


VMware Carbon Black Endpoint and VMware Carbon Black Cloud are two robust security solutions. VMware Carbon Black Cloud slightly surpasses Endpoint due to its advanced features, according to user reviews.
Features: VMware Carbon Black Endpoint offers reliable detection capabilities, comprehensive logging, and effective threat analysis. VMware Carbon Black Cloud stands out with its cloud-native architecture, automated workflows, and superior integration with other security tools.
Room for Improvement: VMware Carbon Black Endpoint needs to enhance its threat hunting capabilities and reduce false positives. VMware Carbon Black Cloud could benefit from simplifying the initial setup process and improving the accuracy of its AI-based threat detection.
Ease of Deployment and Customer Service: VMware Carbon Black Endpoint users find the deployment process straightforward and customer service responsive. VMware Carbon Black Cloud’s deployment is more complex due to extensive configuration options, but its customer service is well-regarded.
Pricing and ROI: VMware Carbon Black Endpoint is perceived as cost-effective with good ROI. VMware Carbon Black Cloud is more expensive but justified due to its comprehensive feature set and robust performance, leading to higher perceived ROI.
With Cortex XDR by Palo Alto Networks' incident correlation, behavioral detection, and process tree visibility, similar initial triage can often be completed in roughly 10 to 20 minutes, depending on the incident.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Regarding the technical support of Broadcom, they are responsive and helpful.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
The solution's scalability has had a medium impact on the IT environment.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
VMware Carbon Black Endpoint is slow for the stability rating.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
When a Cortex XDR by Palo Alto Networks incident is confirmed, it would be useful to automatically create a ServiceNow or Jira ticket with the incident summary, including affected endpoints, user indicators, process tree, severity, and recommended response actions.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
I recall we couldn't upgrade because the sensor was not compatible, and the latest VMware Carbon Black Cloud version was not compatible with the latest Red Hat version.
I think VMware Carbon Black Endpoint should improve in every area, because currently the NetGen AV, even from Microsoft and even from CrowdStrike, is better than VMware Carbon Black Endpoint.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
My rating for the pricing of VMware Carbon Black Endpoint is that it is not cheap, but it is also not as inexpensive as I would prefer.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
I assess VMware Carbon Black Endpoint's machine learning capabilities in detecting unknown threats as fantastic.
VMware Carbon Black Endpoint does facilitate endpoint protection and incident response, and it is an EDR.

| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 21 |
| Large Enterprise | 57 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 3 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 9 |
| Large Enterprise | 33 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
VMware Carbon Black Cloud provides advanced endpoint protection, integrating threat detection, response, and isolation capabilities to enhance security management while minimizing end-user impact.
VMware Carbon Black Cloud offers a comprehensive solution for endpoint security with features like real-time protection and threat hunting. It enables system isolation, compliance management, and seamless integration, ensuring effective threat detection at a low cost. Users utilize its capabilities for incident response and device compliance across different operating systems, optimizing security operations. The platform is lightweight, scalable, and designed to collect extensive threat intelligence while maintaining low performance friction. While highly valuable, improvements in false positive management, technical support, and network communication insights are desired, alongside enhancements in analytics and multi-tenancy support.
What are the key features of VMware Carbon Black Cloud?Organizations across sectors deploy VMware Carbon Black Cloud to protect endpoints from malicious activity and enhance incident response, making it suitable for environments dealing with sensitive information. Its deployment in cloud and on-premises setups supports diverse cybersecurity needs, ensuring flexible and powerful threat management.
VMware Carbon Black Endpoint uses behavioral analysis and cloud management to detect threats, stop suspicious activities, and ensure security with features like real-time monitoring and machine learning.
VMware Carbon Black Endpoint provides robust threat detection with centralized cloud management and behavioral analysis to prevent security breaches. Suitable for both cloud and on-premise environments, it enhances cybersecurity with seamless scaling, integrates with software for advanced threat hunting, and ensures policy management through application control.
What are the most important features of VMware Carbon Black Endpoint?In industries like finance and healthcare, VMware Carbon Black Endpoint is implemented to secure sensitive data from cyber threats. It supports organizations in minimizing risks associated with malware and ransomware, protecting their endpoint environments through AI-driven detection and real-time monitoring.
We monitor all Security Incident Response reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.