CrowdStrike Falcon Reviews

Name: CrowdStrike Falcon
Brand: CrowdStrike
Rating: 4.3 (125 reviews)

Vendor: CrowdStrike

4.3 out of 5

125 reviews
96% willing to recommend

4,540 followers

Post review

What is CrowdStrike Falcon?

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

Get the CrowdStrike Falcon Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon, Microsoft Defender for Endpoint, Fortinet FortiEDR and more!

CrowdStrike Falcon is the #1 ranked solution in EDR tools, #1 ranked solution in XDR Security products, #1 ranked solution in top Attack Surface Management (ASM) solutions, #1 ranked solution in top Ransomware Protection solutions, #1 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #2 ranked solution in top Threat Intelligence Platforms, #2 ranked solution in top Active Directory Management solutions, #3 ranked solution in endpoint security software, #3 ranked solution in top Identity Threat Detection and Response (ITDR) solutions, #6 ranked solution in top Security Information and Event Management (SIEM) solutions, and #6 ranked solution in top Identity Management (IM) solutions. PeerSpot users give CrowdStrike Falcon an average rating of 8.6 out of 10. CrowdStrike Falcon is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon vs Microsoft Defender for Endpoint. CrowdStrike Falcon is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 838,640 peers since 2012

Featured reviews

Chintan-Vyas

Associate Director at KPMG

Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.

Read full review

Syed Ubaid Ali Jafri

Head of Cyber Defense & Offensive Security at Habib Bank Limited

Area of Improvement The products still require improvement in the Apple environment (Mac). Currently, this solution (as of July 2022) is not compatible with MAC OS (X), Catalina, or Big Sur. Similarly, the product is also not compatible with Unix-based systems including AIX, Darwin, and FreeBSD. CS Falcon sensing capabilities for non-domain machines should be enhanced since the agent doesn't detect the neighbor's IP Address and/or any anomaly which was identified in the network for the non-domain machine. Additional Features required in the Next release: The product requires an add-on feature which should be a turnkey feature if it requires to be turned on to XDR no changes should be required to be made on the user end as the agent is already installed.

Read full review

Sandesh Dumbre

Senior Information Security Engineer at a tech services company with 1,001-5,000 employees

CrowdStrike is behavioral-based; therefore, it has a behavioral-based detection method. It's not a signature-based tool. It helps us to identify the threats according to the behavior of any process that is running on any particular system. It helps immensely to identify any malicious behavior on any endpoints. They have a service called Overwatch. It's an incident response feature, which CrowdStrike usually provides for most of the customer's premium customers. They will be looking for particular instances. If anything really suspicious or malicious happens, they will inform us. That is one kind of feature that is really great as compared to other tools. The ransomware protection and behavior-based detection are the best features. The solution has effective prevention policies. They help prevent cyber attacks or any other malicious activity. The real-time response capability supported our incident response efforts. Whenever there is a case of any critical incident or any security breach, at the time of security breach, we can utilize RTR (real-time response) features to know what process is running. Then, we can kill the process. We can get to know, for example, what active connections are. Also, in case of quarantine, if we quarantine a particular machine with CrowdStrike, we still have access to that machine with the real-time response feature. That's quite useful.

Read full review

CrowdStrike Falcon mindshare

Product category:

As of February 2025, the mindshare of CrowdStrike Falcon in the Endpoint Detection and Response (EDR) category stands at 16.8%, up from 13.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

PeerAnalyst reports

Type	Title	Date
Category	Endpoint Detection and Response (EDR)	Feb 21, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 21, 2025	Download
Comparison	CrowdStrike Falcon vs Microsoft Defender for Endpoint	Feb 21, 2025	Download
Comparison	CrowdStrike Falcon vs SentinelOne Singularity Complete	Feb 21, 2025	Download
Comparison	CrowdStrike Falcon vs Trend Vision One	Feb 21, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Endpoint	4.0	10.7%	94%	190 interviews Add to research
Fortinet FortiEDR	4.0	4.3%	82%	38 interviews Add to research

Valuable Features

CrowdStrike Falcon offers standout features such as endpoint visibility, EDR, cloud-native architecture, automatic alerts, threat remediation, minimal resource usage, and real-time threat analysis. Users appreciate its lightweight design, strong AI capabilities, accurate detection, remote connectivity, and integration ease. Its dashboards, forensics, threat intelligence, and OverWatch are highly valued, providing actionable insights. They report improved security, reduced maintenance, and robust malware protection, all with seamless cloud-based management.

"CrowdStrike is a great solution."
"CrowdStrike has improved our incident response capabilities."
"It has good features for threat detection."

Room for Improvement

CrowdStrike Falcon needs improvements in dashboard functionality, reporting, and integration capabilities. Users experience challenges with deployment, support, and operational costs. Interface speed and user-friendliness require enhancements. There is a need for better support for various operating systems, as well as expanded security features and legacy support. The tool should offer improved false positive management, increased customization options, and better vulnerability management. Enhanced training and documentation are also essential for reducing the user learning curve.

"In CrowdStrike, with the variety of security tools available, learning the different query languages can be challenging."
"The solution could improve the policies themselves. It would be helpful if there were cost-cutting measures."
"The solution could improve the policies themselves."

ROI

CrowdStrike Falcon has demonstrated significant cost savings in manpower and productivity with a reduced need for support requests. It has decreased downtime and enhanced security by preventing breaches. CrowdStrike Falcon has effectively minimized operational costs and freed resources for other tasks. Users reported substantial returns through increased efficiency and eliminated performance overhead, replacing more expensive alternatives and reducing maintenance efforts. CrowdStrike Falcon's proactive threat prevention and rapid threat resolution have also saved users from potential losses.

Pricing

CrowdStrike Falcon's pricing varies based on factors like features, quantity, and licensing models. It is often considered expensive compared to competitors, with annual costs ranging from $30 to $100 per user. Many users feel it offers strong value despite the high price due to its advanced security features. Licensing fees are typically annual, and the product allows a flexible a la carte model. Negotiation is possible, especially for large enterprises, and the setup is straightforward.

"The solution's pricing is great for us."
"The product is expensive."
"CrowdStrike is a reasonably priced tool."

Popular Use Cases

Organizations primarily utilize CrowdStrike Falcon for endpoint protection, threat detection, and response. It serves as a next-generation antivirus and EDR tool, employing AI and machine learning to enhance security against malware and advanced threats. Many use it to replace traditional antivirus solutions, benefiting from cloud integration, real-time monitoring, and threat intelligence. CrowdStrike Falcon is essential for safeguarding endpoints, servers, and devices across diverse environments, providing continuous protection and improved incident response.

Service and Support

CrowdStrike Falcon's customer service and support are generally praised for responsiveness and expertise. Users value proactive communication and support, with dedicated representatives often available. Some users mention response time improvements, while others suggest faster assistance would be beneficial. The portal is considered helpful, and webinars enhance learning. Some express satisfaction with quick, professional interactions, while concerns include delays and occasional lack of expertise. Many appreciate their Technical Account Managers for personalized assistance.

Deployment

CrowdStrike Falcon's initial setup is described as straightforward and easy by multiple users. Many appreciated its cloud-based nature, which facilitated quick deployment with minimal complexity. Users found agent installation to be seamless and efficient, often requiring little time and few resources. While some reported challenges due to their specific environments, most highlighted a smooth, clear, and non-disruptive process. The implementation generally required minimal maintenance and was mostly completed within days or weeks.

Scalability

CrowdStrike Falcon demonstrates robust scalability, seamlessly supporting diverse user counts from small teams to large enterprises. It efficiently accommodates thousands of endpoints, benefiting from its cloud-based architecture. Deployment is straightforward and adapting to increased demands involves minimal disruption. Many organizations report smooth expansion across varying environments and needs, with no performance issues. The ease of scaling makes it suitable for businesses of any size, maintaining reliable security as organizations grow.

Stability

CrowdStrike Falcon is praised for its stable performance and minimal downtime. Many users found it reliable, light on resources, and not interfering with system operations. Users rarely encounter bugs or glitches, and updates are generally handled smoothly. However, some reported minor issues with new features or updates causing blocks, but these are infrequent and resolved promptly. The stability is often rated high by users, reflecting their satisfaction with CrowdStrike Falcon's consistent performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CrowdStrike Falcon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

University

Retailer

Healthcare Company

Educational Organization

Comms Service Provider

Construction Company

Insurance Company

Energy/Utilities Company

Media Company

Real Estate/Law Firm

Non Profit

Legal Firm

Hospitality Company

Wholesaler/Distributor

Transportation Company

Performing Arts

Outsourcing Company

Recreational Facilities/Services Company

Consumer Goods Company

Pharma/Biotech Company

Logistics Company

Compare CrowdStrike Falcon with alternative products

Learn more about CrowdStrike Falcon

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features, although some users highlight high pricing, occasional detection delays, and challenges with integration. Frequent alerts and the mobile app's performance are areas for improvement.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike Falcon was previously known as CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface.