Carbon Black (company)

Carbon Black (company). Carbon Black is a prominent American cybersecurity firm specializing in endpoint security solutions. Founded in 2002, the company provides a cloud-native platform that leverages big data and behavioral analytics to prevent sophisticated cyberattacks. Its technology is widely used by enterprises and government agencies to secure endpoints against advanced threats like ransomware and fileless malware.

History

The company was originally founded under the name **bit9** in 2002 by a team of engineers from BBN Technologies. Its initial product focused on application whitelisting, a novel approach to security at the time. In 2014, bit9 merged with **Carbon Black**, a company known for its endpoint detection and response (EDR) technology, and subsequently adopted the Carbon Black name. This merger combined whitelisting and behavioral analysis capabilities. The unified entity grew rapidly, attracting significant investment from firms like Highland Capital Partners and Kleiner Perkins. In 2018, Carbon Black completed a successful initial public offering on the NASDAQ under the ticker symbol "CBLK". The following year, the company was acquired by VMware for approximately $2.1 billion, integrating its security offerings into the broader VMware portfolio.

Products and services

The company's core offering is the **Carbon Black Cloud**, a consolidated platform delivering next-generation antivirus (NGAV), EDR, and threat hunting services. This software as a service (SaaS) platform uses a lightweight agent and cloud computing to analyze endpoint activity continuously. Key products historically included **Cb Defense** for prevention and **Cb Response** for incident investigation. The technology is designed to detect malicious behavior by analyzing sequences of events, providing visibility into attacks that bypass traditional signature-based detection. Its solutions are utilized across various sectors, including finance, healthcare, and the United States Department of Defense.

Acquisitions and partnerships

To enhance its technological capabilities, the company pursued several strategic acquisitions. In 2016, it acquired **Confer**, a startup specializing in threat intelligence and EDR, which accelerated its cloud roadmap. The following year, it purchased **Objective Logistics**, primarily for its engineering talent in machine learning and data science. A significant partnership was formed with **IBM** in 2018, integrating its endpoint data into the **IBM Security** portfolio. As part of VMware, its technology is now deeply integrated with solutions like **VMware Workspace ONE** and **VMware NSX**, creating a intrinsic security architecture. The company has also maintained technology alliances with major firms like **Amazon Web Services** and **Microsoft**.

Security research and threat intelligence

The company's **CB Threat Analysis Unit** (TAU) is a globally recognized team of security researchers who investigate advanced cyber threats. This unit publishes detailed analyses on advanced persistent threat (APT) groups, criminal cybercrime campaigns, and emerging vulnerabilities. Notable research has included deep dives into **ransomware** operations like **SamSam** and **Ryuk**, as well as exposing state-sponsored espionage tools. The team's findings are often shared with the broader security community through presentations at conferences like **Black Hat** and **RSA Conference**. This intelligence directly feeds back into the company's products, improving their detection algorithms.

Corporate affairs

Following its acquisition, the company operates as the **Security Business Unit** within **VMware**. Its global headquarters remain in **Waltham, Massachusetts**, with additional offices in **Boulder, Colorado**, and **Portland, Maine**. The leadership team, including CEO **Patrick Morley**, reports within the **VMware** structure. The integration has focused on delivering a unified security platform under the **VMware Carbon Black** brand, part of **VMware's** broader **Anywhere Workspace** and **Intrinsic Security** strategies. The company continues to serve a large global customer base while leveraging the resources and scale of its parent corporation.