As of January 2020, we have renamed all Carbon Black products. API documentation will be updated in the coming months to reflect the new product names.
The Carbon Black Cloud is a cloud-native endpoint protection platform (EPP) that provides what you need to secure your endpoints using a single, lightweight agent and an easy-to-use console.
Platform APIs are available to all Carbon Black Cloud customers:
Endpoint Standard combines the capabilities of next-generation antivirus (NGAV) + behavioral EDR to provide prevention and automated detection to defend against today’s advanced cyber attacks. Endpoint Standard is also available for Endpoint Advanced and Endpoint Enterprise customers.
Audit and Remediation is a security operations solution that provides system audit and remote response capabilities for endpoints and workloads from a cloud-native endpoint protection platform (EPP). Audit and Remediation is also available for Endpoint Advanced and Endpoint Enterprise customers.
Enterprise Endpoint Detection and Response, or Enterprise EDR, is a cloud-based threat hunting and incident response (IR) solution that delivers continuous visibility for top security operations centers (SOC) and IR teams. Enterprise EDR is also available for Endpoint Enterprise customers.
Workload helps you reduce the attack surface and protect critical assets with advanced security purpose-built for workloads. Increase visibility across your environment and simplify operations for IT and security.
Carbon Black Cloud APIs are authenticated using API Keys.
Carbon Black Cloud APIs support Role-Based Access Control. To learn about how to leverage RBAC using APIs, view our guide here.