Try our new research platform with insights from 80,000+ expert users

VMware Carbon Black App Control vs Zscaler Zero Trust Exchange Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

VMware Carbon Black App Con...
Ranking in Application Control
3rd
Average Rating
9.2
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Zscaler Zero Trust Exchange...
Ranking in Application Control
6th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
65
Ranking in other categories
Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (8th), ZTNA as a Service (2nd), Secure Access Service Edge (SASE) (3rd), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

As of December 2025, in the Application Control category, the mindshare of VMware Carbon Black App Control is 13.2%, down from 28.5% compared to the previous year. The mindshare of Zscaler Zero Trust Exchange Platform is 8.4%, up from 8.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Control Market Share Distribution
ProductMarket Share (%)
VMware Carbon Black App Control13.2%
Zscaler Zero Trust Exchange Platform8.4%
Other78.4%
Application Control
 

Featured Reviews

AM
Cybersecurity Consultant at KAFD DMC
We can isolate problem machines and limit their access
We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access.  More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…
Sumit Bhanwala - PeerSpot reviewer
architect at Tata Consultancy
Cloud-based platform simplifies device and data center management
I find it to be good. The solution is cloud-based with the latest inspection engines, which I find to be amazing. We are less dependent on data centers and device management, which reduces our efforts significantly. It improves our device management, data center management, and updating devices. We need fewer engineers for this management, and it reduces time and efforts for data center management, device upgrades, and IT support.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
"All the functions within VMware Carbon Black App Control are valuable."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
"The API integration is good."
"The visibility is valuable."
"The effectiveness of application whitelisting is very good."
"We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access."
"I use the console to check for threats and I find it to be very user-friendly."
"The most valuable features of Zscaler Private Access are its ability to integrate with multiple IDPs and application segmentation."
"It's one of the easier products on the market as far as set-ups and deployments. Even across their whole product suite, they've made it pretty simple."
"Zscaler Cloud DLP provides you with basic DLP features that you get out of the box such as keywords, regular expressions, and data identifiers, for example, your social security numbers, and credit card numbers, with everything built into the product, so you can directly use those features within the policies. You don't need to create it from scratch, and to me, this is the biggest benefit of Zscaler Cloud DLP. You have a lot of templates to choose from in the solution, rather than having to create templates from scratch or reinvent templates."
"Sandboxing, DLP, and SSL inspection engine are the most valuable features of Zscaler SASE."
"The most valuable feature of Zscaler Private Access is the categorization of the dynamic URLs which keeps the customer's environment protected. The threats and the malware are correctly categorized."
"SASE's most valuable features are proxy and content filtering."
"I like its ease of use. It has a single pane of glass for the ZIA and ZPA pieces. It is very manageable. It is also very easy to deploy for secure access, and it gives half-decent coverage for visibility in terms of what the users use and what data is being proxied through the access gateway."
"The most valuable aspect of Zscaler Cloud DLP is its automatic DLP feature."
 

Cons

"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"The reporting is not good and needs to be improved."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"I would like to see the addition of some more features that are in other, similar solutions."
"The initial setup is somewhat complex."
"I rate App Control six out of 10 for scalability."
"Zscaler Private Access needs to improve its collaboration with applications without compromising security."
"It would be better if the Zscaler Private Access team made it easier for people to find subscriptions on the portal, mainly information on what my customers subscribed to or the type of licenses purchased."
"Zscaler CASB breaks down at times."
"User management can be improved."
"Zscaler Private Access could improve by improving external access. If external parties want to access locally to my company's services, we need to onboard them into our domain, otherwise, it doesn't work. Additionally, if their company also has Zscaler Private Access, then it doesn't work. They need to log in with our domain ID, not their company ID."
"The product must allow users to check logs for an entire year in the local console."
"The solution's granularity should be improved because it has limited granular options to control, visible, allow, block, delay, and receive."
"On the improvement side, when we bypass certain internet traffic types, it's currently recommended to have a one-click option, but audio and video aren't always supported. Thus, we need to bypass that kind of traffic. So, it is an area of improvement."
 

Pricing and Cost Advice

"We pay a fee for support, which is renewed annually."
"Its price is reasonable and what is expected for these types of products."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"It is an auto-renewal subscription service."
"Zscaler CASB is an expensive solution."
"The solution has increased prices this year."
"In terms of market positioning, I would describe Zscaler Private Access as offering optimal pricing. Based on our experience, Cato Networks tends to be slightly more expensive."
"The product is a bit expensive."
"The solution is expensive."
"In the long run, cloud services are not inherently costly."
"My company is a Zscaler Private Access partner, so the customers pay for the license fees."
report
Use our free recommendation engine to learn which Application Control solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
9%
Construction Company
9%
Government
8%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise41
 

Questions from the Community

Ask a question
Earn 20 points
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure access service edge (SASE) designed to deliver network security in a cloud-deliver...
What do you like most about Zscaler SASE?
The most valuable features of Zscaler Private Access are reliability, scalability, and availability.
What needs improvement with Zscaler SASE?
The solution needs to improve a lot of aspects.
 

Also Known As

CB Protection, Carbon Black CB Protection
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about VMware Carbon Black App Control vs. Zscaler Zero Trust Exchange Platform and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.