


VMware Carbon Black Endpoint and Varonis Platform compete in the cybersecurity and data protection category. VMware Carbon Black Endpoint seems to have the upper hand in threat detection and proactive response due to its machine learning capabilities.
Features: VMware Carbon Black Endpoint is recognized for its resource efficiency, behavioral monitoring, and dynamic grouping. It boasts a high threat detection ratio, efficient process monitoring, and robust endpoint protection. Varonis Platform is known for its data governance, user behavior analytics, and seamless integrations, particularly with Office 365 and cloud storage, ensuring advanced data access monitoring and compliance.
Room for Improvement: VMware Carbon Black Endpoint needs better infrastructure integration, improved user support, and enhanced reporting features. Its EDR capabilities and alert prioritization also require refinement. Varonis Platform faces challenges with initial data scanning speed and better cloud integration, along with complexity in its interface and high licensing costs.
Ease of Deployment and Customer Service: VMware Carbon Black Endpoint offers deployment across on-premises, cloud, and hybrid environments, though it receives mixed reviews for customer support responsiveness. Varonis Platform also provides flexible deployment options and is known for high-quality customer support with in-depth insights and assistance.
Pricing and ROI: VMware Carbon Black Endpoint is viewed as costly but justifiable due to its advanced threat mitigation capabilities and offers flexible MSSP programs. Varonis Platform is similarly positioned at the high end of the pricing spectrum, delivering value through comprehensive modules and operational requirements.
With Cortex XDR by Palo Alto Networks' incident correlation, behavioral detection, and process tree visibility, similar initial triage can often be completed in roughly 10 to 20 minutes, depending on the incident.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Varonis Platform has definitely reduced the risk of data breaches at many client sites and has definitely lowered manual effort; manual effort has decreased by seventy percent due to automating data classification and permission reviews.
I definitely say that we have had time savings by using the DataVantage module and also time savings using the AD module when we are dealing with different incidents.
I have seen a return on investment mainly through time savings and improved security for sensitive data, making it a valuable investment.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
The customer support is above par; it is what I think other organizations should look at to be comparable to.
They respond quickly to anything we need, which is not common among platforms.
I would rate the customer support for Varonis Platform at nine out of ten.
Regarding the technical support of Broadcom, they are responsive and helpful.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Varonis Platform is highly rated for scalability.
Varonis Platform is highly scalable and designed to support large enterprise environments, which could have millions of files, thousands of users, and multiple data types.
Varonis's scalability as eight to eight point five out of ten.
The solution's scalability has had a medium impact on the IT environment.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
It is a mature product with a long track record, widely adopted, and very reliable.
VMware Carbon Black Endpoint is slow for the stability rating.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
When a Cortex XDR by Palo Alto Networks incident is confirmed, it would be useful to automatically create a ServiceNow or Jira ticket with the incident summary, including affected endpoints, user indicators, process tree, severity, and recommended response actions.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety.
A phishing email module would be great; I look forward to when that comes out.
Enhancing tighter integration with third-party solutions, such as SIEM or SOAR platforms, for smoother incident response workflows.
I think VMware Carbon Black Endpoint should improve in every area, because currently the NetGen AV, even from Microsoft and even from CrowdStrike, is better than VMware Carbon Black Endpoint.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
Varonis is known for its high licensing cost, which can include the cost of multiple servers required for its operations, called collectors.
My experience with pricing, setup costs, and licensing for Varonis Platform has been good, with competitive costs.
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive as I would prefer.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Varonis is excellent for scanning unstructured data sources like file shares, OneDrive, SharePoint, Azure Blob Storage, and S3s.
Varonis Platform is agent-based and AI-driven for detection and response, identifying data based on its content and context.
Varonis Platform helped us quickly identify stale data, permissioned folders, and unusual access patterns, significantly improving our data governance and security posture.
I assess VMware Carbon Black Endpoint's machine learning capabilities in detecting unknown threats as fantastic.
VMware Carbon Black Endpoint does facilitate endpoint protection and incident response, and it is an EDR.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 9.9% |
| Varonis Platform | 6.0% |
| VMware Carbon Black Endpoint | 8.6% |
| Other | 75.5% |


| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 21 |
| Large Enterprise | 57 |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 2 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 9 |
| Large Enterprise | 33 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Varonis Platform identifies sensitive data access, enhancing security and compliance. It provides visibility, governance, and automated remediation. Efficiently manages permissions and detects threats through UEBA.
Varonis integrates with popular applications, ensuring comprehensive data security. Its centralized management simplifies audit readiness. User behavior analytics and anomaly detection offer proactive protection against threats. Data classification, access tracking, and responsive support enhance experience and satisfaction. Some areas need enhancement, such as reliance on on-premises components, a complex update process, and performance issues with large datasets. The platform's cloud integration and reporting capabilities could be refined for better efficiency.
What are the key features of Varonis Platform?Varonis is widely implemented across industries needing data security and compliance, crucial for financial services, healthcare, and enterprises relying on Microsoft 365. Organizations use it to detect insider threats, defend against ransomware, and automate data remediation. Its ability to monitor access and classify data supports compliance with regulations and enhances security in both cloud and on-premises environments.
VMware Carbon Black Endpoint uses behavioral analysis and cloud management to detect threats, stop suspicious activities, and ensure security with features like real-time monitoring and machine learning.
VMware Carbon Black Endpoint provides robust threat detection with centralized cloud management and behavioral analysis to prevent security breaches. Suitable for both cloud and on-premise environments, it enhances cybersecurity with seamless scaling, integrates with software for advanced threat hunting, and ensures policy management through application control.
What are the most important features of VMware Carbon Black Endpoint?In industries like finance and healthcare, VMware Carbon Black Endpoint is implemented to secure sensitive data from cyber threats. It supports organizations in minimizing risks associated with malware and ransomware, protecting their endpoint environments through AI-driven detection and real-time monitoring.
We monitor all Ransomware Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.