CheckPoint vs. CrowdStrike Falcon vs. Microsoft Defender for Endpoint

CheckPoint

57 Reviews and Ratings

CrowdStrike Falcon

378 Reviews and Ratings

Microsoft Defender for Endpoint

281 Reviews and Ratings

Free Trial

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
CheckPoint	Score 8.4 out of 10	N/A	CheckPoint is a digital access management and engagement system for venues. It automates and digitizes the registration, ticketing, and check-in process while enabling venues, vendors, and exhibitors to engage with guests directly to their phone's lock screen. CheckPoint is an event management tool for events, conferences, festivals, clubs, and more. The venue management solution boasts users among both the Oscars and Nasdaq.	N/A
CrowdStrike Falcon	Score 9.1 out of 10	N/A	CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.	$59.99 per endpoint/month (minimum number of endpoints applies)
Microsoft Defender for Endpoint	Score 8.8 out of 10	N/A	Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.	$2.50 per user/per month

Pricing

CheckPoint

CrowdStrike Falcon

Microsoft Defender for Endpoint

Editions & Modules

No answers on this topic

Falcon Go (Small Business): $59.99
per endpoint/month (minimum number of endpoints applies)
Falcon Go (Small Business): $59.99
Falcon Pro: $99.99
per endpoint/month (for 5-250 endpoints, billed annually)
Falcon Enterprise: $184.99
per endpoint/month (minimum number of endpoints applies)

Academic: $2.50
per user/per month
Standalone: $5.20
per user/per month

Offerings

Pricing Offerings
CheckPoint	CrowdStrike Falcon	Microsoft Defender for Endpoint
Free Trial
No	Yes	Yes
Free/Freemium Version
No	No	No
Premium Consulting/Integration Services
No	Yes	No

Entry-level Setup Fee

Required

No setup fee

Additional Details

—

More Pricing Information

Pricing Info

Community Pulse
	CheckPoint	CrowdStrike Falcon	Microsoft Defender for Endpoint
Considered Multiple Products	CheckPoint No answer on this topic	CrowdStrike Falcon Verified User Director Chose CrowdStrike Falcon In my opinion, CrowdStrike Falcon provides superior detection and prevention capabilities over Jamf Protect. At the time we purchased (2017) CrowdStrike Falcon was more advanced than SentinelOne and Microsoft Defender for Endpoint. Incentivized Helpful? Verified User C-Level Executive Chose CrowdStrike Falcon We were a former Arctic Wolf customer and feel like they worked more as a team with us. Cylance is what we're looking at possibly migrating to. Incentivized Helpful? Humayoon Khan Team Lead Cyber Security Chose CrowdStrike Falcon It was the easiest to deploy and manage, while the dashboard was also very clear and precise in terms of useful information. Another major reason in selection CrowdStrike Falcon was its AI and ML detection capabilities which really impressed us during evaluation. Other tools … Incentivized Helpful? Verified User Manager Chose CrowdStrike Falcon At the time of purchase CrowdStrike provided the best featureset and value proposition for the organisation. The cloud first nature of the product and the mix of heuristic and behaviour based detection technologies was better than anything else that we looked at. Incentivized Helpful? Verified User Professional Chose CrowdStrike Falcon Since CrowdStrike is a cloud-native platform, it reduces the need to maintain many servers on-premise and worldwide architecture. McAfee uses very high CPU and RAM resources on endpoints and servers. Identity protection feature is a huge step towards zero trust implementation. Helpful? Verified User Analyst Chose CrowdStrike Falcon The logs analysis is very easy to use as it uses splunk in the backend. The automated SOAR features helps to save time and response on the incidents. The threat intelligence is very up-to-date with the recent cyber attacks. Incentivized Helpful? Verified User Manager Chose CrowdStrike Falcon CrowdStrike Falcon Endpoint certainly comes in with a slight price premium compared to other offerings, but when you're talking about your last line of defense against malware it's well worth it. From a feature perspective, many players offer similar feature sets but what sets … Incentivized Helpful? Bryan Bowie Principal Incident Responder (Sr.) Chose CrowdStrike Falcon I was not part of the selection process; however after speaking with the team that did make the call, the following where the key scenarios or features that ultimately made the decision. The number one decision from the support team was the client deployment and management of … Incentivized Helpful?	Microsoft Defender for Endpoint Bhuwan Chandra Business Development Manager Chose Microsoft Defender for Endpoint CrowdStrike Falcon EDR is one the Best solution available in Market ,However, I think they are lack in Threat visibility and Vulnerability assessment& Management for application versions & configurations . Incentivized Helpful? Verified User Vice-President Chose Microsoft Defender for Endpoint CrowdStrike Falcon, and Sentinel One are other big ones that we use a bit. Cisco Secure Endpoint we've evaluated as well. Cisco Secure Endpoint capability-wise doesn't match up to Defender, SentinelOne, and CrowdStrike both do, but the cost profiles are a bit higher. So most of … Incentivized Helpful? SU Shital Ulagadde Senior Cyber Security Consultant Chose Microsoft Defender for Endpoint CrowdStrike Falcon is also a good solution for endpoint protection which offer EDR Soultion, threat hunting and AI driven threat protection. Sophos Intercept X combines next-gen antivirus with advanced EDR capabilities with its deep learning technology, exploit prevention, and … Incentivized Helpful? Verified User Administrator Chose Microsoft Defender for Endpoint When building up policies, being independent is much easier compared to CrowdStrike, I would say. Incentivized Helpful? Verified User Supervisor Chose Microsoft Defender for Endpoint Say licensing and cost primarily. And from our evaluation and our use cases, Microsoft Defender for Endpoint did relatively the same thing. Incentivized Helpful? Verified User Director Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is the most cost effective solution considering our Microsoft 365 licensing status. While many 3rd party solutions are great and have been used over the years, in the non-profit world, cost is a huge driving factor of items. Coupled with … Incentivized Helpful? Verified User Director Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is on par or exceeds the competitor products and provides an enterprise grade EDR solution. Based on the savings by bundling Microsoft products under the E5 license and the benefits it provides; it is an excellent choice for customers looking for … Incentivized Helpful? Verified User Manager Chose Microsoft Defender for Endpoint Crowdstrike is the more feature complete product but licensing model and cost does not work well with the small business model. ESET PROTECT is considerably more complicated from a licensing perspective but once operational is a fine product. Incentivized Helpful? Verified User Technician Chose Microsoft Defender for Endpoint We use Microsoft Defender for Endpoint along with Crowdstrike on some of our critical systems as it enhances the protection we have for our environment. Incentivized Helpful? PH Paolo Heuer Cybersecurity Director Chose Microsoft Defender for Endpoint We previously used CrowdStrike on our servers. However, the seamless integration of Microsoft Defender (MD) with XDR and the entire Microsoft ecosystem led us to choose Microsoft Defender for Endpoint (MDE). Incentivized Helpful? Joy Dutta Lead Engineer Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is more advantageous in our windows heavy infrastructure and it was unparalled in the ease of integration with windows endpoints. Security breaches, system crashes and outages with other competitors like Crowdstrike made it easier for us to go … Incentivized Helpful? Verified User Administrator Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is unique for its effortless deployment into the Microsoft ecosystem, where it taps the broadest set of threat intelligence from more than 1.5 billion endpoints. Its state-of-the-art AI-powered automated investigation and remediation minimize … Incentivized Helpful? Verified User Employee Chose Microsoft Defender for Endpoint CrowdStrike and SentinelOne. CrowdStrike, you have to deploy it, but it's the defender, it's already baked into the operating system. Same thing with SentinelOne. Incentivized Helpful? Verified User Employee Chose Microsoft Defender for Endpoint Easier to integrate, less hidden fees, easier to maintain, and easier to update. Support is much better on the Microsoft side than CrowdStrike. Incentivized Helpful? Verified User Contributor Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint stacks up well against it competitors. It detects malicious files faster than other tools like CrowdStrike. Incentivized Helpful? Verified User Director Chose Microsoft Defender for Endpoint Competitive Pricing Incentivized Helpful? JN Jamil Niazi CIO Chose Microsoft Defender for Endpoint Because this product is easier to use and has a lot of development and Microsoft's behind it. Incentivized Helpful? Verified User Engineer Chose Microsoft Defender for Endpoint I have worked with CrowdStrike and Carbon Black. Because of the performance in Linux environments. Incentivized Helpful? VK VIJAY KANAL NATIONAL PRODUCT MANAGER Chose Microsoft Defender for Endpoint Microsoft comes as a bundle suite and for other solutions the purchasing needs to be done separately. Helpful? RK RUSHABH KADCHHUD Associate Director - Practice Lead, Network and Systems Engineering Chose Microsoft Defender for Endpoint Enterprise Endpoint Protection: Microsoft Defender for Endpoint is well suited for large organizations with numerous endpoints, such as desktops, laptops, and servers, as it provides centralized management and monitoring of security across the entire network. Microsoft … Incentivized Helpful? Rahul Deshmukh Security Solutions Architect Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is east to deploy, hence safed lot of efforts in implementation and management. When I evaluated CrowdStrike I found that not all threats are identified in it, which was a matter of concern for us. We also had issues with configuration and … Incentivized Helpful? WH William Huang Lead Security Architect Chose Microsoft Defender for Endpoint I would say Microsoft Defender for Endpoint is a little behind compared to those two market leaders in the space. However, Microsoft Defender for Endpoint is easy to deploy and manage for windows devices and the cost is more reasonable. Incentivized Helpful? Verified User Team Lead Chose Microsoft Defender for Endpoint Mostly it runs smoothly on host without impacting performance as other AVs like Symantec's impacts performance issue of host. Also because it's still a good product overall price range. Can upgrade to EDR solution with not much difficulty & onboarding on tool is not that … Incentivized Helpful? Verified User Consultant Chose Microsoft Defender for Endpoint CrowdStrike and Sentinel One, I believe. I think Microsoft's products far superior. Incentivized Helpful?

Features

CheckPoint

CrowdStrike Falcon

Microsoft Defender for Endpoint

Endpoint Security

Comparison of Endpoint Security features of Product A and Product B
	CheckPoint - Ratings	CrowdStrike Falcon 8.8 98 Ratings 3% above category average	Microsoft Defender for Endpoint 8.7 78 Ratings 2% above category average
Anti-Exploit Technology	00 Ratings	9.089 Ratings	8.975 Ratings
Endpoint Detection and Response (EDR)	00 Ratings	9.396 Ratings	9.177 Ratings
Centralized Management	00 Ratings	9.097 Ratings	8.777 Ratings
Hybrid Deployment Support	00 Ratings	8.24 Ratings	7.210 Ratings
Infection Remediation	00 Ratings	9.093 Ratings	9.075 Ratings
Vulnerability Management	00 Ratings	7.772 Ratings	8.672 Ratings
Malware Detection	00 Ratings	9.396 Ratings	9.276 Ratings

Best Alternatives
	CheckPoint	CrowdStrike Falcon	Microsoft Defender for Endpoint
Small Businesses	Whova Score 9.4 out of 10	ThreatLocker Score 9.3 out of 10	ThreatLocker Score 9.3 out of 10
Medium-sized Companies	Whova Score 9.4 out of 10	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10
Enterprises	Whova Score 9.4 out of 10	BeyondTrust Endpoint Privilege Management Score 10.0 out of 10	BeyondTrust Endpoint Privilege Management Score 10.0 out of 10
All Alternatives	View all alternatives	View all alternatives	View all alternatives

User Ratings
	CheckPoint	CrowdStrike Falcon	Microsoft Defender for Endpoint
Likelihood to Recommend	1.0 (1 ratings)	9.0 (98 ratings)	9.0 (133 ratings)
Likelihood to Renew	1.0 (1 ratings)	10.0 (3 ratings)	8.4 (10 ratings)
Usability	5.1 (2 ratings)	10.0 (2 ratings)	8.6 (10 ratings)
Availability	- (0 ratings)	- (0 ratings)	9.1 (1 ratings)
Performance	- (0 ratings)	- (0 ratings)	9.1 (1 ratings)
Support Rating	- (0 ratings)	10.0 (9 ratings)	9.0 (7 ratings)
In-Person Training	- (0 ratings)	9.0 (1 ratings)	- (0 ratings)
Implementation Rating	- (0 ratings)	10.0 (1 ratings)	7.3 (1 ratings)
Configurability	- (0 ratings)	- (0 ratings)	8.2 (1 ratings)
Product Scalability	- (0 ratings)	- (0 ratings)	9.1 (1 ratings)

User Testimonials
	CheckPoint	CrowdStrike Falcon	Microsoft Defender for Endpoint
Likelihood to Recommend	Fobi AI CheckPoint performs well as an internal firewall between network zones, providing policy control and deep inspection of internal traffic. It works well for a multi network setup like ours across multiple sites. It is however not a fast changing interface and time needs to be taken to perform changes. It's not a quick as other vendors Incentivized Verified User Anonymous Read full review	CrowdStrike Crowdstrike is a unified platform for monitoring endpoint devices, whether they're workstations, servers, cloud-native machines, or even mobile devices. It uses AI/ML to monitor anomalies and suspicious behavior, including zero-day attacks. It is suitable for large organizations but may be costlier or less appropriate for smaller organizations, those who want an on-prem EDR setup, and those who need custom scanning based on compliance requirements. Incentivized PD Prajwal Deshmukh Cyber Security Analyst Read full review	Microsoft It's basically good for any company when you have any amount of machines that need to be protected. It's just a good endpoint detection method that makes it well-suited for a lot of scenarios. If you're in business, it's probably something you need. Incentivized Verified User Anonymous Read full review
Pros	Fobi AI Threat Prevention better than Fortinet Granularity of security policy can be customized to the maximum hardware performance is really good Bugs are less as compared to other vendors support is excellent modules work as expected Features can achieve out of box requirements Incentivized Verified User Anonymous Read full review	CrowdStrike The Log analysis is very detailed and easy to use. Prevent and block all type of malwares. Great threat intelligence which is very up-to-date with the recent cyber attacks very user friendly in access and management Automated feature of detecting, taking action and closing incidents using fusion workflow. Incentivized Verified User Anonymous Read full review	Microsoft Definitely on the threat action and response. We didn't have a stress-response option before, but the dependent brand point provided it instantly. Also, it's doing UVA and machine learning, which we didn't have before. So it's definitely providing more sophisticated threat-detection capabilities than we had before. Incentivized Verified User Anonymous Read full review
Cons	Fobi AI In my experience, notifications are completely broken and non-functional In my opinion, confusing UX for the cloud portal Don't try and import 100's of endpoints when onboarding because it will create a mess When installing the CP client you have to remove Microsoft Defender and if that fails, CheckPoint technical support goes, "Not my problem, sucks to be you!" Incentivized DF Darren Freedman System Administrator Read full review	CrowdStrike Support - we are often tasked with running down problems rather than being directed by support. The sales staff we have dealt with are not very responsive or timely. I believe this is a product built for installations of 300 users or more. Incentivized Verified User Anonymous Read full review	Microsoft That's a tough one because I don't have many cons on the product. Maybe the con is really around reporting. It's harder to get to the reporting and the analytics side. We have to do some of the custom reporting on our own, either through Power BI and whatnot. So the out-of-the-box reporting could be improved upon. Incentivized Verified User Anonymous Read full review
Likelihood to Renew	Fobi AI Every dollar to CheckPoint is a wasted dollar. Incentivized DF Darren Freedman System Administrator Read full review	CrowdStrike Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI. Incentivized Verified User Anonymous Read full review	Microsoft Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market Incentivized Verified User Anonymous Read full review
Usability	Fobi AI the solution offer the most improvement about the usability by management more firewall in the same context or multicontext instead. The shared database allow to use one object for more than a package target of a cluster or more of gateways firewall. The management remain isolated from traffic pass through the firewall so the disruption is limited at minimum. Incentivized Verified User Anonymous Read full review	CrowdStrike I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers. Incentivized FM Fotis Mastakas Fotis Mastakas Read full review	Microsoft Microsoft Defender for Endpoint is a great EDR to have that works quickly and silently in the background and it integrates well with other Microsoft services. As an IT manager, I can appreciate that I do not get bombarded by alerts for every small detail. On the flipside, the management site can use some work in being more clear and should be more streamlined so I'm not clicking through multiple pages to figure out what happened Incentivized JL John Lee IT Director Read full review
Reliability and Availability	Fobi AI No answers on this topic	CrowdStrike No answers on this topic	Microsoft Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed. Incentivized Verified User Anonymous Read full review
Performance	Fobi AI No answers on this topic	CrowdStrike No answers on this topic	Microsoft Microsoft Defender for Endpoint is easy on memory and resources on clients. Incentivized Verified User Anonymous Read full review
Support Rating	Fobi AI No answers on this topic	CrowdStrike Any time we need to engage the Crowdstrike Falcon Complete Team, their response is switch, thorough, and they are sure to not close out any request until the customer confirms that they have provided an acceptable resolution. If I ever need anything from the account team related to the product, I also get a response from them within minutes typically to address my question. Top notch customer service! Incentivized Verified User Anonymous Read full review	Microsoft The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session Incentivized Joe Aldeguer IT Director Read full review
In-Person Training	Fobi AI No answers on this topic	CrowdStrike There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any. Incentivized Verified User Anonymous Read full review	Microsoft No answers on this topic
Online Training	Fobi AI No answers on this topic	CrowdStrike The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user. Incentivized Verified User Anonymous Read full review	Microsoft No answers on this topic
Implementation Rating	Fobi AI No answers on this topic	CrowdStrike Read the documentation Incentivized Verified User Anonymous Read full review	Microsoft Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out. Incentivized Verified User Anonymous Read full review
Alternatives Considered	Fobi AI The CheckPoint Firewall and Cisco ISR router serve different purposes. Our organisation uses both devices, but in different areas of the topology. The Cisco ISR is a remote device and its function is to relay information to our edge firewall, which then passes to our internal firewall (CheckPoint) to securely control traffic requests. Incentivized Verified User Anonymous Read full review	CrowdStrike It was just a legacy AV program onboarded during initial setup days. As the org. As it expanded, its threat landscape also grew, and we needed a next-gen solution to protect against evolving threat vectors. Falcon EDR was the one that solved all these in a single place. Incentivized Verified User Anonymous Read full review	Microsoft Microsoft Defender for Endpoint consistently showed better user experiences during scans due to the reduced amount of resources used on each system compared to our previous endpoint protection solutions. However, the main reason we chose Microsoft Defender for Endpoint is that it was part of our G5 licensing and integrated with all of our systems Incentivized Verified User Anonymous Read full review
Scalability	Fobi AI No answers on this topic	CrowdStrike No answers on this topic	Microsoft Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises. Incentivized Verified User Anonymous Read full review
Return on Investment	Fobi AI Smart console with lower operational overhead Compliance with Hipaa, PCISSS and saving on compliance plenties Less compatibility issues licensing model is costlier at the beginning Some modules require special training False positives may occur Incentivized Verified User Anonymous Read full review	CrowdStrike CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises. The cloud-native architecture and automated features have improved operational efficiency. The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times. Incentivized James Dilley System Administrator Read full review	Microsoft Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage. Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs. Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings. Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue. Incentivized CF Carlos Eduardo Faquinello IT Solutions Architect Read full review
ScreenShots	CheckPoint Screenshots		Microsoft Defender for Endpoint Screenshots