CrowdStrike Falcon Reviews

Name: CrowdStrike Falcon
Brand: CrowdStrike
Rating: 4.3 (132 reviews)

Vendor: CrowdStrike

4.3 out of 5

132 reviews
96% willing to recommend

3,674 followers

Start review

What is CrowdStrike Falcon?

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

Get the CrowdStrike Falcon Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon, Microsoft Defender for Endpoint, Wazuh and more!

CrowdStrike Falcon is the #1 ranked solution in top Threat Intelligence Platforms, #1 ranked solution in EDR tools, #1 ranked solution in XDR Security products, #1 ranked solution in top Attack Surface Management (ASM) solutions, #1 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #2 ranked solution in endpoint security software, #2 ranked solution in top Identity Threat Detection and Response (ITDR) solutions, and #6 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give CrowdStrike Falcon an average rating of 8.6 out of 10. CrowdStrike Falcon is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon vs Microsoft Defender for Endpoint. CrowdStrike Falcon is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 855,164 peers since 2012

Featured CrowdStrike Falcon reviews

Waleed Omar

Information Security Specialist at Arab Open University

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Sumanth Kandanuru

Security Analyst at NTT Ltd

Obviously, when checking in the SIEM, not all logs are available. In CrowdStrike, unlike SIEM, actions are clearly defined. For example, a regular AV like Symantec might indicate a file was quarantined or failed to quarantine, but in CrowdStrike, I can verify the action. As an incident response analyst, I can use CrowdStrike to perform actions like directly wiping a file from a host if given access. I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections. Event search also allows for detailed investigations, showing accessed files and remote installations.

Read full review

Shubham Sinha.

Senior Principal Information Security Analyst at Veritas Technologies LLC

The best benefit of CrowdStrike Falcon is 99% MITRE coverage. It detects suspicious or undetected activities on the system and provides protection for zero-day vulnerabilities. If there is a sudden rise in CPU consumption or abnormal storage use, it helps us by creating a ticket, allowing us to investigate any abnormal behavior present. We can look into the machine and investigate. It reduces the false negatives common with other technologies. The real-time response helps with MTTR. We achieve faster detection and response times. It helped prevent breaches. In the past, there was abnormal consumption of RAM along with CPU on a server. It also started communicating with other subnets. CrowdStrike Falcon triggered an alert. We did our investigation and found that we had ransomware. We successfully mitigated it.

Read full review

CrowdStrike Falcon mindshare

Product category:

As of June 2025, the mindshare of CrowdStrike Falcon in the Extended Detection and Response (XDR) category stands at 14.7%, down from 18.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Extended Detection and Response (XDR)

PeerResearch reports based on CrowdStrike Falcon reviews

Type	Title	Date
Category	Extended Detection and Response (XDR)	Jun 7, 2025	Download
Product	Reviews, tips, and advice from real users	Jun 7, 2025	Download
Comparison	CrowdStrike Falcon vs SentinelOne Singularity Complete	Jun 7, 2025	Download
Comparison	CrowdStrike Falcon vs Microsoft Defender XDR	Jun 7, 2025	Download
Comparison	CrowdStrike Falcon vs Trend Vision One	Jun 7, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Endpoint	4.1	N/A	94%	197 interviews Add to research
Wazuh	3.7	12.4%	80%	48 interviews Add to research

Valuable Features

CrowdStrike Falcon excels with its endpoint visibility, threat analysis, and real-time monitoring capabilities. Its lightweight design minimizes system impact. Features like threat intelligence, automatic alerts, forensics, and user-friendly interface add value. Cloud-native architecture enhances flexibility. Centralized management, comprehensive dashboards, robust detection capabilities, and simple integration with existing tools provide depth. Advanced AI-driven detection, cross-platform integration, and 24/7 monitoring make it highly efficient for threat prevention and response tasks, helping organizations maintain a secure operational environment efficiently.

"I find nothing to miss in terms of stability; there are no glitches, and the solution is stable."
"The most beneficial features of CrowdStrike Falcon are that it is easy to install, easy to manage, lightweight, and it can stop breaches."
"CrowdStrike Falcon serves as a next-gen AV, which basically does AI-based behavioral analysis to detect and act on malware or ransomware."

Room for Improvement

CrowdStrike Falcon requires improvements in compatibility with operating systems, better integration with other technologies, and enhanced reporting features. Users have noted issues with the dashboard's export capabilities and speed, and there is a need for improved threat correlation and machine learning. The management and log aggregation tools need refinement, and the GUI can be sluggish. Users also mention the high pricing and the need for support enhancements, particularly regarding technical expertise.

"I believe nothing can be done to make CrowdStrike Falcon a ten out of ten, as I think it's one of the best solutions in the market. However, rating it a ten overall would imply there's no scope for improvement, but to survive in the market, changes must be made every day."
"As for stability, I would rate it around eight because last year they faced some downtime with around eight thousand computers, but it will improve."
"During these two years with CrowdStrike Falcon, I certainly faced some problems, including the known CrowdStrike outage, which was quite pinching and brought many of the Windows-related services to a halt just because of one bad configuration push from CrowdStrike tracks."

ROI

CrowdStrike Falcon has significantly reduced manpower and operational costs, increased staff productivity by about 25%, and minimized downtimes due to malware infections. Users have reported faster incident resolution, less system overhead, and notable savings from discontinuing previous solutions. Many have observed cost efficiency, a decrease in support requests, and improved security without affecting system performance. While quantifying exact savings is challenging, organizations appreciate enhanced security, resource savings, and peace of mind.

Pricing

CrowdStrike Falcon's pricing is perceived as high, with annual costs varying widely depending on features and number of users. Many companies report costs between $10,000 to $100,000 annually, while others mention significant discounts for volume or through resellers. Despite being more expensive than some competitors like Bitdefender and SentinelOne, its robust value proposition and feature set justify the premium for larger enterprises. Licensing is flexible, allowing selection based on specific needs. Setup is praised for its simplicity.

"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"The solution's pricing is great for us."
"The product is expensive."

Popular Use Cases

CrowdStrike Falcon is primarily used for endpoint protection, featuring capabilities like threat detection, real-time ransomware protection, and advanced threat management. It integrates cloud-based features for seamless security operations, serving as an EDR and next-gen antivirus while offering forensic investigation and malware analysis. Many organizations use it for system monitoring, threat hunting, and abnormal behavior detection, securing devices, servers, and remote endpoints across cloud and on-premise environments.

Service and Support

CrowdStrike Falcon's customer service receives mixed feedback. Many users praise its responsive and knowledgeable technical support, with fast response times and helpful assistance. Others highlight areas for improvement, citing occasional delays and less personalized interactions as the company has grown. Some experience challenges in reaching specialized support, while others find the support team proactive and efficient. Premium service is highly rated, though standard support can vary in its responsiveness and effectiveness.

Deployment

Users found CrowdStrike Falcon's initial setup straightforward and easy, often requiring minimal time and resources. The cloud-based nature simplified deployment and management, allowing for quick installation via agents on endpoints. Issues were rare, though some environments faced challenges with integrations or specific configurations. Many noted the setup process as seamless, with automatic updates and minimal maintenance needed. For larger deployments, phased approaches ensured smooth implementation with minimal disruption.

Scalability

CrowdStrike Falcon scales efficiently for various organizations. Its cloud-based architecture allows for rapid growth and management of multiple endpoints without performance issues. Many organizations utilizing CrowdStrike report seamless expansion, and it easily accommodates increasing security needs across diverse environments, including on-premise and cloud platforms. Users highlight its ability to quickly deploy and manage endpoints, providing a scalable security solution suitable for small to expansive global enterprises, ensuring consistent protection and performance.

Stability

CrowdStrike Falcon demonstrates high stability with users rarely encountering significant issues. Many report reliable performance, noting only minor glitches. Some express satisfaction with its stability in environments with thousands of endpoints, praising its ability to operate smoothly. Occasional problems, such as feature release disruptions and a past update issue, have been resolved swiftly. Users appreciate its cloud-based nature, which enhances its reliable performance, and they mention that the solution effectively handles updates.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CrowdStrike Falcon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

University

Retailer

Educational Organization

Healthcare Company

Comms Service Provider

Insurance Company

Construction Company

Real Estate/Law Firm

Energy/Utilities Company

Media Company

Non Profit

Legal Firm

Hospitality Company

Wholesaler/Distributor

Performing Arts

Transportation Company

Outsourcing Company

Recreational Facilities/Services Company

Consumer Goods Company

Pharma/Biotech Company

Marketing Services Firm

Logistics Company

Compare CrowdStrike Falcon with alternative products

Learn more about CrowdStrike Falcon

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike Falcon was previously known as CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface.