CyberIndexBeta

Product

Endpoint agent for Broadcom Carbon Black App Control, application allowlisting software that locks down critical systems, fixed-function devices and end-of-life operating systems against unwanted changes. Carbon Black App Control Agent covers Linux, macOS and Windows. It is recorded as supporting malware detection. The stated market is Enterprise. Carbon Black App Control Agent is sold on a quoted basis rather than at a published price.

Current Version
8.11.0.1363
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-28

Vendor

VMware is a virtualisation company, and its presence in this index is the result of one acquisition: it bought Carbon Black, the endpoint security firm, in 2019 and sold its products as VMware Carbon Black Cloud, adding NSX for network segmentation on the infrastructure side. VMware itself was acquired by Broadcom in November 2023, and the Carbon Black products moved with it. They are now sold by Broadcom, whose security division also holds Symantec's enterprise business, so what were three separate companies — Symantec, Carbon Black and VMware — are now branches of one owner. Products listed here under the VMware name should be read as historical branding: the technology is still sold, but the vendor on the invoice is Broadcom, and the VMware prefix has been dropped from the Carbon Black product names. Vendor page →

Website
vmware.com
Country
United States
Headquarters
Palo Alto, United States
Year Established
1998
Customers
20K organisations
Users
10M devices protected
Revenue
$13.4B (2022)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral DetectionkeyNot known
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

11 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 8.11.0.1363macOSreleased 2026-09-09
  • 8.9.2Linux
  • 8.5.0.103Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Common Criteria1 expiredUS 2022-03-03
OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 8.9.2 (Linux)evidence
  • 2026-10-12Certification addedCertification expired: Common Criteriaevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20New versionNew version: 8.11.0.1363 (macOS)evidence
  • 2026-09-20New versionNew version: 8.9.0.4763437 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 8.5.0.103 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 8.5.0.103evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.