VMware Carbon Black

VMware Carbon Black is a cybersecurity brand originating from Bit9, a company founded in 2002 in Massachusetts by Todd Brennan, Allen Hillery, and John Hanratty. The business initially developed security software intended to control and validate applications running on enterprise computers. George Kassabgi served as its first chief executive, and Patrick Morley, formerly an executive at Corel, became CEO in 2007. The company changed direction and broadened its security capabilities through a series of acquisitions and partnerships. In 2013, Bit9 suffered a significant security compromise in which attackers obtained a private certificate-signing key and used it to sign malware. The incident highlighted the importance of protecting software-signing infrastructure and became one of the defining events in the company's early history. In February 2014, Bit9 acquired Carbon Black, an emerging security company focused on monitoring endpoint activity and detecting malicious behavior. The combined business was known for a period as Bit9 + Carbon Black. That transaction was accompanied by a $38.25 million Series E financing round, bringing reported total venture funding to approximately $120 million at the time. The company continued expanding through acquisitions. It bought Objective Logistics in 2015, announced the acquisition of data-analytics company Visitrend later that year, and acquired next-generation antivirus provider Confer in 2016. It also established relationships with security and professional-services firms including SecureWorks, Ernst & Young, Kroll, Trustwave, and Rapid7 to support managed security and incident-response services. On February 1, 2016, the company adopted the Carbon Black name. Carbon Black became a public company on Nasdaq in May 2018 under the ticker CBLK. Its initial public offering reportedly raised approximately $152 million at a valuation of about $1.25 billion. The listing supported the company's positioning as an enterprise security provider centered on endpoint detection and response, next-generation antivirus, threat hunting, and behavioral analytics. VMware agreed to acquire Carbon Black in 2019 for approximately $2.1 billion, and the transaction closed in October of that year. After the acquisition, the business was marketed as VMware Carbon Black and its products were incorporated into VMware's broader security portfolio. Its central technology platform, Carbon Black Cloud, collects and analyzes endpoint telemetry and other security data to identify malicious behavior and help prevent harmful files or activity from affecting organizations. The company has described a partner ecosystem of roughly 100 organizations and a customer base of more than 5,600 organizations, including approximately one-third of the Fortune 100, according to the referenced company overview. In November 2023, Broadcom completed its acquisition of VMware in a cash-and-stock transaction. In March 2024, Broadcom combined its existing Symantec security assets with Carbon Black assets into an Enterprise Security Group. Accordingly, VMware Carbon Black is best understood as an endpoint-security brand and technology portfolio operating within Broadcom's post-acquisition enterprise-security structure rather than as an independent public company. Its principal market role remains the protection, monitoring, and investigation of endpoints through cloud-delivered security analytics and response capabilities.

VMware Carbon Black traces its origins to Bit9, founded in 2002 by Todd Brennan, Allen Hillery, and John Hanratty. The original business developed enterprise software intended to identify and control applications running on organizational computers. George Kassabgi was the company's first CEO. In 2007, Patrick Morley, previously associated with Corel, became chief executive as the company developed its enterprise-security business. A major setback occurred in 2013, when malicious actors broke into Bit9's network and obtained a private key used to sign software certificates. The attackers used the stolen credential to sign malware, turning a component of the company's trust infrastructure into a vehicle for abuse. The breach was a serious reputational and technical event because software signing is intended to assure customers that files originate from a trusted source. It also demonstrated the risks faced by security vendors whose own credentials can be used to make malicious code appear legitimate. Bit9 acquired Carbon Black in February 2014. Carbon Black brought technology and expertise associated with continuous endpoint monitoring, behavioral detection, and investigation of suspicious activity. The combined organization was temporarily branded Bit9 + Carbon Black. The acquisition coincided with a $38.25 million Series E financing round, taking reported cumulative venture financing to about $120 million. The company subsequently pursued a broader platform strategy rather than relying on a single endpoint-control product. In June 2015, it acquired Objective Logistics. In August of the same year, it announced the acquisition of data-analytics company Visitrend and plans for a technology development center in downtown Boston. It also announced partnerships with SecureWorks, Ernst & Young, Kroll, Trustwave, and Rapid7, extending the reach of its technology into managed security, consulting, and incident-response services. In July 2016, the company acquired Confer, a next-generation antivirus provider. The Confer transaction strengthened its prevention and malware-detection capabilities and supported the shift toward combining traditional application control with behavioral and cloud-based analytics. The company adopted the Carbon Black name on February 1, 2016. By this stage, its strategy centered on collecting endpoint activity, applying analytics to identify threats, and enabling security teams to investigate and respond to incidents. Its product family included CB Defense and CB Response, while the broader Carbon Black Cloud platform became the foundation for cloud-delivered endpoint protection and detection. Carbon Black entered the public markets on May 4, 2018, listing on Nasdaq under the symbol CBLK. The IPO reportedly raised approximately $152 million and valued the company at about $1.25 billion. Before the IPO, investors reportedly included Kleiner Perkins, Highland Capital, Sequoia, Accomplice, and Blackstone. The public listing gave Carbon Black additional visibility as an enterprise cybersecurity company during a period when endpoint detection and response was becoming a core security category. VMware agreed to acquire Carbon Black in 2019, and the transaction closed in October for a reported value of approximately $2.1 billion. Carbon Black was subsequently integrated into VMware's security portfolio and marketed as VMware Carbon Black. Its technology continued to focus on cloud-native endpoint security, next-generation antivirus, endpoint detection and response, threat hunting, and large-scale analysis of endpoint data. Broadcom completed its acquisition of VMware in November 2023. In March 2024, Broadcom combined existing Symantec security assets with Carbon Black assets into an Enterprise Security Group. This changed the corporate context in which the brand operates: VMware Carbon Black is no longer an independently traded company, but its endpoint-security technology and product identity remain associated with Broadcom's enterprise-security operations. Public descriptions of the business cite approximately 100 partners and more than 5,600 customers, including about one-third of the Fortune 100.

1. 2024Enterprise Security Group formed

   Broadcom combined Symantec security assets with Carbon Black assets into an Enterprise Security Group.

   Source
2. 2023Broadcom acquired VMware

   Broadcom completed its acquisition of VMware, becoming the ultimate owner of VMware Carbon Black.

   Source
3. 2019VMware acquisition completed

   VMware acquired Carbon Black in a transaction reported at approximately $2.1 billion.

   Source
4. 2018Nasdaq listing

   Carbon Black completed its initial public offering and began trading under CBLK.

   Source
5. 2016Carbon Black name adopted

   The company changed its name from Bit9 + Carbon Black to Carbon Black.

   Source
6. 2016Confer acquired

   Carbon Black acquired next-generation antivirus provider Confer.

   Source
7. 2015Objective Logistics and Visitrend expansion

   The company acquired Objective Logistics and later announced the acquisition of data-analytics firm Visitrend.

   Source
8. 2014Carbon Black acquisition and Series E financing

   Bit9 acquired Carbon Black and raised $38.25 million in Series E funding.

   Source
9. 2013Security breach involving a signing key

   Attackers obtained a private certificate-signing key from the company's compromised network and used it to sign malware.

   Source
10. 2007Patrick Morley became CEO

    Patrick Morley succeeded the company's first CEO, George Kassabgi.

    Source
11. 2002Bit9 founded

    Todd Brennan, Allen Hillery, and John Hanratty founded the company that later became Carbon Black.

    Source

Enterprise endpoint-security provider combining prevention, behavioral detection, endpoint detection and response, threat hunting, and cloud-based security analytics.

• Carbon Black CloudCloud-native endpoint security platform

  Carbon Black Cloud is the brand's cloud-based security and analytics platform. It is designed to collect large volumes of endpoint telemetry and analyze that information for malicious behavior, suspicious files, and other indicators of compromise. The platform supports prevention, detection, investigation, and response workflows and forms the technological foundation for the VMware Carbon Black portfolio.

• CB DefenseNext-generation antivirus and endpoint protection

  CB Defense was a core Carbon Black endpoint-protection offering focused on preventing malware and other malicious activity. Its approach combined endpoint controls with behavioral analysis and cloud-delivered intelligence rather than relying solely on traditional signature-based antivirus methods. It became part of the product lineage marketed under VMware Carbon Black.

• CB ResponseEndpoint detection and response

  CB Response was an endpoint detection and response product designed to provide visibility into endpoint activity and support threat investigation. Security teams could use endpoint data to search for suspicious behavior, examine incidents, and assist with response activities. The product represents Carbon Black's investigation-oriented EDR heritage.

• Confer technologyNext-generation antivirus

  Confer was a next-generation antivirus company acquired by Carbon Black in 2016. Its technology expanded Carbon Black's prevention and malware-detection capabilities and contributed to the company's broader combination of endpoint prevention, behavioral detection, and cloud analytics.

• 2024Combine Symantec and Carbon Black security assetsStrategy

  Following Broadcom's acquisition of VMware, the company reorganized its security assets to create a more consolidated enterprise-security organization.

  What changed. Broadcom combined its Symantec security assets with Carbon Black assets to form an Enterprise Security Group.

  Aftermath. VMware Carbon Black became part of Broadcom's consolidated enterprise-security structure alongside Symantec-related capabilities.

  Source
• 2019Sell Carbon Black to VMwareM&A

  VMware sought to expand its enterprise security portfolio with Carbon Black's endpoint-security technology and threat analytics.

  What changed. VMware acquired Carbon Black, and the business was subsequently branded VMware Carbon Black.

  Aftermath. Carbon Black ceased to operate as an independent public company and became part of VMware's security portfolio.

  Acquisition value. Approximately $2.1 billion (2019)

  Source
• 2018Complete initial public offeringOther

  Carbon Black sought public-market capital to support its expansion as an enterprise cybersecurity provider.

  What changed. The company listed on Nasdaq under CBLK and completed an IPO.

  Aftermath. The listing provided public-market access and valued the company at approximately $1.25 billion at the IPO.

  IPO proceeds. Approximately $152 million (May 2018)

  Source
• 2016Acquire ConferM&A

  Carbon Black wanted to strengthen its next-generation antivirus and endpoint-prevention capabilities.

  What changed. Carbon Black acquired Confer for an undisclosed amount.

  Aftermath. Confer's technology and team were incorporated into Carbon Black's expanding endpoint-security portfolio.

  Reported transaction value. $100 million reported by The Wall Street Journal (2016)

  Source
• 2015Acquire Objective Logistics and VisitrendM&A

  The company pursued additional analytics and technology capabilities as it expanded beyond its original product focus.

  What changed. It acquired Objective Logistics and announced the acquisition of data-analytics company Visitrend.

  Aftermath. The deals supported a broader technology and analytics-oriented development strategy, including a planned Boston technology center.

  Source
• 2014Acquire Carbon Black and combine endpoint-security capabilitiesM&A

  Bit9 sought to broaden its application-control and endpoint-security business with Carbon Black's monitoring and behavioral-detection capabilities.

  What changed. Bit9 acquired Carbon Black and operated the combined business for a period under the Bit9 + Carbon Black identity.

  Aftermath. The transaction established the Carbon Black name and technology as the center of the company's later endpoint detection and response strategy.

  Series E financing. $38.25 million raised in the round; approximately $120 million in cumulative venture funding reported afterward (2014)

  Source

• 2013Bit9 software-signing key breachControversy

  Attackers compromised Bit9's network, copied a private certificate-signing key, and used it to sign malware. The incident was particularly serious because the stolen credential could make malicious software appear to have originated from a trusted security vendor.

  Source

• 2024Broadcom combined Symantec and Carbon Black security assets

  Broadcom merged its existing Symantec security assets with Carbon Black assets to form an Enterprise Security Group.

  M&A
  Source
• 2023Broadcom completed its acquisition of VMware

  Broadcom completed its acquisition of VMware in a cash-and-stock transaction reported at approximately $69 billion, placing VMware Carbon Black within Broadcom's ownership structure.

  M&A
  Source
• 2019VMware acquired Carbon Black

  VMware acquired Carbon Black in a transaction reported at approximately $2.1 billion, after which the business became known as VMware Carbon Black.

  M&A
  Source
• 2018Carbon Black completed its Nasdaq initial public offering

  Carbon Black began trading on Nasdaq under the ticker CBLK and reportedly raised approximately $152 million in its IPO.

  Other
  Source
• 2016Company renamed Carbon Black

  The business formally adopted the Carbon Black name after operating for approximately two years as Bit9 + Carbon Black.

  Other
  Source
• 2014Bit9 acquired Carbon Black

  Bit9 acquired Carbon Black and raised $38.25 million in Series E financing, creating the basis for the later Bit9 + Carbon Black identity.

  M&A
  Source

1. VMware Carbon Black
2. Carbon Black official website