VMware Carbon Black Cloud

Carbon Black Cloud is an endpoint detection and response platform that records endpoint behavior and helps investigate, contain, and remediate suspicious activity. That behavior-based investigation is different from relying only on known malware signatures.

Broadcom completed its acquisition of VMware in 2023, so Carbon Black remains a VMware-branded product while sitting within Broadcom's VMware business. Check the current contract and product name when comparing editions, because branding has changed around the acquisition.

Carbon Black Cloud is centered on endpoint threat detection and response, while Tanium is a broader endpoint management and visibility platform with security modules. They can overlap in response workflows, but they answer different primary questions: whether behavior is malicious and what exists and how it is managed.

Carbon Black Cloud uses endpoint sensors and supports major desktop and server platforms, including Windows, macOS, and Linux in supported configurations. Check Broadcom's sensor matrix for the exact operating-system version before deployment, because support is version-specific.