Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs VMware Carbon Black Cloud comparison

NetWitness and Broadcom are both solutions in the Endpoint Detection and Response (EDR) category. NetWitness is ranked #63, while Broadcom is ranked #42 with an average rating of 8.0. NetWitness holds a 0.5% mindshare in EDR, compared to Broadcom’s 0.2% mindshare. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 93% of Broadcom users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 1,829 Views
  • 732 Comparison Views
87% willing to recommend
VMware Carbon Black Cloud
Read 18 VMware Carbon Black Cloud reviews
  • 642 Views
  • 392 Comparison Views
93% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

NetWitness NDR and VMware Carbon Black Cloud compete in the security solutions category. VMware Carbon Black Cloud seems to have an upper hand due to better integration capabilities and smoother deployment process.

Features: NetWitness NDR offers advanced threat detection, robust data analysis, and real-time visibility. VMware Carbon Black Cloud provides efficient endpoint protection, seamless integration, and user-friendly architecture.

Room for Improvement: NetWitness NDR could benefit from deployment flexibility, improved support documentation, and user interface enhancements. VMware Carbon Black Cloud needs advanced reporting features, reduced false positives, and better mobile support.

Ease of Deployment and Customer Service: NetWitness NDR requires a more complex deployment process but has responsive customer service. VMware Carbon Black Cloud offers a smoother deployment process and intuitive support services.

Pricing and ROI: NetWitness NDR has a higher initial setup cost with commendable long-term ROI for its comprehensive threat detection. VMware Carbon Black Cloud is noted for its cost-effectiveness and quick ROI due to its scalable architecture.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. VMware Carbon Black Cloud Report (Updated: September 2025).
Buyer's Guide
NetWitness NDR vs. VMware Carbon Black Cloud
September 2025
Download the complete report
Helped 869,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Sentiment score
7.3
VMware Carbon Black Cloud offers cost savings, improved security, centralized protection, better efficiency, and quick ROI with automation features.
 

Customer Service

Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Sentiment score
6.6
Users typically find VMware Carbon Black Cloud support efficient, with no negative feedback reported and alternative contacts available for assistance.
 

Scalability Issues

Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
Sentiment score
7.6
VMware Carbon Black Cloud is highly rated for scalability, performing well in diverse environments from small to enterprise businesses.
 

Stability Issues

Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Sentiment score
7.0
VMware Carbon Black Cloud became reliable after initial instability, with high user satisfaction despite minor performance issues on large deployments.
 

Room For Improvement

NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
VMware Carbon Black Cloud needs better false positive handling, agent efficiency, support improvement, and enhanced features, training, and global support.
 

Valuable Features

NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
VMware Carbon Black Cloud offers cost-effective, real-time security with intrusion alerts, quarantine, host isolation, data search, and threat hunting.
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Detection and Response (EDR)
63rd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (59th), Threat Intelligence Platforms (TIP) (40th), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (19th), Extended Detection and Response (XDR) (37th)
VMware Carbon Black Cloud
Ranking in Endpoint Detection and Response (EDR)
42nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
18
Ranking in other categories
Security Incident Response (10th)
 

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of NetWitness NDR is 0.5%, up from 0.3% compared to the previous year. The mindshare of VMware Carbon Black Cloud is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black Cloud0.2%
NetWitness NDR0.5%
Other99.3%
Endpoint Detection and Response (EDR)
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
Tom Kar - PeerSpot reviewer
Shows promise for endpoint detection and response, with room for improvement in complexity and pricing
VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network. Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps. CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution. Additionally, it is complex to use, and the pricing should be improved.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
See recommendations
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
8%
Government
7%
Healthcare Company
9%
Financial Services Firm
9%
Computer Software Company
9%
Real Estate/Law Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

Ask a question
Earn 20 points
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
See all answers
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
See all answers
What do you like most about Carbon Black CB Response?
Threat hunting is the most valuable feature of VMware Carbon Black Cloud.
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 16% of the time
Cortex XDR by Palo Alto Networks vs NetWitness NDR Logo
Cortex XDR by Palo Alto Networks vs NetWitness NDR
Compared 8% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 8% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 6% of the time
Corelight vs NetWitness NDR Logo
Corelight vs NetWitness NDR
Compared 6% of the time
More NetWitness NDR Competitors
Splunk SOAR vs VMware Carbon Black Cloud Logo
Splunk SOAR vs VMware Carbon Black Cloud
Compared 40% of the time
Palo Alto Networks Cortex XSOAR vs VMware Carbon Black Cloud Logo
Palo Alto Networks Cortex XSOAR vs VMware Carbon Black Cloud
Compared 28% of the time
VMware Carbon Black Endpoint vs VMware Carbon Black Cloud Logo
VMware Carbon Black Endpoint vs VMware Carbon Black Cloud
Compared 19% of the time
Rapid7 InsightIDR vs VMware Carbon Black Cloud Logo
Rapid7 InsightIDR vs VMware Carbon Black Cloud
Compared 12% of the time
More VMware Carbon Black Cloud Competitors
 

Product Reports

Buyer's Guide
NetWitness NDR
September 2025
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
VMware Carbon Black Cloud
September 2025
VMware Carbon Black Cloud reportDownload VMware Carbon Black Cloud product report
 

Also Known As

RSA ECAT, NetWitness Network
Carbon Black CB Response
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

NetWitness

Fortify Endpoint and Workload Protection

Legacy approaches fall short as cybercriminals update tactics and obscure their actions. Get advanced cybersecurity fueled by behavioral analytics to spot minor fluctuations and adapt in response.

Recognize New Threats

Analyze attackers’ behavior patterns to detect and stop never-before-seen attacks with continuous endpoint activity data monitoring. Don’t get stuck analyzing only what’s worked in the past.

Simplify Your Security Stack

Streamline the response to potential incidents with a unified endpoint agent and console. Minimize downtime responding to incidents and return critical CPU cycles back to the business.

Broadcom
 

Sample Customers

ADP, Ameritas, Partners Healthcare
ALLETE belk
Buyer's Guide
NetWitness NDR vs. VMware Carbon Black Cloud
September 2025
Free Report: NetWitness NDR vs. VMware Carbon Black Cloud
Find out what your peers are saying about NetWitness NDR vs. VMware Carbon Black Cloud and other solutions. Updated: September 2025.
DOWNLOAD NOW
869,760 professionals have used our research since 2012.
See our NetWitness NDR vs. VMware Carbon Black Cloud report.
See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.