Skip to content
Carbon Black was acquired by Broadcom (via VMware).
Brief
Carbon Black

Carbon Black

Carbon Black delivers cloud-native endpoint security that collects unfiltered endpoint data to detect, prevent, and respond to advanced threats in real time, consolidating multiple security tools into a single platform and agent.

vmware.comSanta Clara, California, United StatesFounded 2002

Last updated May 11, 2026 by ATDb automated enrichment · Connections updated May 11, 2026

Industry
Cybersecurity / Endpoint Security
Business Model
SaaS
Target Market
Enterprise
Employee Count
1001-5000
Funding
$190M
Revenue Range
$200M-$400M
Parent Company
Broadcom (via VMware)
API Available
Yes
Market Position

A leading endpoint detection and response (EDR) and next-generation antivirus (NGAV) platform, now part of Broadcom's VMware security portfolio, competing at the top tier of the enterprise endpoint security market.

Overview

Carbon Black, now operating as VMware Carbon Black under Broadcom's ownership, is a cybersecurity company specializing in endpoint protection, detection, and response (EDR). Originally founded as Bit9 in 2002, the company rebranded to Carbon Black in 2016 after acquiring the Carbon Black endpoint detection and response product line. It quickly became one of the most recognized names in next-generation antivirus (NGAV) and EDR, going public on NASDAQ in 2018 before being acquired by VMware in 2019 for approximately $2.1 billion. Carbon Black's platform leverages continuous endpoint data collection and behavioral analytics to detect and prevent sophisticated cyberattacks, including ransomware, fileless malware, and advanced persistent threats (APTs). Its cloud-native architecture enables security teams to collect and analyze unfiltered endpoint data at scale, providing deep visibility into attacker behavior and enabling faster incident response. The platform consolidates multiple security capabilities — including NGAV, EDR, threat hunting, and vulnerability management — into a single agent and console. Following VMware's acquisition by Broadcom in 2023, Carbon Black continues to operate as a key component of Broadcom's security portfolio. The product suite remains actively marketed and developed, serving enterprise customers across industries including finance, healthcare, government, and technology. Carbon Black competes directly with CrowdStrike, SentinelOne, Microsoft Defender, and Palo Alto Networks Cortex XDR in the highly competitive endpoint security market.

Products & Features

CB Defense (Carbon Black Cloud Endpoint Standard)

Next-generation antivirus and behavioral EDR solution delivered via the cloud, replacing legacy AV with streaming prevention.

Carbon Black Cloud Enterprise EDR

Advanced threat hunting and incident response tool providing continuous and centralized recording of endpoint activity.

Carbon Black Cloud Workload

Endpoint and workload protection purpose-built for securing modern data centers and cloud-native workloads.

Carbon Black Cloud Audit and Remediation

Real-time asset inventory and system auditing tool enabling rapid remediation of vulnerabilities and misconfigurations.

CB ThreatHunter

Proactive threat hunting solution leveraging behavioral analytics and threat intelligence to uncover hidden attackers.

Carbon Black App Control

Application control and whitelisting solution that prevents unauthorized software from executing on critical systems.

Key Features
Continuous endpoint data collection and recordingBehavioral analytics and AI-driven threat detectionCloud-native single-agent architectureReal-time threat prevention and responseThreat hunting with unfiltered endpoint telemetryRansomware and fileless malware protectionVulnerability and risk assessmentIntegration with SIEM and SOAR platformsManaged Detection and Response (MDR) services
Use Cases
Endpoint threat detection and responseRansomware prevention and recoveryThreat hunting and forensic investigationCompliance and audit reportingCloud workload and container securityZero-day and fileless malware preventionIncident response and remediationApplication control and whitelisting for critical infrastructure
Customer Segments
Large enterprises and Fortune 500 companiesGovernment and public sector agenciesFinancial services and banking institutionsHealthcare organizationsTechnology companiesManaged Security Service Providers (MSSPs)

Explore further

2 views