Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon Complete MDR vs Expel comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon Complete...
Ranking in Managed Detection and Response (MDR)
1st
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
79
Ranking in other categories
No ranking in other categories
Expel
Ranking in Managed Detection and Response (MDR)
19th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
1
Ranking in other categories
SOC as a Service (4th)
 

Mindshare comparison

As of April 2025, in the Managed Detection and Response (MDR) category, the mindshare of CrowdStrike Falcon Complete MDR is 14.1%, down from 15.3% compared to the previous year. The mindshare of Expel is 1.8%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR)
 

Featured Reviews

Otis Brinson - PeerSpot reviewer
Helps users keep track of everything from one place
The most valuable features of the solution stem from the fact that we can track all of it in one place across all those different locations. Because it's cloud-based and reports up to the cloud, we also have access to the back end, and an incident response team monitors all incidents. We also have an escalation process in place. From my perspective, there are other pieces of CrowdStrike that the security architect team uses as well, but I don't get involved with those as much. I usually just wait for the end results or the notification if I need to get involved if there is an incident.
reviewer2578461 - PeerSpot reviewer
Rapid threat management and diverse technology integration for effective monitoring
Expel has made it easier for companies to monitor and manage various log sources. With its vast integration portfolio, customers can efficiently monitor diverse environments. Time to value is quick, as Expel can turn their service up very rapidly. They have both automated active responses and human processes that quicken threat resolution.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of CrowdStrike Falcon Complete is the lightweight design, easily manageable portal, and minimal IT maintenance required."
"The endpoint detection and response is very valuable."
"It has good visibility, works well, and it is fast."
"The most valuable features of the solution stem from the fact that we can track all of it in one place across all those different locations."
"The detection and investigation capabilities are my favorite parts of the solution. It has good threat intelligence and threat-hunting features."
"The most valuable feature is AML-based threat detection."
"Falcon's threat intel is strong, and the solution allows our customers to automate their site intelligence. We can integrate Falcon X with the other platforms we use, like FireEye, Insight, Cybertech, and Kaspersky."
"CrowdStrike Falcon Complete has a very lightweight agent that provides signatureless detection protection from known and unknown malware or ransomware which is very useful."
"Their threat hunting protocol and process with AI and machine learning are strong, allowing for active and rapid responses."
 

Cons

"CrowdStrike Falcon Complete MDR offers an optional module that might not be cost-effective for all organizations."
"The technical support is satisfactory, but there is room for improvement to enhance it."
"We have a problem with the CrowdStrike Falcon Complete agent. It was closing the communication with the network or other computers."
"The downside that we see with CrowdStrike is that it is not part of a broader ecosystem. It is an endpoint product. They don't sell firewalls or a broader cybersecurity ecosystem. Some of the behavioral detections could be more robust. It does a good job of stopping common tools and techniques, but when it comes to using Windows utilities, such as PowerShell, etc, it doesn't stop them. These are some of the things where we have been able to get past it. An argument there can be that these are administrative tools, not malware, so maybe it is not its job to stop it, but we see some of the competitive products doing a very good job of detecting behaviors as opposed to malware."
"In a future release, it would be ideal if they could add reporting and action histories to their suite of features."
"It would be good if they fleshed it out a bit more, possibly with additional areas such as security awareness training. They could build that in. They're leveraging the same endpoint base that they have the security software on, but then they could offer a centralized portal or hub whereby someone like me could leverage it to track and put out security awareness training for people on all the common topics. I could have a centralized hub for everyone's results from that training and for the evidence that training occurred. It would be relatively straightforward, but it would add a lot for people in the compliance area. It would be a great expansion."
"The only aspect where we've offered feedback for potential enhancement is essentially the user experience."
"Patch management in vulnerabilities needs improvement."
"The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for management."
 

Pricing and Cost Advice

"The licenses are sold per user."
"I think the pricing is a little high."
"The pricing for CrowdStrike Falcon Complete is competitive. It's a cheaper solution when you compare it with others, and on a scale of one to five, I'm rating its pricing a four. You also don't need to pay extra for its features. CrowdStrike Falcon Complete is perfect."
"The price is okay, although you're not going to get away cheap when it comes to security."
"CrowdStrike is more expensive than SentinelOne. Licensing works on the number of agents and the modules you buy. CrowdStrike has different modules, such as Falcon, Falcon Overwatch, Falcon Complete, etc. The pricing depends upon the module that the customer wants. They have different Incident Response (IR) teams, which are very expensive."
"The pricing could be lower."
"We pay $50,000 for the 200 endpoints we have."
"Falcon Complete could be a bit cheaper."
Information not available
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
9%
Financial Services Firm
7%
Government
6%
Computer Software Company
19%
Financial Services Firm
10%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about CrowdStrike Falcon Complete?
It is a cloud-based solution. You can easily scale it.
What is your experience regarding pricing and costs for CrowdStrike Falcon Complete?
CrowdStrike has a reasonable price. It's a good price, but if CrowdStrike offered coupons or discounts on a monthly or quarterly basis, it would be more beneficial for smaller vendors trying to imp...
What needs improvement with CrowdStrike Falcon Complete?
There is room for improvement in the AI of CrowdStrike, known as Charlotte AI, which my team does not currently use. I have not had contact with it at this moment. Additionally, patch management in...
What is your experience regarding pricing and costs for Expel?
Expel's pricing has adapted as the market evolved and has become competitive over the past twelve months.
What needs improvement with Expel?
The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for m...
What is your primary use case for Expel?
I have experience reselling Expel. Customers often come to me wanting to evaluate multiple providers to make a choice based on their specific use cases, requirements, technology investments, and so...
 

Also Known As

Falcon Complete
Workbench, Expel SOC-as-a-Service
 

Overview

 

Sample Customers

Palm Beach State College, Mercedes-AMG, Pokemon, Telstra, Goldman Sachs, Zebra
Amanda Fennell CSO
Find out what your peers are saying about CrowdStrike, Huntress, Field Effect and others in Managed Detection and Response (MDR). Updated: March 2025.
845,406 professionals have used our research since 2012.