CrowdStrike, Inc. [Private Offer Only] Reviews

The solution is moving in that direction. One of the things I appreciate about this is that it is not a closed environment. When you look at organizations like Secureworks and Rapid7, they are trying to lock things down. The versatility and agility of Falcon solution provides a better angle in terms of endpoint detection response and endpoint security.

Improving user behavior analytics is what I am focusing on. That is core. Understanding what users are doing, how they are doing it, what is anticipated, being very reactive and zeroing in on zero days, and being able to knock it down quickly is where I am looking for them to focus.

CrowdStrike, Inc. [Private Offer Only] is the core of the EDR endpoint detection response in the market right now and it still is. The combination of AI Defense moving in that direction and them incorporating artificial intelligence is significant. Overall, when I speak to customers, CrowdStrike, Inc. [Private Offer Only] is my core versus others. Although they have some issues with too much built-in functionality, they are going to have to streamline because of artificial intelligence, but I think they are going to refine that in their next deployment.

Beyond just the threat intelligence, the Falcon app was upgraded to Falcon because of the SOC in that ES solution. The biggest aspect for Falcon from an e-discovery perspective is retention issues for that in terms of investigation and bringing Falcon in for a breach. The upgrade was at the MBTA for a breach issue with Keolis, which was my last experience of using Falcon for that purpose.

They should listen more to their community. They need to do a lot more bundling of things as part of it instead of treating everything as an upgrade or an enhancement. The problem that is hurting them is that there is a cost all the time for upgrading.

They are late in the game. When you look at Exabeam, they have always been focused on behavior analytics. This new journey into that era has enhanced it because it provides detection and baselining of behavior when someone is using that endpoint. It is an added feature that has benefited the enterprise in terms of defensive depth. It is definitely a good feature.

I have been using CrowdStrike, Inc. [Private Offer Only] for a long time. Before CrowdStrike, Inc. [Private Offer Only] came to market, that company was bought by BlackBerry, and I deployed that solution. This has been since approximately 2017, 18, or 19.

I give customer service a rating of 10. I do recommend it to my clients. I have found it to be very good, though I am just concerned about price.

I have not used every feature myself. My team has used it in part to augment other tools. There are other tools that have come out on the market that do a better job than what CrowdStrike, Inc. [Private Offer Only] can do in certain areas, but the Falcon ecosystem itself, both from a reactive and proactive perspective, has benefited the company. However, you cannot be a master of everything and a master of none, so you have to be careful. That is what I worry about them.

I am an end user and have been an end user for a long time. I have attended their conference a long time ago. Watching them, I believe that before everybody wants to get into the market with the opportunity of being better, I am looking for consistency. I tell people to look for someone who has good technical support and good response in terms of incident response when you do have an incident. That is where Falcon comes in. They have certainly served us well in the past and in a couple of incidents that I have been involved in with Falcon. I think that it is a great product as far as EDR goes, and I think it is going to many places. My overall review rating for this solution is 9.5 out of 10.

My major use cases for CrowdStrike, Inc. [Private Offer Only] mostly revolve around developer requirements to test whatever needs setting up. For example, developers need testing on Kubernetes clusters where the underlying hypervisors can be set up on Rancher, which is usually used on VMware in CrowdStrike, Inc. [Private Offer Only]. VMware hypervisors are installed and made into clusters that provide worker nodes for users to run their jobs, which depend on what the developers require for the next release and on the bugs that need resolving.

Regarding endpoint protection, CrowdStrike, Inc. [Private Offer Only] enhanced my incident response. I wanted to know how the agent gets installed and how it collects data into our dashboard, and while learning about it, I saw how it functions. It has been really helpful for me and provides good knowledge for everyone.

The biggest advantage of CrowdStrike, Inc. [Private Offer Only] that stood out to me is that, because the sensor was tested on all distributions of Linux, macOS, and Windows, the product has enough breadth to allow someone to gain knowledge on all sides. Installing sensors on different operating systems and running them on Kubernetes servers with AI agents is a complex task, marking a significant point for CrowdStrike, Inc. [Private Offer Only] where anyone can learn.

From the functionality side, one good feature is POCs for open-source products. If something is better than the enterprise tool or gains traction in the open-source space, it is tested and brought into production, which I have not seen in many other companies.

The real-time threat intelligence feature was important in my use of CrowdStrike, Inc. [Private Offer Only] for vulnerability remediation, and both monthly and quarterly tests were done for IoT devices.

In terms of behavioral analytics with Falcon, the analytics part is beneficial for reducing false positives. It has a great dashboard and documentation that are easy to understand, with features such as videos, making it easy for users to monitor devices and add them.

I relied on threat hunting tools frequently. They were essential for checking recent versions and installing them to provide developers the ability to test thousands of cases and analyze afterward.

The artificial intelligence part was definitely relevant in Falcon, especially for troubleshooting, starting from documentation and extending to addressing concerns needing AI agents. CrowdStrike, Inc. [Private Offer Only] heavily invested in that aspect.

On the improvement side, there are areas in the Windows section that could be better. Following a previous incident, it is good to hear they have taken initiatives, but more effort is needed with open-source and other operating systems in the market.

In terms of technical changes or new features, I would suggest more integration, since the agent currently uses very few resources while operating on various operating systems. Something they could introduce is support for physical devices, which face vendor limitations.

I stopped working with CrowdStrike, Inc. [Private Offer Only] in the month of June.

I started working with CrowdStrike, Inc. [Private Offer Only] in the year 2022.

Scalability in CrowdStrike, Inc. [Private Offer Only] depends on the client environment. With legacy systems and complications, finding the right product that suits the platform is crucial.

CrowdStrike, Inc. [Private Offer Only]'s technical support has been tremendously helpful and available 24/7. If I reach out, a representative engages and stays on the call throughout, even bringing in other team members if necessary.

If I had to rate their support from 0 to 10, I would give them a 10 because I have never seen such support in an organization.

The initial setup and installation phase are straightforward. The sales team assists with installation, and as long as the required tokens are correct, anything can be installed within a few minutes.

Throughout my time working with CrowdStrike, Inc. [Private Offer Only], I have noticed a significant return on investment, enhancing both the manual and automated requirements that I utilized, including AI and tasks that developers needed access to for timely release.

Regarding price and licensing for CrowdStrike, Inc. [Private Offer Only], I find it reasonable because it does not just provide one resource for end users; it also offers add-ons and features that need to be utilized correctly. Otherwise, customers might overpay without using it properly. While I think the price is higher in the market, it is justified for the security, as it fetches all requirements in one product.

I can compare CrowdStrike, Inc. [Private Offer Only] with competitors such as Microsoft Defender, Palo Alto, and Cisco, but I believe that when gathered around requirements and capabilities, CrowdStrike, Inc. [Private Offer Only] stands out higher.

It stands out because competitors often take up more resources, such as RAM and CPU. For example, CrowdStrike, Inc. [Private Offer Only] installs quietly with much less resource usage, making it a significant plus point.

As for the deployment model, we generally lean towards on-prem, with some testing done across cloud services such as AWS, Azure, and GCP, distributing around 30 to 35% of testing.

Overall, I would rate CrowdStrike, Inc. [Private Offer Only] a 9.

My major use case for CrowdStrike is endpoint security.

On the analytics side of it, my impression of analytics in CrowdStrike is that we are utilizing the product for basic analytics, which we provide, and are not using anything more than that.

I am not working with the threat hunting tools of Falcon at this moment.

We are not very familiar with the threat hunting tools at this moment, so I cannot comment on that.

As a customer, what I appreciate most about the product is that it has already proven its worth because it was able to safeguard us against a clear cyberattack.

It basically protects all our endpoints across the entire company, and that is where it has given us the maximum benefits.

We use EDR right now from CrowdStrike, and those are my favorite features that stand out.

Real-time threat intelligence in Falcon does help with our security.

Falcon Endpoint Protection helps to enhance incident response.

Behavioral analytics with the help of Falcon does help to reduce false positives in my case.

AI in Falcon is another animal right now, and it is going to impact us quite tremendously going forward, which is why we would prefer to see CrowdStrike becoming more AI-aware and utilize it, as we also utilize it coming up to the desktop level now, and therefore, we expect CrowdStrike as an agent to protect us from any AI-generated unethical events.

At this moment, I do see that CrowdStrike could improve on how they handle the AI-related threats on cybersecurity, as we are not very familiar with that and don't have enough information on how CrowdStrike is going to deal with that part.

We don't know if the AI part is very developed here yet, and that's what I'm trying to say; we don't have much information.

If it's available to us regarding the AI part, we would definitely have a look at that.

We would like to see CrowdStrike looking at all these vulnerabilities on the AI part of it and basically develop their product in order to mitigate those kinds of incidents.

I started working with CrowdStrike about two years back and have two years of experience.

CrowdStrike is a 99.9% stable and reliable solution.

CrowdStrike is very scalable because we have been scaling it up.

We have direct support from CrowdStrike, and I do have a positive impression of technical support.

I think they deserve anything between eight and nine for the support, where 10 is the best.

It was easy to deploy CrowdStrike. It's all on-cloud. It's CrowdStrike's cloud, as we do not work with cloud providers like AWS, Azure, or GCP.

We have already seen a return on investment.

When we implemented CrowdStrike, about two months after that, which was two years back, we had a cyberattack, and CrowdStrike with OverWatch was able to cancel that attack for us.

ROI was already achieved within the first year of implementation.

At this moment, I would say the price in the product is well within our price range.

It is relatively okay, as the price is reasonable.

CrowdStrike is quite advanced already because I've looked at other products also, and I don't find their functionalities as advanced as CrowdStrike.

I'm talking about SentinelOne, which we looked at quite extensively before we decided to go with CrowdStrike.

Products such as SentinelOne and other vendors do lack some functionality that CrowdStrike has.

For human and non-human identity discovery, my principal use case is mostly monitoring privileged users.

The risk rating gives a better view than Idera Discovery. Idera also has account discovery, but when you compare that to CrowdStrike, it is a lot better. It has more information regarding the account and includes a risk rating with a severity index and types of breaches that could happen. This really helps us in formulating the IAM strategy.

CrowdStrike has Falcon's endpoint protection feature, and it definitely enhances incident response because we recently had one and it really helped. The improvement in incident response was that it detected unauthorized access. Based on the trigger that it provided, we did an entire investigation and found what it was and who it was. This was because of the trigger that CrowdStrike provided.

I think the risk rating that comes up for each account in CrowdStrike is my favorite part. It pretty much gives you attack pathways for that account, showing how that account could be compromised. That is something that is really good, and it is a really good platform.

My impression of real-time threat intelligence in CrowdStrike is positive.

I would say AI in CrowdStrike's Falcon is efficient for identifying potential threats, but we have a policy in our company that has turned off all AI across platforms. We are building agents, but only for internal purposes. There is nothing external happening. Obviously, with tools CrowdStrike will pick up what the threats are. If there are AI agents involved, hopefully it will pick it up. I think the way agentic AI is progressing, I think it is going to be very difficult.

Falcon's behavioral analytics does help to reduce false positives in my case.

I won't be able to quantify by how much because I only look at the identity protection module, as that is my day-to-day role. I don't look at Falcon or any other option there, so I wouldn't be able to say anything on that.

I am relying frequently on threat hunting tools that Falcon provides.

I won't be able to provide examples or specific metrics as I don't work on that; it is a different team.

I see drawbacks in CrowdStrike in the application field, where it detects if applications get used or not. For Entra applications, sometimes the application activity, such as if someone is logged in, is not picked up. We actually have to go and check if it is actually there or not. That is something that could be improved upon.

I started using CrowdStrike this year. It has been less than 12 months so far.

CrowdStrike is pretty stable. It deserves a rating of 10 out of 10 for stability.

CrowdStrike is quite scalable. You can run it both on Azure servers and on-premises servers. It is pretty good, deserving a rating of 10 out of 10 for scalability.

In terms of technical service and support from CrowdStrike, it is pretty good. CrowdStrike support deserves a rating of eight out of 10.

I think deployment and installation of CrowdStrike are not that difficult. You just have to install all agents across the servers. I wasn't involved in the implementation, but from what I heard, it wasn't a long process. However, the PAM one takes a long time.

I don't think the most difficult part in CrowdStrike deployment is that complex. The rollout is pretty straightforward. I think it is about one or two months before it is kicking.

CrowdStrike does provide value for money. However, Idera is pretty expensive. For basic vaulting and other features, Idera is okay, but I think they have a lot to improve upon.

Identifying any threat, flagging any unauthorized behavior or lateral movement, and privilege abuse are examples of value for money in CrowdStrike. CyberArk does have a dashboard that says these accounts are high risk, but it doesn't actually give alerts CrowdStrike provides.

I think the biggest difference I see between Idera and CrowdStrike is that CrowdStrike updates its threat modules pretty much on a daily basis. Idera does not. There are a lot of problems with their module discovery.

I am the customer when it comes to CrowdStrike. It is on cloud. We have agents across all our servers, but the main portal is on cloud. We have not hosted on-premises, but it does communicate with the cloud. My final rating for CrowdStrike, if we summarize everything discussed, is 10 out of 10. About seven years ago, I started my career in this business, working in this domain with security tools.

I use CrowdStrike, Inc. [Private Offer Only] for endpoint, identity, and exposure management. Whatever security stack we have around Microsoft, the same stack is now being provided by CrowdStrike, Inc. [Private Offer Only]. I use it for everything, but mostly for cloud workload, endpoint, identity, and exposure.

Falcon Endpoint Protection enhances incident response without a doubt. We have workflow in Falcon, which is very helpful in defining how we are going to deal with a particular incident and what the flow should be. When a trigger belongs to a specific category, I can ensure it takes the right route, and before an engineer even engages with it, it is ready to be troubleshot, discussed, closed, or even escalated.

The module of CrowdStrike, Inc. [Private Offer Only] stands out. Initially, it was just a normal antivirus with next-gen or EDR protection, but now it has expanded its capability to cloud workload, identity, and more.

CrowdStrike, Inc. [Private Offer Only] Threat Intelligence helps with security strategy, as it is continuously updated to assist CSOs. It is a good option to go ahead with.

Behavior analytics in CrowdStrike, Inc. [Private Offer Only] helps to reduce false positives across all security stacks; it is similar across different solutions. Behavior monitoring, as we have for Defender, Trend Micro, or any other product serving as an antivirus solution, remains largely the same. The behavior analytics in CrowdStrike, Inc. [Private Offer Only] has been developed and improved compared to what we saw five or seven years ago, becoming comparable or even superior to other antivirus products.

Threat hunting with CrowdStrike, Inc. [Private Offer Only] is quite reliable. We had some use cases, and we configured some queries using CrowdStrike query language based on customer demand. When it comes to a particular incident, CrowdStrike query language is 1.5x faster than any other query language. It allows us to dive deep and correlate across different products, so if we enable the sensor on the domain controller or any tenant, it is able to pull up all the telemetry. We can bring all the related, associated, and correlated data for the particular incident to one place, which is a significant plus point.

For CrowdStrike, Inc. [Private Offer Only], improvement is needed.

The dashboard for CrowdStrike, Inc. [Private Offer Only] is not too generic, but the modules they have covered are quite limited compared to what Microsoft does. DLP, AI, and DevOps are the three areas I believe they could have improved upon.

When comparing CrowdStrike, Inc. [Private Offer Only] with Microsoft or some other competitors, the biggest difference is in deeper refinement, particularly in data loss prevention, where Microsoft always stands at the top. For example, the file integrity monitoring and encryption control Microsoft has are more comprehensive and effective when it comes to data loss. Logging and some control safeties around DevOps could also be improved a bit in CrowdStrike, Inc. [Private Offer Only], along with some task-specific improvements related to AI.

It has been three and a half years since we started working with CrowdStrike, Inc. [Private Offer Only].

I have been working with Microsoft since 2019, and with CrowdStrike, Inc. [Private Offer Only], it has been three and a half years.

I have not experienced any latency problems with CrowdStrike, Inc. [Private Offer Only]. So far, I have not seen any issues around it.

CrowdStrike, Inc. [Private Offer Only] is scalable. I would not say it has any limitations in scaling.

Technical support from CrowdStrike, Inc. [Private Offer Only] is absolutely fine; I have no doubts there.

If I had to rate the support from CrowdStrike, Inc. [Private Offer Only] from zero to ten points, I would give a nine.

CrowdStrike, Inc. [Private Offer Only] installation is quite easy. The documentation they have spread across their platform is comprehensive and easy to follow, making it quite good to use, especially when I first started following up on CrowdStrike, Inc. [Private Offer Only].

I see some value for money with CrowdStrike, Inc. [Private Offer Only]. Even though it is a bit expensive, it is still reasonable, and as it evolves, I believe the pricing will justify its cost.

I find the pricing of CrowdStrike, Inc. [Private Offer Only] a bit expensive.

We have it for multiple customers as standalone.

We are a partner for CrowdStrike, Inc. [Private Offer Only], and we are also a seller, so we sell licenses as well.

As of now, we have not deployed AI for any customer using Falcon, but I recall there was a particular case around AI.

Our setup with CrowdStrike, Inc. [Private Offer Only] is hybrid; we have everything: cloud, on-prem, and a mixed environment.

Overall, I would rate CrowdStrike, Inc. [Private Offer Only] an eight out of ten.

My major use case for using CrowdStrike, Inc. [Private Offer Only] is EDR. I have a different use case that I now have for CrowdStrike, Inc. [Private Offer Only] compared to ESET.

As a customer, what I really appreciate about CrowdStrike, Inc. [Private Offer Only] is that it works effectively. It blocks all ransomware and all software that users are trying to install that is not approved. It works very well as an antivirus. We also have the SOC of CrowdStrike, Inc. [Private Offer Only] team that helps us.

CrowdStrike, Inc. [Private Offer Only] improves my incident response, and I see benefits. The improvement I see for endpoint protection is that the behavior is very good and the response is very quick. It does the work and blocks all the things that I do not need to run in my network.

The only negative thing I can think of for CrowdStrike, Inc. [Private Offer Only] is the web managing interface. It is a little bit sophisticated and you need to know it very well to understand all the features inside it. It is not as user-friendly. I think they should simplify it or improve the learning curve.

I started using CrowdStrike, Inc. [Private Offer Only] five years ago.

CrowdStrike, Inc. [Private Offer Only] technical support is good and helpful. If I have to rate support from one to ten points, I would say eight or nine.

We had ESET before, and compared to ESET, CrowdStrike, Inc. [Private Offer Only] is a different level.

CrowdStrike, Inc. [Private Offer Only] installation five years ago was straightforward and not complicated.

Regarding value for money, someone else is noticing some return on investment.

We chose CrowdStrike, Inc. [Private Offer Only] because we had a demo and it looked very compliant to our needs. CrowdStrike, Inc. [Private Offer Only] dealers in Israel support our company and we went for it.

I am not currently working with other tools such as ATP or email security from ESET in particular. Today, I work as a customer and I am currently focused on CrowdStrike, Inc. [Private Offer Only]. My general experience with CrowdStrike, Inc. [Private Offer Only] is okay. I am not using CrowdStrike, Inc. [Private Offer Only] Falcon Real-time Threat Intelligence feature yet. We are considering the use of AI in Falcon and CrowdStrike, Inc. [Private Offer Only], and we are checking the options with CrowdStrike, Inc. [Private Offer Only] and other options. Regarding behavioral analytics and also analytics, these things you need to speak with my manager. These analytics sometimes cause false positives in general, and sometimes they reduce false positives. Regarding threat hunting, I do not frequently rely on Falcon threat hunting tools as it is not applicable for me. I have not been dealing with similar tools from the market as a comparison to CrowdStrike, Inc. [Private Offer Only]. I have not purchased anything from AWS Marketplace. My review rating for CrowdStrike, Inc. [Private Offer Only] is ten out of ten.