CrowdStrike Falcon Cloud Security Reviews

I am working for an MSSP. We use CrowdStrike on a daily basis for different clients across the globe for security purposes and for monitoring and remediating threats.

We have installed agents on the machines of employees in different organizations. We monitor their activities and block several applications. For example, if an organization does not want its employees to use WhatsApp on company-provided laptops, we block such applications. We also monitor malicious activities. If an employee downloads a file from the internet that is not legitimate, such as a virus or malware, we connect to the machine, remove all the files, and run different scans to ensure nothing is harmed.

Additionally, we use it for inventory purposes. At the end of the year, for audit and compliance, I gather information about how many devices, servers, and workstations we have and what their types are.

It helps us by automatically blocking certain applications or activities. We can prevent employees from copying data or attaching any personal USB devices to company machines, thus avoiding malware transfer or data theft. We can block USBs and unwanted applications. It automatically blocks and remediates malicious activities, so we do not have to do regular checks.

For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower. There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results.

Another issue is the lack of proper documentation. During investigations, there is no proper documentation available. This is a problem because many people are saying there should be proper documentation explaining what CrowdStrike captures from the machine and the meaning of it.

I have been using it for more than three years.

It is stable, but sometimes it shows instability. Occasionally, when the workload increases, it slows down considerably and sometimes becomes unresponsive. I would rate it a seven out of ten for stability.

It is quite scalable. I would rate it an eight out of ten for scalability.

It is deployed across multiple departments and multiple locations. Some people are in one country, and some are in another country.

I have contacted customer service, and they are fast. I have had a good experience with them.

We have some clients not using CrowdStrike due to cost or other factors. In our opinion, CrowdStrike is the best solution, which is why we recommend it to our clients. Almost 90% of our clients who receive our services use CrowdStrike. Its users include various organizations such as banking, financial, and other organizations.

Over the past three years, more than ten clients have purchased it. Some are using all of its features, and some are using fewer features depending on the budgets and requirements.

It is straightforward, but sometimes, we have difficulties with installing the agents on some machines. It happens quickly, but sometimes it takes a few minutes. It depends on the infrastructure and the machine.

The deployment duration depends on the organization. If the organization is big, it takes a large amount of time. If it is a small one, it is real quick.

The implementation strategy is to use automated scripts that run on the cloud. This automatically reflects changes across thousands of machines.

It does not require any maintenance.

We implement it ourselves.

Compared to other EDRs, CrowdStrike is expensive. However, the main point is that even though it is expensive, it provides a huge capability to the organization. It is expensive, but it adds value.

I would recommend it because it is the best one I have ever used. It has greatly helped me improve my investigative skills in my job. I have gained a lot of skills by using this product. 

Overall, I would rate it a seven out of ten.

My main use case for CrowdStrike Falcon Cloud Security is endpoint protection EDR. I use CrowdStrike Falcon Cloud Security as EDR for detection, response, and prevention of malicious attacks, providing a specific example of how I use it for endpoint protection.

I also evaluate the endpoint protection status and endpoint health by multiple integrations in my day-to-day usage of CrowdStrike Falcon Cloud Security. Detection and response are the most important cloud security use cases for my organization, and I would elaborate on why.

CrowdStrike Falcon Cloud Security has positively impacted our organization as it protected us from targeted attacks multiple times already, and I'm excited that we're using this solution.

It was a malicious photo execution when CrowdStrike Falcon Cloud Security protected our organization from targeted attacks. I immediately responded to the attack, and my team isolated the endpoint and prevented the malicious file from spreading across the organization, as CrowdStrike Falcon Cloud Security helped prevent a malicious attack involving a suspicious file or photo.

I value real-time threat detection, automated response, cloud workload protection, and integration with other security tools most. I can add workflows, because workflows are really helping me manage the part of our endpoint. There could be another feature that stands out to me among the ten features offered.

CrowdStrike Falcon Cloud Security could be improved by updating the user interface to make it more user-friendly for people who are starting to work with CrowdStrike for the first time because currently there are many sections, and it would be great to have built-in guidance.

My main concern is regarding the complexity of the onboarding for new administrators who have never worked with CrowdStrike before.

I have been using CrowdStrike Falcon Cloud Security for one and a half years.

CrowdStrike Falcon Cloud Security's AI capabilities are good, but frankly speaking, it is a bit expensive.

I would rate CrowdStrike Falcon Cloud Security nine overall on a scale of one to ten. I decreased it from ten to nine because of the UI experience. I think the accuracy and reliability of output for CrowdStrike Falcon Cloud Security's AI capabilities are good, but as with most AIs, I have to have a human that would verify the response.

We are a small company using CrowdStrike Falcon Cloud Security for next-generation endpoint security and antivirus protection. We do not have dedicated threat hunters on the platform and primarily use it for endpoint protection.

CrowdStrike Falcon Cloud Security helps us ensure that our endpoints are protected, which was essential for achieving the Cyber Essentials Plus certification. It also allows us to demonstrate to partners that we are diligent about protecting both our data and theirs.

The most effective feature is the machine learning aspect, which detects unauthorized scripts and potential data exfiltration. It provides alerts on suspicious command executions, helping us safeguard our systems.

The user interface needs improvement as it's sometimes difficult to locate specific dashboards or reports. Simplifying the naming of elements in the UI could make it easier and more intuitive for users.

We have been using the solution for about six months.

I recommend CrowdStrike Falcon for companies of all sizes, from small businesses like ours to some of the largest companies in the world.

We do not expect to get a direct ROI. It is an expense we are willing to pay to conform to Cyber Essentials Plus and demonstrate responsibility in protecting our data and that of our partners. It also helps in mitigating third-party risks.

The pricing for CrowdStrike Falcon Cloud Security is reasonable, especially for small companies with limited budgets. It is essential for achieving Cyber Essentials Plus and is cheaper than solutions like Splunk for Next Gen SEAM.

CrowdStrike Falcon Cloud Security is not recommended for highly sensitive data environments, such as government intelligence services, where cloud products might not be suitable.

I'd rate the solution nine out of ten.

I usually work with CrowdStrike Falcon Cloud Security. I work with all the modules, IDP, and the Falcon EDR. My experience with them has been great. I requested information because a customer was about to switch from CrowdStrike IDP to Microsoft ITDR, so I needed to understand the differences and what makes ITDR special. I work as customer support for the majority of banks in Nigeria, supporting their CrowdStrike Falcon Cloud Security implementation. I needed to understand what was making some of them switch from CrowdStrike to ITDR, and the basic reason was cost. In terms of technicality, CrowdStrike Falcon Cloud Security was obviously better, but it was a bit expensive for them.

The typical use case for cloud security varies. Sometimes, rather than using Rapid7 exposure management, some customers use CrowdStrike Falcon Cloud Security to monitor their assets on the cloud, providing insights into vulnerabilities on machines, exposed assets, and misconfigurations.

Compared to before, in respect to breaches and downtime, they have seen significant differences.

Customers love the UI of CrowdStrike Falcon Cloud Security. They appreciate everything about the dashboard and dashlet. The majority of customers particularly love how seamless the integration is - just copy and paste in your AWS terminal and you're good to go.

The threat detection capability of CrowdStrike Falcon Cloud Security has always been the major seller, and it works effectively. Looking at the detection index for the last two years, CrowdStrike Falcon Cloud Security is consistently ranked number one. Then you have MD and Sentinel alternating positions. In terms of threat detection, CrowdStrike Falcon Cloud Security has always been top-notch in how they explain the workflows.

In terms of improvement, CrowdStrike Falcon Cloud Security could expand into the remediation path. While there is the IT security module, looking at competitors such as Vicarious and SCCM, there is room for advanced capabilities. If CrowdStrike Falcon Cloud Security could implement pushing out remediation from the sensor installed on machines, that would be beneficial. This feature is likely in their pipeline, but implementing it faster would help them maintain their competitive edge.

I am a partner with CrowdStrike Falcon Cloud Security.

The initial setup and deployment of the solution is straightforward.

I have seen a return on investment with CrowdStrike Falcon Cloud Security.

CrowdStrike Falcon Cloud Security is relatively new, approximately a year or two old. I have experience working with both CrowdStrike Falcon Cloud Security and Microsoft Defender for Identity.

I work with CrowdStrike Falcon Cloud Security, Falcon LogScale, Observability, and Sandbox. Different teams manage different parts of CrowdStrike's workload protection features.

I rate CrowdStrike Falcon Cloud Security 9 out of 10 overall.

We are using CrowdStrike Falcon for endpoint protection across the organization.

I think the UI could be improved, but the technical support said CrowdStrike will improve the UI in the near future. But right now, it’s so messy.

We have been using it maybe since last year.

It's stable, and we already forgot—it just installed and forgot.

Technical support is quite good. We can just WhatsApp the technical easily.

Positive

This is our first time using CrowdStrike.

It's easy to implement the product and we are already up and running in five minutes.

The pricing is still manageable. I think it's about five or six thousand per year. No additional cost for maintenance or support; it's all included in the quotation.

I don’t know if I need to recommend it. I think the overall solution should be rated a ten out of ten.

I use the solution in my company primarily for endpoint detection and response. Our company has multiple endpoints at different levels, and this is basically to detect anomalies. At the back end, we have a Splunk Data Lake, where all the data goes. We use the same for alerting and monitoring purposes, on the basis of which we take action. The tool is basically used in combination with Splunk and other tools that we have in our company.

I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information related to the tool based on the feedback and on my experience deploying it four to five years ago.

I would not say the tool's integration capabilities were straightforward because the complexity depends on the volume of the data. I am talking about petabytes of data, so sometimes, the integration part is not so straightforward. I would say we have had our own share of issues. All in all, we were able to manage it in the long run. I tried to integrate the issue with Splunk Enterprise Security and Splunk Data Lake, too. I am not a user of Splunk, but I have just implemented it to support my customers, who are the primary users of the data.

I have been using CrowdStrike Falcon Cloud Security for four to five years.

The scalability of the product has been great. My company started off with 1,50,000 endpoints, and now we are at 2,00,000, and I believe that it speaks volumes for itself. The tool's team has been super supportive when it comes to providing support, helping us out with upgrades, and letting us know how things could work. I believe the experience with the tool has been good.

Nothing is perfect in this world. There will always be positive and negative aspects associated with the product. I have heard more positive things about the product than negative statements. As an enterprise, when you are dealing with a vendor, there are chances where, you know, there will be few misses and lots of hits.

I have experience with FireEye. In 2019, my company migrated from FireEye to CrowdStrike Falcon Cloud Security.

The product's initial setup phase is not really difficult, especially if you have managed the setup phase before. In our company, we migrated from Mandiant to FireEye and from FireEye to CrowdStrike, so it has been a journey for us over the last ten years. You get to learn as you go and embark on a journey. We were able to deal with challenges in the area of deployment that we were trying to perform, and there were not many from the vendor side. Still, at the enterprise level, you have endpoints that are across different landscapes, like if you have a cloud platform or an on-prem model, and then you have things that the vendors manage. If you are trying to deploy things at different levels with different scales, you may face some challenges, but nothing in particular with the vendor, I would say.

I have experienced an ROI from the use of the product, and it is definitely one of the biggest takeaways or the reasons that my company migrated from FireEye to CrowdStrike. The features that CrowdStrike offered our company were far more in-depth than those of FireEye. I am not saying that FireEye does not offer great features, but with the kind of landscape that we operate on, we felt that we would be better off with CrowdStrike than with FireEye. We have FireEye, and we saw that there were certain shortcomings. Getting down to the specifics, I am not part of the monitoring team, so I will not be able to give you very crisp data about it.

CrowdStrike Falcon Cloud Security's features have proven to be the most effective for detecting and responding to threats. While I was involved in the deployment, I was not involved in the product's day-to-day activity, as I was not a part of the monitoring team. I was basically on the deployment team. I do not use it on a day-to-day basis.

Speaking about the integration of CrowdStrike Falcon Cloud Security within our existing infrastructure and with third-party solutions, I feel that everything has been okay, and it is something that we need to figure out as an enterprise. When you are trying to do things at a very large scale, consisting of more than 1,50,000 endpoints, that is the scale within the enterprise that we were dealing with in the past, and it has crossed 2,00,000 right now. When trying to integrate it with other applications, the likes of Splunk or other data lakes, if I have to say, but categorically and specifically Splunk in the current case, you have to see how that is going to work and ensure whether everything will be seamless or not, and it may not be something that is possible at the first instance, but you need to try things and see what works and what does not. You also got to get the vendors along, and that is basically what my company did. In our case, we got people from CrowdStrike speaking to people from Splunk, after which whatever integration issues we had were resolved.

I recommend the product to others who plan to use it.

Everything depends upon your use cases since not one size fits all templates. The use cases vary from organization to organization. In our case, CrowdStrike Falcon Cloud Security suited us the best, which is why we went with it and moved away from FireEye, which may or may not be the case for others. I know organizations that continue to use FireEye, and they are pretty happy with it because it suits their requirements. It just fits all the use cases that they have listed out.

Whether the product needs to increase your marketing strategy or not is something that depends on what the solution wants to achieve. As far as I know, CrowdSrike has a sizable base in the market, but it completely depends on what they want to do. I don't think I am the right person to suggest or tell CrowdStrike what they need to do because the product is managed by a set of stable and sane minds who would decide how they want to strategize things when it comes to sales.

I rate the tool a seven to eight out of ten.

We give MDR services to many clients and extend the basic capabilities with these modules.

The automation capabilities that the tool has in order to automate responses and actions.

It's quite easy to use, as I understand the feedback from the team.

It is effective for detecting and mitigating threats.

We are automating a lot. So, it offers good automated response capabilities.

There are some issues with certain applications. We have been having some problems with Microsoft Teams and other applications.

So, there were some integration issues with this product.

The main concerns are occasional maintenance issues, less than perfect stability, and complexity compared to SentinelOne.

We have been CrowdStrike partners for three years and have been using ASPM for one year.

The agent is usually stable, but there have been recent instances of high CPU usage. In general, it works fine.

Overall, I would rate the stability a nine out of ten, one being unstable and ten being very stable. So, there's always room for improvement. 

In our experience with clients no larger than 10,000 endpoints, it's scalable. 

I am not sure about the large infrastructure for around 20,000 to 50,000 endpoints because it is complex for a large infrastructure. 

The customer service and support are satisfactory. 

Positive

We are CrowdStrike partners and have a client that uses Kaspersky, but we are looking at what kind of analysis and comparisons are available in the market.

It's easy. In general, all of the CrowdStrike modules and deployments are easy.

We provide support to the client, and the IT people install it. There are no problems because some clients have better tools to deploy, but there are many ways to do the deployment. It's easy, and we have a 24/7 support team. Deployment doesn't consume many hours.

It's easy to maintain, but sometimes there are issues with particular applications. Those have to be worked around, but in general, there are no other issues.

One engineer is enough to deploy the solution.

It's not the cheapest, but the price is fair. Some clients find it expensive, but it's scalable and has many modules.

So, the price is not too high, it is okay. 

We have tried others but ultimately decided to provide MDR service only with CrowdStrike. We tested Microsoft and Palo Alto Cortex.

We do a lot of incident response, and we chose CrowdStrike for its superior features in that field. The alerts are clearer, and the capabilities are much better than the others. 

But, it's a complex product. SentinelOne, for example, is much easier to use but lacks the same capabilities. For an EDR, it's better to have experts handling it and utilizing all the features CrowdStrike offers.

So, CrowdStrike is a bit complex compared to SentinelOne. It's more complex because it has more features and configuration options, but not inherently complex. The solution is complex because it's very good and has a lot of customization options.

Overall, I would rate it a nine out of ten. 

We took this solution just for security purposes. We do not want someone to attack us, get into our environment, and get sensitive customer data.

It is good for security. We have a Palo Alto firewall, and we implemented CrowdStrike as an add-on feature. 

Cloud security is one valuable feature. Spotlight is the other one. There is also vulnerability management and a couple of more features.

The console and the customer service are quite bad. We paid a big amount of dollars to them to implement it. We paid them for premium support. 

It gets the work done, but the main problem with the solution is that if you remediate anything, it takes 45 days for you to get any of the features displayed on the dashboard. This is the real weakness of CrowdStrike. Their customer support is also not ready to help with it. If you remediate any cloud vulnerability that they are giving you, such as removing a host from your organization, it takes around 45 days for them to remove it from their console.

It has been around a year since I onboarded it in my company and have been using it.

It is stable.

It is scalable, but it depends on the organization's structure and how vast the environment is. Our environment is not that big, so scalability is okay. It is just that you need to deploy the sensors on the hosts.

I would rate their support a five out of ten because they do not respond. We have taken premium support with them. If we raise a case with them, it takes around two to three days to get a call scheduled with them. Even the TAM that we have got from them cannot help. If you go for any service from Google, Microsoft, or Amazon AWS, their TAM is always ready to help you with your queries, but in the case of CrowdStrike, the TAM says that you need to raise a support case, and they will help you out.

Neutral

I was not there in the organization at the time, so I do not know about it.

I lead a team of 18 people. I get it deployed on all of the EC2 instances through them.

Its initial setup was straightforward. It is very easy to use. 

For the whole organization, it took two weeks because we needed the downtime as well to deploy it in the production environment. 

In terms of maintenance, it does not require any maintenance from our side. 

There was some consulting from the CrowdStrike team. They did help us to implement it.

Overall, five or six people were assigned to deploy the solution. They were infra-support engineers. It was deployed across multiple locations.

I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive.

We did our research and after that, we implemented CrowdStrike. Secureworks was there. There were some different players that gave us the quotation, but in terms of the features and the price, CrowdStrike was good. 

CrowdStrike offered us Spotlight, vulnerability management, and cloud solution management. There are different blades to it. We implemented it, and now it supports our environment. It is good.

To those evaluating this solution, I would say that it depends on their needs. If they need this product, they can go ahead and take it. It is straightforward, and it gets the job done.

I would rate it a seven out of ten.

I use CrowdStrike Falcon Cloud Security primarily for endpoint protection, including detection and response. It acts like a modern antivirus, automatically detecting and responding to threats based on defined policies. Additionally, it offers a vulnerability management module, highlighting machine vulnerabilities based on the number of managed machines.

The most valuable feature of CrowdStrike Falcon Cloud Security is its lightweight sensor, taking minimal space and not impacting server performance. The centralized console is a huge advantage, letting me manage everything from one place. It also allows running scripts directly on machines through the portal, making it highly convenient.

In terms of improvement, it would be more convenient if there was an easier way to install CrowdStrike, perhaps through better integration with Active Directory. This could automate the installation process for new machines in the environment.

 I have been using CrowdStrike Falcon Cloud Security since 2020.

CrowdStrike Falcon Cloud Security is highly stable, with minimal false positives and performance issues. It operates smoothly without requiring much intervention.

CrowdStrike Falcon Cloud Security is scalable. While installation is manual on each machine, it is easy to deploy on any number of machines, and their console makes it simple to manage them all. CrowdStrike Falcon Cloud Security is widely used in our company, managing endpoint security on almost every device. The user base is around 50,000 plus.

I have been in touch with CrowdStrike's tech support for the past three years. Their support is excellent, quickly resolving issues and providing top-notch assistance, especially compared to other security vendors I have worked with.

We chose CrowdStrike because of its effective detection capabilities with minimal false positives. It enhances the overall safety of our company's environment from cyber threats.

It is a cloud-based solution managed by CrowdStrike. All we need to do is install a simple sensor on our machines, and they take care of the rest, providing us with a comprehensive endpoint security solution. We can easily monitor and manage security through their user-friendly interface. The installation and setup of CrowdStrike Falcon Cloud Security are very easy and require a good internet connection on your machine.

CrowdStrike Falcon Cloud Security is not cheap but it is worth the money. It simplifies administration by handling both vulnerability and endpoint security with just one sensor installation. In terms of cost, it is competitive and comparable to Windows Defender, offering better efficiency without the need for multiple consoles.

We explored other options like Trend Micro and Sophos before deciding on CrowdStrike. However, those tools had performance issues, especially on application servers and desktops due to their heavy installers. CrowdStrike stood out as it is lightweight and doesn't impact system performance during operation.

I would strongly recommend CrowdStrike Falcon Cloud Security to others. It is highly effective in providing accurate security and detecting cyber threats without overwhelming you with false positives. It allows you to focus on meaningful alerts, making it a value-for-money product. Overall, I would rate it as a nine out of ten.

I use the solution in my company to collect information about protecting the endpoint, configuration assessment, and vulnerability assessment.

The solution's most valuable feature is its threat emulation part, but there are many other important features for cybersecurity security, including endpoint protection. However, vulnerability management is for prevention, and so on.

In terms of the improvements, a detailed profile for the users for the administration of the assets will be provided so they can see the events directly on the platform if needed. In order to see events, with our policies, it should be possible from the specific assets; a user should be able to see the events related to the datasets. One of the main concerns about the tool is that the solution provides features without detailed profiles for those who should see what type of information.

The tool should do some more tests before going for updates automatically.

I have been using CrowdStrike Falcon Cloud Security for around a year. I am a user of the tool.

In terms of stability, a few days ago, there was a huge issue with CrowdStrike Falcon Cloud Security. There are some issues with the tool's stability. Many airports faced issues as airplanes were delayed in July 2024. It was a large event that left a bad impact worldwide.

I rate the tool's stability as a six out of ten.

It is a scalable solution. Scalability-wise, I rate the solution an eight out of ten.

The tool is used in telecommunications.

Around 20 people use the tool with the administration team.

I think there is a plan to increase the number of users, and it is necessary to provide this information for the different operational areas where there are a lot of people.

The support team is not able to resolve our issues in a timely manner. I rate the technical support a seven out of ten.

Neutral

The product's initial setup phase is easy. If ten is easy, I rate the product's initial setup phase an eight out of ten.

It takes a long time to deploy the product since we have a large pack of devices here. We have a lot of different types of devices, so we need to be careful when implementing the functionalities and the agents.

The solution is deployed on an on-premises model, but we are planning to go to the cloud.

The solution can be deployed in around six months.

My company has evaluated tools for vulnerability management.

In terms of the threat detection capabilities, it is a good product. It is a good tool, considering all the information it provides and the automation it delivers.

In terms of the automation part, the tool has some rules that can be applied automatically. I can identify or be aware about a specific event with the help of the tool.

In terms of the improvements I have seen in my company using the tool, I would say that it offers a clear visualization of all the threats that could be on our network. I can see all types of vulnerabilities that could be dangerous or critical for us.

For now, it seems the tool is a good solution for protecting endpoints and mainly for the areas that are using Windows-operated systems.

I recommend the tool to others. It seems that when we installed the agent, it became a solution that could provide a lot of information in a centralized way.

I rate the tool an eight out of ten.