No more typing reviews! Try our Samantha, our new voice AI agent.

ServiceNow Security Operations vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ServiceNow Security Operations
Ranking in Security Incident Response
1st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
24
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (9th), Risk-Based Vulnerability Management (12th)
VMware Carbon Black Endpoint
Ranking in Security Incident Response
3rd
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
65
Ranking in other categories
Endpoint Protection Platform (EPP) (30th), Endpoint Detection and Response (EDR) (30th), Ransomware Protection (8th)
 

Mindshare comparison

As of August 2026, in the Security Incident Response category, the mindshare of ServiceNow Security Operations is 8.8%, down from 14.7% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 6.8%, down from 7.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Incident Response Mindshare Distribution
ProductMindshare (%)
ServiceNow Security Operations8.8%
VMware Carbon Black Endpoint6.8%
Other84.4%
Security Incident Response
 

Featured Reviews

Suhel Khan - PeerSpot reviewer
Senior Consultant (Siem Admin) at IBM
Precise incident handling has improved reporting and searching across complex security cases
I would like to see new features added, particularly regarding the incident upgrading part. For instance, if you have an instance and need to transfer it to a particular team, being able to show that the status is still in progress, which is currently in a beta version, would definitely help people to understand that the status has changed for the incident.
PM
CTO at Microsoft
Improved incident investigation has supported response while core protection still needs progress
VMware Carbon Black Endpoint does not have easy integration, as there are many complexities with the Ribitava API, which is very deep. I rate this solution overall as a five or six on a scale from one to ten. I have integrated VMware Carbon Black Endpoint with other tools that are helpful. I think this solution should be targeted at small clients, because adoption will grow more with small businesses tomorrow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"My favorite feature is the application vulnerability scanner."
"Multiple projects use the ServiceNow tool because it is a low-cost and open-source tool."
"Reduces time to closure and closure metrics for vulnerabilities."
"ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them, which is important because many vulnerabilities are not real but appear as such."
"The product's most valuable features include the no-code capability for workflows and flow design, which makes it user-friendly, and the ability to perform advanced configurations."
"When things are set up correctly it goes really smooth, however, it's getting there that takes time."
"ServiceNow Security Operations should be mandatory for any organization to maintain data."
"ServiceNow is a convenient platform to raise tickets, and the respective support team will contact us to resolve any issues."
"It is more expensive, but it's worth it."
"The cost/benefit factor has great relevance in Cb Defense implementations."
"It has intelligent learning behind it and we have been very successful in preventing attacks."
"Carbon Black has very good market strategies."
"The most valuable asset is the time-lining capability for any breach activity."
"During the company’s transition, we had a memory scraper infiltrate our network, and with the help of Carbon Black, we isolated the outbreak to a few point of sale machines."
"The tool is pretty stable."
"The triage feature that shows you the whole chain of the malware is useful."
 

Cons

"There are limitations for the third-parties that are providing the inputs. They should increase the robustness of the solution."
"You can't connect to anything. It doesn't interact with things very well."
"An area for improvement I observed in ServiceNow Security Operations is the need to maintain correct CMDB data because if you're unable to do this, you can't perfectly maintain the vulnerability data. CMDB data in ServiceNow Security Operations needs to be accurate. As I've been working on ServiceNow Security Operations for only seven months, I still need more time to try all its modules before I can give recommendations regarding additional features I'd like to see in the solution."
"It would be ideal if there were already integrations available in ServiceNow with third-party tools."
"I would rate technical support for ServiceNow Security Operations as a six out of ten in terms of faster resolution."
"Customer awareness and understanding of ServiceNow's SecOps capabilities could be improved."
"They should stick to the roadmap and continue to build plugins and integrations with other third parties, enhance the UI, and enhance the reporting. It's all good. They should just continue enhancing the releases."
"​Process framework and best practices for ease of integration between IT and security teams via incident, problem, and change.​"
"The support is poor."
"The tech support communicates, but it's just not with movement."
"This solution works well but needs lots of tuning and optimization."
"I haven't run into anything that needs improvement. The website interface can be a little bit better, but it's still good as compared to most others."
"The pricing could always be a bit better. They could work to make it less expensive."
"CB Defense could be more compatible with Linux, and its cloud provision could be improved."
"In my company, we face issues sometimes when there is a need to write custom rules or we want to write for some rules that are different from the standard rules provided by the solution."
"But here, we hardly can take any kind of a report out of Carbon Black, so I think that should be something that should be more user-friendly."
 

Pricing and Cost Advice

"This product is a good value for the money."
"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."
"The product is more expensive than other solutions."
"It is an expensive product."
"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"I am not really involved in the pricing of this product. But, from my understanding, it is OK for us."
"Its pricing was very good, which is one of the reasons I went to it as an alternative. It is on a yearly basis. There are no additional fees."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."
"The pricing [is] more or less the same as other similar solutions."
"Overall, it was cost-effective too."
"CB Defense is available on a yearly subscription and is priced by the number of endpoints."
"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."
"The pricing is very high."
report
Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
13%
Comms Service Provider
6%
Healthcare Company
6%
Financial Services Firm
9%
Construction Company
9%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise17
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise33
 

Questions from the Community

What is your experience regarding pricing and costs for ServiceNow Security Operations?
In my opinion, the pricing is quite affordable considering the features, and I do not find it expensive. I would not call it cheap; rather, I am looking at it as a product owner.
What needs improvement with ServiceNow Security Operations?
I would like to see new features added, particularly regarding the incident upgrading part. For instance, if you have an instance and need to transfer it to a particular team, being able to show th...
What advice do you have for others considering ServiceNow Security Operations?
For someone looking to use ServiceNow Security Operations, I recommend that they read about the documentation and spend one or two hours familiarizing themselves with FortiGating, and that will be ...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What is your experience regarding pricing and costs for Carbon Black CB Defense?
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive as I would prefer.
 

Also Known As

No data available
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about ServiceNow Security Operations vs. VMware Carbon Black Endpoint and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.