TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    CrowdStrike Falcon

    Score9 out of 10
    N/ACrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.

    $59.99

    per endpoint/month (minimum number of endpoints applies)

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    CrowdStrike FalconSplunk SOAR
    Editions & Modules
    Falcon Go (Small Business)
    $59.99
    per endpoint/month (minimum number of endpoints applies)
    Falcon Go (Small Business)
    $59.99
    Falcon Pro
    $99.99
    per endpoint/month (for 5-250 endpoints, billed annually)
    Falcon Enterprise
    $184.99
    per endpoint/month (minimum number of endpoints applies)
    No answers on this topic
    Offerings
    Pricing Offerings
    CrowdStrike FalconSplunk SOAR
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    CrowdStrike FalconSplunk SOAR
    Considered Both Products
    CrowdStrike
    No answer on this topic
    Cisco
    Chose Splunk SOAR
    If you use Splunk SIEM, you might wanna use Splunk soar, too. one vendor for SIEM and SOAR, and you do not need to think about integration, etc. Easy to use if we compare to other SOARs, chat and war rooms are great, and almost every action that we need is already created in …
    Incentivized
    Key User Insights
    Would buy again
    98%
    Would buy again
    82 Answers
    100%
    Would buy again
    41 Answers
    Delivers good value for the price
    95%
    Delivers good value for the price
    75 Answers
    100%
    Delivers good value for the price
    34 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    84 Answers
    100%
    Happy with the feature set
    41 Answers
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    68 Answers
    90%
    Lived up to sales and marketing promises
    26 Answers
    Implementation went as expected
    96%
    Implementation went as expected
    75 Answers
    97%
    Implementation went as expected
    37 Answers
    Features
    CrowdStrike FalconSplunk SOAR
    Endpoint Security
    Comparison of Endpoint Security features of CrowdStrike Falcon and Splunk SOAR
    Feature
    CrowdStrike Falcon
    8.7
    98 Ratings
    2% above category average
    Splunk SOAR
    -
    Ratings
    Anti-Exploit Technology8.989 Ratings00 Ratings
    Endpoint Detection and Response (EDR)9.296 Ratings00 Ratings
    Centralized Management8.997 Ratings00 Ratings
    Hybrid Deployment Support8.24 Ratings00 Ratings
    Infection Remediation8.993 Ratings00 Ratings
    Vulnerability Management7.772 Ratings00 Ratings
    Malware Detection9.396 Ratings00 Ratings
    Best Alternatives
    CrowdStrike FalconSplunk SOAR
    Small Businesses
    SentinelOne Singularity
    Score9 out of 10
    No answers on this topic
    Medium-sized Companies
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    No answers on this topic
    Enterprises
    ESET PROTECT
    Score8.8 out of 10
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    CrowdStrike FalconSplunk SOAR
    Likelihood to Recommend
    8.9
    (101 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    10.0
    (3 ratings)
    7.5
    (3 ratings)
    Usability
    10.0
    (2 ratings)
    8.2
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.2
    (40 ratings)
    Support Rating
    10.0
    (9 ratings)
    8.2
    (1 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    10.0
    (1 ratings)
    8.2
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.2
    (1 ratings)
    User Testimonials
    CrowdStrike FalconSplunk SOAR
    Likelihood to Recommend
    CrowdStrike
    Crowdstrike is a unified platform for monitoring endpoint devices, whether they're workstations, servers, cloud-native machines, or even mobile devices. It uses AI/ML to monitor anomalies and suspicious behavior, including zero-day attacks. It is suitable for large organizations but may be costlier or less appropriate for smaller organizations, those who want an on-prem EDR setup, and those who need custom scanning based on compliance requirements.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    CrowdStrike
    • The Log analysis is very detailed and easy to use.
    • Prevent and block all type of malwares.
    • Great threat intelligence which is very up-to-date with the recent cyber attacks
    • very user friendly in access and management
    • Automated feature of detecting, taking action and closing incidents using fusion workflow.
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    CrowdStrike
    • Support - we are often tasked with running down problems rather than being directed by support.
    • The sales staff we have dealt with are not very responsive or timely.
    • I believe this is a product built for installations of 300 users or more.
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    CrowdStrike
    Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI.
    Incentivized
    Read full review
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    CrowdStrike
    I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers.
    Incentivized
    Read full review
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Performance
    CrowdStrike
    No answers on this topic
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    CrowdStrike
    Any time we need to engage the Crowdstrike Falcon Complete Team, their response is switch, thorough, and they are sure to not close out any request until the customer confirms that they have provided an acceptable resolution. If I ever need anything from the account team related to the product, I also get a response from them within minutes typically to address my question. Top notch customer service!
    Incentivized
    Read full review
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    CrowdStrike
    There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any.
    Incentivized
    Read full review
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    CrowdStrike
    The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user.
    Incentivized
    Read full review
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    CrowdStrike
    Read the documentation
    Incentivized
    Read full review
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    CrowdStrike
    It was just a legacy AV program onboarded during initial setup days. As the org. As it expanded, its threat landscape also grew, and we needed a next-gen solution to protect against evolving threat vectors. Falcon EDR was the one that solved all these in a single place.
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    CrowdStrike
    No answers on this topic
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    CrowdStrike
    • CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises.
    • The cloud-native architecture and automated features have improved operational efficiency.
    • The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times.
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots