Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon Cloud Security vs Trivy comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Container Security
3rd
Average Rating
8.6
Reviews Sentiment
7.8
Number of Reviews
103
Ranking in other categories
Vulnerability Management (6th), Cloud and Data Center Security (5th), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (3rd)
CrowdStrike Falcon Cloud Se...
Ranking in Container Security
8th
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
28
Ranking in other categories
Application Security Tools (14th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), Cloud-Native Application Protection Platforms (CNAPP) (7th), Cloud Infrastructure Entitlement Management (CIEM) (2nd), Application Security Posture Management (ASPM) (3rd)
Trivy
Ranking in Container Security
19th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2025, in the Container Security category, the mindshare of SentinelOne Singularity Cloud Security is 2.0%, up from 0.9% compared to the previous year. The mindshare of CrowdStrike Falcon Cloud Security is 5.7%, up from 3.9% compared to the previous year. The mindshare of Trivy is 4.8%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security
 

Featured Reviews

Andrew W - PeerSpot reviewer
Tells us about vulnerabilities as well as their impact and helps to focus on real issues
Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.
Abraham Pasamar - PeerSpot reviewer
Effective for detecting and mitigating threats and good automated response capabilities
It's easy. In general, all of the CrowdStrike modules and deployments are easy. We provide support to the client, and the IT people install it. There are no problems because some clients have better tools to deploy, but there are many ways to do the deployment. It's easy, and we have a 24/7 support team. Deployment doesn't consume many hours. It's easy to maintain, but sometimes there are issues with particular applications. Those have to be worked around, but in general, there are no other issues.
Utsav Sharma - PeerSpot reviewer
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."
"The most valuable features of PingSafe are cloud misconfiguration, Kubernetes, and IaC scanning."
"SentinelOne Singularity Cloud Security has improved our security posture."
"Cloud Security has provided a single view to observe all workloads, prioritization for handling cloud assets, and reduced noise by distinguishing false positives effectively."
"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."
"The user-friendly dashboard offers both convenience and security by providing quick access to solutions and keeping us informed of potential threats."
"The user interface is well-designed and easy to navigate."
"I would rate SentinelOne Singularity Cloud Security a ten out of ten."
"The most valuable features of CrowdStrike Falcon include its automation capabilities, efficacy, and lower risk."
"The solution has login features like multi factor authentication."
"Technical support is helpful."
"The threat intelligence is the most vital feature"
"We like the solution's management and monitoring tools for our network. We use it to monitor our network between workstations and outside our organization. The AI provides useful visualizations of our network on a dashboard."
"The RTR feature stands out as particularly valuable to me due to its capability to log into machines."
"The product's initial setup phase is easy."
"The most valuable feature of Falcon Cloud Security is its comprehensive threat-hunting ability."
"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."
"I definitely recommend Trivy."
"Trivy is easy to integrate with CI/CD and can be installed on desktops to scan images."
"I can see vulnerabilities in the images of any applications deployed in the Kubernetes environment or as container applications."
"The most valuable feature of Trivy is its easy integration with the CI/CD pipeline."
"One of the great features of Trivy is that it helps me scan items such as AWS credentials and GCP service accounts."
"It's customizable, allowing me to add any rules and format HTML templates as I wish."
"I appreciate Trivy for being open-source and not requiring any payment."
 

Cons

"With Cloud Native Security, we can't selectively enable or disable alerts based on our specific use case."
"The alerting system of the product is an area that I look at and sometimes get confused about. I feel the alerting feature needs improvement."
"SentinelOne Singularity Cloud Security could be improved with easier integrations to the Singularity Data Lake, particularly for various vendors."
"A beneficial improvement for PingSafe would be integration with Jira, allowing for a more streamlined ticketing system."
"The main area for improvement I want to see is for the platform to become less resource-intensive. Right now, it can slow down processes on the machine, and it would be a massive improvement if it were more lightweight than it currently is."
"The cost has the potential for improvement."
"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."
"Bugs need to be disclosed quickly."
"The log scale or Humio side of it where it collects the data and expands into the XDR world still needs time to develop in terms of the way it combines the data and metadata that flows into the platform. I know they're working on it."
"The only suggestion for improvement would be the pricing."
"The only challenge lies in token verification."
"There is room for improvement in the solution's ability to handle Linux systems."
"It would be more convenient if there was an easier way to install CrowdStrike, perhaps through better integration with Active Directory."
"I would not say the tool's integration capabilities were straightforward because the complexity depends on the volume of the data."
"It gets the work done, but the main problem with the solution is that if you remediate anything, it takes 45 days for you to get any of the features displayed on the dashboard. This is the real weakness of CrowdStrike. Their customer support is also not ready to help with it. If you remediate any cloud vulnerability that they are giving you, such as removing a host from your organization, it takes around 45 days for them to remove it from their console."
"The tool's scalability is low."
"Trivy generates many false positives, flagging non-existent vulnerabilities. Improvements could include better contextual analysis or granular filtering."
"For malware detection, I need to use two tools: Trivy as my anomaly scanner and ClamAV. I am integrating these two tools into the CI pipeline. If both malware and anomaly detection could be managed by one tool, I would not need to depend on two tools. That would be my suggestion."
"Having little experience can hinder the ability to connect it to a user-friendly UI effectively."
"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."
"The only problem is that Trivy does not support reporting features such as generating reports in CSV, which is useful for auditing and reporting."
"The reporting could be a little better. When integrating Trivy with CI, the interpretation of the reports could be improved."
"Trivy can improve by providing an output in PDF format. Additionally, it takes longer to scan container images built with many layers."
"In our CI/CD pipelines, Trivy lacks built-in functionality for report analysis."
 

Pricing and Cost Advice

"Its pricing was a little less than other providers."
"As a partner, we receive a discount on the licenses."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
"PingSafe is cost-effective for the amount of infrastructure we have. It's reasonable for what they offer compared to our previous solution. It's at least 25 percent to 30 percent less."
"I would rate the cost a seven out of ten with ten being the most costly."
"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."
"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."
"PingSafe's primary advantage is its ability to consolidate multiple tools into a single user interface, but, beyond this convenience, it may not offer significant additional benefits to justify its price."
"The pricing is fair for what you get. I'd rate them a solid nine out of ten in terms of pricing."
"The pricing is reasonable, neither overly expensive nor excessively cheap, making it competitive compared to other market options."
"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."
"CrowdStrike Falcon Cloud Security is pricy."
"It's an expensive product"
"The price is not too high, it is okay."
"I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive."
"CrowdStrike Falcon is very expensive."
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
15%
Manufacturing Company
9%
Government
5%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
8%
Healthcare Company
5%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
11%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.
What needs improvement with PingSafe?
From my personal experience, the alerting system needs to be faster. If something happens in our infrastructure, the ...
What do you like most about CrowdStrike Falcon Cloud Security?
It's easy to gather insights and conduct analysis about existing threats.
What is your experience regarding pricing and costs for CrowdStrike Falcon Cloud Security?
It's an expensive product. The solution costs around $60 for a single user on a yearly basis. I would rate the pricin...
What needs improvement with CrowdStrike Falcon Cloud Security?
I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information...
What needs improvement with Trivy?
One drawback I have observed with Trivy is the difficulty in building or integrating a UI, particularly for an operat...
What is your primary use case for Trivy?
The main use case for Trivy is to scan Docker images or packages for CVEs, specifically for vulnerabilities. I use th...
What advice do you have for others considering Trivy?
I rate Trivy an eight out of ten. This rating reflects its open-source nature, comprehensive scanning capabilities, a...
 

Also Known As

PingSafe
CrowdStrike Falcon ASPM
No data available
 

Overview

Find out what your peers are saying about CrowdStrike Falcon Cloud Security vs. Trivy and other solutions. Updated: January 2025.
838,713 professionals have used our research since 2012.