Software / Application Control / Carbon Black

Carbon Black

Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection, incident response, application control and workload protection.

7.9/10 TechZella Score
Visit Website ↗
Editorial overview

Aggregated Overview

Carbon Black offers broad endpoint, EDR, application control and workload capabilities, with documented APIs and integrations. G2 reviews are generally positive, but reviewers also mention cost, dashboard responsiveness and configuration complexity.

This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.

Decision guide

Carbon Black Decision Snapshot

A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.

Platforms

API, Cloud, Linux, macOS, Web, Windows

TechZella assessment

7.9/10

Overview

Carbon Black is Broadcom’s security software portfolio for protecting endpoints, servers, virtual machines and cloud workloads. Its products combine prevention, behavioral analytics, endpoint detection and response, threat hunting, application control and remediation.

The portfolio includes Carbon Black Endpoint, Carbon Black Cloud, Carbon Black EDR, Carbon Black App Control and Carbon Black Workload. Carbon Black originated as Bit9 in 2002 and became part of Broadcom after Broadcom completed its VMware acquisition on November 22, 2023.

Security research

Security & Privacy

For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.

Security posture at a glance

DeploymentCloud-native and on-premises product options

Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.

Capabilities

Carbon Black Features

Endpoint Protection

  • Next-generation antivirus
  • Behavioral threat detection
  • Malware and non-malware prevention
  • Living-off-the-land attack detection
  • Ransomware detection and prevention
  • Custom detection rules

Detection and Response

  • Endpoint activity telemetry
  • Threat investigation
  • Attack-chain visualization
  • Threat hunting
  • Live response
  • Remote remediation
  • Alert prioritization

Application and Workload Security

  • Positive security model
  • Application allowlisting
  • Change prevention
  • Cloud workload protection
  • Hybrid cloud visibility
  • CIS benchmark support

Integrations and API

  • REST APIs
  • API-key authentication
  • Python SDK
  • Syslog alert forwarding
  • Data forwarding
  • Security-stack integrations
Product details

Carbon Black Specifications

DeploymentCloud-native and on-premises product options
Supported operating systemsWindows, macOS and Linux
Primary interfaceWeb console
APICarbon Black Cloud REST APIs, product APIs and Python SDK
IntegrationsSyslog-capable SIEM platforms, documented APIs and security-stack integrations
Free TrialNot publicly listed
Pricing modelCustom quote through Broadcom or partners
VendorBroadcom
OriginFounded as Bit9 in 2002
Plans & pricing

Carbon Black Pricing & Plans

Carbon Black

Contact sales
Custom contract

Broadcom does not publish standard public pricing. Customers are directed to Broadcom partners or sales representatives. No official public free trial was identified.

Check current pricing →

Pricing may change. Verify current plans on the vendor's website.

Our evidence-based assessment

TechZella Score

A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.

7.9/10Moderate confidence
Features8.8
Ease of Use7.8
Value for Money6.8
Performance8.4
Support7.4
User Sentiment8.1

Carbon Black offers broad endpoint, EDR, application control and workload capabilities, with documented APIs and integrations. G2 reviews are generally positive, but reviewers also mention cost, dashboard responsiveness and configuration complexity.

Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.

Editorial assessment

Carbon Black Pros & Cons

Pros

  • Covers endpoint prevention, EDR, application control and workload protection.
  • Provides detailed endpoint telemetry for investigation and threat hunting.
  • Offers documented REST APIs, API keys, SDKs and integration resources.
  • Supports Windows, macOS and Linux endpoint environments.
  • Includes cloud-native and on-premises product options.

Cons

  • Public pricing is not available, requiring a sales or partner engagement.
  • The portfolio contains several products and editions, which can complicate selection.
  • Some independent reviewers report dashboard slowness, configuration effort or compatibility issues.
  • Advanced capabilities may require dedicated security operations expertise.
Independent review sources

Carbon Black Ratings & Reviews

Ratings are published by the respective review platforms and may change over time.

Community feedback

Reviews

No reviews yet. Be the first to share your experience.

Write a Review
Compare options

Carbon Black Competitors & Alternatives

Compare similar products directly, then see which alternatives may make more sense when your requirements differ.

Direct competitors

These products address broadly similar requirements. The descriptions focus on documented reasons a buyer might compare them with Carbon Black.

FAQ

What is Carbon Black? Carbon Black is Broadcom’s portfolio of endpoint protection, endpoint detection and response, application control and workload security products.

Which operating systems does Carbon Black support? Carbon Black Endpoint Standard documentation lists Windows, macOS and Linux support. Exact versions depend on the sensor release and product edition.

Does Carbon Black have an API? Yes. Carbon Black Cloud provides platform and product-specific REST APIs, API keys, a Python SDK and integration documentation.

Does Carbon Black integrate with SIEM tools? Yes. Endpoint Standard can forward alert data to systems that accept standard Syslog data. Carbon Black also documents broader APIs and integration resources.

Is Carbon Black available as a free trial? No official public free-trial offer was identified in the reviewed Broadcom materials. Prospective customers are directed to sales or partners.