Cofense Triage vs. CrowdStrike Falcon

Cofense Triage is well suited for large companies which are receiving large amounts of emails. It makes it easy for users to report suspicious emails and makes it easy for security staff to review, analyze and investigate these emails to avoid having them delivered in the future in case any other security tool fails to detect them.

Incentivized

Well-suited for advanced and more mature environments, with dedicated personnel and well-versed in Threat and Incident Response. The learning curb is a bit steep, but if time can be dedicated to attending Workshops and Learning modules on Crowdstrike University, then 3-6 months is a realistic timeframe to yield expected outcomes. Clear blueprints for product rollout are provided to customers based on your specific environment.

Incentivized

• Separating links and attachments contained in the email, and checking to see if they are known malicious.
• Clustering like emails to save time when responding.
• Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.

Incentivized

• Endpoint Isolation - instead of hoping an adversary was blocked in time. CrowdStrike locks down the endpoint beyond using the Windows Firewall. Allowing a whitelist of IPs brings additional management of that endpoint to another level that most other tools don't have.
• Rich Data Recording - CrowdStrike is best described as a giant tape recorder in the sky. When it lands on the box, it truly provides insight into the those that other tools could only dream of.
• Extensive APIs - CrowdStrike understands that they are not your only security vendor, so they have API usage for everything in their platform to automate and integrate to your heart's desire.
• Cloud Visibility - CrowdStrike's cloud monitoring capabilities are agnostic of cloud platform. No longer does one need to worry about putting all their eggs in one basket because the endpoint tool prefers one platform over another.

Incentivized

• There are too many interdependent pieces which you have to acquire separately.
• I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
• We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.

Incentivized

• The ability to do a system-level scan like a traditional AV is missing and isn't a feature CrowdStrike is planning on implementing. Old school IT guys are going to be curious about this.
• Host management and deletion are clunky and take 45 days for a machine to fall off your subscription license.

Incentivized

Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.

Incentivized

The interface is easy and intuitive.

Incentivized

I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers.

Incentivized

We've experienced zero downtime.

Incentivized

No slowness seen.

Incentivized

When I receive support, it is always useful and informative. However, the support doesn't get back to me in the most timely manner. Often, by the time I hear back from support I have already resolved the issue. But for bigger issues, that need more in-depth help the support team has been incredibly valuable.

Incentivized

Training was through, relevant and easy to follow.

Incentivized

The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.

Incentivized

CrowdStrike Falcon Endpoint certainly comes in with a slight price premium compared to other offerings, but when you're talking about your last line of defense against malware it's well worth it. From a feature perspective, many players offer similar feature sets but what sets CrowdStrike apart is the ease of implementation. The management is simplistic in nature for the items we managed on our own (we were using Falcon Complete which is a managed solution).

Incentivized

We've experienced zero downtime

Incentivized

• Due to the integration potential, large amounts of time are saved on a daily basis.
• Incident response time has dropped due to the increased information available by having access to phishing emails directly.
• Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.

Incentivized

• CrowdStrike has cut our security costs.
• Has given us more insight into our end points.
• It has helped with our older PC's CPU usage.
• Cut our cost and time from managing multiple platforms down to managing one platform with better insight than what we had with multiple security platforms.