Try our new research platform with insights from 80,000+ expert users

Trellix Endpoint Security Platform vs VMware Carbon Black Cloud comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Trellix Endpoint Security offers valuable ROI by reducing threats and costs, with high satisfaction despite some false positives.
Sentiment score
7.3
VMware Carbon Black Cloud offers cost savings, improved security, centralized protection, better efficiency, and quick ROI with automation features.
We have observed tremendous return on investment after implementing Trellix Endpoint Security as it is a more cost-effective solution compared to other products.
There are two parts: one is the encryption which is standard and no AI is needed, but the data protection part could benefit from AI to detect new types of data and protect it.
Clients appreciate the solution’s customization capabilities and ongoing product improvements.
 

Customer Service

Sentiment score
6.9
Trellix Endpoint Security Platform support is generally praised, though some users note response time inconsistencies and platform-specific service gaps.
Sentiment score
6.6
Users typically find VMware Carbon Black Cloud support efficient, with no negative feedback reported and alternative contacts available for assistance.
I would rate their customer service nine out of ten.
The response time is a notable issue.
I rate the support from Trellix a perfect ten.
 

Scalability Issues

Sentiment score
7.8
Trellix Endpoint Security efficiently scales across diverse environments, handling thousands of endpoints with seamless expansion and robust performance.
Sentiment score
7.6
VMware Carbon Black Cloud is highly rated for scalability, performing well in diverse environments from small to enterprise businesses.
I would rate the scalability of the solution as a six out of ten, indicating some challenges due to downtime requirements.
Trellix Endpoint Security is scalable.
 

Stability Issues

Sentiment score
8.2
Trellix Endpoint Security Platform is stable, reliable, and handles high loads well, though some performance issues are acknowledged.
Sentiment score
7.0
VMware Carbon Black Cloud became reliable after initial instability, with high user satisfaction despite minor performance issues on large deployments.
I would rate the stability of Trellix Endpoint Security as near perfect, close to ten out of ten.
I would rate its stability as nine out of ten.
I think it's stable enough; earlier it had glitches, but now it's stable enough.
 

Room For Improvement

Users seek performance, UI, integration improvements in Trellix Endpoint Security, along with faster updates and better support.
VMware Carbon Black Cloud needs better false positive handling, agent efficiency, support improvement, and enhanced features, training, and global support.
It doesn't support Microsoft Windows Hello authentication.
It would also help if detection specifics were identified more quickly and the problem-solving process accelerated, especially to meet larger clients' expectations.
The product does not seem to be cloud-native.
 

Setup Cost

Trellix Endpoint Security is competitively priced, offering flexible licensing and value, though renewal costs might increase over time.
Trellix Endpoint Security is cost-effective and provides excellent value for money.
The license costs are very reasonable, around 1,000 to 1,200 rupees per year.
 

Valuable Features

Trellix Endpoint Security provides advanced threat protection, ease of use, and customizable policies for effective ransomware and malware defense.
VMware Carbon Black Cloud offers cost-effective, real-time security with intrusion alerts, quarantine, host isolation, data search, and threat hunting.
Trellix Endpoint Security is a proven, robust, and cost-effective solution that protects the organization from different types of ransomware and attacks.
The detection capability of Trellix Endpoint Security is higher than traditional antivirus solutions.
Including options like Application Control (formerly Solidcore), integrated monitoring, change control, DLP, and advanced threat protection, the solution offers comprehensive security.
 

Categories and Ranking

Trellix Endpoint Security P...
Ranking in Endpoint Detection and Response (EDR)
10th
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
158
Ranking in other categories
Endpoint Protection Platform (EPP) (9th), Extended Detection and Response (XDR) (10th)
VMware Carbon Black Cloud
Ranking in Endpoint Detection and Response (EDR)
44th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
18
Ranking in other categories
Security Incident Response (7th)
 

Mindshare comparison

As of June 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Trellix Endpoint Security Platform is 4.3%, down from 4.8% compared to the previous year. The mindshare of VMware Carbon Black Cloud is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Abdullah Al Hadi - PeerSpot reviewer
Customization capabilities allow clients to autonomously deploy policies
There are a few areas where Trellix Endpoint Security ( /categories/endpoint-protection-platform-epp ) can improve. Firstly, the high CPU utilization when agents are installed can negatively impact client systems. Another issue is with end-users outside the network, where the agent handler sometimes fails to deploy the product properly. Improvements are needed in forensic analytics to detect specific vulnerabilities. It would also help if detection specifics were identified more quickly and the problem-solving process accelerated, especially to meet larger clients' expectations.
Tom Kar - PeerSpot reviewer
Shows promise for endpoint detection and response, with room for improvement in complexity and pricing
VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network. Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps. CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution. Additionally, it is complex to use, and the pricing should be improved.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
856,807 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
31%
Government
11%
Manufacturing Company
8%
Computer Software Company
8%
Computer Software Company
17%
Real Estate/Law Firm
11%
Healthcare Company
10%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deploy various components as desired with McAfee Endpoint Security, whereas many othe...
How does Crowdstrike Falcon compare with FireEye Endpoint Security?
The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effective program. Its graphical design is such that it makes an extremely useful too...
What do you like most about McAfee Endpoint Security?
It provides a robust defense against cybersecurity threats while offering user-friendly features like notifications and approval prompts.
What to choose: an endpoint antivirus, an EDR solution or both?
I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple hi...
What's the difference between Carbon Black CB Response and Carbon Black CB Defense?
Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection an...
What do you like most about Carbon Black CB Response?
Threat hunting is the most valuable feature of VMware Carbon Black Cloud.
 

Also Known As

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)
Carbon Black CB Response
 

Overview

 

Sample Customers

inHouseIT, Seagate Technology
ALLETE belk
Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: January 2025.
856,807 professionals have used our research since 2012.