OpenText Core Endpoint Protection​ vs VMware Carbon Black Endpoint comparison

OpenText Core Endpoint Protection vs. VMware Carbon Black Endpoint

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of OpenText Core Endpoint Protection is 1.8%, up from 0.8% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 2.1%, up from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
VMware Carbon Black Endpoint	2.1%
OpenText Core Endpoint Protection	1.8%
Other	92.3%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2584380

vCIO At Grove Networks Inc. at a computer software company with 11-50 employees

Improving threat detection is critical for enhanced protection

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…

Read full review

Paanob-Mahanarongchai

CTO at Microsoft

Improved incident investigation has supported response while core protection still needs progress

VMware Carbon Black Endpoint does not have easy integration, as there are many complexities with the Ribitava API, which is very deep. I rate this solution overall as a five or six on a scale from one to ten. I have integrated VMware Carbon Black Endpoint with other tools that are helpful. I think this solution should be targeted at small clients, because adoption will grow more with small businesses tomorrow.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product has an intuitive dashboard."

"We switched because there were a lot of added features with Palo Alto that Check Point didn't have, and it was an upgrade for us."

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."

"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."

"Has great threat detection capabilities."

"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."

"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."

"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."

More Cortex XDR by Palo Alto Networks pros

"We no longer have to worry about running scans as it is so lightweight and there is no user impact."

"It is an easy-to-use and easy-to-configure product."

"Its ease of installation is valuable. It has been a low-resource tool and the continuous updates in the past have made it attractive from the standpoint of the trust level on the protection."

"To date, I haven't had any malware in my system."

"Speed"

"It monitors traffic and keeps us from getting ransomware or other viruses."

"They have a lot of features integrated from way back, which shows that the product developers know exactly what they're doing."

"Previously, we used a mix of Trend/Sophos/Symantec. Webroot has all their best bits combined into one solution."

More OpenText Core Endpoint Protection pros

"It has improved the number of alerts or the number of threat events that we are able to recognize in our environment, and it also highlights the usage of potentially unwanted programs, so these are the ways in which it highlighted the possible vectors through which we can have an incident happening in our environment."

"The product is pretty strong in terms of security and their features are very good in that respect."

"What I find most interesting is the performance of the end-point client, as well as the capability of detecting any activity on the end-user while using their browsers to navigate the internet."

"The visibility provided has been great."

"I found it very valuable as a whole; it is good at detecting anything and has kept us very safe, and it is also very easy to use."

"The most valuable feature of the solution stems from the support it provides."

"The capabilities of this tool are almost limitless."

"The impact on performance and the ability to have greater visibility were pluses in my book."

More VMware Carbon Black Endpoint pros

Cons

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."

"In general, the price could be more competitive."

"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."

"When it comes to malware files, it should be a little quick because, at times, it would give a wrong result in the sense of what it might be on malware, even if it still might be a normal one."

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."

"There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly."

"Impact on system performance is horrible, adding a lot of delays for users."

More Cortex XDR by Palo Alto Networks cons

"Its detection capability for certain attacks should be improved. It should have better and wider detection for certain malware attacks. It could also have some sort of RMN."

"I believe that Webroot Business Endpoint Protection should offer a more modern UI."

"This product has room for improvement to display a more detailed representation of the problem when a virus is or isn't stopped."

"Reporting system could be improved."

"I want Webroot to be easier to use and set up. It is not very intuitive."

"It doesn't do anything proactive. The virus has to hit the machine before it detects it."

"I'm not happy with Webroot Business Endpoint Protection, for only one reason. It seems that it slows down my interface when I'm doing programming in Microsoft Access, tremendously."

"Webroot is very reactionary. It waits until the threat is active within memory to try and detect it. They need better pre-execution detection and prevention."

More OpenText Core Endpoint Protection cons

"The product's stability could be improved."

"It would be nice to have additional forensic tools that you can build into the back end."

"The EDR portion could be better. I'm not a big fan, but it works."

"Integration is difficult, but CB Defense is more powerful than others. It is difficult to implement but easy to pick up many detections."

"The directions for Splunk are spot on, but it is difficult to find anything on integration with AlienVault,"

"I would like to see the user credentials feature improved. I would also like to see more reporting features and better ways to roll the reports out."

"Certain settings have limitations. For example, I cannot manually block some malware activities."

"The solution would be more effective if there was a way to block automatically based on behavior."

More VMware Carbon Black Endpoint cons

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"This is an expensive solution."

"The pricing is a little high. It is per user per year."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"I don't like that they have different types of licenses."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"I rate the product's pricing a three on a scale of one to ten, where one is cheap, and ten is expensive. There are no costs in addition to the product's standard licensing fees."

"The solution doesn't cost too much. It's about 30 Euros a year for each endpoint. It's pretty affordable for us and for many other companies."

"We are on an annual subscription for the use of Webroot Business Endpoint Protection."

"It is relatively cheap."

"Our strategy was to overestimate the complexity and cost. It turned out that Webroot's assurance was justified."

"With Webroot Business Endpoint Protection, I can select a yearly billing cycle."

"From a pricing standpoint, I would rate it a four out of five."

"The pricing is high."

More OpenText Core Endpoint Protection pricing and cost advice

"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."

"Overall, it was cost-effective too."

"It's reasonable in price"

"Carbon Black provides competitive pricing."

"VMware Carbon Black Endpoint is an expensive product."

"The pricing is annually based and operates through another department than mine."

"The cost/benefit factor has great relevance in Cb Defense implementations."

"The platform is expensive."

More VMware Carbon Black Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Manufacturing Company

10%

Construction Company

12%

Outsourcing Company

11%

Comms Service Provider

Financial Services Firm

Outsourcing Company

10%

Construction Company

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	31
Midsize Enterprise	9
Large Enterprise	33

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...

What needs improvement with Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...

What is your primary use case for Webroot Business Endpoint Protection?

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) s...

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoin...

What is your experience regarding pricing and costs for Carbon Black CB Defense?

My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive ...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 15% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Wazuh vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs OpenText Core Endpoint Protection

Compared 48% of the time

SentinelOne Singularity Endpoint vs OpenText Core Endpoint Protection

Compared 4% of the time

Symantec Endpoint Security vs OpenText Core Endpoint Protection

Compared 4% of the time

Huntress Managed EDR vs OpenText Core Endpoint Protection

Compared 3% of the time

WatchGuard EPDR vs OpenText Core Endpoint Protection

Compared 1% of the time

More OpenText Core Endpoint Protection Competitors

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 9% of the time

Fortinet FortiEDR vs VMware Carbon Black Endpoint

Compared 5% of the time

BlackBerry Cylance Cybersecurity vs VMware Carbon Black Endpoint

Compared 4% of the time

SentinelOne Singularity Endpoint vs VMware Carbon Black Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 3% of the time

More VMware Carbon Black Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

OpenText Core Endpoint Protection

Download OpenText Core Endpoint Protection product report

OpenText Core Endpoint Protection report

VMware Carbon Black Endpoint

Download VMware Carbon Black Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Webroot SecureAnywhere Business Endpoint Protection

Carbon Black CB Defense, Bit9, Confer

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

OpenText Core Endpoint Protection offers cloud-managed endpoint security with AI integration, providing real-time protection and lightweight performance. It ensures low system impact, seamless cloud integration, and cost-effective security solutions for various devices.

OpenText Core Endpoint Protection is a comprehensive endpoint security platform utilized by managed-service providers for antivirus and firewall functionality across servers, workstations, and mobile devices. It employs AI for robust threat detection, integrating with cloud applications for real-time updates. Multi-layered security features include malware protection, network defense, and DNS protection. Although connectivity and threat reporting need improvement, this platform extensively supports remote device management and integrates efficiently with Active Directory policies.

What are the key features of OpenText Core Endpoint Protection?

Cloud Management: Centralized admin console for easy oversight
AI Integration: Enhanced threat detection capabilities
Lightweight Performance: Minimal impact on system resources
Real-time Threat Database: Constant updates for effective protection
Web Control Interface: Monitors and controls web traffic

What benefits are associated with OpenText Core Endpoint Protection?

Ease of Setup and Maintenance: Facilitates quick deployment and upkeep
Seamless Cloud Integration: Simplifies scalability and operation
Cost-Effectiveness: Affordable pricing with comprehensive features
Mobile Security Capabilities: Supports remote device management

OpenText Core Endpoint Protection finds application in industries requiring stringent data protection and peace of mind over device security. Managed-service providers implement this for comprehensive antivirus and firewall features, safeguarding multi-device networks. It is particularly useful for DNS protection and integrating with Active Directory policies, enabling secure yet flexible operations across sectors.

OpenText

VMware Carbon Black Endpoint enhances endpoint security with its robust EDR, threat detection, and live response features. The cloud-based architecture supports remote management and easy setup while behavioral monitoring and dynamic grouping minimize security risks.

VMware Carbon Black Endpoint is designed for those seeking comprehensive endpoint protection. With its cloud-based deployment, organizations experience streamlined remote control and simplified rollout processes. Its behavioral monitoring, incident response capabilities, and firewall integration deliver advanced security measures. Although it addresses many security challenges, areas like manual alert management, on-demand scanning, and integration with systems like AlienVault USM require refinement. Improved UI, EDR components, and flexible pricing models would enhance user satisfaction. On-premise deployment infrastructure and compatibility issues with some operating systems need attention. Enhanced reporting, container security, and multi-tenancy support are also essential for fulfilling industry needs. AI-driven analysis and threat isolation empower companies by fostering proactive management.

What are the key features of VMware Carbon Black Endpoint?

EDR Capabilities: Offers comprehensive endpoint detection and response to identify and mitigate threats.
Live Response: Enables real-time threat response actions for rapid containment and remediation.
Threat Detection: Uses advanced AI to identify and isolate potential security risks effectively.
Cloud-Based Architecture: Facilitates remote management and easy deployment of security measures.
Behavioral Monitoring: Continuously analyzes application behavior to detect anomalies and threats.
Dynamic Grouping: Organizes devices for improved management and targeted security policies.
Firewall Integration: Enhances security by integrating existing firewall solutions for a layered defense approach.
Whitelisting and Policy Management: Streamlines security configurations by managing allowed applications and user access policies.

What benefits should users look for when evaluating VMware Carbon Black Endpoint?

Ease of Setup: Simplifies initial deployment and management processes.
Scalability: Supports organizational growth by easily adapting to expanding security needs.
Detailed Process Monitoring: Provides deep visibility into application processes to identify threats efficiently.
Threat Isolation: Promotes proactive threat management, helping minimize the impact of security breaches.

VMware Carbon Black Endpoint finds extensive application in industries focused on stringent security requirements. Managed security service providers leverage its capabilities to deliver comprehensive protection to multiple clients worldwide. Organizations use it primarily for antivirus protection and incident management, integrating it with their existing security frameworks to strengthen endpoint visibility and real-time threat prevention. Its advanced detection and application control features make it a preferred choice in industries that prioritize robust security measures. However, it requires improvements in terms of system compatibility and customization flexibility to better serve diverse industry environments.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Mytech Partners

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

OpenText Core Endpoint Protection vs. VMware Carbon Black Endpoint