Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon Complete MDR vs Expel comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon Complete...
Ranking in Managed Detection and Response (MDR)
1st
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
79
Ranking in other categories
No ranking in other categories
Expel
Ranking in Managed Detection and Response (MDR)
19th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
1
Ranking in other categories
SOC as a Service (4th)
 

Mindshare comparison

As of April 2025, in the Managed Detection and Response (MDR) category, the mindshare of CrowdStrike Falcon Complete MDR is 14.1%, down from 15.3% compared to the previous year. The mindshare of Expel is 1.8%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR)
 

Featured Reviews

Otis Brinson - PeerSpot reviewer
Helps users keep track of everything from one place
The most valuable features of the solution stem from the fact that we can track all of it in one place across all those different locations. Because it's cloud-based and reports up to the cloud, we also have access to the back end, and an incident response team monitors all incidents. We also have an escalation process in place. From my perspective, there are other pieces of CrowdStrike that the security architect team uses as well, but I don't get involved with those as much. I usually just wait for the end results or the notification if I need to get involved if there is an incident.
reviewer2578461 - PeerSpot reviewer
Rapid threat management and diverse technology integration for effective monitoring
Expel has made it easier for companies to monitor and manage various log sources. With its vast integration portfolio, customers can efficiently monitor diverse environments. Time to value is quick, as Expel can turn their service up very rapidly. They have both automated active responses and human processes that quicken threat resolution.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"As an end-point solution, nothing beats it, to be honest."
"Falcon's threat intel is strong, and the solution allows our customers to automate their site intelligence. We can integrate Falcon X with the other platforms we use, like FireEye, Insight, Cybertech, and Kaspersky."
"Its IOCs alerting mechanism is good. I think it is AI based and categorizes behaviors which are unusual."
"CrowdStrike Falcon Complete provides complete details of any malicious activity, including the impact date and file source."
"I like Falcon's AI functionality and vulnerability management. That has been so helpful. Falcon Complete can manage vulnerabilities, quarantine threats, and do all kinds of forensic incident analysis. It's a lightweight solution that only uses 1% of the CPU, which is a game changer. Other EDRs have had high CPU usage."
"It is a very good solution. It can provide detection and response in an extensive way, and for an endpoint, it can integrate the information that comes from the servers."
"The most valuable feature of CrowdStrike Falcon Complete is endpoint detection and response."
"Their intelligence is really good. The security whitepapers that they write are outstanding. They handle it all for the clients. CrowdStrike Complete is managed by CrowdStrike. They only call a client if there is a problem that they can't address. They pretty much contain and eradicate. This is not something that every vendor provides."
"Their threat hunting protocol and process with AI and machine learning are strong, allowing for active and rapid responses."
 

Cons

"I would like to see CrowdStrike Falcon Complete XDR integrate more effectively with other technologies."
"This solution is lacking in a recovery feature. If there is a full compromise, this product can't recover the machine, which results in us having to rebuild the entire system."
"The solution is geared more towards larger organizations, so it can be difficult for organizations with smaller budgets to utilize the solution."
"CrowdStrike Falcon Complete is not providing application control. This is a very useful feature in any endpoint security because if you want to block any malicious activity of any particular application, you can not block it in this solution. However, you are able to block hashes, but not executable files or processes. Additionally, this solution does not provide a user risk score. These are two areas that CrowdStrike Falcon Complete can improve on in the future."
"An MDM, Mobile Device Manager, should be added in the next release."
"The initial setup was slightly complex although it's an easier solution."
"Its support should be improved. The product is amazing, but the problem is that their support team is overconfident about the product. If something happens, they don't listen. They keep arguing with the customer. It should have more reporting. Reports are not that customizable. We need customizable reports for our customers, but they not there in CrowdStrike as well as SentinelOne."
"Crowdstrike could be cheaper. It's pricier than Carbon Black."
"The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for management."
 

Pricing and Cost Advice

"CrowdStrike is more expensive than SentinelOne. Licensing works on the number of agents and the modules you buy. CrowdStrike has different modules, such as Falcon, Falcon Overwatch, Falcon Complete, etc. The pricing depends upon the module that the customer wants. They have different Incident Response (IR) teams, which are very expensive."
"There are different lengths of licenses available, such as three and five years. The price of CrowdStrike Falcon Complete is expensive."
"The licensing cost for CrowdStrike Falcon Complete is fair, and I would give it a five out of five. You have to pay per device/user."
"The solution needs to have human involvement, they could improve by having more automation where the solution can take the necessary action on time and more accurately."
"CrowdStrike Falcon Complete is one of the more expensive security protection solutions."
"We pay 40,000 euros to use this solution."
"Its licenses are expensive for small-scale companies."
"The pricing is a little bit higher than other OEM competitors in the market, like SentinelOne and Trend Micro."
Information not available
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
842,767 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
9%
Financial Services Firm
7%
Government
6%
Computer Software Company
20%
Financial Services Firm
10%
Manufacturing Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about CrowdStrike Falcon Complete?
It is a cloud-based solution. You can easily scale it.
What is your experience regarding pricing and costs for CrowdStrike Falcon Complete?
CrowdStrike has a reasonable price. It's a good price, but if CrowdStrike offered coupons or discounts on a monthly or quarterly basis, it would be more beneficial for smaller vendors trying to imp...
What needs improvement with CrowdStrike Falcon Complete?
There is room for improvement in the AI of CrowdStrike, known as Charlotte AI, which my team does not currently use. I have not had contact with it at this moment. Additionally, patch management in...
What is your experience regarding pricing and costs for Expel?
Expel's pricing has adapted as the market evolved and has become competitive over the past twelve months.
What needs improvement with Expel?
The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for m...
What is your primary use case for Expel?
I have experience reselling Expel. Customers often come to me wanting to evaluate multiple providers to make a choice based on their specific use cases, requirements, technology investments, and so...
 

Also Known As

Falcon Complete
Workbench, Expel SOC-as-a-Service
 

Overview

 

Sample Customers

Palm Beach State College, Mercedes-AMG, Pokemon, Telstra, Goldman Sachs, Zebra
Amanda Fennell CSO
Find out what your peers are saying about CrowdStrike, Huntress, Field Effect and others in Managed Detection and Response (MDR). Updated: March 2025.
842,767 professionals have used our research since 2012.