CyberIndexBeta

Product

Broadcom's cloud-delivered endpoint security platform, combining endpoint detection and response (EDR) with threat intelligence. A sensor on each endpoint reports to Carbon Black analytics and the cloud console. Supported platforms are Linux, macOS and Windows. It is recorded as supporting cloud-assisted scanning. The stated market is Enterprise. Carbon Black Cloud is sold on a quoted basis rather than at a published price.

Current Version
4.2.0.3361
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-12

Vendor

VMware is a virtualisation company, and its presence in this index is the result of one acquisition: it bought Carbon Black, the endpoint security firm, in 2019 and sold its products as VMware Carbon Black Cloud, adding NSX for network segmentation on the infrastructure side. VMware itself was acquired by Broadcom in November 2023, and the Carbon Black products moved with it. They are now sold by Broadcom, whose security division also holds Symantec's enterprise business, so what were three separate companies — Symantec, Carbon Black and VMware — are now branches of one owner. Products listed here under the VMware name should be read as historical branding: the technology is still sold, but the vendor on the invoice is Broadcom, and the VMware prefix has been dropped from the Carbon Black product names. Vendor page →

Website
vmware.com
Country
United States
Headquarters
Palo Alto, United States
Year Established
1998
Customers
20K organisations
Users
10M devices protected
Revenue
$13.4B (2022)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral DetectionkeyNot known
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted Scanningnative
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

11 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 4.2.0.3361Windowsreleased 2026-06-03
  • 3.8.2.53macOS
  • 2.16.3.7863591Linuxreleased 2026-06-05

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2023-09-20lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 2023 (Turla)2023-09-20
Technique-level detection: 32.2%Any detection: 67.8%Attack sub-steps evaluated: 143

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-12Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-20New versionNew version: 4.2.0.3361 (Windows)evidence
  • 2026-09-20New versionNew version: 2.16.3.7863591 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on Windowsevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 3.8.2.53 (macOS)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedSold to: Enterpriseevidence
  • 2026-08-20New versionNew version: 3.8.2.53evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.