--- title: SentinelOne vs Carbon Black description: How does SentinelOne stand up against Carbon Black? Get all the key details you need to evaluate these two vendors right here image: https://blog.ithq.pro/hubfs/2.png --- London, UK | [020 3997 7979](tel:02039977979) [![ITHQ_finall_ITHQ_LOGO_COLORS -1](https://blog.ithq.pro/hs-fs/hubfs/ITHQ_finall_ITHQ_LOGO_COLORS%20-1.png?width=2085&height=676&name=ITHQ_finall_ITHQ_LOGO_COLORS%20-1.png "ITHQ_finall_ITHQ_LOGO_COLORS -1")](https://ithq.pro/) - Strategies - [SAFE | Cyber Resilience](https://ithq.pro/safe) - [HCARS | Hybrid Cloud Infrastructure](https://ithq.pro/hcars) - Our Company - [What We Do](https://ithq.pro/about-us/what-we-do) - [About Us](https://ithq.pro/about-us) - [Careers](https://ithq.pro/about-us/careers) - [Resources](https://ithq.pro/about-us/resources) - Case Studies - [Struto](https://ithq.pro/about-us/case-study-struto) - [Les Ambassadeurs](https://ithq.pro/about-us/case-study-les-ambassadeurs) - [Partners](https://ithq.pro/partners) - [Insights](https://blog.ithq.pro) - [Contact Us](https://ithq.pro/contact-us) # SentinelOne vs Carbon Black **23 February 2023 | ITHQ Tech Team**   **SentinelOne or Carbon Black? Both platforms take a single-agent approach that meet multiple use cases to include EPP, EDR, threat hunting and remediation. Both also have innovator/visionary statuses (as of 2021) from independent comparisons.** [SentinelOne](https://ithq.pro/xdr-sentinelone) is now a Leader on Gartner's Magic Quadrant whereas Carbon Black retains its Visionary status. This could be because Carbon Black is more of a NGAV platform, whereas SentinelOne delivers a full EPP. This was highlighted in the recent MITRE ATT&CK APT 29 report, where Carbon Black missed 28 detections with SentinelOne only missing 7 (the lowest number of misses across all platforms tested). If you're looking for a next generation endpoint protection solution and these two are on your long list, here's a direct comparison page to help. [![Got questions about SentinelOne? Talk to an expert](https://no-cache.hubspot.com/cta/default/7543437/42e87838-611b-4860-a9f3-8d72c679b3a4.png)](https://cta-redirect.hubspot.com/cta/redirect/7543437/42e87838-611b-4860-a9f3-8d72c679b3a4)   ### Endpoint Protection: Key considerations - Is it easy to deploy and manage? - Is it dependent on cloud command and control for detection and response? - How effective has it been against zero-day attacks? - Do you have feature parity across Windows, Mac and Linux? - How does it perform in real world test scenarios? - What do other customers say about it? ### **Comparison of Business Benefits and Features** |   | ![carbon black logo](https://blog.ithq.pro/hs-fs/hubfs/carbon%20black%20logo.png?width=154&name=carbon%20black%20logo.png) | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=137&name=Vector_PRM.jpg) | | --- | --- | --- | | **Business Benefits** | | | | **Autonomous prevention, detection, and recovery from threats in real-time.** | Yes - Leverages cloud-delivered threat intelligence and custom watchlists to automate repetitive hunts. | Yes | | **Fast Recovery** | Partial / Manual | Yes - Can be automated or 1-click | | **OS freedom (Windows / Mac / Linux feature parity)** | No feature parity | Yes | | **Fewer alerts with more context** | Tanzu Observability dependent - context includes both the metrics and traces. | Yes | | **AI-powered prevention, detection, response, and threat hunting.** | Yes | Yes | | **API integration** | Yes - pull metrics from the Kubernetes APIs. | Yes | | **Scalability** | Yes - scale to thousands of containers. | Yes - Support for containers and serverless workloads, especially Kubernetes dynamic workloads. | | **Higher accuracy across entire attack surface.** |  Yes - Visualise entire attack chain with corresponding easy-to-follow details to uncover root causes. | Yes - Consistent identification of tactics and techniques in the MITRE Phase 2 evaluations. | | **Centralised Visibility** |  Yes - single agent and console. | Yes - full storyline. | | **Automation & Control** | Yes - VMWare uses Infrastructure as Code (IaC) so modifications are completely repeatable and can be processed automatically.  | Yes - Automated mitigation options via the Storyline Active Response Capability. | | **Data analytics** |  Yes - Store detailed forensic data for post-incident investigation. | No - SentinelOne does not have its own network security sources to add. | | Collection and reporting of; inventory, config and policy management of endpoint devices. | Yes - automate ongoing reporting on patch levels, user privileges, disk encryption status, and more to track and maintain a desired posture. | Yes | | Mobile Threat Defence | No  | Yes | | Ease of deployment | Yes - Simplify deployment with out-of-the-box policies.  | Yes - Excellent timeliness and quality of customer support. | | **Features** | | | | **AI across user endpoints, containers, cloud workloads, and IoT devices.** | Yes | Yes - New IoT discovery and protection capabilities in its Ranger product. | | **Static & Behavioural AI** | Yes - Consolidate threat intelligence for your environment to automatically detect suspicious behaviour. | Yes | | **Exploit protection** | Partial - cloud dependent. | Yes + context | | **Lateral movement** | Yes- Isolate infected systems and remove malicious files to prevent lateral movement. | Yes + context | | **Remediation** | Yes | Automated | | **Rollback** | No   | Automated | | **Integrated threat feeds** | Yes | Yes | | **Remote shell** | Yes - but limited command set. | Yes | | **Device control** | Yes - Gain visibility into precise details about current state of all devices - on and off the network. | Yes - Device discovery via Ranger. | | **Firewall control** | Yes - Secure end-of-life systems with allowlisting policies. | Yes | | **Bluetooth control** | No | Yes | | **Threat hunting** | Yes | Yes - full storyline | | **Deep visibility** | Yes - distributed tracing via Tanzu Observability. | Yes | | **Event Correlation** |  Yes | Yes | | **Execution Restriction** |  Yes - but false positives. | Yes | | **Vulnerability scanning** |  Yes - built-in risk scoring. | Yes - Priority list of vulnerable applications. | | **Security patching** |  Yes | Yes | | **Triage** |  Yes - Gain alert coverage and threat triage across your entire deployment. | Yes - Investigate in seconds with automated correlations and Storyline. | | **Disk Encryption** |  Yes | No - Missing add-on for fully featured DLP. |   [![Book my SentinelOne Demo I want to see complete XDR in action](https://no-cache.hubspot.com/cta/default/7543437/a2f562ea-0134-4ddd-b0ec-3e38ef3feb57.png)](https://cta-redirect.hubspot.com/cta/redirect/7543437/a2f562ea-0134-4ddd-b0ec-3e38ef3feb57) ### Industry and Peer Reviews #### Gartner Peer Insights | ![carbon black logo](https://blog.ithq.pro/hs-fs/hubfs/carbon%20black%20logo.png?width=151&name=carbon%20black%20logo.png) VMware Carbon Black  EDR | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=166&name=Vector_PRM.jpg) SentinelOne Endpoint Protection Platform by SentinelOne | | --- | --- | ![SentinelOneVsVMWareGartnerPeerInsightsCropped3](https://blog.ithq.pro/hs-fs/hubfs/SentinelOneVsVMWareGartnerPeerInsightsCropped3.png?width=698&name=SentinelOneVsVMWareGartnerPeerInsightsCropped3.png) #### Gartner Magic Quadrant for Endpoint Protection Platforms May 2021 ![GMQ_21_leaders_S1](https://blog.ithq.pro/hs-fs/hubfs/SentinelOne/GMQ_21_leaders_S1.png?width=645&name=GMQ_21_leaders_S1.png)   #### Independent Testing | ![carbon black logo](https://blog.ithq.pro/hs-fs/hubfs/carbon%20black%20logo.png?width=151&name=carbon%20black%20logo.png) | **TESTING BODY** | ![Vector_PRM](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=166&name=Vector_PRM.jpg) | | --- | --- | --- | | Scored good results in Telemetry | ![Mitre no background](https://blog.ithq.pro/hs-fs/hubfs/Mitre%20no%20background.png?width=148&name=Mitre%20no%20background.png) APT29 2020 | Scored record results: - Least missed detections - Most high-quality detections - Most correlated detections | | Top ROI score 2019 | ![NSS labs](https://blog.ithq.pro/hs-fs/hubfs/NSS%20labs.png?width=156&name=NSS%20labs.png) | Top ROI score and Recommended rating 2019 | | N/A | ![VB100virus](https://blog.ithq.pro/hs-fs/hubfs/VB100virus.png?width=166&name=VB100virus.png) | 99.8% block rate across Windows testing | | Only 1 false positive detection on Windows | ![1](https://blog.ithq.pro/hs-fs/hubfs/1.png?width=126&name=1.png) | 100% protection against zero-day malware attacks on Windows | | ![BestNDRWinner2021](https://blog.ithq.pro/hs-fs/hubfs/BestNDRWinner2021.png?width=142&name=BestNDRWinner2021.png) | ![SentinelOne_SE_Labs_Best_Innovator_WINNER_2021](https://blog.ithq.pro/hs-fs/hubfs/SentinelOne_SE_Labs_Best_Innovator_WINNER_2021.png?width=142&name=SentinelOne_SE_Labs_Best_Innovator_WINNER_2021.png) | In top 10 vendors Recognized for the commitment to pushing the boundaries of autonomous technology — delivering innovation at scale and speed, and shaping the endpoint market. | |  N/A | ![PassMarkLogo](https://blog.ithq.pro/hs-fs/hubfs/PassMarkLogo.png?width=226&height=79&name=PassMarkLogo.png) | Performs better than several legacy AV products for the following: - Quickest boot time - Quickest install time - Smallest install size - Lowest CPU usage during scan |   ### Pricing **All prices calculated at per endpoint per month, for comparison purposes.** **Pricing is 'starting from' and based on list pricing. It can be subject to change, volume discounts etc.** *Correct at February 2021* [![Pricing questions? Get in touch](https://no-cache.hubspot.com/cta/default/7543437/9665e892-94ef-48da-82cd-38ccc7c3352e.png)](https://cta-redirect.hubspot.com/cta/redirect/7543437/9665e892-94ef-48da-82cd-38ccc7c3352e)   | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=187&name=Vector_PRM.jpg)  Minimum purchase - 5 endpoints - only through ITHQ Payment can be billed monthly - only through ITHQ *To achieve these prices below, minimum purchase 100 endpoints, billed annually.* *Quote always required for accurate pricing* | | | | --- | --- | --- | | **Core** | **Control** | **Complete** | | $4.16 | $4.90 | $9.00 | | Includes full advanced EDR | All Core features plus device, firewall and bluetooth control | All Control features plus threat hunting and deep visibility |   | ![carbon black logo](https://blog.ithq.pro/hs-fs/hubfs/carbon%20black%20logo.png?width=178&name=carbon%20black%20logo.png) Minimum purchase - 100 endpoints Payment always billed annually | | | | --- | --- | --- | | **Standard** | **Advanced** | **Enterprise** | | $2.50 | $7.10 | $11.70 | | Includes NGAV and behavioural EDR only | All Standard features plus audit & remediation | All Advanced features plus threat hunting & incident response |   [![Get my copy Forrester: SentinelOne TEI report shows 353% ROI](https://no-cache.hubspot.com/cta/default/7543437/5bb1a309-245c-46ef-aa48-f04cb27028dc.png)](https://cta-redirect.hubspot.com/cta/redirect/7543437/5bb1a309-245c-46ef-aa48-f04cb27028dc) ![Logo-with-certs-no-background](https://blog.ithq.pro/hs-fs/hubfs/Logo-with-certs-no-background.png?width=500&height=500&name=Logo-with-certs-no-background.png "Logo-with-certs-no-background") [G-Cloud 12](https://www.digitalmarketplace.service.gov.uk/g-cloud/search?q=ITHQ)[Cyber Security Services 3](https://supplierregistration.cabinetoffice.gov.uk/dashboard/dpscategories/appointed?caid=@NT08=UFdOcVRURkpWRTA9NjJ&nav_from_list=&page=5#dps_search_results) ### Strategies - [SAFE | Cyber Resilience](https://ithq.pro/safe) - [HCARS | Hybrid Cloud Infrastructure](https://ithq.pro/hcars) ### About ITHQ - [What We Do](https://ithq.pro/about-us/what-we-do) - [About Us](https://ithq.pro/about-us) - [Partners](https://ithq.pro/partners) - [Get In Touch](https://ithq.pro/contact-us) - [Insights](https://blog.ithq.pro/) - [Resources](https://ithq.pro/about-us/resources) - [Work With Us](https://ithq.pro/about-us/careers) ### Legal - [Privacy Policy](http://resources.ithq.pro/legal/ITHQPrivacy.pdf) - [Terms of Business](http://resources.ithq.pro/legal/ITHQTerms.pdf) - [Modern Slavery Statement](http://resources.ithq.pro/legal/ITHQSlaveryStatement.pdf) Created by ITHQ All Rights Reserved