CrowdStrike Falcon Sandbox Reviews

Name: CrowdStrike Falcon Sandbox
Brand: CrowdStrike
Rating: 4.1 (6 reviews)

4.1 out of 5

6 reviews
100% willing to recommend

What is CrowdStrike Falcon Sandbox?

CrowdStrike Falcon Sandbox detects threats without impacting endpoint performance, providing users with a seamless experience. It delivers detailed reports for collaboration and offers malware analysis capabilities, identifying potential breaches and suspicious files.

Get the Anti-Malware Tools Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon Sandbox, Microsoft Defender for Endpoint, VirusTotal and more!

CrowdStrike Falcon Sandbox is the #16 ranked solution in top Anti-Malware Tools. PeerSpot users give CrowdStrike Falcon Sandbox an average rating of 8.2 out of 10. CrowdStrike Falcon Sandbox is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon Sandbox vs Microsoft Defender for Endpoint. CrowdStrike Falcon Sandbox is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a comms service provider, accounting for 13% of all views.

Buyer's Guide

Anti-Malware Tools

January 2025

Get the category report

Helped 838,713 peers since 2012

Featured reviews

Abhimanyu Raj

Senior Consultant at Ernst & Young

These features are probably the most essential for me. I find the notifications and alerts received from CrowdStrike server to be invaluable. They analyze Falcon and provide output regarding any kind of infected malware devices or files. We have seen returns on our investment in more than thousands of instances, which is the most important part for us.

Read full review

Valarie

SOC Technical Lead at a educational organization with 1,001-5,000 employees

It provides a safe way to analyze and review documents that may have sensitive information without uploading them to a public platform. Additionally, provides an easy way to spin up a VM without requiring additional resources and patching of personal or team-managed virtualization. This empowers analysts to fully analyze and understand the behaviors of varying executables and sites. This has enabled our team to provide a better experience to our users by identifying any false positives from our email gateway and promoting security hygiene by reporting phishing emails. An analyst will personally reply to the report with their findings after sandboxing the artifacts.

Read full review

Mahmoud_Yassin

CTSO at Cyb3r

Falcon Sandbox is used to quarantine files, scan them, and ensure there are no malicious threats or IOCs related to these files. It provides threat feed to the CrowdStrike endpoint, assisting in detection and response. It is used in the client's environment, where Mahmoud's team implements and…

Read full review

CrowdStrike Falcon Sandbox mindshare

As of February 2025, the mindshare of CrowdStrike Falcon Sandbox in the Anti-Malware Tools category stands at 1.3%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Anti-Malware Tools

Key learnings from peers

Last updated Feb 16, 2025

Valuable Features

CrowdStrike Falcon Sandbox excels in detecting threats with minimal endpoint impact, providing interactive features for incident analysts and comprehensive reports. Its malware detection and threat rating, along with in-depth metadata analysis and reliable alerts, make it invaluable. The AI engine reduces false positives by learning from historical activities. It effectively handles endpoint security tasks, performs thorough vulnerability assessments, and excels in obtaining breach information from various file sources, delivering significant returns on investment.

"CrowdStrike is an excellent tool for managing all endpoint-related security tasks."
"CrowdStrike is an excellent tool for managing all endpoint-related security tasks."
"We have seen returns on our investment in more than thousands of instances, which is the most important part for us."

Room for Improvement

CrowdStrike Falcon Sandbox needs improved support for additional operating systems like MacOS and Windows 11. Contextual understanding of certain actions is lacking, labeling normal behavior as malicious. Technical support response is often slow and communication needs enhancement. Users desire better integration with SOAR products, streamlined user interface navigation, and clearer incident information presentation. Risk indicators would assist less knowledgeable staff. Limitations exist with malware analysis for large files over one GB.

"While CrowdStrike is a powerful tool, the user interface is cluttered with many features, making it challenging to navigate."
"While CrowdStrike is a powerful tool, the user interface is cluttered with many features, making it challenging to navigate."
"As of now, there is nothing specific in need of improvement."

Pricing

Enterprise users report that CrowdStrike Falcon Sandbox pricing is positioned above mid-range, rating it a 7 out of 10 for cost, indicating it's considered somewhat expensive compared to competitors. Pricing structure depends on the number of endpoints and chosen features, operating on a usage-based model. Despite its cost, organizations accept the expense relative to its robust capabilities within the CrowdStrike suite.

"Price-wise, the tool is a bit above mid-range, maybe 7 out of 10, where 10 is the most expensive."
"CrowdStrike Falcon Sandbox is not cheap; however, whether it should be more affordable is a decision best left to the company."

Popular Use Cases

CrowdStrike Falcon Sandbox is primarily employed to detect and investigate hidden malicious programs, suspicious URLs, and files. It aids in identifying unknown threats, analyzing software, and ensuring cyber security. Organizations utilize it to quarantine and scan files, check for spyware or malicious code, and handle a high volume of emails with links and attachments. It integrates threat feeds to assist in detection and response activities across diverse environments.

Service and Support

CrowdStrike Falcon Sandbox customer service and support are praised for their speed and responsiveness. Tickets are typically addressed within a day, often in just two hours. Users commend the informative and timely assistance provided, with satisfaction ratings around nine out of ten. The quality of support, especially with tiered options, is highlighted positively, ensuring quick resolutions and efficient communication.

Deployment

Users expressed varied experiences with CrowdStrike Falcon Sandbox's initial setup. Cloud version users appreciated the quick and easy enabling process without maintenance concerns. Others noted straightforward deployment completed within a day, ensuring Threat Intelligence integration. Some experienced a learning curve in policy creation, requiring understanding of user behavior and taking up to a month, yet found support helpful. Overall, installation was generally straightforward for most.

Stability

Users note that CrowdStrike Falcon Sandbox performs reliably, with no major issues reported from clients. Many consider it to have good stability, rating it eight out of ten. They highlight its consistent performance, acknowledging it may not reach absolute perfection, yet aligns closely with high expectations. The majority express satisfaction with its durability, emphasizing that any minor imperfections do not significantly detract from its dependable operation.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Anti-Malware Tools Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Comms Service Provider

13%

Financial Services Firm

12%

Educational Organization

12%

Government

10%

Computer Software Company

10%

Media Company

Healthcare Company

University

Manufacturing Company

Real Estate/Law Firm

Leisure / Travel Company

Hospitality Company

Retailer

Energy/Utilities Company

Wholesaler/Distributor

Construction Company

Logistics Company

Outsourcing Company

Pharma/Biotech Company

Recruiting/Hr Firm

Security Firm

Transportation Company

Compare CrowdStrike Falcon Sandbox with alternative products

Learn more about CrowdStrike Falcon Sandbox

CrowdStrike Falcon Sandbox is designed for threat detection, offering a comprehensive approach to identifying hidden malicious programs and analyzing harmful URLs. Its integration allows for seamless evaluation of files and sandboxing of email links and attachments, supporting threat detection and response. Users value its capabilities in network connection recording, metadata analysis, and threat ratings, although some express a need for MacOS and Windows 11 support and improved SOAR integration.

What are the key features of CrowdStrike Falcon Sandbox?

Executive Detonation: Provides a simulated environment for realistic threat analysis.
Human-like Interaction: Emulates user actions for accurate threat identification.
Comprehensive Recording: Tracks network connections, processes, hashes, and fingerprints.
Threat Feeds: Supplies vital information for detecting emerging threats.

What benefits should users expect?

Malware Detection: Effectively identifies and quarantines malware.
Detailed Reports: Facilitates sharing among teams and stakeholders.
Threat Analysis: Assists in evaluating potential breach data.
Efficient Threat Handling: Offers timely identification of suspicious activities.

CrowdStrike Falcon Sandbox is implemented by organizations to strengthen security across email systems and endpoint devices. It is particularly valuable in industries needing thorough threat investigations and rapid responses to potentially harmful content, empowering users with essential threat intelligence.