No more typing reviews! Try our Samantha, our new voice AI agent.

Intercept X Endpoint vs VMware Carbon Black App Control comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
120
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Intercept X Endpoint
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (14th), Endpoint Detection and Response (EDR) (13th), ZTNA (13th), Managed Detection and Response (MDR) (11th), Extended Detection and Response (XDR) (15th), Ransomware Protection (3rd)
VMware Carbon Black App Con...
Average Rating
9.2
Reviews Sentiment
6.8
Number of Reviews
8
Ranking in other categories
Application Control (7th)
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Intercept X Endpoint1.8%
Microsoft Defender for Endpoint6.5%
CrowdStrike Falcon5.6%
Other86.1%
Endpoint Protection Platform (EPP)
Application Control Mindshare Distribution
ProductMindshare (%)
VMware Carbon Black App Control9.9%
ThreatLocker Zero Trust Platform15.0%
Zscaler Zero Trust Exchange Platform13.1%
Other62.0%
Application Control
 

Q&A Highlights

TT
IT Manager at a wellness & fitness company with 51-200 employees
Dec 03, 2020
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has prevented attacks and keeps our daily work productive and secure
I rate Intercept X Endpoint a 10 out of 10 because it is working very fine for my environment and has prevented loss of productivity. I choose 10 out of 10 because Intercept X Endpoint protects my environment well, featuring web control, peripheral control, Threat Analysis Center, application control, and DLP alongside being accessible from cloud services. I advise others looking into using Intercept X Endpoint to choose Sophos for a cloud solution due to its AI and behavior-based detection capabilities. I believe Intercept X Endpoint is the best EDR solution, and I would always recommend it to customers because it is very effective. My overall review rating for Intercept X Endpoint is 10 out of 10.
AS
Security Administrator at EJADA
We can isolate problem machines and limit their access
We use App Control to scan the network for virtual machines that have unauthorized applications. We can isolate the problem VMs and control application access.  More than two years. I rate Carbon Black App Control 10 out of 10 for stability. I rate App Control six out of 10 for scalability.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The one feature of Palo Alto Networks Traps that our organization finds most valuable is the App ID service."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"The most valuable feature of Cortex XDR by Palo Alto Networks is its machine-learning capabilities. Additionally, there is full integration with other solutions."
"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."
"The behavior-based detection feature is valuable."
"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."
"It's very stable. I've never experienced downtime for the ASM console or ASM core."
"The scalability of Cortex XDR by Palo Alto Networks is very good."
"The product is user-friendly."
"One reason why I have stuck with Sophos is because it grabs it and deals with it, and if it's known malware, it can quarantine it or delete it."
"It is cost-effective."
"I would advise anybody who is using a Sophos firewall and is looking to migrate to another solution to give Intercept X the serious consideration it deserves because the Sophos firewall integrates well with the Intercept X solution and that is an advantage."
"Since it's cloud-managed, the solution is easy to administer, especially if the person using it is in a different geophysical location."
"The initial setup is simple."
"The package we use also comes with spam filtering features, which are quite useful."
"It is a very scalable solution."
"Overall, this is a good product and one that I recommend."
"Carbon Black offers a total lockdown solution; it shows us the attacks that are being attempted against our infrastructure and how we are being protected."
"All the functions within VMware Carbon Black App Control are valuable."
"The visibility, reporting, and the ability to stop or prevent malicious or undesired applications from being installed are the most valuable features."
"The visibility is valuable."
"It offers a sense of security where anything that comes in, regardless of what it is, unless you approve it manually, it's not going to run."
"The effectiveness of application whitelisting is very good."
"If any malicious activity, like VAT viruses, anything RNE, ZOD malware, or something similar, comes in we know that unless we approve it, it's going to be blocked."
 

Cons

"It would be good to have a better way to search for a file within the UI."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly."
"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."
"Product might have some bugs."
"Cortex XDR by Palo Alto Networks is a strong tool, but it is true that digesting information sometimes makes the tool go a little bit slower."
"When it comes to core analysis, and security analysis, Cortex needs to provide more information."
"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."
"If we can lower the price, it will be fantastic because it will generate more revenue for us."
"This solution is not in the high ratings on many of the top review sites. This solution has to be near the top for me to continue using it."
"Should include additional integration."
"The Data Loss Prevention module can be better. It should also have threat hunting capabilities."
"There is a licensing issue with Intercept X Endpoint; these licenses are user-based, and most of our customers require per-device licenses because they use one PC for multiple accounts, which presents a problem."
"The problem is that if you have a lot of different components going on, each managed under a different umbrella, then you're going to be spending a lot of time hopping back and forth between the different components to see, "Well, I got hit here. What did my firewall see? I got hit in the firewall, the firewall says it allowed that attack in, did it land on anything to compromise any of my endpoints?""
"The initial setup is a lot harder than, for example, Carbon Black. It's more difficult and complex."
"Features that should be improved in the upgrade involve the excessive consumption of the the solution's processor, RAM and resources."
"Its setup is very complex, and it requires guidance from the support team, but it is well worth the effort."
"I would like to see the addition of some more features that are in other, similar solutions."
"The reporting is not good and needs to be improved."
"Another issue is that even sometimes if you approve, for example, Adobe as a publisher, you say any product or anything that's from Adobe has to run. It generally runs, but especially in a large environment and with a lot of users, sometimes, due to some certification validation issues or some other issue, it might stop the process from running. Genuine processes like Adobe and Chrome can get blocked. so that needs to be improved."
"The solution should have overhead in keeping lists of applications that you want don't want to run."
"The initial setup is somewhat complex."
"Carbon Black does not use the database for identifying the file, the fields, or malware."
"I rate App Control six out of 10 for scalability."
 

Pricing and Cost Advice

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"The cost depends on your chosen license type, like Pro or other licenses."
"It has a yearly renewal."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"I am using the Community edition."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The price is pretty good."
"It is not very expensive but I don't have specific pricing details. The licensing is usually done on yearly basis."
"We have an annual subscription."
"The solution’s pricing is high."
"The solution requires an annual subscription."
"The solution is not expensive."
"You are able to purchase more licenses for the number of devices or servers that you require. There are many other features available but our license does not include them, such as XDR, which is endpoint detection and response. We have not explored the new features as of yet but plan to in the coming future."
"While I do not have much experience dealing with the price, we have been entitled to a substantial discount on the solution in our use of it as an educational tool."
"The pricing for this product is competitive and our customers who told us that often, Carbon Back is the cheaper solution."
"Its price is reasonable and what is expected for these types of products."
"We pay a fee for support, which is renewed annually."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Answers from the Community

TT
IT Manager at a wellness & fitness company with 51-200 employees
Dec 3, 2020
Dec 3, 2020
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
2 out of 3 answers
BA
Sales and Mktg Manager at a tech vendor with 11-50 employees
Dec 12, 2019
Officially the answer is Intercept X and anti-virus from other mfgs. can co-exist on an endpoint. Carbon Black is a bit more than just AV, so I would get a free 30-day trial of Int X and try it on one endpoint.
AL
President/Owner at LibreTech
Dec 13, 2019
I’m not sure but if you are using Sophos Intercept X I would suggest just adding the Sophos EDR component.
 

Top Industries

By visitors reading reviews
Comms Service Provider
13%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
10%
Comms Service Provider
9%
Manufacturing Company
9%
Financial Services Firm
20%
Outsourcing Company
17%
Computer Software Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise21
Large Enterprise56
By reviewers
Company SizeCount
Small Business76
Midsize Enterprise21
Large Enterprise22
By reviewers
Company SizeCount
Small Business4
Large Enterprise4
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine lea...
What is your experience regarding pricing and costs for Sophos Intercept X?
Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protecti...
What needs improvement with Sophos Intercept X?
Intercept X Endpoint can be improved in several ways. Currently, it is only available on the cloud, and having it ava...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Sophos Intercept X
CB Protection, Carbon Black CB Protection
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Flexible Systems
Kaas Tailored, Core-Mark, Indeed, Hologic, Landmark Credit Union, Project Worldwide
Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: October 2026.
917,433 professionals have used our research since 2012.