Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Cuckoo Sandbox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
126
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (2nd), Identity Management (IM) (6th), Threat Intelligence Platforms (2nd), Endpoint Detection and Response (EDR) (1st), Active Directory Management (2nd), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Ransomware Protection (1st), Identity Threat Detection and Response (ITDR) (3rd), AI-Powered Cybersecurity Platforms (1st), Continuous Threat Exposure Management (CTEM) (1st)
Cuckoo Sandbox
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
3
Ranking in other categories
Anti-Malware Tools (13th)
 

Mindshare comparison

While both are Endpoint Security solutions, they serve different purposes. CrowdStrike Falcon is designed for Endpoint Detection and Response (EDR) and holds a mindshare of 16.3%, up 15.0% compared to last year.
Cuckoo Sandbox, on the other hand, focuses on Anti-Malware Tools, holds 2.9% mindshare, down 4.2% since last year.
Endpoint Detection and Response (EDR)
Anti-Malware Tools
 

Featured Reviews

Chintan-Vyas - PeerSpot reviewer
Easy to set up with good behavior-based analysis but needs a single-click recovery option
Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.
Adrián Rodriguez Garcia - PeerSpot reviewer
Provides detailed behavior analysis while needing improvements in signature detection
I use Cuckoo Sandbox primarily for automated malware behavior analysis. Specifically, it helps me extract indicators of compromise (IOC) to add to different platforms in the security environment of my company Cuckoo can show me every behavior in a machine. For example, it shows all files…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We haven't had any infections or down time."
"CrowdStrike enables the infrastructure managers to visualize all the events and get information about the network."
"The most valuable features in CrowdStrike Falcon are the full EDR with antivirus, hunting, reporting, and RTR remote control."
"The most useful feature is that we do not need to install or keep signature files. Regular scanning that consumes a lot of computer resources is not needed."
"CrowdStrike Falcon's most valuable features are the lightweight agent which has absolutely zero performance issues. There is no performance deterioration on the laptop on the network. It is a signature-less antivirus and anti-malware solution, it doesn't depend on signatures which better protects the systems."
"The key aspect of CrowdStrike Falcon is its behavioral detection approach."
"The most valuable feature is that we don't need to re-image machines as much as we had to."
"From what we have seen, it is very scalable. We have recently acquired a company where someone had a ransomware attack when we joined networks. Within the course of just a few days, we were able to easily get CrowdStrike rolled out to about 300 machines. That also included the removal of that company's legacy anti-malware tool."
"The scalability is an eight out of ten."
"Cuckoo Sandbox is very stable and reliable."
"The dynamic analysis feature in Cuckoo Sandbox is excellent compared to others."
"Cuckoo Sandbox is very stable and reliable."
 

Cons

"The dashboard does not have the facility to export the reports in a PDF format, which I can quickly share with internal stakeholders."
"Falcon could include more integrative features."
"It can be expensive depending on the features you select."
"It is cloud-based, and this does make some weary of the data being held on the cloud. Privacy requirements must be taken into account."
"CrowdStrike Falcon could improve if it became an XDR. When we look only to an end-point, we lost the context of the environment. I know it's another line of design of the product. However, if CrowdStrike becomes an XDR, it could be very good."
"The tool is more expensive than other products in the market."
"CrowdStrike Falcon sometimes wrongly flags things as malicious. Let's say a user is active on Chrome only. Sometimes, our cross-segmenting will fetch from the backend data and show that it is malicious because of memory or CPU utilization."
"I would rate it an eight out of ten. It does what it needs to do but there's always room for improvement."
"I want the command to be quicker."
"Cuckoo Sandbox could improve its signature detection because it currently only shows simple file modifications and connections to different botnets."
"It lacks correlation with other types of information, such as explaining why a particular file was modified or identifying the specific process responsible."
"The only issue is with the installation, which requires some adjustments."
 

Pricing and Cost Advice

"The cost is usually a challenge in the industry. I think we pay around sixty-eight dollars."
"There is an annual license required to use this solution."
"The product is expensive."
"We are on an annual subscription for the solution. There are not any additional costs."
"Purchasing the product through the AWS Marketplace is just a click away. Since we were using the on-premise version of the product, we continued on the cloud by purchasing it through the AWS Marketplace."
"We pay 40,000 dirhams per 100 users."
"The other administrator and I can log in to check the exact details of what happened, what was running, and what caused the detection. We know exactly what was happening on the end users PC and we can tell if it's something that we actually need or something that's malicious."
"The pricing is good and there are no costs in addition to the standard licensing fees."
"We have to pay five to ten thousand dollars for this solution."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
842,767 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
Computer Software Company
18%
Educational Organization
13%
University
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for Cuckoo Sandbox?
I don't know the price as I always use the free version of Cuckoo Sandbox.
What needs improvement with Cuckoo Sandbox?
The only issue is with the installation, which requires some adjustments. We need to check the OS level for compatibility. This can be challenging for those who are new to Cuckoo Sandbox.
What is your primary use case for Cuckoo Sandbox?
We are using Cuckoo Sandbox ( /products/cuckoo-sandbox-reviews ) for phishing emails and malware analysis.
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
No data available
 

Overview

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: January 2025.
842,767 professionals have used our research since 2012.