CyberIndexBeta

Product

The endpoint agent of Carbon Black App Control, the application control product formerly known as CB Protection and the Bit9 Security Platform, now sold by Broadcom. It runs on Linux, macOS and Windows. It is recorded as supporting malware detection. It is aimed at Enterprise buyers. Cb Protection Agent is sold on a quoted basis rather than at a published price.

Current Version
8.11.0
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-28

Vendor

Carbon Black was one of the first companies to argue that endpoint security should record what happens on a machine continuously, the way a flight recorder does, so that an investigator can replay an intrusion rather than infer it from an alert. It came together from two firms: Bit9, an application allowlisting company, and Carbon Black, which made the recorder; they merged in 2014 and took the Carbon Black name in 2016. It has changed hands twice since. VMware bought it in 2019, and Broadcom acquired VMware in 2023, so the products are now part of Broadcom's security division alongside Symantec's enterprise range. The line still reflects both halves of the original merger: Carbon Black App Control is the descendant of Bit9's allowlisting product, still used to lock down fixed-function machines such as tills and industrial controllers, while Carbon Black Cloud Endpoint Standard and Carbon Black EDR carry the recording and detection side. Bit9 also appears separately in this index; it is the same lineage under its original name. Vendor page →

Country
United States
Headquarters
Waltham, United States
Year Established
2002
Customers
5,600 organisations
Users
10M devices protected
Revenue
$70.6M (2015)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral DetectionkeyNot known
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

11 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 8.11.0macOS
  • 8.9.2Linux
  • 8.1.0.3546(Patch2)Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 8.11.0 (macOS)evidence
  • 2026-10-28New versionNew version: 8.9.2 (Linux)evidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: 8.9.4 (macOS)evidence
  • 2026-09-20New versionNew version: 8.9.0 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-09New versionNew version: 8.1.0.3546(Patch2) (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 8.1.0.3546(Patch2)evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.