CrowdStrike Falcon Reviews

Name: CrowdStrike Falcon
Brand: CrowdStrike
Rating: 4.3 (122 reviews)

Vendor: CrowdStrike

4.3 out of 5

122 reviews
97% willing to recommend

4,510 followers

Post review

What is CrowdStrike Falcon?

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

Get the CrowdStrike Falcon Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon, Microsoft Defender for Endpoint, Fortinet FortiEDR and more!

CrowdStrike Falcon is the #1 ranked solution in EDR tools, #1 ranked solution in XDR Security products, #1 ranked solution in top Attack Surface Management (ASM) solutions, #1 ranked solution in top Ransomware Protection solutions, #2 ranked solution in top Threat Intelligence Platforms, #2 ranked solution in top Active Directory Management solutions, #2 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #3 ranked solution in endpoint security software, #3 ranked solution in top Identity Threat Detection and Response (ITDR) solutions, #6 ranked solution in top Security Information and Event Management (SIEM) solutions, and #6 ranked solution in top Identity Management (IM) solutions. PeerSpot users give CrowdStrike Falcon an average rating of 8.6 out of 10. Based on the analysis of the 122 most recent CrowdStrike Falcon reviews, the overall sentiment is positive, with a sentiment score of 7.4. CrowdStrike Falcon is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon vs Microsoft Defender for Endpoint. CrowdStrike Falcon is popular among the large enterprise segment, accounting for 56% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 824,019 peers since 2012

Featured reviews

Chintan-Vyas

Associate Director at KPMG

Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.

Read full review

Syed Ubaid Ali Jafri

Head of Cyber Defense & Offensive Security at Habib Bank Limited

Area of Improvement The products still require improvement in the Apple environment (Mac). Currently, this solution (as of July 2022) is not compatible with MAC OS (X), Catalina, or Big Sur. Similarly, the product is also not compatible with Unix-based systems including AIX, Darwin, and FreeBSD. CS Falcon sensing capabilities for non-domain machines should be enhanced since the agent doesn't detect the neighbor's IP Address and/or any anomaly which was identified in the network for the non-domain machine. Additional Features required in the Next release: The product requires an add-on feature which should be a turnkey feature if it requires to be turned on to XDR no changes should be required to be made on the user end as the agent is already installed.

Read full review

Niranjan N

Sr Analyst at ATOS

CrowdStrike displays a threat score when it detects an infection. This is helpful because not all detections are the same. It will classify them as ransomware, malware, phishing, etc. This feature helps us prioritize and cross-check with other EDR tools. It's integrated with multiple threat intelligence sources, such as the AbuseIPDB. That integration helps because we can easily cross-check between CrowdStrike and other solutions like an MDR or Azure AD. Hybrid analysis is integrated with CrowdStrike in our environment. There's also sandbox analysis. It's more informative. We perform a routine activity in our test environment where we simulate the process and file.

Read full review

CrowdStrike Falcon mindshare

Product category:

As of December 2024, the mindshare of CrowdStrike Falcon in the Endpoint Detection and Response (EDR) category stands at 16.7%, up from 12.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

PeerAnalyst reports

Type	Title	Date
Category	Endpoint Detection and Response (EDR)	Dec 20, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 20, 2024	Download
Comparison	CrowdStrike Falcon vs Microsoft Defender for Endpoint	Dec 20, 2024	Download
Comparison	CrowdStrike Falcon vs SentinelOne Singularity Complete	Dec 20, 2024	Download
Comparison	CrowdStrike Falcon vs Trend Vision One	Dec 20, 2024	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Endpoint	4.0	12.5%	94%	190 interviews Add to research
Fortinet FortiEDR	4.0	4.7%	82%	37 interviews Add to research

Valuable Features

CrowdStrike Falcon's most valuable features include real-time threat detection and response, endpoint visibility, cloud-native architecture, AI and ML capabilities, minimal system impact, integration with existing tools, detailed dashboards, and automated alerting. It excels in managing threats without constant scanning, provides strong forensics and reporting, allows remote connection for incident handling, and offers significant protection and flexibility for distributed workforces across multiple sites.

"The ability to remote into other devices for investigation and the way it presents a graphical representation of the detection, like the parent-child process, are valuable features."
"It's really good because it can detect anything."
"The solution's reporting console is phenomenal, and I can get a lot of data out of it."

Room for Improvement

CrowdStrike Falcon requires improvements in integration with other technologies and better dashboard functionalities. The user interface needs enhancement for more intuitive navigation. Reporting capabilities, especially in exporting data, need expansion. Performance, particularly in speeding up the GUI, is another concern. Users seek more robust support for legacy systems and on-demand scanning capabilities. Simplifying deployment processes and enhancing integration with SIEM tools are also needed. Pricing is considered high compared to competitors.

"The new interface, the UI, seems a bit messy."
"I'm concerned about the recent issue that involved a faulty update."
"The solution should have included remote wipe capability out of the box."

ROI

CrowdStrike Falcon has enabled organizations to achieve cost savings by reducing manpower requirements and enhancing staff productivity. It effectively manages threats without hampering system performance and reduces downtime, thus increasing operational efficiency. Users report significant time savings, decreased support requests, and cost-effectiveness compared to previous solutions. Enhanced security, immediate threat isolation, and minimized system overhead contribute to its value. CrowdStrike Falcon is appreciated for its proactive risk management, providing peace of mind and preventing potential financial damages.

Pricing

CrowdStrike Falcon is perceived as a more expensive option in the endpoint protection market. Pricing varies, typically ranging from $30-$100 per user annually. Customers appreciate its extensive features but note its premium cost, which can be a barrier for small to medium businesses. Licensing is often based on specific feature selection, making the solution customizable but sometimes confusing. Discounts are available, especially for larger deployments through distributors and resellers.

"The solution's pricing is great for us."
"The product is expensive."
"CrowdStrike is a reasonably priced tool."

Popular Use Cases

Organizations primarily use CrowdStrike Falcon for endpoint protection, threat detection, and response. It serves as a next-generation antivirus, replacing traditional antivirus solutions and offering advanced threat intelligence capabilities. With cloud integration, it facilitates real-time monitoring, malware analysis, and incident response across diverse environments. Additionally, CrowdStrike Falcon enhances security posture by employing AI and machine learning to protect against ransomware and emerging threats, making it a critical tool for comprehensive cybersecurity.

Service and Support

CrowdStrike Falcon's customer service and support receive mixed feedback. Many highlight strong technical support, fast response times, knowledgeable staff, and valuable proactive engagement. However, some users feel response times could be quicker and more personalized. While certain customers praise dedicated Technical Account Managers for improving interactions, others mention the standard support could be more responsive. Some users encounter delays, and there's a desire for greater expertise across all modules. Premium support is rated highly.

Deployment

CrowdStrike Falcon's initial setup is largely described as straightforward and easy, facilitated by its cloud-based nature. Deployment often requires minimal manual effort, with many users noting quick installation times. Some experience minor complexities due to specific environments or integrations. Automated agents simplify the process, offering seamless updates. Overall, the setup is praised for being efficient, requiring little ongoing maintenance, and capable of scaling across large organizations quickly.

Scalability

CrowdStrike Falcon is highly scalable and cloud-based, rapidly accommodating a wide range of organizational sizes. Users often mention its ease of deployment and low maintenance requirements for large-scale implementations. It offers seamless expansion capabilities, handling growth demands effortlessly, and adapts to various environments, whether on-premises or cloud-based. Its ability to manage numerous endpoints with consistent performance makes it a preferred choice among diverse enterprises, ensuring adaptability and scalability are never an issue.

Stability

CrowdStrike Falcon is praised for its exceptional stability and reliability. Many users report minimal issues, citing its robust cloud-based architecture. Occasional update-related concerns are mentioned, but they are quickly resolved. The service manages thousands of endpoints efficiently, providing seamless performance without significant crashes or downtime. Users find it resource-efficient compared to other antivirus tools, with stable integration and reliable updates, achieving high ratings for its consistent and dependable operation.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CrowdStrike Falcon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Retailer

University

Healthcare Company

Educational Organization

Comms Service Provider

Insurance Company

Construction Company

Energy/Utilities Company

Media Company

Real Estate/Law Firm

Non Profit

Legal Firm

Hospitality Company

Wholesaler/Distributor

Transportation Company

Performing Arts

Outsourcing Company

Recreational Facilities/Services Company

Consumer Goods Company

Pharma/Biotech Company

Logistics Company

Compare CrowdStrike Falcon with alternative products

Learn more about CrowdStrike Falcon

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features, although some users highlight high pricing, occasional detection delays, and challenges with integration. Frequent alerts and the mobile app's performance are areas for improvement.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike Falcon was previously known as CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface.