Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs VirusTotal comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Threat Intelligence Platforms (TIP)
1st
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
137
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
VirusTotal
Ranking in Threat Intelligence Platforms (TIP)
3rd
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
11
Ranking in other categories
Anti-Malware Tools (4th)
 

Mindshare comparison

As of January 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of CrowdStrike Falcon is 5.1%, down from 10.3% compared to the previous year. The mindshare of VirusTotal is 3.9%, down from 5.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon5.1%
VirusTotal3.9%
Other91.0%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Chinmay Banerjee - PeerSpot reviewer
Advisor Adtech/Martech/API product/project Engineering at a financial services firm with 10,001+ employees
Helps businesses collect threat data while keeping privacy in mind and apable of detecting, blocking, and removing viruses and malware
There are two gray areas I still need to explore. I have worked with VirusTotal because it easily integrates with over seventy antivirus scanners and blacklisting services. In addition to those there is much scope to improve and add other services or integrations. The areas for improvement are that VirusTotal is not using much AI or generative AI models, while other competitors are starting to build them. For example, VirusTotal's work is based on the setup done by their engineers. If you want to do scanning or protection activities for a specific site, app, or device, that is the area VirusTotal is currently focused on. But other competitors are building AI models that can do things like left-side scanning and provide auto-generated reports. VirusTotal has predefined reports, but there is a lot of manual effort involved. Secondly, the API is very limited if I want to integrate VirusTotal with other applications. They need to build more connectors and provide support for Webhook connectors for the API. If you can't build your own connector, it's always good to have provisions for Webhook setup connectors across platforms. Thirdly, Kaspersky, a competitor of VirusTotal, is using a methodology called "gatekeeper." A gatekeeper is a security system that protects the inside of a building from outside threats. This is the model Kaspersky is currently using. You have your website set up, but the entire army of VirusTotal or Kaspersky is standing guard, protecting you from the first gate itself. Right now, VirusTotal detects threats from your domain, but it is always better to verify inside the domain and protect it from the first level when people or malware are entering. This first level of protection is lacking in VirusTotal right now. The security bridge and protection gate are missing.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"CrowdStrike Falcon has done an excellent job at detecting breaches. It has allowed us to stay in business and keep our systems up."
"CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform. You only need to deploy the light agents on the licensed endpoints, and you're ready to work. Your dashboards will tell you the number of the endpoints being protected and the incidents. There are also incident dashboards with alerts that will tell you about the details."
"The stability is very good."
"The OverWatch is the most valuable feature to me. It's a 24x7 monitoring service, and when they see anything suspicious in my environment, they will investigate."
"The automatic alert feature is the most important feature of the solution."
"There's almost no maintenance required. It's very low if there's any at all."
"Regarding features, I appreciate its integration capabilities with identity providers...Stability-wise, I rate the solution a ten out of ten."
"CrowdStrike Falcon has helped my customers predict and prevent potential breaches because of its proactive approach."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"It can scan the dark web and find if an email ID has been compromised. This is another area that we have not explored yet."
"It is quite simple for anyone if they just want to check some suspicious URLs."
"It gives detailed information about suspicious IPs, which is one of its most valuable features."
"VirusTotal provides 95% to 98% accurate information."
"It provides detailed insights into possible malicious behavior, dropped files, and TCP connections."
"The initial setup is easy."
"The feature I like the most is the ability to see the MD5 or SHA-256 signature of the file, and also the composition of the file according to its segments."
 

Cons

"CS Falcon sensing capabilities for non-domain machines should be enhanced since the agent doesn't detect the neighbor's IP Address and/or any anomaly which was identified in the network for the non-domain machine."
"The current database schema presents challenges and has potential for improvement."
"Deployment in cloud environments is challenging. Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options."
"It can be expensive depending on the features you select."
"The solution isn't known in my market. The brand isn't as recognizable. Their shortcomings are more on the marketing side."
"The KDR solution is immature. They do not have much preemption in ITDR. Threat prevention should be their first priority, and false positive reductions are needed."
"We have had to open a case with the technical support to get some issues and bugs resolved."
"To simplify the budgeting process for our clients, CrowdStrike should consider offering bundled packages that include essential features."
"VirusTotal needs better advertisement and promotion, especially in the Middle East, since it is not yet widely recognized or popular in that region."
"There is room for improvement, particularly in making some of the most useful features more accessible in the non-paid version."
"I would like to see improvements in the score consistency and accuracy."
"The platform could improve in the areas of endpoints and networks."
"I would like to see improvements in the score consistency and accuracy."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
"There should be room for improvement, particularly in the API side of things."
"VirusTotal has different versions, and sometimes the parameters of the API are not very clear."
 

Pricing and Cost Advice

"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"CrowdStrike Falcon can be more expensive than some competitors, and its base price doesn't cover every feature."
"The pricing could be reduced. If it was more reasonable that would be great."
"The tool is a little bit expensive compared to other products, but I think it's okay owing to its quality."
"The more endpoints an organization adds the cheaper the cost."
"We bought a very small number of licenses, then ran it for a year. We bought a 100 licenses for a year, so we didn't actually do a proof of concept. We just bought them. Then, the next year, we bought 10,000 licenses."
"The pricing of CrowdStrike Falcon is competitive."
"CrowdStrike is well priced. On a yearly basis, it costs between $60 and $100 per user."
"VirusTotal is an expensive solution."
"The pricing is very economical."
"The pricing is reasonable."
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Computer Software Company
14%
Financial Services Firm
10%
Comms Service Provider
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise62
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
 

Also Known As

CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
No data available
 

Overview

Find out what your peers are saying about CrowdStrike Falcon vs. VirusTotal and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.