CyberIndexBeta

Product

Endpoint sensor for Carbon Black EDR, an incident response and threat hunting product for security operations teams that need on-premises or offline deployment. It records endpoint activity for investigation. Supported platforms are Linux, macOS and Windows. It is recorded as supporting behavioral detection. It is aimed at Enterprise buyers. VMware Carbon Black EDR Sensor is sold on a quoted basis rather than at a published price.

Current Version
7.5.1
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-28

Vendor

VMware is a virtualisation company, and its presence in this index is the result of one acquisition: it bought Carbon Black, the endpoint security firm, in 2019 and sold its products as VMware Carbon Black Cloud, adding NSX for network segmentation on the infrastructure side. VMware itself was acquired by Broadcom in November 2023, and the Carbon Black products moved with it. They are now sold by Broadcom, whose security division also holds Symantec's enterprise business, so what were three separate companies — Symantec, Carbon Black and VMware — are now branches of one owner. Products listed here under the VMware name should be read as historical branding: the technology is still sold, but the vendor on the invoice is Broadcom, and the VMware prefix has been dropped from the Carbon Black product names. Vendor page →

Website
vmware.com
Country
United States
Headquarters
Palo Alto, United States
Year Established
1998
Customers
20K organisations
Users
10M devices protected
Revenue
$13.4B (2022)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

11 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 7.5.1Linuxreleased 2026-09-30
  • 7.4.1.18957Windows
  • 7.4.0.90210macOSreleased 2025-10-17

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Common Criteria1 expiredUS 2021-07-28
OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 7.5.1 (Linux)evidence
  • 2026-10-12Certification addedCertification expired: Common Criteriaevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20New versionNew version: 7.4.0.90210 (macOS)evidence
  • 2026-09-20New versionNew version: 7.5.0.44727 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 7.4.1.18957 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 7.4.1.18957evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.