Try our new research platform with insights from 80,000+ expert users

ArcSight Intelligence vs CrowdStrike Falcon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.9
ArcSight Intelligence boosts security and ROI by automating threat detection, reducing false positives, and streamlining workflows with advanced analytics.
Sentiment score
7.5
CrowdStrike Falcon improves ROI by cutting costs and increasing productivity through efficient threat management and strong security measures.
 

Customer Service

Sentiment score
6.7
ArcSight Intelligence has slow but capable customer support, with mixed user satisfaction regarding problem resolution and feedback sufficiency.
Sentiment score
7.1
Customers generally praise CrowdStrike Falcon's responsive, knowledgeable support, despite occasional slow responses and limited expertise concerns.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
 

Scalability Issues

Sentiment score
6.3
ArcSight Intelligence is scalable but complex, with user ratings ranging from moderately to highly, influenced by partner support.
Sentiment score
7.9
CrowdStrike Falcon excels in scalable, seamless deployment across various organizations, with flexible licensing and minimal disruption during expansion.
It has adequate coverage and is easy to deploy.
When it comes to scalability, it is entirely based on premium models according to demand.
 

Stability Issues

Sentiment score
8.4
ArcSight Intelligence is highly rated for stability and consistent performance, with users giving it a nine out of ten.
Sentiment score
8.2
CrowdStrike Falcon offers stable, reliable performance with minor update issues and high user satisfaction ratings for protection.
I have never seen instability in the CrowdStrike tool.
We are following N-1 versions across our environment, which is stable.
 

Room For Improvement

ArcSight Intelligence requires frequent updates, improved usability, better speed, enhanced scalability, lower pricing, and higher ranking compared to QRadar and Splunk.
Users desire improved dashboard functionality, integration, machine learning, and interface enhancements with cost-effective options for better threat management.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Threat prevention should be their first priority.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
 

Setup Cost

ArcSight Intelligence is costly, suited for enterprises, and offers various licensing options with extra charges for new features.
CrowdStrike Falcon is pricier than competitors but valued for strong security, flexible features, and excellent support.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
 

Valuable Features

ArcSight Intelligence offers a powerful log correlation engine, customizable alerts, seamless dashboard, user-friendly interface, and easy rule creation.
CrowdStrike Falcon excels with real-time threat detection, cloud-native flexibility, and seamless integration, enhancing endpoint security and management.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
The moment the user clicked on the file, it was quarantined thanks to CrowdStrike.
The machine learning behavior for anomaly detection is a valuable feature.
 

Categories and Ranking

ArcSight Intelligence
Ranking in Security Information and Event Management (SIEM)
40th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
User Entity Behavior Analytics (UEBA) (14th)
CrowdStrike Falcon
Ranking in Security Information and Event Management (SIEM)
6th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
126
Ranking in other categories
Endpoint Protection Platform (EPP) (2nd), Identity Management (IM) (6th), Threat Intelligence Platforms (2nd), Endpoint Detection and Response (EDR) (1st), Active Directory Management (2nd), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Ransomware Protection (1st), Identity Threat Detection and Response (ITDR) (3rd), AI-Powered Cybersecurity Platforms (1st), Continuous Threat Exposure Management (CTEM) (2nd)
 

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of ArcSight Intelligence is 0.3%, down from 0.3% compared to the previous year. The mindshare of CrowdStrike Falcon is 4.7%, up from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Pravir KumarSinha - PeerSpot reviewer
Has essential threat detection capabilities, but the features for intelligence need enhancement
We integrated this tool with our security infrastructure. We installed it on a Linux server, where we have a Logger and ESM installed. With the Linux server as the hub, we manage all the configurations and rules, including those for email triggers. The logs are routed through a connector to the Logger, allowing us to monitor our infrastructure effectively. The platform helps us improve threat detection capabilities. I recommend it to others and rate it a seven out of ten.
Chintan-Vyas - PeerSpot reviewer
Easy to set up with good behavior-based analysis but needs a single-click recovery option
Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
847,862 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Government
20%
Computer Software Company
19%
Financial Services Firm
8%
Manufacturing Company
7%
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about ArcSight Interset / Intelligence?
The platform helps us improve threat detection capabilities.
What needs improvement with ArcSight Interset / Intelligence?
The product could be improved in several areas; it currently requires significant enhancement. Compared to QRadar and Splunk, ArcSight Intelligence falls behind, placing it as the third choice amon...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
 

Also Known As

ArcSight Interset / Intelligence, FileTrek, Interset UEBA, Micro Focus Interset UEBA, Micro Focus Interset, ArcSight Interset
CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
 

Overview

 

Sample Customers

Accuvant, Splunk Inc., NuTech, Box, rSolutions, Voodoo Technology Limited
Information Not Available
Find out what your peers are saying about ArcSight Intelligence vs. CrowdStrike Falcon and other solutions. Updated: April 2025.
847,862 professionals have used our research since 2012.