CrowdStrike Falcon Reviews

My main use cases for CrowdStrike Falcon include detecting malicious behavior and identifying user trends.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by making it faster and easier to respond to advanced threats.

In a security incident, CrowdStrike Falcon helps my team detect or stop threats by assisting in detecting unauthorized use of local binaries, such as those that are natively installed including PowerShell and scheduled tasks.

The benefits I have seen from multiple security capabilities on a single platform include solid control over consolidated information that can be accessed quickly.

I believe the value of having endpoint, identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform lies in the correlation of these different data sources, which is essential to identifying and disrupting advanced threats.

CrowdStrike Falcon has massively affected the workload and productivity of my security team, leading to significant improvements. These improvements result from having fewer false positives, which means more time spent working on real, high-impact work.

CrowdStrike Falcon makes every analyst much more effective and informed than they would have been otherwise.

CrowdStrike Falcon can be improved by continuing to listen to customer feedback.

I believe that more integrations and support for Mac products should be included in the next release.

I have been using CrowdStrike Falcon for three years.

I assess the stability and reliability of CrowdStrike Falcon as reliable ever since the massive incident occurred.

I have not experienced any downtime, crashes, or performance issues.

The impact of the Falcon sensor on endpoint performance and my ability to deploy security at scale is none; it is a force accelerator.

I evaluate customer service and technical support as excellent.

CrowdStrike Falcon has allowed me to consolidate or replace other security tools. The tools I replaced were those provided by legacy vendors, which operated for the sole purpose of one or two functions, and they were able to be replaced through the flexible approaches that CrowdStrike Falcon provides.

I would describe my experience with deploying CrowdStrike Falcon as easy and effective. What worked well includes the solid deployment process, though communication with lay users is always a challenge, which I would say resulted in limited to no issues.

I have seen return on investment with CrowdStrike Falcon.

I would rate CrowdStrike Falcon an eight on a scale from one to ten, as nothing is perfect. My advice to other organizations considering CrowdStrike Falcon is to adopt now or adopt later. I provided an overall review rating of eight.

My main use case for CrowdStrike Falcon is endpoint detection and response.

The best features CrowdStrike Falcon offers are the ease of use and accessibility in the console, making it a very easy-to-use tool from an analyst's perspective.

The way that everything is laid out and the way that the detections are formatted, giving you the different types of process graphs and process tree details, especially with Charlotte AI, really helps smooth everything out.

Having all of the data correlated in the same spot makes an investigation really easy.

It makes investigations a lot easier; anything that is on the endpoints and reaches up to the cloud, you can find that very easily.

Training is the biggest thing that could be improved; there is not a lot of training, and it is not that accessible.

The ability to implement profile groups requires SCIM to be configured. SCIM is not in the documentation. SCIM is required if you want to do just-in-time access provisioning for profile groups for new users, and that is not in the documentation. It took a lot of communication with support to figure that out.

The AI detections on anything about a severity five or lower could be improved; many of those are more on the informational side. There have not been too many with a severity of five or lower, detection-wise, that have actually been useful as an analyst.

I have been using CrowdStrike Falcon since 2021.

We have had no issues with how it scales.

Customer support in our government environment is quite fast, but customer support in the commercial or non-government environment is slow and not necessarily the most knowledgeable until you get higher up and the ticket gets escalated higher up.

It has not necessarily changed anything because we have been using CrowdStrike Falcon since the formation of our team; we have almost always had CrowdStrike Falcon. There was not anything coming before that, but it definitely makes the flow a lot easier with how our team is set up.

The endpoint agent for the commercial endpoints, Windows and Mac, has been very easy; the rollout has not caused any issues, but the deployment in the various clouds has caused some difficulty due to deployments not being standardized across all three major cloud platforms.

We definitely have had time saved; where previous incidents that CrowdStrike Falcon has now stopped used to take anywhere from two to five hours to get contained and remediated, now they are prevented.

We evaluated at least 15 different options, and CrowdStrike Falcon by far was the best.

I monitor our endpoints across Windows, Mac, and Linux, and I identify any malicious software or unapproved software that comes up and is blocked by the platform.

I also use CrowdStrike Falcon for a rudimentary asset inventory and checking out what types of shadow IT and applications are installed across my network.

CrowdStrike Falcon has stopped a lot of malware from being executed on user devices.

I estimate we have had about 20 incidents over the past year that were prevented by CrowdStrike Falcon.

The workload has not necessarily gone down; the detections that are created are reviewed now, but there is almost nothing that needs to be done other than having the device wiped.

I am using Charlotte AI to help craft better queries for Falcon Fusion.

We have purchased at least five different add-ons to increase the overall insight into everything in the company. Using Falcon for IT, we have been able to identify and assess different application-based risks on our user endpoints.

I would advise anyone to dive in and get comfortable with the console; there is a lot of information in there that you need to figure out, and it is pretty easy to figure out. I would rate this product a 9 out of 10.

My main use case for CrowdStrike Falcon is to protect the endpoints and employees.

I detect threats in real time and conduct investigations. Since this is a banking environment, it is important to detect and respond in a fast time, especially to make containment of endpoints.

A security incident where CrowdStrike Falcon helped my team detect or stop a threat involved an employee getting scammed to go to a fake employee interview, where the employee was installing malicious software.

My use of CrowdStrike Falcon has remained the same across all the endpoints since my initial deployment.

CrowdStrike Falcon has impacted my organization positively, especially during security incidents when I need to make isolations of a device, as CrowdStrike Falcon performs that isolation in an automatic way, which is a very important and positive impact on the security in my company.

This automation has led to measurable improvements as it is important to improve the precision and accuracy of the detection because I am able to create or improve SIEM rules based on CrowdStrike Falcon detections and intelligence, even though it has not reduced the number of incidents.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats, as they get more indicators and everything related to the alert in the same place, which is fantastic.

The benefits I have seen from having multiple security capabilities on a single platform are better integrations and especially better context on all the alerts.

Having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform provides better context for all alerts and a better overview of all cloud status.

CrowdStrike Falcon has affected the workload or productivity of my security team in a positive way.

I am not replacing but consolidating other tools like a SIEM with CrowdStrike Falcon.

The best features CrowdStrike Falcon offers are precision and customer support.

When I mention precision, I am referring to how accurately CrowdStrike Falcon detects threats, and for customer support, the best thing is the expertise of the people who work on the CrowdStrike side.

CrowdStrike Falcon can probably be improved by simplifying and unifying products and modules, since there are many options on the console, and sometimes it is hard to navigate.

The most important improvement for me will be the usage, specifically the user interface, as it is hard to achieve a perfect rating, but the user interface is where improvements matter most.

I have been using CrowdStrike Falcon for five years.

CrowdStrike Falcon is stable.

CrowdStrike Falcon sensor has had no real impact or measurable impact on endpoint performance and my ability to deploy security at scale.

The scalability of CrowdStrike Falcon is good and easy.

The customer support is good.

I did not previously use a different solution.

CrowdStrike Falcon is deployed in my organization with the MDM across the entire organization.

I have seen a return on investment; it is hard to measure, but there are metrics like the number of incidents detected by CrowdStrike Falcon.

I get CrowdStrike Falcon through a reseller. My experience with pricing, setup cost, and licensing has been good because I handle this with my reseller.

Before choosing CrowdStrike Falcon, I did not really evaluate other options; I always work with CrowdStrike Falcon because I think it is the market leader.

I would rate CrowdStrike Falcon an eight on a scale of one to ten.

Regarding CrowdStrike Falcon's AI capabilities, I think that all companies want to play in the AI security area; I don't really know what CrowdStrike is doing, but it has an advantage over other competitors due to the size and the ability to build relationships with other AI partners.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that it is a bigger company with better capabilities.

My advice to others looking into using CrowdStrike Falcon is to go for a proof of concept.

I am using CrowdStrike Falcon because I want to secure my end-user devices.

I am using CrowdStrike Falcon because it works on signature-based and signature-less technology, which will prevent me from outside attackers and outside malware.

CrowdStrike Falcon will protect me from ransomware, and after the installation of CrowdStrike Falcon, I get full control on my endpoints and I am secure from outsiders.

CrowdStrike Falcon features are robust and reliable.

There are multiple features including real-time detection, real-time prevention, ATP, and IPS.

CrowdStrike Falcon makes my job easier because it will prevent me from outsider attacks and outsider detection; for example, if I want to stop any types of pen drive block or allow, it will prevent me from that as well.

It will impact my organization positively because if anybody wants to try to hit something, wants to take access, wants to perform CNC attacks, wants to do DOS attacks, CrowdStrike Falcon will protect me regarding real-time protection, PUA detection, scanning, and scheduler scanning.

I have seen on my portal, as the owner, that last week there were some detections about Trojan malware and some detections about CryptoGuard crypto malware. There are many detections, and I have seen that Trojans and malware have been blocked by CrowdStrike Falcon.

As of now, CrowdStrike Falcon does not have application control and web control. If CrowdStrike Falcon applies those types of features, it will be more reliable and stronger than any other antivirus or next-gen antivirus in the world or in the industries.

I am using CrowdStrike Falcon from last two years.

CrowdStrike Falcon is stable right now.

It is good; I can increase it any time.

Customer support is good for CrowdStrike Falcon; they have the best support.

Positive

I have used Seqrite, but I have switched because Seqrite does not have signature-less technology.

CrowdStrike Falcon has saved me money because if any attacker attacks, they can borrow money to decrypt the file, so it is the money saved and time saved.

Pricing, setup cost, and licensing is very good for CrowdStrike Falcon based on what I have seen.

I have evaluated Sophos.

As of now, I think CrowdStrike Falcon is better and it is working fine. I rate it 10 out of 10 because it is lightweight, it has real-time detection, and it has the more powerful signature-based and signature-less technology. I can advise others that if there are any opportunities, they should use CrowdStrike Falcon because it is a very lightweight agent with signature-based and signature-less technology. CrowdStrike Falcon has real-time scanning, real-time prevention, and multiple other features. My overall rating for this product is 10 out of 10.

CrowdStrike Falcon has positively impacted my organization by increasing the visibility on the endpoints, enabling us to triage efficiently.

The changes in response time have become more efficient because instead of performing regular acquisitions which take time, I am now able to review the activity based on the telemetry and perform remote acquisition, which has shortened response times significantly.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats because instead of using telemetry recovered from multiple endpoints in different formats, we now have visibility across the entire network using only CrowdStrike telemetry.

When we have received phishing attacks and some users executed the payload, CrowdStrike has successfully stopped the attack, avoiding propagation or successful infection of the endpoint.

The benefits I have seen from having multiple security capabilities on a single platform are that we don't have to check multiple consoles and we have all the telemetry together in just one console.

I have seen value from having endpoint, identity, cloud, and other security telemetry in CrowdStrike Falcon because it makes it easier for us to correlate all available telemetry using just one console.

CrowdStrike Falcon has affected the workload and productivity of my security team positively because now with the use of AI and automated triage of alerts, it allows us to speed up the containment and analysis of the alerts.

It has helped us replace our SIEM.

The best features CrowdStrike Falcon offers include the telemetry, recording of the telemetry, and remote access via RTR.

I rely on the review of the telemetry the most in my day-to-day work because it is what we use most in the majority of cases. Reviewing the telemetry gives us enough visibility on the endpoint activity to close the case.

Its accuracy and reliability of output depend on the case. Usually it gives us a good summary of what happened, but it definitely depends on the case.

CrowdStrike Falcon can be improved by enhancing the visibility on the Unix sensors, specifically Linux and macOS.

I don't think there is any impact on endpoint performance.

The scalability of CrowdStrike Falcon is very good.

The customer support is very good and they are fast.

I would rate the customer support a nine.

CrowdStrike Falcon is deployed in my organization using the CrowdStrike cloud.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is the ease of deployment.

I would rate CrowdStrike Falcon a nine on a scale of 1 to 10.

I chose nine because there is always a margin for improvement, but I really appreciate how CrowdStrike works.

My main use case for CrowdStrike Falcon is for endpoint detection and EDR.

A quick specific example of how I use CrowdStrike Falcon for endpoint detection is that data from Falcon comes to SecOps as an alert, and then I go back to CrowdStrike to search for whatever detection it has made, and I use containment or remediation methods or conduct further deep dive searches.

CrowdStrike Falcon has positively impacted my organization by helping me achieve more true positive detections, reducing false positives, and making it much easier and quicker to take containment and remediation steps.

I would say false positives have reduced by about 30%, and my team is able to respond much quicker now.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by making navigation easier and helping me reduce true positives and the number of alerts.

CrowdStrike Falcon has reduced the workload of my security team overall, although some deployments are still ongoing.

The best features that CrowdStrike Falcon offers include the search feature, which is really nice, and the global search, where I can search anything, along with the advanced hunting feature that allows me to deep dive into anything at all.

When I mention the global search and advanced hunting features, they help me in my work because, for example, when I get an IP and have no idea which host that IP belongs to, I go to the global search, find the IP, and from there I can navigate to either host management, IP management, or further.

Regarding the advanced hunting feature, it also allows me to deep dive into searches even if I am not sure what I am looking for, which means I do not have to scroll through a lot of dashboards; I can get everything summarized.

I think CrowdStrike Falcon's accuracy and reliability of output are really good, as I have been getting the data and output I need.

Having multiple security capabilities on a single platform becomes much easier to navigate through, allowing me to correlate data and deploy it easily within the environment.

CrowdStrike Falcon differentiates itself from other cybersecurity platforms I have used because there is so much data consolidated into one tool, along with various features and additional tools I can integrate.

CrowdStrike Falcon can be improved as I have the Agent DKAI, the new feature that I would like to explore more; however, sometimes there is so much data that it becomes difficult to navigate through it and find the exact information I am looking for.

I have been using CrowdStrike Falcon for almost six months.

CrowdStrike Falcon is stable.

Customer support for CrowdStrike Falcon is good; they are very handy, help me expand, and are always available whenever help is needed.

I would rate customer support an eight on a scale of one to ten.

I replaced Carbon Black with CrowdStrike Falcon for EDR, which has helped me reduce false positive rates and other issues.

I used to use Carbon Black, but the switch was management's decision.

I would definitely say I have saved time since my group consists of only four people.

I rate CrowdStrike Falcon an eight out of ten.

I chose eight out of ten because there are still a few things that can be improved.

My recommendation to others reading reviews on PeerSpot is to explore more than just EDR; they can also look into the Agent DKAI, the new tool, and the Guardian feature as well.

My main use cases for CrowdStrike Falcon are that it serves as our EDR, used to protect our devices and our infrastructure.

My environment is hybrid, with 70% on-premises and 30% on cloud.

The cloud providers I use most are Microsoft, Entra, and Azure.

We are starting to evaluate the AI within CrowdStrike Falcon platform, specifically Guardian, this month.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats because we model our response on it.

We perform the triage on CrowdStrike Falcon, where we see the detection and the analysis of events. I integrate CrowdStrike Falcon in all our processes to detect and check things to see what happens. It is an essential part of my investigation process.

Fortunately, we don't have any critical incidents, and for now, we have never had one. CrowdStrike Falcon helps us to have everything under our eye, so we control everything and can analyze and discover things before it's too late.

CrowdStrike Falcon has improved my security team's productivity and made our job easier. I say it improved our productivity because we can fast-track things and also automate detection and workflow, allowing us to analyze only very important things and cutting down the number of false positives.

CrowdStrike Falcon has allowed me to consolidate or replace other security tools.

For me, the most valuable feature of CrowdStrike Falcon is its evolution because it is always updated, always facing new threats and new vulnerabilities and new issues, and it tries to solve everything proactively, ahead of time.

I have seen value from having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform because it is easy to correlate things with this since we can follow the same identity, no matter the source of the activity. Everything is correlated with the same identity.

Having multiple security capabilities on a single CrowdStrike Falcon platform is valuable because we have one only point of control. From my point of view, an issue is that we now have too many features and not a unified interface GUI.

They need to improve the unification of the GUI and the menu of all the different capabilities and products.

I am evaluating AIDR, but we have a lot of products, and it requires effort to configure and manage them. In our opinion, it is not useful to have the full license but not be able to invest the right time to configure everything.

I have been using CrowdStrike Falcon for five years.

From the performance perspective, we don't notice any downgrade of the performance with CrowdStrike Falcon. However, sometimes some colleagues do report high CPU usage and ask to check the antivirus. We have never seen a real performance issue on any machine in our company.

CrowdStrike Falcon can be improved with the support because when I open a case with support, I might have to be transferred to five or six first-level engineers before reaching someone who takes care of my issue and moves to the second or third level for a solution.

We replaced our vulnerability management with CrowdStrike Falcon Exposure Management. Previously, we had Tenable, and now we use CrowdStrike Falcon as we built our security based on CrowdStrike Falcon tools rather than starting with other products.

I was involved in the initial deployment. It worked well in my experience because we did the standard deployment with our software deployment tool, which was SCCM at the beginning. From there, we configured all the policy settings, detection policy, prevention policy, and device control. It is quite intuitive, and with the guide, it was easy for me to do this, especially with support from the presales engineers who followed us.

My job title is IT Security Engineer. I would rate CrowdStrike Falcon as a solution a nine out of ten because ten is perfection, and nothing is perfect in the world. Nine is good for me since CrowdStrike Falcon has many products that grow year after year, adding features and staying focused on security.

My main use case for CrowdStrike Falcon is protection for containers and protection for the cloud in general.

I protect my entire modern AWS environment with CrowdStrike Falcon for containers, and for the cloud part, I use CrowdStrike's CSPM visibility, the CNAPP, and also the identity component.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by changing the response time and reducing the number of employees needed for monitoring.

The benefits of having multiple security capabilities integrated into a single platform include using just one agent, which makes our lives much easier, and having a single administration interface that correlates logs.

I replaced traditional CSPMs with CrowdStrike Falcon, and that was the main advantage: providing real-time protection.

A security incident where CrowdStrike Falcon helped my team detect or prevent a threat involved a case with a secretary where someone tried social engineering to install an Ndesk, and we saw it—OverWatch intervened.

In my opinion, the best feature that CrowdStrike Falcon offers is adversary exploration.

The adversary exploration feature has helped my team on a day-to-day basis by enabling us to anticipate attacks and be more effective in our response, mainly through the use of OverWatch.

CrowdStrike Falcon has had a positive impact on my organization by making our lives easier through reducing the time we spend worrying, allowing us to sleep more peacefully today.

After adopting CrowdStrike Falcon, the response time changed positively, and the care CrowdStrike provides through OverWatch feels like having an extended arm of our organization; it reduces the time and the number of incidents, as well as the number of people needed to monitor things all the time.

I think CrowdStrike Falcon could be improved by making the interface more modern and simpler.

I have been using CrowdStrike Falcon for three years.

CrowdStrike Falcon is very stable.

The scalability of CrowdStrike Falcon is very smooth since it uses only one agent.

Customer support for CrowdStrike Falcon is perfect, and I have never had any problems.

I would rate customer support a ten on a scale of one to ten.

I previously used Trend Micro, and I switched because the support was terrible.

I have definitely seen a return on investment; even though the cost is higher, the reduction in staff needed for monitoring offsets the cost.

My experience with pricing, setup costs, and licensing reveals that the price is a bit higher than competitors, but the delivery is greater.

Before choosing CrowdStrike Falcon, I did not evaluate other options.

I would rate CrowdStrike Falcon a nine on a scale of one to ten.

I rate it a nine because, for it to be a ten, the interface needs improvement.

My advice to others who are thinking about using CrowdStrike Falcon is to do a PoC because they will definitely end up buying it.

My overall review rating for CrowdStrike Falcon is nine.

My main use case for CrowdStrike Falcon is for endpoint detection. CrowdStrike Falcon endpoint is installed on all workstations, and I use it to detect threats and to assist with vulnerability remediation in my day-to-day work.

The best features CrowdStrike Falcon offers are the speed that it detects anomalies at and allows me to respond quickly. That speed and quick response help my team by reducing incident response time and helping us react quickly and efficiently. CrowdStrike Falcon has positively impacted my organization by stopping threats before they became an issue on multiple occasions. One specific incident where it stopped a threat before it became an issue involved an engineer with admin rights attempting to install software, and CrowdStrike Falcon detected that it was not software we wanted in our environment, blocking the installation before the malicious software could spread.

CrowdStrike Falcon can be improved by integrating with other platforms I utilize like InTune, ScreenConnect, and TeamViewer.

I have been working in my current field for 12 years.

CrowdStrike Falcon is stable.

Its scalability is good; I have no issues with scalability, as I've installed it on all of my machines, and it has not affected performance at all.

Customer support is terrific; we are in regular contact with our support crew, and they are always helpful and available when we need them.

I did not previously use a different solution.

My experience with pricing, setup cost, and licensing is that the product setup cost and licensing were all handled by the CISO of the organization, who reports that it was an easy process and we had no issues.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by allowing us to integrate with our vulnerability remediation team to use the data from both platforms effectively.

From having multiple security capabilities on a single platform, we benefit by being able to validate threats on multiple platforms, proving that they are accurate, and it gives us additional information to be able to start the remediation process.

CrowdStrike Falcon has affected the workload and productivity of my security team positively by allowing my team to be more productive because they have instant access to the telemetry data.

I have seen a return on investment by needing fewer employees; I give access to CrowdStrike Falcon to my MSP, and they are able to manage the environment with a smaller team than they previously had.

Before choosing CrowdStrike Falcon, I did not evaluate other options.

My advice for others looking into using CrowdStrike Falcon is to set up a small pilot environment to get used to it and speak to an existing customer for any quirks related to their specific environment. I gave this review a rating of 10.

My main use case for CrowdStrike Falcon is endpoint security. A concrete example of this is querying vulnerabilities and handling detections.

My use of CrowdStrike Falcon has changed and expanded since it was first introduced in the company. The platform has developed to include new areas and functions such as Cloud Security Exposure Management, Falcon for IT, and Falcon for Mobile.

CrowdStrike Falcon has had a positive impact on my company by providing a better overview of all assets, vulnerabilities, and installation status.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats. Through API integration, work has become faster and more successful, and the data from CrowdStrike is very accurate.

The best features that CrowdStrike Falcon offers are the alerting, the API integration, and vulnerability management.

These features support my daily work by giving us a better overview of all vulnerabilities, which we can pass on via API if necessary to various departments. The alerting via the SOC is very helpful.

I consider the accuracy and reliability of the results I have obtained through CrowdStrike Falcon's AI features to be very accurate.

The advantages I see in consolidating several security functions on a single platform are that you have a single source of truth. The added value in having endpoint, identity, cloud, and other security telemetry brought together in CrowdStrike Falcon is that CrowdStrike is currently positioned in the best possible way.

What sets CrowdStrike Falcon apart from other cybersecurity platforms I have used or evaluated is that it is more advanced and easier to use.

CrowdStrike Falcon could be improved with better and clearer API documentation.

I have been using CrowdStrike Falcon for three years.

The Falcon sensor affects the performance of my endpoints positively, as I don't notice any poor performance, and the performance is great, meaning security has been improved on the individual devices.

CrowdStrike Falcon is stable in my opinion.

I rate the scalability of CrowdStrike Falcon a 9 on a scale from 1 to 10.

I am satisfied with CrowdStrike Falcon's customer support and rate it a 10 on a scale from 1 to 10.

CrowdStrike Falcon has not enabled me to consolidate or replace other security tools.

CrowdStrike Falcon is deployed in my company via an MDM. The Mobile Device Management system through which CrowdStrike Falcon is integrated is Baramundi.

My experiences with pricing, setup costs, and licensing for CrowdStrike Falcon indicate that it could always be cheaper.

I rate CrowdStrike Falcon a 10 due to the satisfaction I feel from the fact that everything works and everyday work is made easier.

My advice for others who are considering CrowdStrike Falcon is to bring in each module one by one and first test it through a POC.