Both vendors have performed well in independent security tests. CrowdStrike scored higher on the difficult MITRE evaluation, while Carbon Black has scored well in both security effectiveness and total cost of ownership (TCO) in NSS Labs tests – tests avoided by CrowdStrike after a legal dispute between the two. Users of both products give high marks for their detection and response capabilities, so those test scores appear to carry over to production environments. Data breaches happen, so response is one of the driving factors in an EDR purchasing decision, and users of both tools report that their jobs are made easier by the ability of the EDR tools to respond to threats. CrowdStrike also offers an additional managed threat hunting service, Overwatch.