VMWare to acquire cybersecurity company Carbon Black for $2.1B and Pivotal for $2.7B
KEY POINTS — VMware is acquiring Carbon Black, a cybersecurity company that went public in 2018, the companies announce as part of VMware's quarterly earnings report.
Context & Ripple Effects
The dual announcement lands a week after VMware confirmed it was in talks to buy Pivotal at $15 per share in cash, an 80% premium to the prior close — so the Pivotal leg was telegraphed, while Carbon Black is the surprise bolt-on, unveiled alongside quarterly earnings rather than a standalone release.
Read together, the two deals are one move: VMware is buying its way up the stack from hypervisor into security (Carbon Black, public since 2018) and cloud-native application development (Pivotal), converting its installed base of infrastructure customers into cross-sell targets.
First-order effects
- Carbon Black's public shareholders exit after barely a year as a listed company, while Pivotal investors capture the 80% cash premium from the talks announced days earlier; VMware's earnings-day audience now prices a materially broader company.
Second-order effects
- Standalone endpoint-security vendors lose the argument that independent specialists integrate better than a security layer native to the virtualization stack, forcing them toward their own platform partnerships or exits; VMware closes the Pivotal acquisition by year-end, folding Kubernetes-era developer tooling directly into its sales motion.
Third-order effects
- If infrastructure platforms keep absorbing adjacent layers — security, developer tools, networking via prior deals like VeloCloud — the acquirer itself becomes the consolidation target; three years later Broadcom's $61B offer for VMware showed exactly that pattern, with the roll-up rolled up.
The trend: Infrastructure platform vendors are consolidating adjacent software layers through acquisition until they become large enough to be consolidation targets themselves.