Security & Cybersecurity · head to head
CrowdStrike Falcon vs VMware Carbon Black
CrowdStrike Falcon
Security & Cybersecurity
Stop breaches with AI-native cybersecurity
- From
- $7.99/month
- Rated
- -
V
VMware Carbon Black
Security & Cybersecurity
Intelligent endpoint and workload security
- From
- On request
- Rated
- -
The short version
- They diverge on capability: CrowdStrike Falcon covers Endpoint detection and response, VMware Carbon Black covers Behavioral EDR.
Where they differ
Only the attributes on which CrowdStrike Falcon and VMware Carbon Black actually diverge.
| Attribute | CrowdStrike Falcon | VMware Carbon Black |
|---|---|---|
| Starting price | $7.99/month | On request |
| Platforms | Windows, macOS, Linux | Desktop, Api |
| Founded | 2011 | 2002 |
Identical on both: pricing model (subscription), free tier (No), user rating (Not yet rated), category (Security & Cybersecurity).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in CrowdStrike Falcon
- Endpoint detection and response
- Threat intelligence
- IT hygiene
- USB device control
- Firewall management
- Threat graph
- Real-time response
- SIEM platforms
Only in VMware Carbon Black
- Behavioral EDR
- Threat hunting
- Live response
- Audit and remediation
- Device control
- App control
- Workload protection
- VMware vSphere
Both cover
- Next-gen antivirus
- Splunk
- ServiceNow
- AWS
- Azure
- SOC2 Type 2
- FedRAMP
- PCI-DSS
- HIPAA
What people use each for
The jobs each tool is most often brought in to do.
CrowdStrike Falcon
- Small endpoint deployments via Falcon Go with per-device pricingnot VMware Carbon Black
- Mid-market organisations via Falcon Pro or Enterprise with advanced threat detectionnot VMware Carbon Black
- Organisations requiring custom managed detection and response via Falcon Completenot VMware Carbon Black
VMware Carbon Black
- Endpoint Securitynot CrowdStrike Falcon
- Edrnot CrowdStrike Falcon
- Workload Securitynot CrowdStrike Falcon
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
CrowdStrike Falcon
- Falcon Go tier limited to maximum of 100 devices
- Falcon Complete Next-Gen MDR requires custom quote; pricing not published
- Higher tiers (Enterprise and above) feature gatekeeping for threat hunting and identity protection
VMware Carbon Black
Nothing recorded yet. See the VMware Carbon Black review.
Pricing, plan by plan
CrowdStrike Falcon
$7.99/monthNo published plan breakdown. See the CrowdStrike Falcon review.
VMware Carbon Black
On request- CB Endpoint StandardFree
- NGAV
- Behavioral EDR
- Device control
- CB Endpoint AdvancedFree
- All Standard features
- Threat hunting
- Audit and remediation
- CB Endpoint EnterpriseFree
- All Advanced features
- Advanced threat hunting
- Live response
Which should you pick?
Choose CrowdStrike Falcon if
- You need endpoint detection and response.
- You work on Windows, macOS, Linux.
- You also want threat intelligence.
Choose VMware Carbon Black if
- You need behavioral edr.
- You work on Desktop, Api.
- You also want threat hunting.
Questions people ask
- Is CrowdStrike Falcon or VMware Carbon Black better?
- Neither clearly leads. CrowdStrike Falcon starts at $7.99/month and VMware Carbon Black at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, CrowdStrike Falcon or VMware Carbon Black?
- CrowdStrike Falcon starts at $7.99/month and VMware Carbon Black at On request.
- Does CrowdStrike Falcon or VMware Carbon Black run on more platforms?
- CrowdStrike Falcon runs on Windows, macOS, Linux. VMware Carbon Black runs on Desktop, Api.
- What is CrowdStrike Falcon best used for?
- CrowdStrike Falcon is most often used for small endpoint deployments via falcon go with per-device pricing, mid-market organisations via falcon pro or enterprise with advanced threat detection, organisations requiring custom managed detection and response via falcon complete. Of those, small endpoint deployments via falcon go with per-device pricing and mid-market organisations via falcon pro or enterprise with advanced threat detection are not what VMware Carbon Black is typically brought in for.
- What can CrowdStrike Falcon do that VMware Carbon Black cannot?
- CrowdStrike Falcon covers Endpoint detection and response, Threat intelligence, IT hygiene, USB device control. VMware Carbon Black covers Behavioral EDR, Threat hunting, Live response, Audit and remediation. Both handle Next-gen antivirus, Splunk, ServiceNow, AWS.