CyberIndexBeta

Product

Scanning engine exposed over ICAP and a native API for embedding malware and content detection into storage systems and custom applications. It runs on Linux and Windows. Among the capabilities recorded for it are api integration, archive extraction, content disarm & reconstruction and icap / gateway integration. Its record also notes object storage scanning, threat intelligence and true file type verification. It is aimed at Enterprise buyers.

Current Version
9.3.1.3
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-10-05
Last Updated
2026-10-28

Vendor

Broadcom is a semiconductor company that became one of the largest enterprise software owners by acquisition, and its presence in this index is entirely the result of two purchases: Symantec's enterprise security business in 2019, and VMware — which by then owned Carbon Black — in 2023. What it sells here is Symantec Enterprise Cloud, including the Symantec Endpoint Security agent that descends from Symantec Endpoint Protection, alongside the Carbon Black products. The consumer Norton business was never part of the deal; it stayed behind as NortonLifeLock and is now part of Gen Digital, listed separately in this index. Broadcom's approach to acquired software is well documented and worth knowing: it concentrates on the largest customers and simplifies the product range, so buyers evaluating these products should confirm what is still sold and to whom. The technology is long-established and the laboratory record for the Symantec engine is deep, but the vendor relationship is quite different from the one that produced it. Vendor page →

Country
United States
Headquarters
Palo Alto, United States
Year Established
1961
Customers
100K organisations
Users
50M users
Revenue
$63.9B (2025)

Platforms

Linuxnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Multi-Engine ScanningkeyNot known
Archive Extractionkeynative
True File Type Verificationkeynative
Password-Protected Archive HandlingNot known
Hash Reputation LookupNot known
Content Disarm & Reconstructionkeynative
Sandbox AnalysisNot known
Threat Intelligencepartial
File-Based Vulnerability AssessmentNot known
File Structure ValidationNot known
DLP IntegrationNot known
API Integrationkeynative
ICAP / Gateway Integrationkeynative
Object Storage Scanningkeynative
Managed Upload PortalNot known
Central Management ConsoleNot known

9 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Scanning Engines1 engineestimated by LLM: not disclosed by the vendor

2 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 9.3.1.3platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-05. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 9.3.1.3evidence
  • 2026-10-09Capability addedThreat Intelligence: limitedevidence
  • 2026-10-09Capability addedTrue File Type Verification: built inevidence
  • 2026-10-09Capability addedArchive Extraction: built inevidence
  • 2026-10-08Capability addedContent Disarm & Reconstruction: built inevidence
  • 2026-10-08New versionNew version: 9.2evidence
  • 2026-10-06Capability addedObject Storage Scanning: built inevidence
  • 2026-10-06Pricing plan addedPrice: price on requestevidence
  • 2026-10-06Platform addedRuns on Linuxevidence
  • 2026-10-06Platform addedRuns on Windowsevidence
  • 2026-10-06Product updatedSold to: Enterpriseevidence
  • 2026-10-05Capability addedAPI Integration: built inevidence
  • 2026-10-05Capability addedICAP / Gateway Integration: built inevidence
  • 2026-10-05Product createdNew product, listed in Malware File Scannerevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.