Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon Cloud Security vs Microsoft Defender for Cloud comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Container Security
2nd
Ranking in Cloud Workload Protection Platforms (CWPP)
4th
Ranking in Cloud Security Posture Management (CSPM)
3rd
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
3rd
Average Rating
8.6
Reviews Sentiment
7.9
Number of Reviews
106
Ranking in other categories
Vulnerability Management (6th), Cloud and Data Center Security (5th), Compliance Management (3rd)
CrowdStrike Falcon Cloud Se...
Ranking in Container Security
6th
Ranking in Cloud Workload Protection Platforms (CWPP)
7th
Ranking in Cloud Security Posture Management (CSPM)
8th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
7th
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
29
Ranking in other categories
Application Security Tools (13th), Cloud Infrastructure Entitlement Management (CIEM) (2nd), Application Security Posture Management (ASPM) (2nd)
Microsoft Defender for Cloud
Ranking in Container Security
4th
Ranking in Cloud Workload Protection Platforms (CWPP)
3rd
Ranking in Cloud Security Posture Management (CSPM)
4th
Ranking in Cloud-Native Application Protection Platforms (CNAPP)
4th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
75
Ranking in other categories
Vulnerability Management (7th), Container Management (9th), Data Security Posture Management (DSPM) (3rd), Microsoft Security Suite (4th), Compliance Management (2nd)
 

Mindshare comparison

As of March 2025, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of SentinelOne Singularity Cloud Security is 2.2%, up from 0.9% compared to the previous year. The mindshare of CrowdStrike Falcon Cloud Security is 5.7%, up from 3.7% compared to the previous year. The mindshare of Microsoft Defender for Cloud is 12.9%, down from 14.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Workload Protection Platforms (CWPP)
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Saif Ullah Khan - PeerSpot reviewer
Boosts security by automatically blocking applications or activities, but query responses have been slower recently
For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower. There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results. Another issue is the lack of proper documentation. During investigations, there is no proper documentation available. This is a problem because many people are saying there should be proper documentation explaining what CrowdStrike captures from the machine and the meaning of it.
Vibhor Goel - PeerSpot reviewer
A single tool for complete visibility and addressing security gaps
Currently, issues are structured in Microsoft Defender for Cloud at severity levels of high, critical, or warning, but these severity levels are not always right. For example, Microsoft might consider a port being open as critical, but that might not be the case for our company. Similarly, it might suggest closing some management ports, but you might need them to be able to log in, so the severity levels for certain things can be improved. Even though Microsoft Defender for Cloud provides a way to temporarily disable certain alerts or notifications without affecting our security score, it would be better to have more granularized control over these recommendations. Currently, we cannot even disable certain alerts or notifications. There should be an automated mechanism to design Azure policies based on the recommendations, possibly with AI integration. Instead of an engineer having to write a policy to fix security gaps, which is very time-consuming, there should be an inbuilt capability to auto-remediate everything and have proper control in place. Additionally, enabling Defender for Cloud at the resource group level, rather than only at the subscription level, would be beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"SentinelOne Singularity Cloud Security offers valuable features like runtime notifications. These alerts come to my account, ensuring that if any port or component within my infrastructure is opened or compromised, I am informed immediately. It highlights issues within minutes or even seconds."
"When creating cloud infrastructure, Cloud Native Security evaluates the cloud security parameters and how they will impact the organization's risk. It lets us know whether our security parameter conforms to international industry standards. It alerts us about anything that increases our risk, so we can address those vulnerabilities and prevent attacks."
"The most valuable aspects of PingSafe are its alerting system and the remediation guidance it provides."
"SentinelOne Singularity Cloud Security has significantly improved our risk posture."
"There's real-time threat detection. It can show threats and find issues based on their severity and helps us with real-time monitoring."
"We've seen a reduction in resources devoted to vulnerability monitoring. Before PingSafe we spent a lot of time monitoring and fixing these issues. PingSafe enabled us to divert more resources to the production environment."
"PingSafe stands out for its user-friendly interface and intuitive software, making it easy to navigate and use."
"The UI is very good."
"The most significant benefit is how quickly malware and other malicious attacks are detected."
"It provides alerts on suspicious command executions, helping us safeguard our systems."
"Technical support is helpful."
"The most valuable features of CrowdStrike Falcon include its automation capabilities, efficacy, and lower risk."
"The most valuable features of CrowdStrike Falcon Cloud Security are Cloud Security Posture Management and Cloud Workload Protection, offering more visibility and protection across our cloud environment."
"CrowdStrike utilizes signatureless technology, eliminating the need for regular signature updates on endpoint systems."
"It's easy to gather insights and conduct analysis about existing threats."
"The initial setup is easy ."
"I would rate Microsoft Defender for Cloud a ten."
"Microsoft Defender for Cloud has made our environment more secure."
"It takes very little effort to integrate it. It also gives very good visibility into what exactly is happening."
"When we started out, our secure score was pretty low. We adopted some of the recommendations that Security Center set out and we were able to make good progress on improving it. It had been in the low thirties and is now in the upper eighties."
"The most valuable feature is the hunting feature, which integrates well into the entire Microsoft ecosystem."
"Threat protection is comprehensive and simple."
"The most valuable features of the solution are the insights, meaning the remediation suggestions, as well as the incident alerts."
"The security alerts and correlated alerts are most valuable. It correlates the logs and gives us correlated alerts, which can be fed into any security information and event management (SIEM) tool. It is an analyzed correlation tool for monitoring security. It gives us alerts when there is any kind of unauthorized access, or when there is any malfunctioning in multifactor authentication (MFA). If our Azure is connected with Azure Security Center, we get to know what types of authentication are happening in our infra."
 

Cons

"They need more experienced support personnel."
"I'd like to see better onboarding documentation."
"We wanted it to provide us with something like Claroty Hub in AWS for lateral movement. For example, if an EC2 instance or a virtual machine is compromised in a public subnet based on a particular vulnerability, such as Log4j, we want it to not be able to reach some of our databases. This kind of feature is not supported in PingSafe."
"While the future roadmap presented by SentinelOne appears promising, I hope the envisioned advancements are realistically achievable and that the gap between current offerings and long-term goals is not too significant."
"The documentation could be better."
"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."
"Some of the navigation and some aspects of the portal may be a little bit confusing."
"The resolution suggestions could be better, and the compliance features could be more customizable for Indian regulations. Overall, the compliance aspects are good. It gives us a comprehensive list, and its feedback is enough to bring us into compliance with regulations, but it doesn't give us the specific objects."
"The tool should do some more tests before going for updates automatically."
"There should be cloud storage scanning. We would like to have cloud storage vulnerability and threat management on any cloud storage."
"There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results."
"The tool's scalability is low."
"Customers would benefit it CrowdStrike adopted some of SentinelOne's technologies."
"The only challenge lies in token verification."
"The only suggestion for improvement would be the pricing."
"The pricing is very high and should be improved."
"Early on, the lack of transparency is a challenge. Microsoft does not tell you the cost when they launch something."
"After getting a recommendation, it takes time for the solution to refresh properly to show that the problem has been eliminated."
"My experience with Microsoft Defender for Cloud has been largely negative due to a poor user experience."
"It's hard to reach someone who understands my problems. I haven't had many issues, so I haven't called them."
"They could always work to make the pricing a bit lower."
"Integration into other third-party products, particularly those from tier three vendors like ManageEngine and Hexcode, has proven difficult."
"Microsoft can improve the pricing by offering a plan that is more cost-effective for small and medium organizations."
"The solution is quite complex. A lot of the different policies that actually get applied don't pertain to every client. If you need to have something open for a client application to work, then you get dinged for having a port open or having an older version of TLS available."
 

Pricing and Cost Advice

"I am not involved in the pricing, but it is cost-effective."
"The price depends on the extension of the solution that you want to buy. If you want to buy just EDR, the price is less. XDR is a little bit more expensive. There are going to be different add-ons for Singularity."
"PingSafe is fairly priced."
"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."
"Pricing is based on modules, which was ideal for us."
"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."
"For pricing, it currently seems to be in line with market rates."
"Singularity Cloud Security by SentinelOne is cost-efficient."
"Its price is moderate."
"It's an expensive package but does what it says it will do."
"I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive."
"CrowdStrike Falcon is very expensive."
"It's an expensive product"
"The pricing is reasonable, neither overly expensive nor excessively cheap, making it competitive compared to other market options."
"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."
"CrowdStrike Falcon Cloud Security is pricy."
"The licensing cost per server is $15 per month."
"The product's pricing policy is generally favorable."
"Pricing is difficult because each license has its own metrics and cost."
"I'm not privy to that information, but I know it's probably close to a million dollars a year."
"Microsoft Defender for Cloud is pricey, especially for Kubernetes clusters."
"Azure Defender is a bit pricey. The price could be lower."
"There are improvements that have to be made to the licensing. Currently, for servers, it has to be done by grouping the servers on a single subscription... We don't have an option whereby, if all those resources are in one subscription, we can have each of the individual servers subject to different planning."
"This solution is more cost-effective than some competing products. My understanding is that it is based on the number of integrations that you have, so if you have fewer subscriptions then you pay less for the service."
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
15%
Manufacturing Company
9%
Government
5%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
8%
Insurance Company
5%
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
It is cost-effective compared to other solutions in the market.
What needs improvement with PingSafe?
In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of criti...
What do you like most about CrowdStrike Falcon Cloud Security?
It's easy to gather insights and conduct analysis about existing threats.
What is your experience regarding pricing and costs for CrowdStrike Falcon Cloud Security?
It's an expensive product. The solution costs around $60 for a single user on a yearly basis. I would rate the pricin...
What needs improvement with CrowdStrike Falcon Cloud Security?
I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information...
How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...
What do you like most about Microsoft Defender for Cloud?
The entire Defender Suite is tightly coupled, integrated, and collaborative.
What is your experience regarding pricing and costs for Microsoft Defender for Cloud?
The licensing is straightforward but can become expensive if you cover everything. You must balance the cost against ...
 

Also Known As

PingSafe
CrowdStrike Falcon ASPM
Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
Find out what your peers are saying about CrowdStrike Falcon Cloud Security vs. Microsoft Defender for Cloud and other solutions. Updated: February 2025.
842,296 professionals have used our research since 2012.