Carbon Black App Control

Broadcom Carbon Black App Control is a high-assurance application whitelisting and system hardening solution engineered to lock down critical servers, virtual workloads, point-of-sale (POS) terminals, and industrial control systems against unauthorized software execution and zero-day attacks. By enforcing a strict Default-Deny trust model, Carbon Black App Control ensures that only explicitly approved, cryptographically signed executables and scripts can run, completely neutralizing malware, ransomware, and untrusted binaries before execution.

The platform provides granular administrative control over system integrity, file changes, and executable processes, tracking all file modifications, registry changes, and memory access attempts. Key capabilities include automated file reputation verification via the Carbon Black cloud, rapid software update approval workflows, file integrity monitoring (FIM), and tamper-resistant agent protections that prevent malicious interference even in offline environments. Carbon Black App Control is specifically optimized for fixed-function systems and air-gapped critical infrastructure where traditional signature-based antivirus solutions are ineffective or impractical.

Carbon Black App Control integrates with enterprise IT tools such as Microsoft Active Directory, BigFix, ServiceNow, and enterprise SIEM platforms like Splunk. Typical enterprise use cases include securing point-of-sale retail terminals, locking down automated teller machines (ATMs) in banking networks, safeguarding pharmaceutical manufacturing systems, ensuring SCADA server integrity, and meeting strict compliance mandates such as PCI-DSS section 10 and 11, HIPAA, and NERC CIP. Broadcom Carbon Black App Control delivers unmatched operational resilience and server security.