Incident Response Exchange

 View Only

Incident Response License Extension Process 

Jan 19, 2021 09:11 PM


VMware Carbon Black Incident Response Program

License quantity limits for use of Carbon Black Products for Incident Response Engagements under the Incident Response Partner Addendum


The VMware Carbon Black Incident Response program offers Authorized Incident Response partners 60-days of VMware Carbon Black licenses at no cost ($0). Carbon Black may, in its sole discretion, extend the duration or increase the quantity limit for an IR Use engagement, upon written notice.

If a license duration extension is required, approval will be required from VMware Carbon Black. Free-of-charge Incident Response license extensions may not exceed a total of 90-days. In the event that additional time is needed beyond the 90 day period, a paid pilot will be required in order to continue the use of Carbon Black licenses.

Process for requesting an Incident Response license extension:

1. Before the initial license term (60 days) has past, a request should be submitted to your Carbon Black Sales Specialist. Alternatively, requests can be sent to the Carbon Black Partner Operations team via

2. The following information must be included in the written request:

a. Reason for extension: (i.e. more time, scope change, ongoing investigation,)

b. Business justification: (i.e., solid relationship with champion, can make an introduction to sales team next week, long-term monitoring budget identified)

3. Carbon Black will review the request and if approved, and additional 30 days license term will be added.


If you have any questions, please contact the Carbon Black Partner team via


0 Favorited
1 Files
pdf file
VMware Carbon Black Incident Response Extension process.pdf   599 KB   1 version
Uploaded - May 28, 2024

Tags and Keywords

Related Entries and Links

No Related Resource entered.