Skip to main content
TrustRadius
CrowdStrike Falcon

CrowdStrike Falcon

Overview

What is CrowdStrike Falcon?

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents,…

Read more
Recent Reviews
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 7 features
  • Endpoint Detection and Response (EDR) (69)
    9.4
    94%
  • Malware Detection (69)
    9.3
    93%
  • Infection Remediation (67)
    8.9
    89%
  • Centralized Management (70)
    8.5
    85%

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing

Falcon Pro

$6.99

Cloud
per endpoint/month (for 5-250 endpoints, billed annually)

Falcon Enterprise

$14.99

Cloud
per endpoint/month (minimum number of endpoints applies)

Falcon Premium

$17.99

Cloud
per endpoint/month (minimum number of endpoints applies)

Entry-level set up fee?

  • No setup fee
For the latest information on pricing, visithttps://www.crowdstrike.com/endpoint…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services
Return to navigation

Features

Endpoint Security

Endpoint security software protects enterprise connected devices from malware and cyber attacks.

8.8
Avg 8.5
Return to navigation

Product Details

What is CrowdStrike Falcon?

CrowdStrike offers cloud-delivered endpoint protection. CrowdStrike aims to revolutionize endpoint protection by unifying next-generation antivirus (AV), endpoint detection and response (EDR), and a 24/7 managed hunting service — all delivered via a single lightweight agent.

The vendor states many of the world’s largest organizations use CrowdStrike, including three of the 10 largest global companies by revenue, five of the 10 largest financial institutions, three of the top 10 health care providers, and three of the top 10 energy companies.

CrowdStrike Falcon Features

Endpoint Security Features

  • Supported: Anti-Exploit Technology
  • Supported: Endpoint Detection and Response (EDR)
  • Supported: Centralized Management
  • Supported: Infection Remediation
  • Supported: Vulnerability Management
  • Supported: Malware Detection

CrowdStrike Falcon Video

CEO George Kurtz discusses challenges organizations face using legacy cybersecurity solutions & how easy, fast & effective the CrowdStrike Falcon platform is by comparison.

CrowdStrike Falcon Integrations

CrowdStrike Falcon Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows, Linux, Mac
Mobile ApplicationApple iOS, Android
Supported LanguagesEnglish, Japanese

Frequently Asked Questions

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.

Reviewers rate Endpoint Detection and Response (EDR) highest, with a score of 9.4.

The most common users of CrowdStrike Falcon are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(234)

Attribute Ratings

Reviews

(1-25 of 54)
Companies can't remove reviews or game the system. Here's why
Humayoon Khan | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I use CrowdStrike Falcon as the main source of monitoring threats originating from operating systems used by our servers, workstations, staff laptops and guest users machines.
Our organization being a university where thousands of students and hundreds of staff turn up daily, puts our critical assets at risk of being compromised by an insider. CrowdStrike Falcon helps us identify the source of a threat accurately, blocks the triggering file or script before it can cause damage. The AI / ML based detections are very helpful because they catch threats that other vendors may fail at. The scope of our use case is endpoint monitoring and threat management.









  • AI / ML based malicious activity detections
  • Detection information presented clearly and concisely on dashboard
  • Easy filtering of detections on hostname, detection name, severity, date, time, hash, technique etc
  • traces full process chain instead of just showing the source file or script which really helps in tracing the main security concern of machine
  • If some malicious app uses microsoft's signed binary like onedrive, cmd, wscript CrowdStrike would tag the microsoft binary as malicious and fails to provide the actual file that tried to execute these.
  • For example if a
  • malware.exe tries to run this command
  • cmd /c bitsadmin
  • CrowdStrike would tag cmd or bitsadmin as malicious and does not mention malware.exe at all sometimes
  • There are two different dashboards (updated and deprecated) which causes confusion among my team, all must be on same page and use single dashboard.
  • Support is very slow in responding to problems and depend on automated bots which really frustrates when a major issue arises.
It is best suited for organizations that have lot of machines and users, since CrowdStrike agent-based deployment is easy to manage and maintain.
CrowdStrike Falcon may be less appropriate for smaller organizations due to its cost, also a technical support team is required to install / remove agents from machines and monitor the dashboard for detections daily.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
It's been used as ERD solution. Great ability to achieve network segmentation via the host firewall. We also used the IdP module and Horizon for cloud security. Data protection is a product we're still testing but looking promising. The visibility and telemetric getting from each sensor is great and the CrowdStrike Falcon complete visibility is pretty reliable.
  • Network segmentation for host and servers using the firewall.
  • USB block by the sensor.
  • IDP alerts from our domain and different identities
  • Support response.
  • Sensor stability, sometimes the sensor fails on computers
  • Improve menus
Incident response containment works really well, we have contained a couple of machines during incidents and it works pretty well. Also telemetry from different devices is useful. Identity protection alerting also works very well for us, we get tickets and calls from CrowdStrike Falcon when users connects from suspicious countries.
Score 10 out of 10
Vetted Review
Verified User
Our EDR and its operations utilize CrowdStrike Falcon as the cornerstone of security. Currently, people are concerned about the protection of IDs.
  • Prompt response
  • Reliable follow up
  • High detection ability
  • Enhancement of Japanese language
  • Screen configuration that requires no screen transitions as much as possible
CrowdStrike Falcon can be operated with a low operational load, and we believe it can be used by various organizations. I think there are not many organizations for which he is not suitable. Instead, I think it depends on whether or not you can trust and implement this highly complete service.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
CrowdStrike is the corporate protection against known (and unknown) malware and bad people.
We were using other solution and we were forced to change it really quick.
The process has been really simple, and for the moment we are really happy with how it works and how it performs.
It can be used both on computers and servers, and it supports quite good both Windows & Linux
  • Protection against all kind of malware
  • Performance
  • Real Time Response
  • Custom IOC Management
  • Notifications to end users
  • Tray Icon
It can be used in combination with your current AV solution or even as an standalone product.
It seems to work pretty well and protects you from almost everything tested.
Maybe RFM can be improved, specially with patch Tuesdays, but nothing to worry too much about.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
  • Default endpoint protection tool on all servers and laptops.Laptops
  • local firewall, and device lockdown (USB drives blocked)
  • Spotlight
  • vulnerabilities
  • Identity Protection - lateral movement, service account protection, insider threat
  • Threat Intel / Sandbox
  • EDR
  • Threat Intel
  • USB blocking
  • Complete team - triage and escalation
  • Better reporting
CrowdStrike Falcon is an all in one solution - One agent, low impact
James Dilley | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We deployed CrowdStrike Falcon across our organization to strengthen our cyber defenses. The use cases ranged from endpoint protection to threat intelligence, covering a broad spectrum of security needs. The deployment was organization-wide, safeguarding endpoints and critical systems against evolving cyber threats. The reduction in manual tasks and real-time updates contribute to time savings for our security team.
  • CrowdStrike Falcon's next-gen endpoint protection consistently outperforms traditional solutions.
  • The cloud-native architecture ensures seamless scalability and real-time updates, eliminating the need for manual interventions.
  • CrowdStrike Falcon's threat intelligence and hunting capabilities are unparalleled.
  • The advanced features may pose a learning curve for users unfamiliar with modern cybersecurity tools.
  • A more transparent pricing model could assist in budget planning.
  • Expanding compatibility with a broader range of security solutions would be advantageous.
I would highly recommend CrowdStrike Falcon to any organization serious about bolstering its cybersecurity defenses. The platform's effectiveness in threat detection, proactive mitigation, and scalability make it a valuable asset in today's ever-evolving threat landscape. Despite some learning curves and integration challenges, the return on investment and the overall security enhancement justify its strong recommendation.
Score 8 out of 10
Vetted Review
ResellerIncentivized
We use Crowdstrike to protect the company's servers and keep them safe from as many threats as possible.
  • Known malware detection.
  • Software detection with malicious behavior.
  • Identification of processes with anomalous behavior.
  • User management in cases where the service is provided as an MSP.
  • Clarity in console menus.
  • Integration with third-party EPP.
It is suitable for large companies with complex organizational structures that are managed by the company's own staff or by Crowdstrike. It is less suitable for small companies due to its high initial costs, especially if it is offered as a service from an MSP, since the management of MSP users is complicated and, in some cases, it cannot even be a real vision of the users that can manage each company.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
CrowdStrike Falcon is used as an EDR agent and we also leverage Falcon Complete services for additional security operations assistance. Additionally, EDR logs are combined with SIEM logs to gather better insights about a security event which may or may not qualify for additional deep dive research. CrowdStrike Falcon is customizable and has a robust threat intelligence inbuilt.
  • Endpoint Detection and Response
  • Great communication to the security operations teams for triaging a security event
  • Customizable policies which can be globally applied
  • Ease of integration with SIEM
  • Ability to query endpoint logs within the Falcon portal itself
  • Sandbox can get better in my opinion.
  • Detection of source of infection in case of lateral movements recommended
  • Browser based logs/ DNS queries for getting to the root of the issue
CrowdStrike Falcon can be treated as a single source for endpoint protection. With additional features, CrowdStrike Falcon has a strong use case for preventing malware infection in the infrastructure security ecosystem. CrowdStrike Falcon's complete helps get the MSSP capabilities for SOC detection and incident response from a league of experts.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use endpoint protection, MFA anywhere and identity management to protect our organization. Falcon complete oversees all of the system to make sure we are protected at all times. We feel confident in the protection the platform provides and have nothing negative to say about the product. We have had great success.
  • MFA Everywhere to protect our systems from remote login connections.
  • Realtime endpoint protection that is updated regularly without intervention from our system administration team.
  • 24 x 7 x 365 monitoring of the system to provide protection at all times.
  • Walkthroughs of new features when added to the console.
  • Better instructions on how and where to add or change policies for various tools.
I have been in the industry for close to thirty years and this has been one of the best endpoint protection programs I have ever used. We feel confident as an organization that we are protected on the endpoints at all times. The Falcon Complete team is great for providing assistance whenever we need it.
November 01, 2023

CrowdStrike real review.

Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use it to protect all of our computers and servers.
  • Malware detection.
  • Bad behaviour detection.
  • Support on old Operatives Systems.
Protecting Windows, Linux, and MAC Operative Systems from all kinds of threats. Not only alerting but also preventing, using behavior detection and file analysis.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Fully Managed Security Service that investigates detections and either escalates or deals with them directly for us.
  • MDR
  • Vulnerability assessment.
  • Identity Protection.
  • Easier to use interface.
  • Log management.
  • Investigations
It is suited to small teams who require additional backup and assistance within the security area.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use CrowdStrike as an end-point protection application. We also use CrowdStrike's Identity Threat Protection module, which allows us to gain greater insight into and secure our end user by tying into our IAM solution. This helps us achieve our new cybersecurity goals of providing a primary focus on protecting user's identities and not putting the main focus on protecting endpoints. By implementing CrowdStrike Falcon Complete, we are able to monitor security for our endpoints and our user identities 24/7. This is a big plus for us as we are not staffed 24/7 and can rely on a reputable SOC from CrowdStrike to oversee and monitor security for all of our endpoints and our identities.
  • Protection of end points.
  • Protection of user identities.
  • Providing quick response to any identified security issues.
  • CrowdStrike can be on the more expensive side of end point and identity management, but it's worth it.
I feel CrowdStrike Falcon is well suited for anybody who takes securing their systems and employees safe. They have a $1 million breach policy, which helps give peace of mind that they stand behind their product and really believe in it. This was the big determining factor for us. Not because we needed the $1 million policy but because it shows how much they are willing to invest in their products as the best on the market.
Score 9 out of 10
Vetted Review
ResellerIncentivized
CrowdStrike Falcon is installed on all endpoints and Server VMs at our end.It helps us to stop security breaches as well as prevent all types of attacks (including malwares, ransomwares and many other such attacks)
  • It helps us to stop security breaches as well as prevent all types of attacks (including malwares, ransomwares and many other such attacks)
  • It helps in Adversary Emulation Exercise
  • it helps in Red Team / Blue Team Exercise
  • should improve threat visibility
  • its overall TCO should be reduced
  • seamless integration with solutions like SIEM
It helps in Adversary Emulation Exercise.
It helps in Red Team / Blue Team Exercise.

Threat visibility is something where it is less appropriate.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use Crowdstrike Falcon for the below points
1. To prevent Ransomware
2. Device Control
3. Protection of Workstations and servers
4. Advanced protection for Zeroday
4. To find malicious activities on systems
  • Overwatch feature is amazing
  • Accuracy to identify True Positive
  • Powerful AL based detection method
  • RFM issue
  • Certificate Pinning, older sensor versions stops communicating
  • Sensor Duplication
Unmatched AI capability to find security threats & seamless Customer Support
Score 9 out of 10
Vetted Review
Verified User
CrowdStrike Falcon Endpoint Protection is a complete cloud-native security framework to protect endpoints and cloud workloads. Falcon stops breaches and improves performance with the power of the cloud, artificial intelligence (AI), and an intelligent, lightweight single agent. The Falcon Platform is flexible and extensible. Best suitable for Hi-tech companies, Non air-gapped organizations andThin SecOps teams
  • Threat Inteligance
  • Low CPU and RAM usage
  • Malware mitigation
  • Vulnerability managment
  • Hunting
  • Ease of use
  • Identity protection
  • Air-Gapped networks
  • Mobile protection
Since it is easy to deploy and use, it can be deployed and protect small and large companies immediately. best suitable for Hi-tech companies and Thin SecOps teams Falcon X threat intelligence and Threat Graph cloud-based data analytics provide the ability to detect advanced threats and analyze user and device data to spot anomalous activity.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use it for endpoint protection from malware and viruses on all PC's and laptops within the organization for both on premises and work from home users. The product is small footprint on the clients and is not noticed by the end users. It looks for not only known malware but also for patterns/IOCs that may indicate a zero day attack.
  • Runs on clients without causing application issues
  • matches files patterns/behaviors to look for unknown attacks
  • contains potentially infected hosts
  • The user interface is terrible
  • permit users to see licensed products in the console
  • less false positives. files such as Malwarebytes scanning modules should be known as safe
  • make it easier to create scanning exclusions that actually work
I believe CrowdStrike could be a successful implementation in any organization, however, for any company that wants someone be on top of detections, exclusions, actions, etc. they would need a full time employee to manage the product. The price point is in line with other products and has integrations with more 3rd party SIEM, scanning and network monitoring solutions than any other vendor.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use Falcon to ensure we protect all our endpoint devices across the whole globally distributed organisation. We aim to utilise Falcon capabilities to prevent malware being distributed and exploited on all endpoint devices. Falcon Spotlight assists with getting visibility of the number of vulnerabilities we have on our endpoints to address by ensuring robust patch management capabilities.
  • Efficiently picking up and preventing malware threats on endpoints
  • Prompt notification capabilities on any issues
  • Ability to "set and forget" with minimal maintenance required
  • Falcon Spotlight integrations with automatic patching solution would be a good feature
  • LogScale with SIEM functionalities would be an added feature
  • Simplified one dashboard with all high-level information
Great product for endpoint detection and response for any sized organisations. Simple configuration and installation ensures its well suited for small and medium sized organisations.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Deployed CS Falcon in a higher education research environment. We needed to leverage a tool that can build a models and be on the advancement of technology due to the nature of higher education and BYOD. We installed the CS Falcon on all machines and worked with the CS team to build a Gov Cloud for research equipment that required a different set of cloud protocols.
  • Monitoring
  • Notification
  • Device Management
  • Have an executive dashboard
  • better reporting cadence
  • ability to tag devices with end user names
CS Falcon is suited for nearly all scenarios and deployment. The only challenge would be if devices contain protected data the need for the Gov Cloud installation would be necessary. This can split up your installation base but isn't anything that is very difficult to manage.
Itumeleng Thekiso | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use CrowdStrike Falcon as an endpoint sensor to detect vulnerabilities throughout our organizations endpoints, in this day and age vulnerabilities come in all shapes and sizes from all different kinds of directions bet it from; an e-mail that contains a malicious link, an infected file you unintensionally downloaded from the web, existing programs with old or new vulnerabilities that are installed on our endpoints etc.CrowdStrike Falcon really addresses these issues on a wider proportion making sure we stay up to date with new CVEs and that our endpoints are secured.
  • Host machine vulnerability detection
  • Threat mitigation
  • Activity monitoring
  • Constantly releases alerts or notifications
  • Behavourial analytics
  • Endpoint manual scan
  • Malware analysis needs improving
  • Requires some level of expertise to use its features
CrowdStrike is really a wide reaching EDR solution for very large organizations, it makes economical sense to deploy CrowdStrike Falcon if your organization has a large endpoint footprint, threat hunting is 24/7 so meaning if most of the security team is on holiday CrowdStrike is able to mitigate a lot of threats without the help of the security team essentially and it also does send out alerts if necessary.

However, CrowdStrike isn't your typical anti-virus solution it does not provide you with the ability to control it manually like you would with some products out there.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
Crowdstrike Falcon is one of the leading NG-AV endpoint detection platforms in the market which is always up to date with the emerging threats. We use Crowdstrike Falcon to give MDR services to many of our customers. It helps to prevent, block all types of Cyber-attacks and also helps to get the detailed overview of the attack. It is very user friendly in access and management.
  • The Log analysis is very detailed and easy to use.
  • Prevent and block all type of malwares.
  • Great threat intelligence which is very up-to-date with the recent cyber attacks
  • very user friendly in access and management
  • Automated feature of detecting, taking action and closing incidents using fusion workflow.
  • The False positive alerts can be minimized
  • The UI can be made better and easy to access.
  • Customer support can be made better
It helps to detect and prevent malwares automatically which saves the response time to act. The machine learning and AI feature which helps to detect unusual behavioural based malwares which use defence evasion techniques. The fusion workflow feature which helps to automate the detection and blocking of less important files such as PUP/Adwares so the focus can be on real threats. The host logs are easy to filter and use which helps to do quick incident response.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
CrowdStrike Falcon Complete is utilized to provide managed EDR services on all server and workstation endpoints throughout our Corporate network. The software itself provides endpoint protection at the EDR level and the Falcon Complete service is leveraged as a 24x7x365 SOC MSSP to manage and remediate all endpoints plus analyze and provide proactive threat hunting capabilities for all data provided.
  • Updates are seamless and rarely fail compared to past products
  • The tool leverages the largest Cybersecurity threat database in the world
  • The response to a potential threat or inquiry by the managed services team is lightning fast
  • Extremely thorough responses from the managed services team on potential threats
  • Onboarding quick and painless
  • Sometimes updates to sensor versions fail, which requires manual intervention by internal staff members
  • The variety of different administrative privilege levels is vast and sometimes confusing
  • Proactive notifications confirming the health of the environment would be great instead of just reporting on potential issues
CrowdStrike Falcon Complete managed service is excellent for smaller organizations where staff is limited and outside SOC expertise can be leveraged to protect the organization from Cybersecurity threats. They are empowered to proactively remediate and perform threat containment 24x7x365 where as my staff is not active during overnight and weekend hours. They also leverage threat information from their huge data lake of intelligence from other customers against our data to keep us safe. If an organization has a larger Cybersecurity staff where these types of activities can be managed in-house, it can opt for the Falcon client-only option and not pay for the extra "complete" managed services portion.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
CS Falcon is our primary tool of choice for endpoint protection. It has a small footprint and impact while being highly intelligent and very well supported.
With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
Falcon provides full visibility on processes, communication flows and all sorts of activities that are happening on the endpoints. It works smoothly with other tools that we have co-deployed, like DLP, DNS protection, SWG/CASB, App monitoring and Control.
Recently we added to our arsenal the Identity Protection and the Cloud Protection modules, driven by the business needs to reduce the number of vendors, tools and dashboards while achieving maximum protection and synergy/consolidation.
We believe that as a company, Crowdstrike sits on top of the range of security vendors that we work with, has the right vision and keeps delivering excellence.
We are quite happy with their Customer Success Management and Support Services and look forward to trialling their new functions: LogsScale and External Surface Risk Management.


  • Endpoint Security
  • Threat Detection, Protection, Reporting
  • Malware Analysis
  • Continuous fast delivery of new features and improvements
  • Customer awareness, learning and support
  • Device Control
  • Identity Protection
  • Identity Protection - plenty of small improvements which have been suggested by our side. Long list to mention them here. If needed I can forward you the email/presentation sent for the occassion to the Production team.
  • They recognised our contribution / remarks , by providing a discount on the initial offer, which we were happy to accept.
  • Our company went through an MnA with another pharmaceutical. Both companies had Crowdstrike EDR installed on endpoints, but on different Tenants.
  • Unfortunately there was not an official technical solution for migrating the endpoints to a unique tenant. We had to Uninstall the existing agent from the acquired company and then Reinstall it again, which was laborious and time-consuming. I wish they had a solution for such cases :-)
  • Attack Surface Management (demoed recently) doesn't seem to be fully matured yet, but they definitively are on a good path.
Well-suited for advanced and more mature environments, with dedicated personnel and well-versed in Threat and Incident Response.
The learning curb is a bit steep, but if time can be dedicated to attending Workshops and Learning modules on Crowdstrike University, then 3-6 months is a realistic timeframe to yield expected outcomes.
Clear blueprints for product rollout are provided to customers based on your specific environment.

Score 10 out of 10
Vetted Review
Verified User
Incentivized
CrowdStrike is the ultimate Endpoint, Detection and Response solution on all our endpoints. A significant upgrade from the older Anti virus solutions, where there was a complete lack of visibility and control of whats happening. Our mian objective was to rely on the Falcon Complete team to be there for us to handle any incidents 24/7, as we are a small team and unable to achieve this ourselves.
  • Detects activities on the endpoint and raises incidents if this is deemed needed.
  • Does not decrease the performance of the endpoint
  • Can easily identify vulnerabilities as they become known
  • There are a lot of menu items for Falcon complete. This does mean navigating the menu to find them is slightly tricky and requires constant use to get familiar with it.
  • A system tray icon would be useful to see its installed and running. I currently use a desktop background tool to show the service status and version for peace of mind.
  • When searching endpoints, would be nice to be able to edit the hostname rather than delete it and start typing it all again.
For small teams that do not have their own SOC, this is a great way to protect the endpoints with the Complete team to be there to prevent serious incidents.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
One of the leaders in endpoint protection. Crowdstrike has helped detect several threat actors initial tactics which arrived via phishing campaigns. Having the solution enabled in the Prevention mode has blocked several active attempts. Mostly, Ransomware and Keyloggers.
  • Threat Intelligence
  • Prevention Controls
  • Ability To Search For Logs
  • With respect to API reporting capabilities
  • Device control
It fits the budget of mid to large size companies. Easy to deploy and administer the solution.
Cleiver Moreira | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We have been using CrowdStrike Falcon a lot to protect our entire environment of servers and workstations against the most diverse threats (from the simplest to the most advanced). We use EDR resources to investigate various types of threats that we have encountered in our environment. We not only use it to detect, but also automatically respond when we have a high-risk or critical detection. In addition, we use the Spotlight module to address all the vulnerabilities we have and with that we can open tickets very easily through the integration of Spotlight with the Jira ticket system.
  • Threat detection
  • Simplicity of handling on the console
  • Event investigation through the EDR feature
  • Under Host Management, have a Device Users column.
  • It could have ready-made example Workflows for us to use.
  • The Identity Protection module could support Okta.
I believe that CrowdStrike Falcon is suitable for any size of company, as it is a very robust and simple solution to work with. There is no need to have a high-level team, anyone with basic security knowledge can handle the solution.Perhaps the value of the solution is a little higher than the competitors, but this also justifies the efficiency of the tool and the leadership achieved.
Return to navigation