Carbon Black
Carbon Black provides cloud-native endpoint security that uses behavioral analytics and continuous data collection to detect and stop advanced threats that evade traditional security tools, giving security teams unmatched visibility and response capabilities.
Last updated Jun 23, 2026 by ATDb automated enrichment
At a glance
- Employees
- 1001-5000
- Funding
- $190M
- Revenue
- $200M-$500M
- Stock
- AVGO
About
A leading endpoint detection and response (EDR) and NGAV platform, now operating under Broadcom following the VMware acquisition, competing at the top tier of the enterprise endpoint security market.
Carbon Black is a cybersecurity platform specializing in endpoint detection and response (EDR), next-generation antivirus (NGAV), and endpoint protection. Originally founded as Bit9, the company rebranded to Carbon Black and built a reputation as a pioneer in behavioral-based endpoint security, leveraging a cloud-native architecture to deliver continuous visibility and protection across enterprise environments. The platform collects and analyzes endpoint data in real time, enabling security teams to detect, prevent, and respond to sophisticated threats including ransomware, fileless attacks, and advanced persistent threats (APTs). Carbon Black was acquired by VMware in 2019 and subsequently operated under the VMware Carbon Black brand, integrating deeply with VMware's broader security and virtualization portfolio. Following Broadcom's acquisition of VMware in 2023, Carbon Black became part of Broadcom's enterprise software division, where it continues to operate as a distinct product line available at broadcom.com/products/carbon-black. The platform remains a significant offering in the endpoint security market, serving large enterprises and government organizations that require robust, scalable threat detection and response capabilities. Within the competitive endpoint security landscape, Carbon Black competes with CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, and Palo Alto Networks Cortex XDR. Its key differentiators include a cloud-native data collection model, behavioral analytics that go beyond signature-based detection, and a unified console that consolidates NGAV, EDR, and threat hunting into a single platform. Broadcom's stewardship positions Carbon Black within a broader enterprise security and infrastructure ecosystem, targeting large-scale organizations with complex security requirements.
Business model
SaaS
Target market
Enterprise
What they offer
Carbon Black Cloud Endpoint Standard
Next-generation antivirus (NGAV) and behavioral EDR for real-time threat prevention and detection on endpoints.
Carbon Black Cloud Enterprise EDR
Advanced threat hunting and incident response with continuous and centralized recording of endpoint activity.
Carbon Black Cloud Audit and Remediation
Real-time endpoint query and remediation tool enabling IT and security teams to assess and fix vulnerabilities at scale.
Carbon Black Cloud Workload
Endpoint protection purpose-built for modern workloads running in virtualized, private cloud, and hybrid cloud environments.
Carbon Black App Control
Application allowlisting and change control solution that locks down servers and critical systems to prevent unauthorized software execution.
Key features
Use cases
Customer segments
Tech & specs
Technology stack
Security & compliance
Deployment
API
Yes
- 2002 · Founded
- Still operating as part of VMware