Try our new research platform with insights from 80,000+ expert users

Proofpoint Threat Response vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Proofpoint Threat Response
Ranking in Security Incident Response
2nd
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
5
Ranking in other categories
No ranking in other categories
VMware Carbon Black Endpoint
Ranking in Security Incident Response
4th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
63
Ranking in other categories
Endpoint Protection Platform (EPP) (33rd), Endpoint Detection and Response (EDR) (27th), Ransomware Protection (7th)
 

Mindshare comparison

As of October 2025, in the Security Incident Response category, the mindshare of Proofpoint Threat Response is 14.5%, up from 11.5% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 7.4%, down from 12.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Incident Response Market Share Distribution
ProductMarket Share (%)
Proofpoint Threat Response14.5%
VMware Carbon Black Endpoint7.4%
Other78.1%
Security Incident Response
 

Featured Reviews

Giuseppe Sgroi - PeerSpot reviewer
Blocks potential spam emails efficiently and integrates well with our security framework
We use the product to verify and manage emails sent and received through our Microsoft Exchange server, focusing on blocking potential spam emails The platform's most valuable include the ability to check emails and block potential spam. The platform's technical support services and pricing need…
Nikunj Kamboj - PeerSpot reviewer
Integrates well with our existing SIEM tool and helps in identifying suspicious activities
The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Support is very responsive."
"The platform's most valuable include the ability to check emails and block potential spam."
"The best part of Proofpoint Threat Response is the Auto-Pull feature. Being able to pull an email back from a user's mailbox is very useful, yet I have noticed that not a lot of organizations use this kind of feature."
"It has reduced our manual efforts to remove emails from each user's inbox, and in this case we do not have to ask our IT department or users to do so."
"If something's pulled and then it's later declared a false positive, it will automatically restore. They also take automatic feeds from their advanced threat detection modules."
"It actually does some heuristics, and some behavioral analysis."
"This product has the capability of uploading scripts to the tool and this is a very comprehensive feature."
"The data analysis is the most valuable because of the whitelist database. It is different than standard IDS solutions."
"The solution is stable."
"It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."
"Once the solution is installed and configured correctly it does not require a lot of hands-on attention until you need upgrading."
"The threat analysis functionality is good."
"The EDR and reports were helpful in improving our organization."
 

Cons

"The on-premise version doesn't scale well for large companies."
"The platform's technical support services and pricing need improvement."
"If the reporting gets improved then it would be better, but the product is running amazing as it is."
"The interface within Threat Response could be made simpler."
"Has some quirks."
"What was rolled out to my company are mixed versions of Carbon Black CB Defense, so what I'd like to see in the next release is more synchronization, where it can detect the endpoint that's running an old version and suggest updates."
"Its compatibility can be improved. It did crash a server during deployment, which is not something that I want to happen. Its deployment should also be easier. The whole deployment cycle needs to be simplified. It is an enterprise solution, and to set it up right now, you have to be an expert."
"The solution would be more effective if there was a way to block automatically based on behavior."
"There's some disparity between the on-premise and the cloud type of application."
"Needs improvement in the area of infrastructure for on-premise installation.​"
"Carbon Black needs to do a better job of proving their platform in the industry, and providing a bit more access to do industry testing with real world examples to help prove their platform."
"This solution works well but needs lots of tuning and optimization."
"The solution needs expanded endpoint query tools."
 

Pricing and Cost Advice

"The way most big companies work with Proofpoint is that they try to tie everything into an enterprise license. I can't comment on the actual costs, however I do know that alternative solutions such as Abnormal Security can be much more expensive than Proofpoint Threat Response."
"It's quite affordable to have it with this much functionality and ease to administrate."
"The solution has almost the same price as other different kinds of infrastructures, but it offers a lot of different features."
"The price for the solution is completely at government level, meaning one which is very high."
"It is more expensive, but it's worth it. There are no additional costs beyond the standard licensing fee."
"The pricing [is] more or less the same as other similar solutions."
"Overall, it was cost-effective too."
"The product is quite reasonable."
"In terms of licensing costs, Carbon Black CB Defense was all associated with CROW and the services my company is using with them, so it came all-inclusive."
"​The cost/benefit factor has great relevance in Cb Defense implementations​."
report
Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
869,202 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Healthcare Company
12%
Computer Software Company
12%
Financial Services Firm
10%
Energy/Utilities Company
8%
Computer Software Company
12%
Financial Services Firm
11%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise30
 

Questions from the Community

What is your experience regarding pricing and costs for Proofpoint Threat Response?
I have a vague idea because I don't know what others are charging. But we felt that putting up with the pains and having to spend more time keeping it running than we expected is still better than ...
What needs improvement with Proofpoint Threat Response?
The platform's technical support services and pricing need improvement.
What is your primary use case for Proofpoint Threat Response?
We use the product to verify and manage emails sent and received through our Microsoft Exchange server, focusing on blocking potential spam emails.
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
 

Also Known As

No data available
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

University of Waterloo, Akorn, Fenwick and West LLP
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about Proofpoint Threat Response vs. VMware Carbon Black Endpoint and other solutions. Updated: September 2025.
869,202 professionals have used our research since 2012.