CrowdStrike Falcon Cloud Security Reviews

I am protecting my cloud asset directory and prioritizing vulnerabilities with CrowdStrike Falcon Cloud Security.

My environment is AWS.

The most important cloud security use case for my organization is identity.

Identity protection is crucial for me, specifically in the area of threat protection.

Posture management, identity protection, and cloud detection and response are the most important to me.

These are important to me because I see them as potential attack surfaces, so I am concentrating more on them.

CrowdStrike Falcon Cloud Security improves my ability to see cloud risks in context; instead of reviewing vulnerabilities, misconfigurations, identities, and workloads separately, I can prioritize issues based on exposure and potential impact.

The main benefits of cloud security in identifying and prioritizing risks or misconfigurations are centralized visibility, earlier identification of misconfigurations, better vulnerability prioritization, and improved coordination between security, infrastructure, and cloud engineering teams.

CrowdStrike Falcon Cloud Security facilitates easier communication with cloud and development teams since findings can be linked to specific assets, identities, workloads, and remediation steps.

CrowdStrike Falcon Cloud Security is useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity, helping me understand whether a cloud finding is merely theoretical or connected to real suspicious activity.

This is important because it reduces manual reviews and helps me focus on the highest risk issues.

CrowdStrike Falcon Cloud Security helps consolidate tools and reduce complexity in my security programs; AI assists with summarizing cloud findings, explaining risk, identifying relationships between assets, and recommending investigation or remediation steps.

The advantages of managing cloud security through CrowdStrike Falcon Cloud Security include reducing the need for separate tools, covering cloud posture, workload security, and vulnerability prioritization, which results in simpler administration and a more consistent view of cloud risk.

CrowdStrike Falcon Cloud Security could be better by connecting cloud posture and workload information with endpoint, identity, and threat data, providing a broader security context than a tool that only reports cloud misconfigurations.

In my opinion, it could be better; however, I am not an engineer in this area, so I think CrowdStrike Falcon Cloud Security is doing it well.

I have been using CrowdStrike Falcon Cloud Security for several months.

Cloud security fits into my development, DevOps, or cloud operations workflows; the impact on workload performance is generally limited when the deployment is planned correctly, and scalability depends on the cloud architecture.

I was not using another solution before CrowdStrike Falcon Cloud Security.

In AWS, I only have security groups; that is all.

I would describe my experience with deploying CrowdStrike Falcon Cloud Security as working best when cloud accounts, roles, ownership, and tagging standards have already been organized.

I was involved in the deployment; my admin tells me that the main challenge was onboarding multiple environments and resolving ownership of findings.

My highest security analyst is involved more in analyzing, detecting, and preventing threats and working with the module very strongly, but in the deployment, it is something from the operation side of the administrators.

That is mostly my part, but they also participate; they are now using the software more than deploying it, and I do not do administration.

As a cloud solution, I considered using no other tools.

I have not evaluated other solutions before implementing CrowdStrike Falcon Cloud Security; I go with it since I already have CrowdStrike Falcon Cloud Security.

I rate CrowdStrike Falcon Cloud Security a nine out of ten; I find it effective, though I cannot describe exactly why due to my lack of experience.

Public Cloud

Amazon Web Services (AWS)

CrowdStrike Falcon Cloud Security's main use case in my organization is the integration of Real-Time Visibility for AWS, Azure, and Google Cloud accounts.

I've used CrowdStrike Falcon Cloud Security to integrate the Real-Time Visibility events from AWS CloudTrail, which allows us to avoid breaking the ingestion to the Next-Gen SIEM.

I am currently protecting the client's AWS and Azure environments with CrowdStrike Falcon Cloud Security.

The most important cloud security use cases for my organization with CrowdStrike Falcon Cloud Security are identity protection and detection and response in the cloud.

Identity protection and cloud detection and response are especially relevant for my organization because the client needs them to comply with their internal audits.

Real-time threat detection and preventive cloud security capabilities play a main role in my overall security strategy since they serve as a very useful first line to detect everything.

CrowdStrike Falcon Cloud Security has positively impacted my organization by helping us simplify ingestion for the client and making the integration methods much more agile.

A concrete result that has improved in my organization thanks to this tool is that it has improved the efficiency of the integration of events, the smoothness and speed at which these events arrive, and it has also helped us greatly in the migration process from Splunk to CrowdStrike for AWS sources.

I have not noticed any change in collaboration between the security, cloud, and DevOps teams since I started using CrowdStrike Falcon Cloud Security. I think that since these are such separate teams, communication hasn't improved much, though perhaps slightly, but since we have somewhat different tasks, there hasn't been substantial improvement.

CrowdStrike Falcon Cloud Security has greatly reduced the complexity when it comes to integrating sources, especially from AWS into Azure.

I have experienced advantages in managing cloud security through the broader Falcon platform. It has sped everything up significantly and makes everything appear in a more visual and simpler way.

I consider the best features offered by CrowdStrike Falcon Cloud Security to be how easy it is to implement everything.

I find the ease that CrowdStrike provides when it comes to synchronizing the accounts to be particularly simple and noteworthy, and I think it's quite useful.

I think CrowdStrike Falcon Cloud Security is practically perfect for providing visibility across all my cloud environments.

I find CrowdStrike Falcon Cloud Security useful for connecting vulnerabilities, identities, configurations, and real-time activity in order to understand the actual risk in my cloud environment.

The capability to connect different elements of the cloud environment is useful to me because it allows me to have everything centralized and develop all my use cases from the CrowdStrike Falcon Cloud Security platform.

Regarding the artificial intelligence capabilities of CrowdStrike Falcon Cloud Security, I think its governance and security are interesting.

On a scale of accuracy and reliability from one to ten, I would rate the results offered by CrowdStrike Falcon Cloud Security's artificial intelligence at approximately an eight, so it's quite reliable.

At the moment, I haven't identified anything that could be improved; I think it meets its functions quite well.

It would be nice if, in addition to CloudTrail, GuardDuty from AWS could also be included.

I have been using CrowdStrike Falcon Cloud Security for a little over a year.

I consider CrowdStrike Falcon Cloud Security to be stable.

I would rate the scalability of CrowdStrike Falcon Cloud Security as very extensive. Especially for cloud topics, it's perfect.

I think CrowdStrike Falcon Cloud Security's customer support could be somewhat improved, as I understand it is currently very overloaded.

If I had to rate customer support on a scale from one to ten, I would give it a seven.

I would rate CrowdStrike Falcon Cloud Security overall as a nine.

I give it a nine and not a ten or an eight because nothing is perfect and there is always room for improvement.

I would recommend CrowdStrike Falcon Cloud Security to other organizations considering using it because it's very useful and very easy to implement, and above all, it speeds up the process of connecting clouds.

Public Cloud

Amazon Web Services (AWS)

CrowdStrike Falcon Cloud Security protects my entire Azure tenant and all cloud workloads in Azure, including Kubernetes clusters and VMs. My company does not use AWS.

The most important cloud security use cases for my company are identity protection and cloud detection response. Identity protection and cloud detection response are critical to us because identity is the most important attack surface in cloud environments, providing essential visibility into our identities in the cloud environment with privileges.

Runtime threat detection and preventive cloud security capabilities play a significant and important role in my overall security strategy because a breach in the cloud environment has a substantial impact, making threat detection very important.

CrowdStrike Falcon Cloud Security has positively affected collaboration between our security, cloud, and DevOps teams, helping us speak the same language, as our cloud colleagues are always interested in doing things securely. With the fast overview provided by this platform, we can shift security to the left, offering insights on vulnerabilities before deploying something.

CrowdStrike Falcon Cloud Security has increased our efficiency significantly.

In terms of benefits, we have increased our productivity, become faster and more effective in communication. We can provide centralized solutions for all teams and reduce costs and cognitive load on other teams.

CrowdStrike Falcon Cloud Security provides extensive visibility across our cloud environment through huge insight into our cloud environment, allowing different teams and different projects to have insights into our cloud security.

CrowdStrike Falcon Cloud Security helps us identify and prioritize cloud risks and misconfigurations because we were uncertain if we had adequate Azure policies or Kubernetes policies. It helps us see which indicators of misconfiguration we have in our tenant and our Kubernetes clusters, providing this information to our teams.

The Falcon platform is very useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity to understand actual risks because it helps us see the correlation between events and perform attack path analysis, which is very helpful in our daily operations.

By managing cloud security through the broader Falcon platform, we have experienced advantages such as being able to define a centralized policy for Kubernetes clusters and enroll them in all Kubernetes clusters, providing us with a centralized view and one single source of truth.

I hope cloud security will better fit into our development, DevOps, or cloud operations workflows in the future, though currently it fits very deep into the whole process in areas such as Kubernetes clusters.

CrowdStrike Falcon Cloud Security could be improved with fine-granular permissions for the overview or by allowing me to give cloud teams direct permissions to the cloud platform. It works very well with cloud groups for indicators of misconfiguration for Azure, but it is not as straightforward with container security.

I have been using CrowdStrike Falcon Cloud Security since April.

I cannot report any issues with the stability and reliability of the Falcon Security platform because it is completely stable.

CrowdStrike Falcon Cloud Security fits our size needs.

We have not used any other tools to help consolidate or reduce complexity in our cloud security program.

Before adopting CrowdStrike Falcon Cloud Security, we were not using another solution to address similar needs. The factors that led us to consider CrowdStrike Falcon Cloud Security are that we already had Falcon for on-premises endpoints and knew the benefits of CrowdStrike and endpoint detection, wanting the same capabilities for the cloud environment.

The deployment process is quite easy. I started in April and we had to provide some description for ourselves or create a subscription description for our colleagues, but it is now very easy to deploy this. The description from CrowdStrike itself is much better.

I have learned a lot about other topics we can centralize as well.

Public Cloud

Microsoft Azure

We mostly use CrowdStrike Falcon Cloud Security for different clients across the globe, and we have installed all the agents on most machines to monitor each and every employee, along with laptops and servers in AWS. We are the core monitoring staff with a SOC where we monitor for viruses, malware, and to remove harmful files. Our primary use cases involve monitoring miscellaneous activities.

I have been using CrowdStrike Falcon Cloud Security's workload protection features because it's a very lightweight agent. Its detection speed is remarkable compared to other tools on the market, including Trend Micro. CrowdStrike Falcon Cloud Security is user-friendly and provides detection transparency, allowing us to present real-time documentation to our executives clearly explaining any detected issues.

Workload protection features influence our security strategy significantly, particularly by blocking any suspicious activities on public-facing servers and generating immediate notifications for us to act upon. It helps in quickly identifying whether potential issues need to be whitelisted or blocked, and assists in troubleshooting when applications trigger false alerts due to bugs.

The most valuable capabilities of CrowdStrike Falcon Cloud Security relate to preventing attacks caused by human error, such as when someone plugs in a USB device or downloads something without caution. It automatically blocks duplication and activities that could result in data loss, effectively preventing unintended copying of data to personal devices.

Deduplication prevention is definitely the most valuable feature.

CrowdStrike Falcon Cloud Security excels in threat detection with a vast investigation structure, allowing us to verify suspicious activities to identify root causes. It helps us trace back to the origin and fix issues, making it a user-friendly tool for this kind of detection.

CrowdStrike Falcon Cloud Security is built on AI and ML technology, enabling it to detect various threats and block suspicious activities immediately, which is particularly effective compared to traditional AVs and EDRs.

The analytics provided by CrowdStrike Falcon Cloud Security is key for maintaining a proactive security posture. Its AI and ML foundations offer extensive information on threats and suspicious activities, making it renowned for analysis in the industry.

The improvements needed for CrowdStrike Falcon Cloud Security include reducing its high cost, which is currently quite expensive, and enhancing the executive reports that are user-friendly for technical engineers but require improvement for higher management.

More detailed and granular reports would be beneficial for better executive comprehension.

I have been using CrowdStrike Falcon Cloud Security for more than eight to nine years, but for the past two years, I have not been using it much because I moved into a different domain.

When evaluating the stability of CrowdStrike Falcon Cloud Security, their partnerships with all major cloud service providers ensure their servers are optimally positioned, leading to no latency or stability issues that I have observed.

CrowdStrike Falcon Cloud Security is indeed highly scalable, ideally for enterprises with a minimum of 2,000 servers to ensure cost efficiency and easier setup.

CrowdStrike Falcon Cloud Security is primarily suited for larger enterprises and not for small or medium companies.

I have a very good in-house team of about 20 to 30 people working with CrowdStrike Falcon Cloud Security, and we maintain excellent communication with their technical support, resolving any issues immediately without complaints on technical aspects or delays.

Based on my experience with CrowdStrike Falcon Cloud Security's technical support, I would rate them a solid 10 out of 10.

Positive

With 19 years of experience in the industrial field, I have also used technologies such as BigFix, Ivanti, Qualys, and I am considering reviewing Tenable, Ivanti Endpoint Manager, Ivanti Security Control, Tanium, and others, including HCL BigFix and Qualys Patch Management.

I participated in the initial setup and deployment of CrowdStrike Falcon Cloud Security.

The implementation plan I typically follow involves multiple installation methods, one being agentless via AD to push agents, and the other using patching tools such as Ivanti and BigFix. This process can take around 15 to 20 days for 2,000 to 3,000 servers or endpoints due to its user-friendly cloud-based configuration.

During the initial setup, I faced some false alerts due to older versions of some applications we used, which may exhibit atypical behavior. Normalizing these false alerts generally takes around one to two weeks after the initial installation to resolve and ensure smooth operation.

Our company has a partnership with CrowdStrike, so we are one of their partners, and that is how we acquired CrowdStrike Falcon Cloud Security. I bought it directly from CrowdStrike.

Some of our customers purchase CrowdStrike Falcon Cloud Security directly from CrowdStrike while others purchase it via AWS Marketplace or other marketplaces.

More than 12 million vulnerabilities have been identified and resolved while working with CrowdStrike Falcon Cloud Security over the past 10 years, which I have been monitoring diligently. This figure reflects the work done not only by me but also collectively with about four customers in one single console, giving a complete picture of our efforts.

The cost of CrowdStrike Falcon Cloud Security is currently quite high, which is an area that needs improvement, particularly for the executive reports that are user-friendly for technical engineers but require enhancement for higher management.

With 19 years of experience in the industrial field, I have used technologies such as BigFix, Ivanti, Qualys, and I am considering reviewing Tenable, Ivanti Endpoint Manager, Ivanti Security Control, Tanium, and others, including HCL BigFix and Qualys Patch Management.

I use CrowdStrike Falcon Cloud Security internally in my company. CrowdStrike Falcon Cloud Security is recognized for its reliability, and I can guarantee they are very reliable. My overall rating for CrowdStrike Falcon Cloud Security is 8 out of 10.

Public Cloud

Amazon Web Services (AWS)

My main use case for CrowdStrike Falcon Cloud Security is to identify permission changes or attempts at intrusions or attack vectors for the entire cloud part, especially in the Azure area for Entra ID.

I use CrowdStrike Falcon Cloud Security to detect intrusions or permission changes. A clear example would be granting permissions within an Azure application, such as admin permissions or permissions that a user should not have.

Currently, I am protecting the entire permissions side within the Azure cloud with CrowdStrike Falcon Cloud Security. I would say all of it.

The most important cloud security use cases for my organization are identity protection, because we are a very large organization with many departments, and we are interested in knowing what each person does. We have very varied departments from engineering and R&D to finance departments, and the cloud detection and response side is important to us because we are concerned that lateral movement could occur and we want to be able to identify it.

CrowdStrike Falcon Cloud Security has positively impacted my organization by allowing us to expand visibility, which is the most important thing—to be able to identify the scope we have, identify applications, and identify permissions that we did not have under control. This has allowed us to tackle that and reduce attack vectors.

Improved visibility had a direct impact on security and on decision-making within my team through the granting of permissions for applications that use permissions they should not have. This has allowed us to identify applications that are doing things that should not be allowed in the organization, and without using CrowdStrike Falcon Cloud Security we would not have seen it.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize risks or misconfigurations in the cloud by reducing the time needed to identify and handle threats and, at the same time, to mitigate problems.

For example, I have reduced time or mitigated a problem thanks to the platform by seeing the granting of permissions and being able to revoke them immediately.

CrowdStrike Falcon Cloud Security has affected collaboration between the security, cloud, and DevOps teams in my organization positively, as it has enabled the creation of automation processes between the incident response team, the vulnerability management team, and the protection team so that we can define and carry everything out.

I consider the best features offered by CrowdStrike Falcon Cloud Security to be the fact that it is linked with the whole identity side in part, but especially that it is connected with the Azure cloud side, which allows us to identify application registrations, user changes, and the granting of permissions. In this sense, it helps us a lot to identify strange things.

All of the functionalities have pleasantly surprised me. This has allowed us to mitigate threats or even stop an attack or some malicious activity.

In terms of visibility, I think CrowdStrike Falcon Cloud Security is effective when you give it visibility. In our case, we give it a lot of visibility, so it is very effective and has allowed us to prevent issues in problematic cases.

I find CrowdStrike Falcon Cloud Security useful for connecting vulnerabilities, identities, configurations, and runtime activity in order to understand real risk, but I have not used that part, so I cannot elaborate further.

In our case, runtime threat detection capabilities and preventive cloud security play a crucial role in our overall security strategy as it has helped us detect threats in real time and mitigate them in real time automatically. This allows us to have total visibility of the business and the company for handling the entire cloud side.

I have noticed an advantage in managing cloud security through the broader CrowdStrike Falcon platform as it is much more convenient and easier, since we have everything connected with Falcon.

I believe that CrowdStrike Falcon Cloud Security could be improved in the way that alerts and everything are managed—they are very separated and very segregated into different things. What we would prefer is to have everything unified under a single category or under a single portal.

Alert customization is a good point, and we should have more freedom when it comes to customizing alerts. I can create custom rules and I have access via the API, which helps speed things up and helps a lot, but one positive point is that it should perhaps be more focused from an Incident Responder's point of view than from the perspective of presenting everything in general.

Regarding the AI capabilities of CrowdStrike Falcon Cloud Security, I think its governance and security are good, but it can be improved like all AI products.

From my point of view, the accuracy and reliability of the results offered by CrowdStrike Falcon Cloud Security's artificial intelligence models need improvement.

I have been using CrowdStrike Falcon Cloud Security for more than two years.

I consider CrowdStrike Falcon Cloud Security a stable platform, as is the entire Falcon suite.

I would rate the scalability of CrowdStrike Falcon Cloud Security well, since we have been able to keep implementing and scaling with new assets and there has been no problem.

Customer support with CrowdStrike Falcon Cloud Security has been perfect, as we have a dedicated team for it.

Based on my experience, I would rate customer support on a scale of one to ten a nine.

On a scale from one to ten, I would rate CrowdStrike Falcon Cloud Security an eight.

I give it a score of eight because I do not think there is a perfect tool, and saying ten would be too much since we have many aspects to improve at the platform level and at CrowdStrike Falcon Cloud Security level in order to identify threats and identify things properly, especially when the environment is very large and the environment has many developers and many things—it is complicated. There is a lot of noise in everything and it is hard to separate what is noise from what is not. An eight is appropriate, as it also does things quite well.

CrowdStrike Falcon Cloud Security is deployed in my organization in a hybrid environment. In the public part, but we also have the internal part. We mainly use both AWS and Azure.

My advice to others who are considering using CrowdStrike Falcon Cloud Security is that it is a good tool and very well positioned in the market, and it has helped us to mitigate and identify threats we were not aware of, and I consider that it is very well integrated with the different cloud parts.

Hybrid Cloud

Microsoft Azure

My primary use case for CrowdStrike Falcon Cloud Security is to protect our SaaS platform.

I am protecting the AWS part of my cloud environment with CrowdStrike Falcon Cloud Security.

The most important cloud security use case for my company is endpoint detection.

Endpoint detection is most important because it is the first point of attack.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize cloud risks or misconfigurations with a dashboard that shows different misconfigurations or detections with varying severity, along with recommendations to fix these issues.

CrowdStrike Falcon Cloud Security has affected collaboration between my security cloud and DevOps teams by providing a dashboard of all our application misconfigurations, collecting all the findings, and reporting them to our DevOps team to fix them.

CrowdStrike Falcon Cloud Security gives us the big picture for all our misconfigurations in all our cloud accounts and provides visibility across our cloud environments effectively.

CrowdStrike Falcon Cloud Security fits into our development, DevOps, or cloud operations workflows by allowing us to report all detections and work with all teams to fix them. We schedule with all teams, including DevOps and the development team, to address application vulnerabilities or detections related to the code.

I am using CrowdStrike Falcon Cloud Security for reporting, detection, and reporting to all the teams across my organization.

It has helped to reduce complexity in our cloud security program, but CrowdStrike Falcon Cloud Security needs some enhancement and is not the only source of information for us, so we need to check with other tools to get the big picture.

We are planning to consolidate all those tools into CrowdStrike. We are planning to move everything to CrowdStrike Falcon Cloud Security and get rid of those tools.

In my opinion, cloud security could be better, particularly in the reporting area, as it needs to give more options in reporting.

Some data is missing for me. For example, in reporting image assessments, we don't know which application is impacted by an affected image. To get this information, we must enter image details and extract for each image separately, which is cumbersome, especially if we have fifty images.

I have been using CrowdStrike Falcon Cloud Security for five months.

We used different tools to manage before implementing CrowdStrike Falcon Cloud Security, which we have implemented for two years.

I give CrowdStrike Falcon Cloud Security an eight because it is a good tool, but it is very complicated and requires investing more time to learn how to use it.

I would tell anyone researching CrowdStrike Falcon Cloud Security on PeerSpot that while it is a solid solution, the learning curve is steep.

Public Cloud

Amazon Web Services (AWS)

My main use case for CrowdStrike Falcon Cloud Security is cloud protection.

Agents are installed on every asset in AWS, and I have visibility of all the assets, all the vulnerabilities, and all the misconfigurations in AWS.

I am protecting the production and pre-production environments with CrowdStrike Falcon Cloud Security.

The most important cloud security use cases for my organization are posture management and workload protection.

CrowdStrike Falcon Cloud Security does not fit into my development, DevOps, or cloud operations workflows as I do not use CrowdStrike for SDLC.

Runtime threat detection and preventative cloud security capabilities play an important role in my overall security strategy.

Having agents on every asset and visibility into AWS helps my team day-to-day by enabling me to build reports and check vulnerabilities, creating tickets for remediation for the DevOps team, and protecting my environment.

CrowdStrike Falcon Cloud Security has positively impacted my organization. I have not had any incidents inside the cloud, but I had incidents on endpoints where CrowdStrike blocks the malicious execution of applications.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize cloud risks or misconfigurations by using ExPRates from CrowdStrike to prioritize my remediation tasks.

CrowdStrike Falcon Cloud Security has affected collaboration between my security, cloud, and DevOps teams because it is used only by my security team, and based on the findings in CrowdStrike, I create tasks for other teams.

CrowdStrike Falcon Cloud Security has helped consolidate tools or reduce complexity in my cloud security program because using one console for different solutions for misconfigurations makes it easier to operate.

The best features CrowdStrike Falcon Cloud Security offers include not only cloud security but also endpoint security, and having one agent installed everywhere for different purposes is very convenient.

Having both cloud and endpoint security managed together on the same platform is convenient and makes it easier to operate for engineers.

CrowdStrike Falcon Cloud Security provides visibility across my cloud environments. The reason I feel the visibility is strong is because of the dashboard.

The platform is useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity to understand actual risk. I get the overall picture of which assets with which vulnerabilities are accessible from the internet, so I prioritize the remediation of these assets as critical.

I have experienced advantages from managing cloud security through the broader CrowdStrike Falcon platform, as having everything in one place gives me a very rich context and is very helpful.

I have not identified specific improvements needed for CrowdStrike Falcon Cloud Security.

I have been using CrowdStrike Falcon Cloud Security for one year.

CrowdStrike Falcon Cloud Security is stable.

I have not found any issues scaling up with CrowdStrike Falcon Cloud Security.

Customer support is good.

I did previously use a different solution, but I cannot remember which solution because when I came to the organization, it had already been CrowdStrike.

My experience with pricing, setup cost, and licensing is acceptable.

Before choosing CrowdStrike Falcon Cloud Security, I evaluated other options including Wiz and some other vendors.

I assigned a rating of nine because ten would be an unreachable number.

My advice to others looking into using CrowdStrike Falcon Cloud Security is that they need to understand it is a complex solution and it has benefits mostly when they use many different components of this platform.

Public Cloud

Amazon Web Services (AWS)

My main use case for CrowdStrike Falcon Cloud Security is implementing the CWP module across Kubernetes native environments.

A specific example of how I use CrowdStrike Falcon Cloud Security for CWP across Kubernetes natives and neurons is that I am working to implement and integrate all CrowdStrike components for Kubernetes to be fully enabled in their capabilities. I am also working to eliminate impact for production applications and images. My role is to fine-tune and keep CrowdStrike components in the best shape.

Regarding how I am leveraging CrowdStrike Falcon Cloud Security, I have to say that we are being audited. I need to integrate the best product and evaluate all possible options, including prevention policies, admission controller, and image analyzer, checking for vulnerabilities, and establishing procedures. I am currently discovering limits and functionality of CrowdStrike Falcon Cloud Security itself.

CrowdStrike Falcon Cloud Security offers many features that benefit my team. There are some features missing in CrowdStrike, including visibility for namespaces and better structure around the admission controller and image analyzer. What I really benefit from and appreciate that CrowdStrike provides is good support and communication, a real roadmap of the product, and implementation of what I am missing or struggling with.

These features help my team day-to-day because I am working to establish not only implementation of the cloud CWP components, but I also need to establish a procedure for incident response for offensive security. Better visibility provides real-time information that helps me schedule incident response procedures so my team can react in case of any potential threat and discover and identify the malicious image port easily and in a simpler way.

I am waiting for CrowdStrike Falcon Cloud Security to provide the benchmark for OpenShift, as I am missing that. I am also missing the identifiers of OpenShift assets for response. That is something I would appreciate being delivered as soon as possible.

I have been using CrowdStrike Falcon Cloud Security for three years.

I mostly use it to monitor threats.

I find the experience of monitoring threats with CrowdStrike Falcon Cloud Security to be not particularly notable; I like it and am happy with it, so I have no complaints.

I think I am mostly protecting the endpoints with CrowdStrike Falcon Cloud Security.

All cloud security use cases are important to my organization, but detection and response via CrowdStrike is probably the most critical.

I do not work directly with detection and response, but I believe that the SOC uses that very much and they are very happy with it.

CrowdStrike Falcon Cloud Security offers no standout features in my opinion.

CrowdStrike Falcon Cloud Security positively impacts my organization by helping us with threat detection; I like it and it brings threats to the surface very fast, so we are very happy.

It surfaces threats quickly, which has made a measurable difference for my team with fewer incidents.

I think it has affected collaboration between my security, cloud, and DevOps teams, but I cannot think of a good example.

CrowdStrike Falcon Cloud Security fits into my development, DevOps, or cloud operations workflows well, but I cannot give a more detailed explanation.

From my perspective, I have not noticed any benefits from using CrowdStrike Falcon as a single platform for cloud security; I do not think it is easier to manage everything in one place or integrates well with my other tools.

It would be nice to have everything from the same view.

CrowdStrike Falcon Cloud Security can be improved, specifically the way information is categorized; it differs depending on where I am looking at the issue from.

CrowdStrike Falcon Cloud Security is going in the right direction and where I would like it to go.

CrowdStrike Falcon Cloud Security does a pretty good job providing visibility across my cloud environments, but I think the visuals are pretty hard compared to other tools.

I have been using CrowdStrike Falcon Cloud Security for approximately two weeks.

CrowdStrike Falcon Cloud Security is stable in my experience.

CrowdStrike Falcon Cloud Security's scalability is good.

I have experience with customer support and would say they are good.

Based on the small interactions I have had, I would rate the customer support an eight.

I do not know if my organization evaluated other options before choosing CrowdStrike Falcon Cloud Security; we had it when I started.

I would rate CrowdStrike Falcon Cloud Security an eight on a scale of one to ten.

I lean toward that number because my organization uses both CrowdStrike and another product, and I like CrowdStrike better. However, the other product is easier to use; it has basically a one-click view of the entire problem, and I see everything related to it from just that view.

My organization has not used the AI capabilities yet; we are going to, but we have not gotten to it yet, so I cannot comment on its accuracy and reliability.

CrowdStrike Falcon Cloud Security is deployed in my organization across almost all types of cloud; I believe I do not use it for on-premises currently, but we want to, so we are actively discussing that.

My organization uses all three cloud providers most with CrowdStrike Falcon Cloud Security: AWS, Azure, and Google Cloud.

I would recommend others looking into using CrowdStrike Falcon Cloud Security to consider improvements regarding the interface.

Hybrid Cloud

Other

The primary way I use CrowdStrike Falcon Cloud Security in my organization is to receive alerts and respond to them, and pivot on the alert information to provide more context about what is happening.

For example, I use CrowdStrike Falcon Cloud Security to investigate alerts related to machines being deleted or secrets being accessed and similar incidents.

I also sometimes use CrowdStrike Falcon Cloud Security for inventory purposes to know who owns the machines.

CrowdStrike Falcon Cloud Security has impacted my organization positively, mainly in response speed. The visualization and how everything is connected within the alert portal makes it easier and faster for analysts to perform their analysis without having to jump between portals and infer information from other systems.

I have noticed measurable improvements, such as reduced incident response times. Additionally, when sharing incidents with other colleagues, it is easier to explain to them and easier for them to understand how everything is connected, especially for junior staff members who can acquire that knowledge so that in future incidents they can take action and free up the rest of the team for more complex tasks.

The best features that CrowdStrike Falcon Cloud Security offers are the graphical aspect and how it represents things visually for better understanding. I find it easier to understand things visually rather than in written form. The analysis capabilities available through the portal are comprehensive, although sometimes it lacks a bit more depth in detail that I can only obtain via Azure or the AWS console.

The graphical visualization of CrowdStrike Falcon Cloud Security has helped me identify or resolve security incidents because what I would otherwise have to search for in the Azure portal to trace how a device has connected to a service is presented to me graphically. For example, what access that identity or machine has. It is easier for me at a glance to see all those relationships with the connected nodes.

CrowdStrike Falcon Cloud Security could improve because sometimes I feel that, whether it is because of the type of integration it has or what is permitted for cloud agents within Azure, it lacks some extra detail. The connections are good, but I feel that sometimes it is missing details that only appear in the native portals of Azure or AWS.

For example, sometimes I wonder if within the AWS console, when I need to change roles to go to another account, that is possible within CrowdStrike Falcon Cloud Security so that our response is faster and we can see all the connections of that machine. It would be valuable to see nearly everything as if it were in the AWS console and have access to all those additional services from the AWS console without having to continue pivoting within AWS itself.

I have been using CrowdStrike Falcon Cloud Security for about two years.

I consider CrowdStrike Falcon Cloud Security to be stable in general. I have not seen it go down.

The scalability of CrowdStrike Falcon Cloud Security seems good to me.

I would rate the customer support for CrowdStrike Falcon Cloud Security as ten out of ten. They are always there and respond quickly.

I have implemented CrowdStrike Falcon Cloud Security in the public cloud.

I use both Azure and AWS primarily to implement CrowdStrike Falcon Cloud Security.

I use more than one public cloud provider, and I can specify that I use Azure, AWS, and Google Cloud.

The advice I would give to others considering using CrowdStrike Falcon Cloud Security is to implement it, as it is a good solution.

Public Cloud

Other