Acunetix by Invicti vs CrowdStrike Falcon

Likelihood to Recommend

It is suited well for ad-hoc and scheduled application vulnerability scans. You must review the results to manually filter out false-positives. You must always keep in mind that this is only a vulnerability scan. It can only find a certain class of vulnerabilities, and it can only do that so well. You should definitely not rely on this tool alone for identifying problems. That being said, I have used it along with every other major commercial vulnerability scanner and find it to the best overall ROI compared to more expensive commercial scanners that don't necessarily give you a better user experience or better vulnerability results. I rarely need support from the vendor, but when I do, they have been responsive and able to solve the issue quickly.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Anyone who is looking for a leader in endpoint protection should consider CrowdStrike Falcon for sure, regardless of specific use cases. Anybody who is operating on a very lean security team that doesn't have the capability to provide 24x7x365 coverage should absolutely consider Falcon Complete. I've worked with various MSSP's in the past, but Falcon Complete is one I would definitely not lose any sleep at night knowing we're in good hands.

Read full review

Verified User

Manager in Information Technology

Building Materials Company, 10,001+ employees

View all 36 answers on this topic

Pros

Fast.
Easy-to-use.
Great customer support.
Reporting features.
Supports importing state files from other popular application testing tools.
Has other features built-in beyond just scanning for vulnerabilities.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Endpoint Isolation - instead of hoping an adversary was blocked in time. CrowdStrike locks down the endpoint beyond using the Windows Firewall. Allowing a whitelist of IPs brings additional management of that endpoint to another level that most other tools don't have.
Rich Data Recording - CrowdStrike is best described as a giant tape recorder in the sky. When it lands on the box, it truly provides insight into the those that other tools could only dream of.
Extensive APIs - CrowdStrike understands that they are not your only security vendor, so they have API usage for everything in their platform to automate and integrate to your heart's desire.
Cloud Visibility - CrowdStrike's cloud monitoring capabilities are agnostic of cloud platform. No longer does one need to worry about putting all their eggs in one basket because the endpoint tool prefers one platform over another.

Read full review

Bryan Bowie

Principal Incident Responder (Sr.)

VerizonSecurity & Investigations, 10,001+ employees

View all 36 answers on this topic

Cons

Does not support multiple endpoints well (e.g. apps and services that do not reside at the same URL).
Has authentication problems with modern enterprise apps which involve a lot of redirects to unrelated endpoints, federated IDs, SSO, etc. This is related to the first point.
The vulnerability detection capability is not as robust as Burp Suite Pro + extensions, Metasploit + auxiliary modules, Nmap + scripts, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

The ability to do a system-level scan like a traditional AV is missing and isn't a feature CrowdStrike is planning on implementing. Old school IT guys are going to be curious about this.
Host management and deletion are clunky and take 45 days for a machine to fall off your subscription license.

Read full review

Randy Munroe

Information Security Analyst

Randall-ReillyMarketing and Advertising, 201-500 employees

View all 36 answers on this topic

Pricing Details

General

Free Trial

Yes

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

$0

Acunetix by Invicti Editions & Modules

Edition

Websites Scanned: 5	$4,500
Websites Scanned: 6-10	$7,200
Websites Scanned: 11-20	$10,800
Websites Scanned: 21-35	$22,540
Websites Scanned: 36-50	$26,600
Websites Scanned: Over 50	Contact for quote

none

Additional Pricing Details

—

General

Free Trial

Yes

Free/Freemium Version

—

Premium Consulting/Integration Services

Yes

Entry-level set up fee?

No

Starting Price

$6.99 per endpoint/month (for 5-250 endpoints, billed annually)

CrowdStrike Falcon Editions & Modules

Edition

Falcon Pro	$6.99¹
Falcon Enterprise	$14.99²
Falcon Premium	$17.99²

per endpoint/month (for 5-250 endpoints, billed annually)
per endpoint/month (minimum number of endpoints applies)

Additional Pricing Details

—

Support Rating

No score

No answers yet

No answers on this topic

CrowdStrike Falcon 9.3

Based on 13 answers

When I receive support, it is always useful and informative. However, the support doesn't get back to me in the most timely manner. Often, by the time I hear back from support I have already resolved the issue. But for bigger issues, that need more in-depth help the support team has been incredibly valuable.

Read full review

Verified User

Analyst in Information Technology

Telecommunications Company, 1001-5000 employees

View all 13 answers on this topic

Alternatives Considered

Every year, we re-evaluate the tools we are using and licensing. We balance the ever-changing vendor licensing-models, costs, tool features/usability, etc. For the last few years, this has been the best overall commercial tool for our specific use case. However, this is only one of many tools that we use and need.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Crowdstrike Falcon Endpoint protection is based on AIML enhanced technology,l. It's cloud-based so users don't need to connect to their office network to get their policy synchronization done from Server to endpoints agents. Also, the Crowdstrike Falcon agent size is small and it consumes fewer resources of the machine.

Read full review

Verified User

Consultant in Information Technology

Information Technology & Services Company, 51-200 employees

View all 36 answers on this topic

Return on Investment

Saved money compared to other commercial scanners, especially over the long run.
Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

CrowdStrike has cut our security costs.
Has given us more insight into our end points.
It has helped with our older PC's CPU usage.
Cut our cost and time from managing multiple platforms down to managing one platform with better insight than what we had with multiple security platforms.

Read full review

Verified User

C-Level Executive in Information Technology

Security & Investigations Company, 1-10 employees

View all 36 answers on this topic