Splunk Security Essentials vs VMware Carbon Black Endpoint comparison

Splunk and Broadcom are both solutions in the Security Incident Response category. Splunk is ranked #11 with an average rating of 8.5, while Broadcom is ranked #4 with an average rating of 7.4. Splunk holds a 2.0% mindshare in IRP, compared to Broadcom’s 7.4% mindshare. Additionally, 100% of Splunk users are willing to recommend the solution, compared to 89% of Broadcom users who would recommend it.

Splunk Security Essentials

Read 4 Splunk Security Essentials reviews

291 Views
58 Comparison Views

100% willing to recommend

VMware Carbon Black Endpoint

Read 63 VMware Carbon Black Endpoint reviews

5,175 Views
155 Comparison Views

89% willing to recommend

Splunk Security Essentials

VMware Carbon Black Endpoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 2, 2025

In the realm of security solutions, VMware Carbon Black Endpoint and Splunk Security Essentials offer distinct functionalities, with each product catering to different aspects of security needs. VMware Carbon Black Endpoint provides efficient endpoint protection, excelling in its focus on threat detection and real-time monitoring. Meanwhile, Splunk Security Essentials offers superior capabilities in security analytics, delivering deeper insights through comprehensive data exploration and customizable dashboards.

Features: VMware Carbon Black Endpoint provides advanced threat detection, live response capabilities, and scalable architecture, enhancing overall security management. It is designed for proactive defense against cyber threats. Splunk Security Essentials delivers powerful data analytics, correlation, and visualization features that allow for seamless integration with existing security infrastructure. The product emphasizes enriching threat intelligence and offers tools for in-depth analysis and reporting.

Ease of Deployment and Customer Service: VMware Carbon Black Endpoint is known for an easy deployment process, supported by robust customer service that helps in swift integration into a company’s security framework. Splunk Security Essentials, while also offering solid support, presents a steeper learning curve due to its complex analytical capabilities, though it provides extensive training resources to ease the implementation process.

Pricing and ROI: VMware Carbon Black Endpoint offers a competitive setup cost and delivers tangible ROI through effective threat prevention strategies. It focuses on providing cost-effective endpoint protection. Splunk Security Essentials may come with higher initial expenses, but it compensates with significant ROI by leveraging its detailed analytics for enhanced security positions. Its pricing structure is justified by the advanced features it offers in terms of threat analysis and data visualization.

To learn more, read our detailed Splunk Security Essentials vs. VMware Carbon Black Endpoint Report (Updated: September 2025).

Buyer's Guide

Splunk Security Essentials vs. VMware Carbon Black Endpoint

September 2025

Download the complete report

Helped 869,202 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Splunk Security Essentials

Ranking in Security Incident Response

11th

Average Rating

8.6

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Data Visualization (17th), IT Alerting and Incident Management (14th)

VMware Carbon Black Endpoint

Ranking in Security Incident Response

4th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (33rd), Endpoint Detection and Response (EDR) (27th), Ransomware Protection (7th)

Mindshare comparison

As of October 2025, in the Security Incident Response category, the mindshare of Splunk Security Essentials is 2.0%, up from 0.1% compared to the previous year. The mindshare of VMware Carbon Black Endpoint is 7.4%, down from 12.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Incident Response Market Share Distribution
Product	Market Share (%)
VMware Carbon Black Endpoint	7.4%
Splunk Security Essentials	2.0%
Other	90.6%

Security Incident Response

Featured Reviews

Srinivas Prudhivi Reddy

Lead Consultant at Stickman cyber

Enables us to examine the parameters of the events found and take appropriate actions as necessary

Once we've configured our logs, for example, if we need to monitor processes and IP addresses, we ensure these logs are being ingested into our Splunk instance. The logs gathered from various endpoints are then consolidated into our Splunk platform. Once the data is collected, we can create searches and dashboards to analyze it. With these searches and dashboards, we gain insights into events and can make informed decisions based on them. We'll examine the parameters of these events and take appropriate actions as necessary.

Read full review

Nikunj Kamboj

Cybersecurity Analyst at OnX Canada

Integrates well with our existing SIEM tool and helps in identifying suspicious activities

The solution's integration with our existing security infrastructure is good. Whenever we have any alert in VMware Carbon Black Endpoint, we can easily that alert in our SIEM tool and check logs from the SIEM tool itself. VMware Carbon Black Endpoint is just a secondary security tool for us, and we are just monitoring the alerts from it. The solution's behavioral analytics feature helps in identifying suspicious activities pretty well. Whenever we have even a small thing, we get an alert. The solution is deployed on the cloud in our organization. Performance-wise, the solution is doing great in terms of connecting to the host directly. Performing a malware scan usually takes a lot of time, more than 24 hours. A malware scan is something that we do only on Carbon Black for the old endpoint devices and servers. It used to take sometimes three days to perform. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"They have a good catalog of plans to use to resist the attacks."

"I would have to rate Splunk Security Essentials a 10 out of 10 because it's free and there's tons of usable content."

"We are focusing on security to ensure incidents are reported efficiently. In addition to that, for reporting purposes, we are utilizing our dashboards or creating new ones. We will be using free visualization tools for this purpose."

"The network monitoring feature is particularly valuable for gathering information about users, login times, and other statistics."

"It has intelligent learning behind it and we have been very successful in preventing attacks."

"CB Defense is more powerful, and you can take more actions than others. Its security features and signatures are constantly updated, so it is more effective than other security solutions."

"It is a very complete platform."

"The tool is pretty stable."

"We can access computers remotely if we need to."

"The product's most valuable feature is its ability to be fully integrated with the VMware environment."

"Carbon Black CB Defense has helped improve my organization by allowing us to have better data so that we can do correlation and get visibility into the alerts."

"We have another piece of that infrastructure that does what they call threat emulation. It's like sandboxing where it takes files that it doesn't know about, puts them in a VM-type environment, and it kicks them off to see if there's any malware or tendencies that might look like malware, that kind of thing."

More VMware Carbon Black Endpoint pros

Cons

"The price could be improved."

"The reporting feature needs to be more user-friendly."

"They could add more AI content or AI and machine learning."

"The solution would be more effective if there was a way to block automatically based on behavior."

"Needs improvement in the area of infrastructure for on-premise installation."

"The endpoint machines need improvement."

"There could be more knowledge. I think they made a mistake when they took away the Check Point integration, because it provides more automation and also more threat intelligence."

"The GUI and reporting should be addressed and the product's administration features need fine tuning."

"I would like to see the user credentials feature improved. I would also like to see more reporting features and better ways to roll the reports out."

"Occasionally, we'll have issues with the latest version and they'll basically tell us that they will improve it in the next iteration. They need to work on their version release quality."

"In my company, we face issues sometimes when there is a need to write custom rules or we want to write for some rules that are different from the standard rules provided by the solution."

More VMware Carbon Black Endpoint cons

Pricing and Cost Advice

Information not available

"The pricing is annually based and operates through another department than mine."

"The platform is expensive."

"The pricing is very high."

"We have branches, we have different companies, but we cannot buy less than 100 licenses. This does not make sense to me... It should be more flexible. I can understand their saying, "Okay, to be a customer you need 100," but to add on to that number it should be something very straightforward. If I need to add five, for example, I shouldn't need to add 100."

"It is more expensive, but it's worth it. There are no additional costs beyond the standard licensing fee."

"VMware Carbon Black Endpoint is an expensive product."

"This is a really expensive product and we pay licensing fees on a yearly basis."

"The license is annual. It's a standard license."

More VMware Carbon Black Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.

See recommendations

869,202 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Computer Software Company

12%

Financial Services Firm

11%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	31
Midsize Enterprise	9
Large Enterprise	30

Questions from the Community

What is your experience regarding pricing and costs for Splunk Security Essentials?

Our SecOps manager and CISO were more familiar with Splunk, and the price was right. That was probably the primary driver, and we did evaluation as well with strict criteria and Gartner ratings.

See all answers

What needs improvement with Splunk Security Essentials?

I have not used Splunk Security Essentials' customizable dashboards. I have not taken advantage of the pre-built security use cases in Splunk.

See all answers

What is your primary use case for Splunk Security Essentials?

We use Splunk Security Essentials. We have projects, though not many projects per year. The solution is used to resist cyber attacks. They have a good catalog of plans to use to resist the attacks.

See all answers

What to choose: an endpoint antivirus, an EDR solution or both?

I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...

See all answers

What's the difference between Carbon Black CB Response and Carbon Black CB Defense?

Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...

See all answers

What do you like most about Carbon Black CB Defense?

VMware Carbon Black Endpoint is a highly stable solution.

See all answers

Comparisons

Splunk Enterprise Platform vs Splunk Security Essentials

Compared 100% of the time

More Splunk Security Essentials Competitors

CrowdStrike Falcon vs VMware Carbon Black Endpoint

Compared 21% of the time

Microsoft Defender for Endpoint vs VMware Carbon Black Endpoint

Compared 11% of the time

SentinelOne Singularity Complete vs VMware Carbon Black Endpoint

Compared 8% of the time

Trellix Endpoint Security Platform vs VMware Carbon Black Endpoint

Compared 7% of the time

Cortex XDR by Palo Alto Networks vs VMware Carbon Black Endpoint

Compared 6% of the time

More VMware Carbon Black Endpoint Competitors

Product Reports

Buyer's Guide

Data Visualization

October 2025

Download Splunk Security Essentials product report

Buyer's Guide

VMware Carbon Black Endpoint

September 2025

Download VMware Carbon Black Endpoint product report

Also Known As

No data available

Carbon Black CB Defense, Bit9, Confer

Overview

Splunk Security Essentials provides a user-friendly interface that streamlines security operations with prebuilt content, helping organizations implement and manage security use cases efficiently.

This tool allows users to navigate a wide range of security use cases, offering valuable insights and tailored solutions. With its ability to enhance security postures, Splunk Security Essentials is essential for managing complex security operations. It supports use case development by providing actionable guidance and resources, enabling effective security measure planning.

What are the standout features of Splunk Security Essentials?

Prebuilt Use Case Content: Provides ready-to-use templates for common security scenarios.
Visual Analytics: Offers intuitive data visualization for threat analysis and reporting.
Guided Implementation: Facilitates easy adoption through step-by-step use case setups.

Which benefits and ROI can be expected when evaluating Splunk Security Essentials reviews?

Improved Threat Detection: Enhances the capability to identify and mitigate threats quickly.
Operational Efficiency: Streamlines processes, saving time and resources.
Cost-Effective: Reduces the need for additional security tools through integrated solutions.

In financial and healthcare sectors, Splunk Security Essentials is often utilized to bolster security frameworks, addressing unique industry challenges. Its adaptable structure supports compliance requirements, ensuring sensitive data protection and regulatory adherence in environments where security is paramount.

Splunk

VMware Carbon Black Endpoint enhances endpoint security with its robust EDR, threat detection, and live response features. The cloud-based architecture supports remote management and easy setup while behavioral monitoring and dynamic grouping minimize security risks.

VMware Carbon Black Endpoint is designed for those seeking comprehensive endpoint protection. With its cloud-based deployment, organizations experience streamlined remote control and simplified rollout processes. Its behavioral monitoring, incident response capabilities, and firewall integration deliver advanced security measures. Although it addresses many security challenges, areas like manual alert management, on-demand scanning, and integration with systems like AlienVault USM require refinement. Improved UI, EDR components, and flexible pricing models would enhance user satisfaction. On-premise deployment infrastructure and compatibility issues with some operating systems need attention. Enhanced reporting, container security, and multi-tenancy support are also essential for fulfilling industry needs. AI-driven analysis and threat isolation empower companies by fostering proactive management.

What are the key features of VMware Carbon Black Endpoint?

EDR Capabilities: Offers comprehensive endpoint detection and response to identify and mitigate threats.
Live Response: Enables real-time threat response actions for rapid containment and remediation.
Threat Detection: Uses advanced AI to identify and isolate potential security risks effectively.
Cloud-Based Architecture: Facilitates remote management and easy deployment of security measures.
Behavioral Monitoring: Continuously analyzes application behavior to detect anomalies and threats.
Dynamic Grouping: Organizes devices for improved management and targeted security policies.
Firewall Integration: Enhances security by integrating existing firewall solutions for a layered defense approach.
Whitelisting and Policy Management: Streamlines security configurations by managing allowed applications and user access policies.

What benefits should users look for when evaluating VMware Carbon Black Endpoint?

Ease of Setup: Simplifies initial deployment and management processes.
Scalability: Supports organizational growth by easily adapting to expanding security needs.
Detailed Process Monitoring: Provides deep visibility into application processes to identify threats efficiently.
Threat Isolation: Promotes proactive threat management, helping minimize the impact of security breaches.

VMware Carbon Black Endpoint finds extensive application in industries focused on stringent security requirements. Managed security service providers leverage its capabilities to deliver comprehensive protection to multiple clients worldwide. Organizations use it primarily for antivirus protection and incident management, integrating it with their existing security frameworks to strengthen endpoint visibility and real-time threat prevention. Its advanced detection and application control features make it a preferred choice in industries that prioritize robust security measures. However, it requires improvements in terms of system compatibility and customization flexibility to better serve diverse industry environments.

Broadcom

Sample Customers

Information Not Available

Netflix, Progress Residential, Indeed, Hologic, Gentle Giant, Samsung Research America

Buyer's Guide

Splunk Security Essentials vs. VMware Carbon Black Endpoint

September 2025

Free Report: Splunk Security Essentials vs. VMware Carbon Black Endpoint

Find out what your peers are saying about Splunk Security Essentials vs. VMware Carbon Black Endpoint and other solutions. Updated: September 2025.

DOWNLOAD NOW

869,202 professionals have used our research since 2012.

See our Splunk Security Essentials vs. VMware Carbon Black Endpoint report.

See our list of best Security Incident Response vendors.

We monitor all Security Incident Response reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.