TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Carbon Black EDR

    Score7.5 out of 10
    N/ACarbon Black EDR is an on-premise incident response and threat hunting solution designed for security operations center (SOC) teams with offline environments or on-premises requirements.N/A

    TheHive

    Score8 out of 10
    Enterprise companies (1,001+ employees)
    TheHive is a collaborative case management platform that helps security teams centralize, structure, speed up and scale their alert management, investigations and incident response.N/A
    Pricing
    Carbon Black EDRTheHive
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Carbon Black EDRTheHive
    Free Trial
    NoYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details—TheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Prices start from 1 organization and 5 users.
    More Pricing Information
    Features
    Carbon Black EDRTheHive
    Endpoint Security
    Comparison of Endpoint Security features of Carbon Black EDR and TheHive
    Feature
    Carbon Black EDR
    8.0
    1 Ratings
    8% below category average
    TheHive
    -
    Ratings
    Anti-Exploit Technology8.01 Ratings00 Ratings
    Infection Remediation8.01 Ratings00 Ratings
    Threat Intelligence
    Comparison of Threat Intelligence features of Carbon Black EDR and TheHive
    Feature
    Carbon Black EDR
    7.4
    1 Ratings
    13% below category average
    TheHive
    -
    Ratings
    Network Analytics8.01 Ratings00 Ratings
    Threat Recognition9.01 Ratings00 Ratings
    Vulnerability Classification8.01 Ratings00 Ratings
    Automated Alerts and Reporting7.01 Ratings00 Ratings
    Threat Analysis6.01 Ratings00 Ratings
    Threat Intelligence Reporting6.01 Ratings00 Ratings
    Automated Threat Identification8.01 Ratings00 Ratings
    Threat Hunting Tools
    Comparison of Threat Hunting Tools features of Carbon Black EDR and TheHive
    Feature
    Carbon Black EDR
    7.5
    1 Ratings
    10% below category average
    TheHive
    -
    Ratings
    Scanning for Vulnerabilities8.01 Ratings00 Ratings
    Behavioral Analytics7.01 Ratings00 Ratings
    Incident Response Platforms
    Comparison of Incident Response Platforms features of Carbon Black EDR and TheHive
    Feature
    Carbon Black EDR
    -
    Ratings
    TheHive
    10.0
    1 Ratings
    11% above category average
    Company-wide Incident Reporting00 Ratings10.01 Ratings
    Integration with Other Security Systems00 Ratings10.01 Ratings
    Centralized Dashboard00 Ratings10.01 Ratings
    Live Response for Rapid Remediation00 Ratings10.01 Ratings
    User Ratings
    Carbon Black EDRTheHive
    Likelihood to Recommend
    7.0
    (3 ratings)
    10.0
    (1 ratings)
    Usability
    6.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Carbon Black EDRTheHive
    Likelihood to Recommend
    Broadcom
    Carbon Black was an effective system for automatic remediation. It was difficult to utilize regularly, however, and did give a number of false positive in our usage. However, it was integral and exceedingly important and performed as it was designed to. The user interface was not terribly intuitive, and while abundant technical information was available regarding the threats we were experiencing and remediating, the surface-level pane contained more information than was pragmatic given a large number of safeguarded systems and too few specialists.
    Incentivized
    Read full review
    StrangeBee
    Managing incident response - it does exactly what it is supposed to do!
    Read full review
    Pros
    Broadcom
    • Helps in tracking network connections made by machine
    • Process Tree which show series of workflow which clear and easy to understand.
    • Enables to go live into the machine and investigate
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Cons
    Broadcom
    • Needs more defensive abilities
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Usability
    Broadcom
    The interface is crowded and overly technical, and took intensive learning efforts to understand and use granularly, effectively. We enjoyed using the product, but did not see a clear advantage in this area to competitors--most platforms work the same way and have a similar structure. Its threat detection capability was strong
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Alternatives Considered
    Broadcom
    It has better UI.
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    Return on Investment
    Broadcom
    • Increased visibility across the enterprise for threats
    • Rapid ability to investigate and remediate threats
    Incentivized
    Read full review
    StrangeBee
    No answers on this topic
    ScreenShots

    TheHive Screenshots

    Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.