Carbon Black

Carbon Black is Broadcom’s security software portfolio for protecting endpoints, servers, virtual machines and cloud workloads. Its products combine prevention, behavioral analytics, endpoint detection and response, threat hunting, application control and remediation.

The portfolio includes Carbon Black Endpoint, Carbon Black Cloud, Carbon Black EDR, Carbon Black App Control and Carbon Black Workload. Carbon Black originated as Bit9 in 2002 and became part of Broadcom after Broadcom completed its VMware acquisition on November 22, 2023.

Carbon Black Cloud provides next-generation antivirus, behavioral EDR, ransomware detection, custom detection rules, endpoint telemetry, investigation tools and real-time audit and remediation.

Carbon Black EDR supports continuous endpoint activity recording, attack-chain visualization, threat hunting and live response. App Control uses an allowlist-oriented positive security model, while Workload extends visibility and protection to public, private and hybrid cloud environments.

The platform supports integrations through APIs, SDKs, data forwarding and security-stack connectors. Endpoint Standard can forward alert data to SIEM platforms that accept standard Syslog data.

Broadcom does not publish standard Carbon Black list prices on its product pages. The official buying path directs customers to Broadcom partners or sales representatives.

Publicly listed pricing varies by product, edition, endpoint or workload count, deployment model and contract terms. No official free-trial offer was publicly listed in the reviewed product materials.

Pros: Broad product coverage, strong endpoint telemetry, behavioral detection, threat-hunting workflows, documented APIs and support for cloud and on-premises deployments.

Cons: Pricing is not transparent, product selection can be complex, and independent reviews mention configuration effort, occasional dashboard slowness and resource or compatibility concerns.

Comparable products include Microsoft Defender for Endpoint, SentinelOne Singularity, Sophos Endpoint, CrowdStrike Falcon, Trellix Endpoint Security and Palo Alto Networks Cortex XDR. The closest choice depends on deployment requirements, existing security tooling, cloud coverage and preferred response workflows.

What is Carbon Black? Carbon Black is Broadcom’s portfolio of endpoint protection, endpoint detection and response, application control and workload security products.

Which operating systems does Carbon Black support? Carbon Black Endpoint Standard documentation lists Windows, macOS and Linux support. Exact versions depend on the sensor release and product edition.

Does Carbon Black have an API? Yes. Carbon Black Cloud provides platform and product-specific REST APIs, API keys, a Python SDK and integration documentation.

Does Carbon Black integrate with SIEM tools? Yes. Endpoint Standard can forward alert data to systems that accept standard Syslog data. Carbon Black also documents broader APIs and integration resources.

Is Carbon Black available as a free trial? No official public free-trial offer was identified in the reviewed Broadcom materials. Prospective customers are directed to sales or partners.