Try our new research platform with insights from 80,000+ expert users

Sophos Endpoint vs VMware Carbon Black Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 19, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.7
Sophos Endpoint delivers ROI in 12-16 months, enhancing productivity and security, with positive financial returns and legal compliance.
Sentiment score
5.6
VMware Carbon Black Endpoint offers strong protection, reducing malware and saving 10% in costs, showing significant value within six months.
 

Customer Service

Sentiment score
7.9
Sophos Endpoint support is mixed, noted for responsiveness and expertise, but needs improvement in communication and issue resolution.
Sentiment score
6.3
VMware Carbon Black's support is knowledgeable yet occasionally slow, with variability in global and local assistance quality.
I rate Sophos support as excellent, giving it a ten out of ten.
Assistant Manager, Information Technology at Swades Foundation
They have introduced a dedicated role called Technical Account Manager (TAM) for every partner.
Director at Infosonik Systems Ltd
The Sophos people here in South Africa are very helpful.
IT Consultant at Inception
Regarding the technical support of Broadcom, they are responsive and helpful.
Senior VP, Technology & Leading Technology Office at a outsourcing company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
8.2
Sophos Endpoint provides excellent scalability for diverse organizations, excelling in cloud environments but limited in non-Sophos integration.
Sentiment score
7.1
VMware Carbon Black Endpoint is praised for scalability and ease of deployment, despite some challenges with report generation.
 

Stability Issues

Sentiment score
8.7
Sophos Endpoint is praised for stability with minor issues, like resource use, achieving reliable performance in diverse environments.
Sentiment score
7.5
VMware Carbon Black Endpoint is generally stable and efficient, with minor integration issues and occasional latency quickly addressed.
 

Room For Improvement

Sophos Endpoint requires improvements in migration, usability, integration, resource efficiency, support, and feature enhancements to address user concerns.
VMware Carbon Black Endpoint needs better integration, user interface, system compatibility, pricing, support, and enhanced features for improved client satisfaction.
Users have noted that daily upload limits per device, overall data lake storage capacity tied to licenses, and daily API query limits can be restrictive.
Director at Infosonik Systems Ltd
I think there should be templates in place so I do not have to make everything from scratch; having templates for NATing, de-NATing, and LAN to WAN rules would save us time.
Assistant Manager, Information Technology at Swades Foundation
I need an on-premises Active Directory that syncs to the cloud to make it work.
IT Consultant at Inception
 

Setup Cost

Sophos Endpoint offers competitive pricing with cost-effective three-year licenses, regional discounts, and mixed affordability ratings from users.
VMware Carbon Black's pricing is high and inflexible, with users preferring user-based over endpoint-based licensing options.
The cost is reasonable and cheaper than other alternatives.
Director at Infosonik Systems Ltd
It is quite affordable; I think the pricing and licensing are reasonable.
IT Leader at Die Ambulanten - Home Care GmbH
 

Valuable Features

Sophos Endpoint excels in threat detection, AI integration, resource efficiency, and offers user-friendly management with seamless Sophos product integration.
VMware Carbon Black Endpoint offers advanced threat detection, cloud management, machine learning, and centralized control for efficient incident management.
Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections.
Director at Infosonik Systems Ltd
Web filtering helps provide protection by allowing me to block unwanted and unauthorized websites from Sophos EPP Suite, which helps prevent unauthorized intrusion, thus keeping our organization servers secure.
Assistant Manager, Information Technology at Swades Foundation
Fast response time and protection are great; these are the main advantages.
IT Leader at Die Ambulanten - Home Care GmbH
I assess VMware Carbon Black Endpoint's machine learning capabilities in detecting unknown threats as fantastic.
Senior VP, Technology & Leading Technology Office at a outsourcing company with 1,001-5,000 employees
 

Categories and Ranking

Sophos Endpoint
Ranking in Endpoint Protection Platform (EPP)
30th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
62
Ranking in other categories
No ranking in other categories
VMware Carbon Black Endpoint
Ranking in Endpoint Protection Platform (EPP)
37th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
64
Ranking in other categories
Security Incident Response (6th), Endpoint Detection and Response (EDR) (30th), Ransomware Protection (8th)
 

Mindshare comparison

As of January 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Sophos Endpoint is 1.1%, up from 0.6% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 1.8%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
Sophos EPP Suite1.1%
VMware Carbon Black Endpoint1.8%
Other97.1%
Endpoint Protection Platform (EPP)
 

Featured Reviews

Sabbir Ahmed - PeerSpot reviewer
Director at Infosonik Systems Ltd
Experience significant threat prevention advancements with user-friendly deployment
The feature is called relay server, and some people refer to it as a cache server. The Sophos EPP Suite is scalable. Some customers in banks typically have 5,000 to 7,000 users. One customer started with 1,000 users and has now extended to 4,000 users. Some customers are using up to 8,000 users without any issues. Regarding AI elements in the Sophos EPP Suite, firewalls have already introduced AI features. They have integrated AI models similar to ChatGPT in firewalls. These AI features should be introduced in endpoint XDR as well. Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections. Extended visibility and data analysis include cross-product data correlations. They have a data lake, live discover, and threat graphs. They also offer AI case summary and AI common analysis, accessible from Sophos Central, which is the management portal for Sophos XDR. Sophos Central serves as one central management portal for managing firewalls, endpoint, Sophos encryption, and mobile device management solutions. This centralized management is particularly appealing to customers.
reviewer2689206 - PeerSpot reviewer
Senior VP, Technology & Leading Technology Office at a outsourcing company with 1,001-5,000 employees
Behavior analytics has strengthened threat prediction yet still needs to improve overall standing
Regarding the real-time monitoring feature with VMware Carbon Black Endpoint, it is helpful in addressing unseen threats. I find the behavior analysis feature beneficial. I assess VMware Carbon Black Endpoint's machine learning capabilities in detecting unknown threats as fantastic. The behavior and analytics feature employs machine learning, and these are features which make the product and give that distinguishing, differentiating factor. The intelligent threat hunting capabilities have impacted my customers' cybersecurity efforts by giving them the edge to be prepared well in advance. Whenever this feature provides prediction, you know what action to take. You are aware of a possible attack and what kind of attack it may be, so you are much better prepared.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
880,511 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
12%
Educational Organization
10%
Computer Software Company
10%
Performing Arts
6%
Financial Services Firm
12%
Government
9%
Computer Software Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise7
Large Enterprise14
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise9
Large Enterprise31
 

Questions from the Community

What do you like most about Sophos EPP Suite?
Sophos EPP Suite is a powerful antivirus.
What needs improvement with Sophos EPP Suite?
To make Sophos EPP Suite better, some features could be added, but currently, whatever I require is available, and the interface is good. I think there should be templates in place so I do not have...
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Defense?
VMware Carbon Black Endpoint is a highly stable solution.
 

Also Known As

EPP Suite
Carbon Black CB Defense, Bit9, Confer
 

Overview

 

Sample Customers

EK Services
Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America
Find out what your peers are saying about Sophos Endpoint vs. VMware Carbon Black Endpoint and other solutions. Updated: December 2025.
880,511 professionals have used our research since 2012.