VMware Carbon Black

NEXT-GENERATION ANTIVIRUS + BEHAVIORAL EDR

Protect your organization and customer data with an easy-to-manage, cloud-native endpoint protection platform (EPP) that combines prevention and automated detection to defend your organization from today’s advanced cyber attacks. The VMware Carbon Black Cloud Endpoint Standard is a next-generation antivirus (NGAV) and endpoint detection and response (EDR) solution that protects against the full spectrum of modern cyber attacks. Using the VMware Carbon Black Cloud’s universal agent and console, the solution applies behavioral analytics to endpoint events to streamline detection, prevention, and response to cyber attacks.

Comprehensive Detection and Prevention

Cyber attackers are developing and innovating faster than traditional defenses can withstand. The VMware Carbon Black Cloud Endpoint Standard solution uses machine learning and behavioral models to analyze endpoint data and uncover malicious activity to stop all types of attacks before they reach critical systems.

  • Block malware, ransomware, non-malware, living off the land (LotL) and other emerging, never-before-seen attacks automatically, both online and offline.

  • Simplify deployment and operation with out-of-the-box policies and easily adapt protection to your organization.

  • Easily integrate into your environment and other security products with our open APIs and vast integration network.

Save Time & Money Investigating Attacks

The Endpoint Standard solution captures and stores endpoint activity, enabling a comprehensive view of any suspicious activity on your endpoints, including visibility into the entire attack chain, so you can quickly understand the impact of any attacks and take action.

  • Comprehensive on- and offline prevention against signatures, reputation, and 110+ core behaviors used by attackers, including MITRE ATT&CK TIDs.

  • Visualizes every stage of the attack with easy-to-follow attack chain details to uncover root cause in minutes.

  • Automatically scores and re-prioritizes alerts as suspicious behavior progresses over time.

  • Respond Immediately

    Traditional antivirus is less effective in stopping emerging attacks, and scans often slow system performance. Our all-in-one cloud-native platform enables you to automate operational tasks and easily integrate with your existing tools to boost the productivity of your endpoints and everyone on your team.

    • Enables administrators to immediately triage alerts by isolating endpoints, blacklisting applications, or terminating processes.

    • Secure shell into any endpoint on or off your network to perform full investigations and recommendations remotely.

    • Reduce downtime to endpoints and users with immediate response from a single agent and console.

    • Keep Ahead of the Latest Attacks

      Stay up to date on all the latest threats and gain valuable remediation tips from VMware Carbon Black’s expert Threat Analysis Unit team.

      • Get remediation tips and in-product alerts on the latest threats as they’re discovered.

      • Learn from former CISOs, hackers, and government security operatives about what’s normal, what’s not.

      • Gain access to an active community of experts and other VMware Carbon Black Cloud customers for peer knowledge sharing and tips on using the platform.

      • Simplify Your Security Stack to Drive Performance

      • Traditional antivirus is less effective in stopping emerging attacks, and scans often slow system performance. Our all-in-one cloud-native platform enables you to automate operational tasks and easily integrate with your existing tools to boost the productivity of your endpoints and everyone on your team.

        • Deploy seamlessly with a single agent utilizing less than 1% CPU and disk space per endpoint.

        • Open API framework supports direct integration across your security ecosystem.

        • Enterprise-scale management of sensors ensures low effort, high impact administration.