Broadcom launches Symantec CBX XDR security platform

Broadcom has introduced Symantec CBX, a novel cloud-based extended detection and response (XDR) platform aimed at providing enterprise-level security capabilities to organizations with limited security operations resources. This platform merges technologies from the Symantec and Carbon Black portfolios into a unified integrated solution. The launch addresses a prevalent industry challenge where cyberattacks are becoming more sophisticated, yet many organizations lack the necessary staffing and expertise to handle complex security tools effectively. With CBX, Broadcom seeks to offer advanced protection without the typical operational overhead associated with enterprise security platforms.

For engineers and technology leaders operating in embedded, industrial, and enterprise IT environments, this development underscores how security vendors are streamlining complex cyber defense tools as threats increasingly target organizations beyond traditional large enterprise Security Operations Centers (SOCs).

Combining Symantec and Carbon Black Capabilities

Symantec CBX integrates Symantec’s prevention, Adaptive Protection, data security, and cloud secure web gateway capabilities with Carbon Black’s endpoint detection and response (EDR) technology. This platform delivers unified XDR visibility and protection across endpoints, networks, and data environments. By correlating signals across multiple attack surfaces, including endpoint, network, cloud, and identity, the system generates higher-confidence incidents rather than isolated alerts. This approach enables security analysts to transition swiftly from detection to investigation and response.

The platform also features a single interface called Threat Tracer, allowing analysts to visualize an attacker’s activity across systems and trace how an intrusion occurred.

“This announcement signifies a significant milestone as we combine the strengths of Symantec and Carbon Black into a single, robust solution,” stated Jason Rolleston, Vice President and General Manager, Enterprise Security Group, Broadcom. “CBX empowers organizations of all sizes with advanced yet intuitive capabilities to combat modern threats confidently and efficiently through industry-first technologies and intelligent automation. The platform extends enterprise-grade protection and real-time insights to organizations that have historically been under-resourced and can no longer rely on security through obscurity.”

AI-driven Investigation and Response

A pivotal aspect of CBX is the utilization of AI to enhance threat analysis and incident response. The platform consolidates multiple security signals into unified incidents and can predict an attacker’s probable next actions, enabling teams to intervene earlier in an attack chain. Broadcom claims that the system can forecast up to four or five potential attacker actions through its Incident Prediction capability. Additionally, the platform incorporates the SymantecAI Security Assistant, aiding analysts in classifying attackers, analyzing ransomware behaviors, and providing remediation guidance.

Moreover, the platform integrates Symantec Adaptive Protection to identify and block “living-off-the-land” (LOTL) attacks, where attackers exploit legitimate software already present in a system.

“Organizations of all sizes are encountering increasingly sophisticated threats, yet many security teams are still grappling with limited resources,” remarked Feris Rifai, President, Leap, a wholly owned subsidiary of TD SYNNEX. “By merging Leap’s scale and expertise with solutions like Symantec CBX, we can broaden access to advanced security capabilities in a practical and approachable manner for our customers. By consolidating prevention, detection, and response into a more unified experience, we can enhance security outcomes across the broader IT ecosystem.”

Availability

Broadcom intends to make Symantec CBX accessible later this year through its Enterprise Security Group Catalyst Partner Program. Existing customers will have the opportunity to transition to the platform. The company is showcasing the technology at the RSAC 2026 Conference in San Francisco, where it is also conducting sessions on multi-layer security detection strategies.