Editorial overview
Aggregated Overview
Carbon Black offers broad endpoint, EDR, application control and workload capabilities, with documented APIs and integrations. G2 reviews are generally positive, but reviewers also mention cost, dashboard responsiveness and configuration complexity.
This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.
Overview
Carbon Black is Broadcom’s security software portfolio for protecting endpoints, servers, virtual machines and cloud workloads. Its products combine prevention, behavioral analytics, endpoint detection and response, threat hunting, application control and remediation.
The portfolio includes Carbon Black Endpoint, Carbon Black Cloud, Carbon Black EDR, Carbon Black App Control and Carbon Black Workload. Carbon Black originated as Bit9 in 2002 and became part of Broadcom after Broadcom completed its VMware acquisition on November 22, 2023.
Decision guideCarbon Black Decision Snapshot
A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.
PlatformsAPI, Cloud, Linux, macOS, Web, Windows
TechZella assessment7.9/10
Editorial assessmentCarbon Black Pros & Cons
Pros
- Covers endpoint prevention, EDR, application control and workload protection.
- Provides detailed endpoint telemetry for investigation and threat hunting.
- Offers documented REST APIs, API keys, SDKs and integration resources.
- Supports Windows, macOS and Linux endpoint environments.
- Includes cloud-native and on-premises product options.
Cons
- Public pricing is not available, requiring a sales or partner engagement.
- The portfolio contains several products and editions, which can complicate selection.
- Some independent reviewers report dashboard slowness, configuration effort or compatibility issues.
- Advanced capabilities may require dedicated security operations expertise.
Security researchSecurity & Privacy
For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.
Security posture at a glance
| Deployment | Cloud-native and on-premises product options |
|---|
Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.
Plans & pricingCarbon Black Pricing & Plans
Carbon Black
Contact sales
Custom contract
Broadcom does not publish standard public pricing. Customers are directed to Broadcom partners or sales representatives. No official public free trial was identified.
Check current pricing →Pricing may change. Verify current plans on the vendor's website.
Cost contextTotal Cost & Hidden Costs
The sticker price is rarely the whole cost. TechZella did not find published figures for the items below in the sources reviewed, so confirm them with the vendor before budgeting.
Implementation time
Not publicly documented. Ask for a typical onboarding and migration timeline for a team of your size, and whether paid onboarding is required.
Hosting & infrastructure
Not publicly documented for this product. For SaaS, hosting is normally part of the subscription; for self-hosted or hybrid deployments, budget for servers, backups, security patching and admin time.
Hidden fees & add-ons
No overage, add-on or premium-support fees were documented in the reviewed sources. Request a written quote that lists usage limits, minimum seats, integrations, support tiers and renewal terms.
Compare optionsCarbon Black Competitors & Alternatives
Compare similar products directly, then see which alternatives may make more sense when your requirements differ.
Direct competitors
These products address broadly similar requirements. The descriptions focus on documented reasons a buyer might compare them with Carbon Black.
CrowdStrike FalconCrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data and security operations protection.
SentinelOne SingularityUnified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and third-party telemetry.
Palo Alto Networks Cortex XDRAI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data for threat prevention, detection, investigation, and response.
Trellix Endpoint SecurityEnterprise endpoint protection combining malware prevention, firewall, application control, detection, investigation and centralized management.
CapabilitiesCarbon Black Features
Endpoint Protection
- Next-generation antivirus
- Behavioral threat detection
- Malware and non-malware prevention
- Living-off-the-land attack detection
- Ransomware detection and prevention
- Custom detection rules
Detection and Response
- Endpoint activity telemetry
- Threat investigation
- Attack-chain visualization
- Threat hunting
- Live response
- Remote remediation
- Alert prioritization
Application and Workload Security
- Positive security model
- Application allowlisting
- Change prevention
- Cloud workload protection
- Hybrid cloud visibility
- CIS benchmark support
Integrations and API
- REST APIs
- API-key authentication
- Python SDK
- Syslog alert forwarding
- Data forwarding
- Security-stack integrations
Product detailsCarbon Black Specifications
| Deployment | Cloud-native and on-premises product options |
|---|
| Supported operating systems | Windows, macOS and Linux |
|---|
| Primary interface | Web console |
|---|
| API | Carbon Black Cloud REST APIs, product APIs and Python SDK |
|---|
| Integrations | Syslog-capable SIEM platforms, documented APIs and security-stack integrations |
|---|
| Free Trial | Not publicly listed |
|---|
| Pricing model | Custom quote through Broadcom or partners |
|---|
| Vendor | Broadcom |
|---|
| Origin | Founded as Bit9 in 2002 |
|---|
Our evidence-based assessmentTechZella Score
A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.
7.9/10Moderate confidence
Carbon Black offers broad endpoint, EDR, application control and workload capabilities, with documented APIs and integrations. G2 reviews are generally positive, but reviewers also mention cost, dashboard responsiveness and configuration complexity.
Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.
Independent review sources
Carbon Black Ratings & Reviews
Ratings are published by the respective review platforms and may change over time.
Common questionsCarbon Black FAQs
Answers begin with the clearest available response, followed by the context that helps you act on it.
What is Carbon Black?
Carbon Black is Broadcom’s portfolio of endpoint protection, endpoint detection and response, application control and workload security products.
Which operating systems does Carbon Black support?
Carbon Black Endpoint Standard documentation lists Windows, macOS and Linux support. Exact versions depend on the sensor release and product edition.
Does Carbon Black have an API?
Yes. Carbon Black Cloud provides platform and product-specific REST APIs, API keys, a Python SDK and integration documentation.
Does Carbon Black integrate with SIEM tools?
Yes. Endpoint Standard can forward alert data to systems that accept standard Syslog data. Carbon Black also documents broader APIs and integration resources.
Is Carbon Black available as a free trial?
No official public free-trial offer was identified in the reviewed Broadcom materials. Prospective customers are directed to sales or partners.
Community feedback
Reviews
No reviews yet. Be the first to share your experience.
Write a Review
Please log in to submit a review.
DirectoryRecently added Endpoint Detection and Response