No more typing reviews! Try our Samantha, our new voice AI agent.

CrowdStrike Falcon vs ThreatMon comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
CrowdStrike Falcon
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
205
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Endpoint Detection and Response (EDR) (1st)
ThreatMon
Average Rating
0.0
Reviews Sentiment
5.3
Number of Reviews
1
Ranking in other categories
Attack Surface Management (ASM) (29th)
 

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
CrowdStrike Falcon5.5%
Microsoft Defender for Endpoint6.4%
SentinelOne Singularity Endpoint4.4%
Other83.7%
Endpoint Protection Platform (EPP)
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
ThreatMon1.5%
HackerOne4.1%
Darktrace3.8%
Other90.6%
Attack Surface Management (ASM)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
JW
Senior Security Engineer at a financial services firm with 10,001+ employees
Centralized endpoint protection has strengthened compliance and accelerated incident response
There are a number of areas that I only touch a handful of times, but when I get in there, I realize why I don't do that. The main area would be within the support area. The support bot is not really as smart as you would expect it, especially in this day and age of LLM and other capabilities that I know CrowdStrike Falcon is already capable of doing. Additionally, I would appreciate a little bit more easy to read insights of some of the dashboards or maybe manipulation of the dashboards. It is still a little cumbersome to build custom dashboards and it's not as intuitive as you would think. Documentation is abysmal and needs to be improved dramatically. I know that there's a big effort to do this, however, even the new effort is honestly worse than it was before. Those are definitely major areas of improvement, just more in the usability of the features.
reviewer2544048 - PeerSpot reviewer
CTO at a tech services company with 11-50 employees
AI-powered discovery enhances threat visibility while customer support excels
I am a reseller. One of our customers suffered an attack a few months ago, and they discovered that they have some data available on the deep and dark web. The biggest driver for using ThreatMon was takedown services. SIEM integration into their incident response was also essential. They wanted…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool is designed to scale for large enterprises and handle large volumes of data."
"Overall, it's a great platform; it integrates very well with other solutions from Palo Alto and also with our vendors, the ease of use is excellent, I love the root cause analysis from Cortex, which is amazing, and in a few clicks you can have the full root cause."
"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."
"I recommend this solution to others because it is easy to manage, reliable, and overall good to use."
"It has pretty much everything we need and works well within the Palo Alto ecosystem."
"This software helps us understand any issues that may arise when someone is not at work."
"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."
"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."
"The most valuable feature is the machine learning that they use to check certain patterns in the endpoint devices. It checks the whole ecosystem or entire environment."
"CrowdStrike Falcon has positively impacted my organization significantly, as it has greatly reduced compromises, increased early detection, and in the end, allowed us to respond and prevent before an attacker can achieve any objective."
"The most valuable feature is the indicator of compromise, which show you what file was either quarantined or removed."
"The CS falcon agent is a lightweight agent compared with other agents of EDR products."
"CrowdStrike Falcon helps my security team quickly respond to alerts escalated from the Falcon Complete team and has minimized the business impact of potential compromises."
"The most valuable features in CrowdStrike Falcon are the full EDR with antivirus, hunting, reporting, and RTR remote control."
"The product is really good, but there is a lot of additional features that you need to have for it to be a complete solution."
"CrowdStrike Falcon has positively impacted our organization by reducing incidents."
"I would recommend ThreatMon."
"Machine learning or AI discovery, which discovers our resources on the deep and dark web, has been very useful."
 

Cons

"To jump from the partner to Palo Alto directly was challenging."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"I have seen lagging with Cortex XDR by Palo Alto Networks. There was one time when we faced a threat actor trying to gain access to our system. When our team utilized the tool, we were all on the same dashboard and we faced a lag issue at that time of around five minutes, which was quite significant."
"There's an overall lack of features."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity."
"Managing the product should be easier."
"It'll help if customization was easier."
"The malware analysis could be improved, as that's what we use the solution for the most and that change would make it a better EDR tool."
"It would be nice if the dashboard had some more information upfront, and looked a little better."
"I have not been able to integrate the tool with a third-party MFA authentication tool."
"The performance could be better. It's a bit slow."
"I would like to see a little bit more in the offline scanning ability."
"As the company has grown, the technical support has felt less personal."
"There are a lot of open integrations, but they are external factors that cause dependencies on the integrator, not really on CrowdStrike, so it's a bit of a challenge as there is no comprehensive solution."
"I chose nine out of ten because while CrowdStrike Falcon has the capabilities and features I want, the pricing for each different functionality or feature we want to add raises my concern about potentially having a compound or overall pricing increase."
"We are looking at a better pricing model to onboard as many customers as possible."
"ThreatMon is very expensive."
 

Pricing and Cost Advice

"I am using the Community edition."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"Very costly product."
"The price of the product is not very economical."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"It is "expensive" and flexible."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"I am not aware of the price, but I believe that it is among the most expensive XDRs out there. Of course, this is dependent on the features you choose. Depending on the features, the price might increase."
"The cost is usually a challenge in the industry. I think we pay around sixty-eight dollars."
"The price of CrowdStrike Falcon is reasonable."
"With respect to pricing, my suggestion to others is to evaluate the environment and purchase what you need."
"When it comes to licensing, customers can choose a bundle or select licences based on the specific features they would like access to. This solution comes with premium pricing. It is approximately 20 to 30% more expensive than competing solutions."
"Our company pays approximately US$ 65,000 annually for 900 machines."
"The cost of CrowdStrike Falcon could be reduced. It is quite expensive if you compare it to other solutions, such as Blue Coat, Symantec, McAfee, or Kaspersky."
"Crowdstrike Falcon is relatively cheap."
Information not available
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
10%
Outsourcing Company
10%
Manufacturing Company
10%
Computer Software Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business62
Midsize Enterprise54
Large Enterprise103
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for ThreatMon?
ThreatMon is very expensive. We are looking at a better pricing model to onboard as many customers as possible.
What needs improvement with ThreatMon?
We are looking at a better pricing model to onboard as many customers as possible. Additionally, we are trying to fig...
What is your primary use case for ThreatMon?
I am a reseller. One of our customers suffered an attack a few months ago, and they discovered that they have some da...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.
920,769 professionals have used our research since 2012.