Carbon Black EDR is an on-premise incident response and threat hunting solution designed for security operations center (SOC) teams with offline environments or on-premises requirements.
N/A
Carbon Black Endpoint
Score 9.1 out of 10
N/A
Carbon Black Endpoint is an endpoint security and "next-gen antivirus (NGAV)" that uses machine learning and behavioral models to analyze endpoint data and uncover malicious activity to stop all types of attacks before they reach critical systems.
N/A
Pricing
Carbon Black EDR
Carbon Black Endpoint
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Carbon Black EDR
Carbon Black Endpoint
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
Carbon Black EDR
Carbon Black Endpoint
Features
Carbon Black EDR
Carbon Black Endpoint
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
Investigating suspicious behavior on an endpoint, ability to kill processes and run files on the host. Ability to view every change made on a system in a timeline format. Ability to search across the enterprise for indicators of compromise. Ability to pull files from the host for further analysis. Ability to safely communicate with an endpoint by isolating it from the rest of the network
Cb Defense works great to protect systems from known and unknown malware. It is simple to deploy and manage. You might run into some issues if you run a lot of unsigned applications or scripts in your IT environment. If that is the case, you can whitelist certain paths for your scripts to run. You can whitelist the individual applications and certs if you have them.
It uses a thin, low-performance consuming, client.
It constantly monitors endpoint activity and processes, efficiently, and effectively blocking harmful apps.
It not only identifies and blocks apps known to be harmful, but prevents unknown, suspicious processes/apps from executing unless allowed in a defined policy.
We have only needed support on a couple occasions (which is a positive), but they weren't able to really resolve either issue.
This brings me to my second con, which is that we have only used three sensor packages (the installed client) and have had issues crop up with two out of three.
Overall the support that we have received from Carbon Black has been a very positive experience. This was especially true when we were in the evaluation (POC) period and needed them to meet with us on a frequent basis. Additionally when we have had technical questions regarding deployment via SCCM, we were able to find the answers we needed by contacting their Support team.
We evaluated 3 other competitors and determined that Cb Defense was the best "bang for the buck" when it comes to Next-Generation Anti Virus. Their support (and sales) teams have been very helpful and offered a tremendous level of transparency. Our sales representative went above and beyond to work with us on making sure that the pricing fit in our budget. One of the other competitors that we reached out to never even contacted us back so they were immediately eliminated as a possible AV solution.
It actually stooped a memory scraper from stealing credit card data from our POS system. The casino was bought from awhile back, so coming into this place 4 years ago, we had a flat network. Not good with POS System. Well, a memory scraper was released (employee downloaded a game) and Cb Defense just killed it... This was before a live response, so we pulled the system from the network.
I can't really say anything negative, at least from an ROI point of view.
