# Carbon Black EDR vs TheHive Comparison | | Carbon Black EDR | TheHive | |---|---|---| | **Star Rating** | 4.4 out of 5 | 4.3 out of 5 | | **Total Reviews** | 86 | 18 | | **Largest Market Segment** | Mid-Market (52.4% of reviews) | Enterprise (52.9% of reviews) | | **Entry Level Price** | No pricing available | Contact Us Per Year | --- ## Top Pros & Cons ### Carbon Black EDR Pros: - Protection (5 reviews) - Incident Response (2 reviews) Cons: - Expensive (2 reviews) - High Resource Usage (2 reviews) ### TheHive Pros: - Customization (1 reviews) - Ease of Use (1 reviews) Cons: - Complex Setup (1 reviews) - Lack of Guidance (1 reviews) --- ## Ratings Comparison | Rating | Carbon Black EDR | TheHive | |---|---|---| | **Meets Requirements** | 9.0 (68 reviews) | 9.0 (15 reviews) | | **Ease of Use** | 8.4 (69 reviews) | 8.8 (15 reviews) | | **Ease of Setup** | 7.7 (40 reviews) | 8.3 (12 reviews) | | **Ease of Admin** | 7.9 (35 reviews) | 8.8 (12 reviews) | | **Quality of Support** | 8.6 (67 reviews) | 7.9 (15 reviews) | | **Has the product been a good partner in doing business?** | 8.3 (35 reviews) | 8.5 (11 reviews) | | **Product Direction (% positive)** | 9.3 (67 reviews) | 8.4 (15 reviews) | --- ## Pricing ### Carbon Black EDR #### Entry-Level Pricing No pricing available #### Free Trial No information available ### TheHive #### Entry-Level Pricing Plan: Cloud Platform Large Price: Contact Us Per Year Key Features: - TheHive Platinum hosted on TYPE-1 infrastructure - Starting from 5 users & 1 organizaiton - SaaS deployment [Browse all 5 editions](https://www.g2.com/products/thehive/pricing) #### Free Trial Yes --- ## Features Comparison By Category ### Endpoint Detection & Response (EDR) | Product | Score | Reviews | |---|---|---| | **Carbon Black EDR** | N/A | N/A | | **TheHive** | N/A | N/A | #### Services - Endpoint Detection & Response (EDR) | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Managed Services** | Not enough data | Not enough data | ### Incident Response | Product | Score | Reviews | |---|---|---| | **Carbon Black EDR** | N/A | N/A | | **TheHive** | 8.2/10 | 12 | #### Response | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Resolution Automation** | Not enough data | 7.7 (11 reviews) | | **Resolution Guidance** | Not enough data | 8.2 (10 reviews) | | **System Isolation** | Not enough data | 7.5 (10 reviews) | | **Threat Intelligence** | Not enough data | 8.9 (12 reviews) | | **Incident Investigation** | Not enough data | Not enough data | #### Records | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Incident Logs** | Not enough data | 8.6 (12 reviews) | | **Incident Reports** | Not enough data | 8.5 (12 reviews) | #### Management | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Incident Alerts** | Not enough data | 8.3 (10 reviews) | | **Incident Case Management** | Not enough data | 8.3 (10 reviews) | | **Workflow Management** | Not enough data | 8.1 (9 reviews) | #### Generative AI | Feature | Carbon Black EDR | TheHive | |---|---|---| | **AI Text Generation** | Not enough data | Not enough data | | **AI Text Summarization** | Not enough data | Not enough data | ### Endpoint Protection | Product | Score | Reviews | |---|---|---| | **Carbon Black EDR** | N/A | N/A | | **TheHive** | N/A | N/A | #### System Control | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Device Control** | Not enough data | Not enough data | | **Web Control** | Not enough data | Not enough data | | **Application Control** | Not enough data | Not enough data | | **Asset Management** | Not enough data | Not enough data | | **System Isolation** | Not enough data | Not enough data | #### Vulnerability Prevention | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Endpoint Intelligence** | Not enough data | Not enough data | | **Firewall** | Not enough data | Not enough data | | **Malware Detection** | Not enough data | Not enough data | #### Security Management | Feature | Carbon Black EDR | TheHive | |---|---|---| | **Incident Reports** | Not enough data | Not enough data | | **Security Validation** | Not enough data | Not enough data | | **Compliance ** | Not enough data | Not enough data | --- ## Categories **Unique to Carbon Black EDR (1):** [Endpoint Detection & Response (EDR) Software](https://www.g2.com/categories/endpoint-detection-response-edr) **Unique to TheHive (1):** [Incident Response Software](https://www.g2.com/categories/incident-response) --- ## Reviewer Demographics ### By Company Size | Segment | Carbon Black EDR | TheHive | |---|---|---| | **Small-Business** | 8.5% | 11.8% | | **Mid-Market** | 52.4% | 35.3% | | **Enterprise** | 39.0% | 52.9% | ### By Industry #### Carbon Black EDR - **Information Technology and Services:** 26.8% - **Computer & Network Security:** 11.0% - **Financial Services:** 8.5% - **Oil & Energy:** 7.3% - **Telecommunications:** 6.1% - **Computer Software:** 4.9% - **Retail:** 3.7% - **Utilities:** 2.4% - **Government Administration:** 2.4% - **Consumer Goods:** 2.4% - **Other:** 24.4% #### TheHive - **Financial Services:** 17.6% - **Telecommunications:** 11.8% - **Information Technology and Services:** 11.8% - **Computer & Network Security:** 11.8% - **Security and Investigations:** 5.9% - **Military:** 5.9% - **Information Services:** 5.9% - **Industrial Automation:** 5.9% - **Computer Software:** 5.9% - **Computer Hardware:** 5.9% - **Other:** 11.8% --- ## Alternatives ### Alternatives to Carbon Black EDR - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) — 4.4/5 stars (311 reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) — 4.7/5 stars (201 reviews) - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) — 4.7/5 stars (834 reviews) - [Bitdefender GravityZone XDR](https://www.g2.com/products/bitdefender-gravityzone-xdr/reviews) — 4.1/5 stars (100 reviews) - [Wazuh](https://www.g2.com/products/wazuh/reviews) — 4.5/5 stars (69 reviews) - [Trellix Endpoint Security](https://www.g2.com/products/trellix-endpoint-security/reviews) — 4.3/5 stars (327 reviews) - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) — 4.6/5 stars (970 reviews) - [Cortex XDR](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews) — 4.6/5 stars (55 reviews) - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) — 4.8/5 stars (888 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews) ### Alternatives to TheHive - [IBM QRadar SOAR](https://www.g2.com/products/ibm-qradar-soar/reviews) — 4.0/5 stars (29 reviews) - [Wazuh](https://www.g2.com/products/wazuh/reviews) — 4.5/5 stars (69 reviews) - [LevelBlue USM Anywhere](https://www.g2.com/products/levelblue-usm-anywhere/reviews) — 4.4/5 stars (114 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (336 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) — 4.3/5 stars (247 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews) - [LogRhythm SIEM](https://www.g2.com/products/exabeam-logrhythm-siem/reviews) — 4.2/5 stars (152 reviews) - [SIRP](https://www.g2.com/products/sirp/reviews) — 4.7/5 stars (27 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews) - [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (401 reviews) --- ## Top Discussions ### Carbon Black EDR - Title: [What does carbon black software do?](https://www.g2.com/discussions/what-does-carbon-black-software-do) — 1 comment > **Top comment:** "It is an EDR solution." ### TheHive - Title: [What is TheHive used for?](https://www.g2.com/discussions/what-is-thehive-used-for) — 1 comment *(includes official response)* > **Top comment:** "TheHive is used to manage and respond to security incidents, from the moment an alert comes in to the moment a case is closed. In practice, that means a..." --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/carbon-black-edr-vs-thehive)