisec makes it very easy for IT teams of any size to prevent breaches of critical systems because of the design of their tool. When we evaluated Morphisec, the CIO and I sat and listened. What attracted us to them is the fact that it stops activity at the point of detection. That saves a lot of time because now we are not investigating and trying to trace down what to turn off. We have already prevented it, which makes it very much safer and more secure."

More Morphisec pros

"We can access computers remotely if we need to."

"The EDR and reports were helpful in improving our organization."

"It is a stable solution...The initial setup of VMware Carbon Black Endpoint was easy."

"The portal is easy to use and manage."

"Carbon Black has very good market strategies."

"The initial setup was fairly easy."

"I found the offline scanning to be particularly useful."

"The best feature of this solution is that we have a live response, which is really tailored to our needs."

More VMware Carbon Black Endpoint pros

Cons

"Automating reports needs improvement. I would like to have better reporting capabilities within it or automated reporting to be a little bit more dynamic. That's something I know they're working on. We literally are in the process. We started the process a week and a half ago of going to their latest version, so I've not seen their latest one up and running yet."

"It would be useful for them if they had some kind of network discovery. That kind of functionality I think would give IT administrators a little bit more confidence that they have 100 percent coverage, and it gives them something to audit against. Network discovery would be one area I would definitely suggest that they put some effort into."

"We have discovered some bugs in the new releases that they've had to fix, so I would like to see more testing and QA on their side before they release."

"We wanted to have multi-tenants in their cloud platform, so every entity can look into their own systems and not see other systems in other entities. I have a beta version on that now. I would like them to incorporate that in the cloud solution."

"From a company standpoint, a little more interaction with the customers throughout the year might be beneficial. I would like check-ins from the Morphisec account executives about any type of Morphisec news as well as a bit more interaction with customers throughout the year to know if anything new is coming out with Morphisec, e.g., what they are working on in regards to their development roadmap. We tend not to get that up until the time that we go for a yearly renewal. So, we end up talking to people from Morphisec once a year, but it is usually at renewal time."

"It might be a bit much to ask, but we are now beginning to use Morphisec Scout, which provides vulnerability information. At this time, it's recognizing vulnerabilities and reporting them to us, but it's not necessarily resolving them. There's still a separate manual process to resolve those vulnerabilities, primarily through upgrades. We have to do that outside of Morphisec. If Morphisec could somehow have that capability built into it, that would be very effective."

"The only area that really needs improvement is the reporting functionality. Gathering the detailed information that is in the system for an executive, or for me as a director, could be better. Some of the interface and reporting aspects are a little bit dated. They're working on it."

"The dashboard is the area that requires the most improvement. We have about, I would say 5,500 computers currently, and searching through all of those takes some time to filter. So as soon as you apply the filter, it takes a few seconds. It crunches, it thinks, and then it brings up the clients that match."

More Morphisec cons

"CB Defense could be more compatible with Linux, and its cloud provision could be improved."

"It would be a better solution if Carbon Black Cb Defense had an on-promise solution and a virus auto delete or quarantine."

"The pricing could be more reasonable."

"The solution would be more effective if there was a way to block automatically based on behavior."

"In my company, we face issues sometimes when there is a need to write custom rules or we want to write for some rules that are different from the standard rules provided by the solution."

"The support is poor."

"In our company, we also wanted to have network detection, like a host-based IDS on VMware Carbon Black Endpoint, but we did not get it."

"Right now, Carbon Black CB Defense doesn't support cloud computing and Kubernetes."

More VMware Carbon Black Endpoint cons

Pricing and Cost Advice

"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"The pricing is definitely fair for what it does."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

More Morphisec pricing and cost advice

"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."

"The product is quite reasonable."

"The price for the solution is completely at government level, meaning one which is very high."

"CB Defense is available on a yearly subscription and is priced by the number of endpoints."

"The pricing is annually based and operates through another department than mine."

"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."

"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."

"The cost/benefit factor has great relevance in Cb Defense implementations."

More VMware Carbon Black Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

868,787 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

16%

Manufacturing Company

12%

Computer Software Company

Financial Services Firm

Computer Software Company

12%

Financial Services Firm

11%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	31
Midsize Enterprise	9
Large Enterprise	30

Questions from the Community

Ask a question

Earn 20 points

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...

See all answers

What do you like most about Carbon Black CB Defense?

VMware Carbon Black Endpoint is a highly stable solution.

See all answers

Comparisons

CrowdStrike Falcon vs Morphisec

Compared 22% of the time

Halcyon vs Morphisec

Compared 19% of the time

SentinelOne Singularity Complete vs Morphisec

Compared 12% of the time

Hyver vs Morphisec

Compared 12% of the time

Deep Instinct Prevention Platform vs Morphisec

Compared 11% of the time

More Morphisec Competitors

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 22% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 12% of the time

SentinelOne Singularity Complete vs VMware Carbon Black Endpoint

Compared 8% of the time

Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint

Compared 7% of the time

Cortex XDR by Palo Alto Networks vs VMware Carbon Black Endpoint

Compared 5% of the time

More VMware Carbon Black Endpoint Competitors

Product Reports

Buyer's Guide

Morphisec

September 2025

Download Morphisec product report

Buyer's Guide

VMware Carbon Black Endpoint

September 2025

Download VMware Carbon Black Endpoint product report

Also Known As

Morphisec, Morphisec Moving Target Defense

Carbon Black CB Defense, Bit9, Confer

Overview

Morphisec integrates seamlessly with platforms like Microsoft Defender, offering signatureless protection against zero-day threats and ransomware. It enhances existing endpoint solutions with minimal maintenance through its set-and-forget deployment, providing heightened security and reduced false positives.

Morphisec strengthens defense strategies by merging memory morphing and signatureless protection to effectively block zero-day attacks and ransomware. It operates efficiently within existing infrastructure, reducing system impact and maintenance needs. Users find its full visibility dashboard invaluable. Despite its strengths, cloud deployment and reporting features can be improved. Stability, alerts, and integration with other systems pose challenges for users, impacting usability and support quality.

What are Morphisec's key features?

Seamless Integration: Works with Microsoft Defender for comprehensive dashboard visibility
Memory Morphing: Hides processes to reduce attack surfaces
Signatureless Protection: Prevents threats without impacting performance
Automatic Threat Blocking: Uses inbuilt intelligence to detect risks
Set-and-Forget Deployment: Simplifies management and reduces maintenance

What benefits should users consider in reviews?

Quick Deployment: Fast setup without disrupting operations
Enhanced Protection: Provides an additional defense layer against advanced threats
Cost-Effectiveness: Works with existing licenses, minimizing extra investments
Improved Compatibility: Integrates smoothly with current antivirus systems
Minimal System Impact: Operates efficiently without overloading resources

In security-focused industries, Morphisec is crucial for protecting workstations and servers against sophisticated attacks like ransomware. Its signatureless technology offers early threat detection, while compatibility with existing systems ensures seamless integration, providing advanced protection without additional licensing costs.

Morphisec

VMware Carbon Black Endpoint enhances endpoint security with its robust EDR, threat detection, and live response features. The cloud-based architecture supports remote management and easy setup while behavioral monitoring and dynamic grouping minimize security risks.

VMware Carbon Black Endpoint is designed for those seeking comprehensive endpoint protection. With its cloud-based deployment, organizations experience streamlined remote control and simplified rollout processes. Its behavioral monitoring, incident response capabilities, and firewall integration deliver advanced security measures. Although it addresses many security challenges, areas like manual alert management, on-demand scanning, and integration with systems like AlienVault USM require refinement. Improved UI, EDR components, and flexible pricing models would enhance user satisfaction. On-premise deployment infrastructure and compatibility issues with some operating systems need attention. Enhanced reporting, container security, and multi-tenancy support are also essential for fulfilling industry needs. AI-driven analysis and threat isolation empower companies by fostering proactive management.

What are the key features of VMware Carbon Black Endpoint?

EDR Capabilities: Offers comprehensive endpoint detection and response to identify and mitigate threats.
Live Response: Enables real-time threat response actions for rapid containment and remediation.
Threat Detection: Uses advanced AI to identify and isolate potential security risks effectively.
Cloud-Based Architecture: Facilitates remote management and easy deployment of security measures.
Behavioral Monitoring: Continuously analyzes application behavior to detect anomalies and threats.
Dynamic Grouping: Organizes devices for improved management and targeted security policies.
Firewall Integration: Enhances security by integrating existing firewall solutions for a layered defense approach.
Whitelisting and Policy Management: Streamlines security configurations by managing allowed applications and user access policies.

What benefits should users look for when evaluating VMware Carbon Black Endpoint?

Ease of Setup: Simplifies initial deployment and management processes.
Scalability: Supports organizational growth by easily adapting to expanding security needs.
Detailed Process Monitoring: Provides deep visibility into application processes to identify threats efficiently.
Threat Isolation: Promotes proactive threat management, helping minimize the impact of security breaches.

VMware Carbon Black Endpoint finds extensive application in industries focused on stringent security requirements. Managed security service providers leverage its capabilities to deliver comprehensive protection to multiple clients worldwide. Organizations use it primarily for antivirus protection and incident management, integrating it with their existing security frameworks to strengthen endpoint visibility and real-time threat prevention. Its advanced detection and application control features make it a preferred choice in industries that prioritize robust security measures. However, it requires improvements in terms of system compatibility and customization flexibility to better serve diverse industry environments.

Broadcom

Sample Customers

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Buyer's Guide

Morphisec vs. VMware Carbon Black Endpoint

September 2025

Free Report: Morphisec vs. VMware Carbon Black Endpoint

Find out what your peers are saying about Morphisec vs. VMware Carbon Black Endpoint and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,787 professionals have used our research since 2012.

See our Morphisec vs. VMware Carbon Black Endpoint report.

See our list of best Endpoint Protection Platform (EPP) vendors and best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.