No more typing reviews! Try our Samantha, our new voice AI agent.
reviewer2921688 - PeerSpot reviewer
Direktor IT at a legal firm with 1-10 employees
Real User
Top 20
Nov 4, 2026
24x7 monitoring has increased our confidence and improved our attack detection speed
Pros and Cons
  • "The combination of CrowdStrike technology and human security expertise within the MDR service is the most valuable thing for me because the human factor still plays a very big role and not everything runs via agentic AI."
  • "I have not been able to determine a return on investment as there are no concrete figures, such as time saved or fewer staff required, because I have always purchased additional modules and therefore the price has increased."

What is our primary use case?

My main use case for CrowdStrike Falcon Complete MDR is securing the company.

A concrete example of how I use CrowdStrike Falcon Complete MDR to secure my company is that the CrowdStrike SOC team or Complete team steps in during an attack and stops the breach.

The quality so far is very good with few false positives.

The security challenges and resource constraints that led my company to choose CrowdStrike Falcon Complete MDR include the inability to provide a 24x7 team.

So far, we have not experienced a breach with CrowdStrike Falcon Complete MDR detecting or containing an incident, as we have only had a few false positives.

How has it helped my organization?

CrowdStrike Falcon Complete MDR has had a positive impact on my company by enabling us to detect attacks more quickly.

Faster detection has affected my company positively as we notice more quickly when something happens because the 24x7 service informs us directly.

CrowdStrike Falcon Complete MDR provides major relief because someone takes care of it 24x7.

The service has affected the average time to detect, investigate, and respond to threats in my company positively.

Our confidence in our company's ability to respond to security incidents has changed due to CrowdStrike Falcon Complete MDR as we feel more confident in dealing with attack scenarios.

What is most valuable?

The best features that CrowdStrike Falcon Complete MDR offers are the analysis and the direct information I receive.

The analysis and direct information are very helpful for my company; without them, we might not even notice an attack.

I rate the accuracy and reliability of the results delivered by CrowdStrike Falcon Complete MDR's AI as quite good since there is both machine learning and human feedback, human-in-the-loop.

My experience with the capabilities of CrowdStrike Falcon Complete MDR for threat detection, investigation, and response has been positive as I have a very good exchange with the TAM team and am always informed when there are findings.

I have experienced the 24/7 monitoring and response capabilities of CrowdStrike Falcon Complete MDR in a timely manner and without much hassle.

I have insight into the investigations and actions carried out by the CrowdStrike Falcon Complete MDR team as I am always kept up to date and feedback is requested from me.

The combination of CrowdStrike technology and human security expertise within the MDR service is the most valuable thing for me because the human factor still plays a very big role and not everything runs via agentic AI.

CrowdStrike Falcon Complete MDR works with my internal security team and our existing SOC processes as the CrowdStrike Falcon Complete MDR team and my team connect repeatedly via the TAM and exchange information.

What needs improvement?

I am satisfied with CrowdStrike Falcon Complete MDR so far, though there could perhaps be German-language support since it is currently in English.

Though CrowdStrike is already working on this, it would be great if, for example, for shadow IT it ran or was provided in a sovereign cloud.

Buyer's Guide
CrowdStrike Falcon Complete MDR
October 2026
Learn what your peers think about CrowdStrike Falcon Complete MDR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,769 professionals have used our research since 2012.

For how long have I used the solution?

I have been using CrowdStrike Falcon Complete MDR for six years.

What do I think about the stability of the solution?

CrowdStrike Falcon Complete MDR is stable.

What do I think about the scalability of the solution?

I rate the scalability of CrowdStrike Falcon Complete MDR as very good; the more agents are added, I do not notice any impact on CrowdStrike's side.

How are customer service and support?

I experience the customer support of CrowdStrike Falcon Complete MDR as very direct and timely.

On a scale from 1 to 10, I would give the customer support a nine.

Which solution did I use previously and why did I switch?

Before CrowdStrike Falcon Complete MDR, I did not have a Complete solution; it was a normal Symantec agent antivirus without any additional modules.

What was our ROI?

I have not been able to determine a return on investment as there are no concrete figures, such as time saved or fewer staff required, because I have always purchased additional modules and therefore the price has increased.

What's my experience with pricing, setup cost, and licensing?

My experiences with pricing, setup costs, and licensing involved long discussions until we found a price at which I could get the modules I needed.

Which other solutions did I evaluate?

I looked at SentinelOne and Cybereason when I evaluated other vendors before deciding on CrowdStrike Falcon Complete MDR.

What other advice do I have?

On a scale of 1 to 10, I would rate CrowdStrike Falcon Complete MDR a nine.

I am giving it a nine because ten would be the ultimate experience and there are always improvements; price could also be discussed.

Regarding the governance and security aspects in connection with the AI capabilities of CrowdStrike Falcon Complete MDR, I cannot currently use Charlotte AI, and I am evaluating it because I have GDPR and other requirements for an AI.

CrowdStrike Falcon Complete MDR is deployed in my company using the deployment that CrowdStrike provides.

My advice for others interested in CrowdStrike Falcon Complete MDR is to look very closely at which modules you need, which functions, and what your own security team can deliver, and where CrowdStrike Falcon Complete MDR can complement and support.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Nov 4, 2026
Flag as inappropriate
PeerSpot user
reviewer2921604 - PeerSpot reviewer
Security Engineer at a financial services firm with 1,001-5,000 employees
Real User
Top 20
Nov 3, 2026
Managed detection has reduced endpoint workload and has improved rapid malware response
Pros and Cons
  • "The process tree is incredibly valuable, and there are lots of links within detections to help jumpstart understanding of what happened and why the detection triggered."
  • "Detections are usually very solid, but we have seen a couple instances where a detection was not fully remediated, and then we had additional malicious behavior afterwards that we had to investigate and discuss with the CrowdStrike Falcon Complete MDR team."

What is our primary use case?

My main use case for CrowdStrike Falcon Complete MDR is securing our endpoints against malware and handling the malware without our involvement.

The most prolific attacks that we see are click-fix attacks, which involve the running of command line commands from a website that download a malicious script and exfiltrate credentials. These attacks are very commonly picked up and prevented from executing by CrowdStrike Falcon Complete MDR, who then verify that there are no artifacts remaining on the endpoint.

The security challenges and resource constraints that led my organization to choose CrowdStrike Falcon Complete MDR are absolutely a resource constraint due to lack of staff and budgetary concerns over staffing.

An example where CrowdStrike Falcon Complete MDR identified or contained a threat that would otherwise have required significant effort from my team is with click-fix types of alerts. They are incredibly effective at finding secrets and exfiltrating them very quickly.

CrowdStrike Falcon Complete MDR works alongside my internal security team and existing SOC processes as it is the first step of triage and response. The service handles all of the false positives and all of the other detections that happen on the device and then escalates to us when they identify something serious that we need to see.

How has it helped my organization?

CrowdStrike Falcon Complete MDR has positively impacted my organization by reducing the amount of workload that the security operations team is required to do when it comes to malware detections and the response to them almost entirely.

Based on the volume of detections that we see and the volume that CrowdStrike Falcon Complete MDR handles, we are almost certainly saving about a whole analyst cost-wise and time-wise per year.

CrowdStrike Falcon Complete MDR has changed the workload of my internal security team by removing the requirement for my team to be heavily involved with endpoint detections and the response to them.

For endpoint-related detections, the service affects my organization's mean time to detect, investigate, and respond to threats rapidly. Detections occur within seconds as well as an interruption in the malware execution that really leads to a massive reduction in how much time we need to be spending on these. Detections are usually very quick, with a detection within a couple minutes, an escalation to my team within 15 to 20 minutes, and response actions and artifacts collected within an hour.

CrowdStrike Falcon Complete MDR has positively affected my confidence in my organization's ability to respond to security incidents, as I feel absolutely more secure. Endpoints are where credentials live and can be retrieved, so securing the endpoint is one of the most important places to control.

What is most valuable?

The best features CrowdStrike Falcon Complete MDR offers include being able to view the process tree and how these things execute.

I find the process tree and seeing how things execute to be really valuable because instead of digging through the logs or creating queries that give us the layout of what exactly happened, there is simply a tab that I can look at and see the full flow of the malware detonation. It can tell me pretty quickly where, when, and why this happened and makes it really quite simple to respond to if additional actions are required.

My experience with CrowdStrike Falcon Complete MDR's capabilities for threat detection, investigation, and response is very positive. The process tree is incredibly valuable, and there are lots of links within detections to help jumpstart understanding of what happened and why the detection triggered. The response to threats with scripts and remote access to the device makes it really quite easy when we need to respond, though that is something that we typically do not need to do with CrowdStrike Falcon Complete MDR.

My experience with CrowdStrike Falcon Complete MDR's 24/7 monitoring and response capabilities has been overall quite great, as I feel that almost all of the detections escalated to us are things we actually need to be involved with, either to know about or to take action on.

I have detailed visibility into the investigations and actions performed by the CrowdStrike Falcon Complete MDR team, as the escalations contain more than enough information for us to understand why it is coming to us, why it was important in the first place, and what we need to do.

The combination of CrowdStrike technology and human security expertise in the MDR service is quite valuable, as it is clear that the engineers who escalate to us are very knowledgeable about how malware acts and the traces that it leaves.

What needs improvement?

Detections are usually very solid, but we have seen a couple instances where a detection was not fully remediated, and then we had additional malicious behavior afterwards that we had to investigate and discuss with the CrowdStrike Falcon Complete MDR team. A tightening of the remediation of the detections is key.

For how long have I used the solution?

I have been using CrowdStrike Falcon Complete MDR for two years.

What do I think about the stability of the solution?

CrowdStrike Falcon Complete MDR is stable.

What do I think about the scalability of the solution?

CrowdStrike Falcon Complete MDR's scalability is very good, as it is very scalable and easily deployed to a variety of different endpoints and operating systems.

How are customer service and support?

We have had mixed results with customer support, but typically we find that when we reach out, the team that is responding to us is quite responsive. If there is a feature lacking or something that does not quite work the way we expect it to, unfortunately, it seems that there is a bit more of a wait when it comes to our interactions and what we need.

What was our ROI?

I have seen a return on investment, as the volume of work that is required from the sheer number of detections that CrowdStrike Falcon Complete MDR finds and handles without our involvement is massive. It is taking at least an analyst on our end, but almost certainly more with the 24/7 off of our plates.

What other advice do I have?

On a scale of one to ten, I would rate CrowdStrike Falcon Complete MDR a nine.

I choose a nine because the price is competitive and lots of what the product does is great. I do not give tens unless I am truly blown away by a product.

Regarding CrowdStrike Falcon Complete MDR's AI capabilities, my organization does not use this feature, but I am confident in how CrowdStrike Falcon Complete MDR handles data governance.

CrowdStrike Falcon Complete MDR is deployed in my organization on-premises.

My advice to others looking into using CrowdStrike Falcon Complete MDR is to have a good understanding of your workflows, playbooks, and other processes, what you need to do, and what you need to have your analysts expect to respond to. Have your escalation process figured out so that when things are sent to your internal SOC teams, you are able to handle these detections and escalations appropriately.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Nov 3, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
CrowdStrike Falcon Complete MDR
October 2026
Learn what your peers think about CrowdStrike Falcon Complete MDR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,769 professionals have used our research since 2012.
Senior Software Developer at a manufacturing company with 51-200 employees
Real User
Top 20
Sep 2, 2026
Automated threat response has transformed our visibility and confidence in incident handling
Pros and Cons
  • "CrowdStrike Falcon Complete MDR has greatly improved my confidence in our organization's ability to respond to security incidents, knowing that CrowdStrike is there to help our organization with threats."
  • "Of course, the cost is going to take a couple of years to get back after the initial cost investment."

What is our primary use case?

We work alongside our internal security team or existing SOC processes, and since we're a small group, it was pretty much a manual process before. We didn't have any real visibility into this until now, so it's a total change for us.

Prior to adopting CrowdStrike Falcon Complete MDR, we were not using another solution to address similar needs. It was just logs, and we were looking at logs ourselves.

What is most valuable?

CrowdStrike Falcon Complete MDR has made our workload more manageable with a lot more automation, better management, and more real-time updates instead of waiting until an issue has happened.

The capabilities of CrowdStrike Falcon Complete MDR for threat detection, investigation, and response are very quick. As a developer, I have two other developers with me, and a couple of times they've downloaded something and it's come up really quickly, blocking the threat. That is always nice. I think if we didn't have the threat detection security there, it would have passed, and this actually saved us.

With CrowdStrike Falcon Complete MDR, what we see through the dashboard gives us visibility into the investigations and actions performed by the Falcon Complete team.

CrowdStrike Falcon Complete MDR has affected our organization's mean time to detect, investigate, or respond to threats by being pretty much real-time, and we get alerted right away. Our network guy is alerted quickly and actually comes to us developers so we can get notified right away. The detection is there, and the response time for us makes it a lot quicker than waiting until the next day when we come in and find out there's been an issue.

Going back to the development side, Falcon Complete identified and contained a threat when I downloaded a NuGet package from Visual Studio. Falcon Complete detected that, and having it blocked and figuring out it was a bad NuGet package saved our team.

What needs improvement?

I think CrowdStrike Falcon Complete MDR can be improved, and we saw some new releases coming out this year. I'm looking forward to the Falcon Guardian and implementing that as well into our current solution.

For how long have I used the solution?

We've been using CrowdStrike Falcon Complete MDR for two years.

What was our ROI?

There has been a return on investment with CrowdStrike Falcon Complete MDR. Of course, the cost is going to take a couple of years to get back after the initial cost investment. However, our CEOs and CFOs all appreciate this piece that we've implemented, and it's been a high priority for them to get this done.

Which other solutions did I evaluate?

Before selecting CrowdStrike Falcon Complete MDR, I'm not sure what other solutions we considered as an MDR. I came in a little bit after this decision.

What stood out to us in the evaluation process when comparing these options, both positive and negative, was the documentation and support, which was a big factor. Having that support was crucial. We worked through another vendor to get CrowdStrike, so they helped push us toward CrowdStrike.

What other advice do I have?

CrowdStrike Falcon Complete MDR has greatly improved my confidence in our organization's ability to respond to security incidents, knowing that CrowdStrike is there to help our organization with threats.

My advice to other organizations considering CrowdStrike Falcon Complete MDR is to definitely get on it if you can. I would rate this solution a 9 out of 10.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Sep 2, 2026
Flag as inappropriate
PeerSpot user
Sachin Bode - PeerSpot reviewer
IT Manager at IFB Industries Ltd
Real User
Top 10
Jan 29, 2026
Managed detection has strengthened our defenses and has provided real-time threat visibility
Pros and Cons
  • "We have now selected CrowdStrike Falcon Complete MDR, which is a managed detection and response product that is completely managed by the Falcon US team, and everything is perfectly managed by them."
  • "Some processor utilization needs to be dropped because now Windows systems are consuming more CPU and RAM than earlier."

What is our primary use case?

We switched from Trend Micro products to CrowdStrike Falcon Complete MDR. Previously, our internal team was managing Trend Micro, but there were some gaps in managing it. We have now selected CrowdStrike Falcon Complete MDR, which is a managed detection and response product that is completely managed by the Falcon US team, and everything is perfectly managed by them.

What is most valuable?

We are using the threat intelligence feature. The US team showed us how to use it during a call. From the beginning, there were large volumes of detections we were getting, and we were able to look granularly at each system to see what vulnerabilities and threats we are receiving and what kind of IPs are hitting us. We were able to look precisely at each end user and started working on blocking and blacklisting threats. Now we are getting very rare notifications on these threats or any hits.

We are getting real-time response from CrowdStrike Falcon Complete MDR.

What needs improvement?

Sometimes we are facing performance issues with the end-user systems, and sometimes it is blocking a few of our applications, which we later resolve with the team. Recently, we were having our call center application running on the systems, which suddenly stopped working because CrowdStrike Falcon Complete MDR was not allowing it to run. After removing CrowdStrike Falcon Complete MDR, it started working, and then later we added the application URLs and the communication URLs to CrowdStrike Falcon Complete MDR allow list, so it started working.

Some processor utilization needs to be dropped because now Windows systems are consuming more CPU and RAM than earlier. Windows 10 was fine, but Windows 11 is consuming more CPU and RAM. If CrowdStrike Falcon Complete MDR is contributing to consuming the resources, then other applications are taking a lot of time to run. In Windows 11, we are facing this issue sometimes, and we need more powerful systems than earlier.

I would also appreciate improvements on the pricing side. Some of our locations where people are isolated, we are not buying CrowdStrike Falcon Complete MDR due to the pricing. If there is a nominal reduction in the price, then we will go for everyone in the organization.

For how long have I used the solution?

It is now three years since we started using CrowdStrike Falcon Complete MDR.

How are customer service and support?

For technical support, I will give a perfect 10 out of 10.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We switched from Trend Micro products.

What other advice do I have?

I am fully satisfied, and there are no complaints. My experience with CrowdStrike Falcon Complete MDR would be a nine out of ten. For the pricing of CrowdStrike Falcon Complete MDR, I suppose it is a little higher than other products. I give nine for the valuable insights gained from CrowdStrike Falcon Complete MDR reporting and analysis features. I give 10 out of 10 for the effectiveness of its automated threat responses in our security operations. My overall review rating for this product is 9 out of 10.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Enrique Ulloa - PeerSpot reviewer
VP of IT at a construction company with 1-10 employees
Real User
Top 10
Sep 1, 2026
Managed detection has delivered strong ransomware protection and reduced security workload
Pros and Cons
  • "My additional thoughts about CrowdStrike Falcon Complete MDR are that it is the best in the market, and we are happy that we have that solution in our environment."

    What is our primary use case?

    My main use case for CrowdStrike Falcon Complete MDR is to help with ransomware and antivirus. A specific example of how I have used CrowdStrike Falcon Complete MDR to help with ransomware is when we got attacked, and CrowdStrike came in and helped us with putting MDR and Falcon Complete in our environment.

    What is most valuable?

    The best features CrowdStrike Falcon Complete MDR offers are visibility, point of attack, and results. When I mention visibility and point of attack, those features help me day-to-day by providing peace of mind.

    CrowdStrike Falcon Complete MDR has impacted my organization positively, as it has been able to make sure we have the proper protection in place and helped us with our cybersecurity posture. I have definitely seen fewer incidents and faster response times since using CrowdStrike Falcon Complete MDR.

    What needs improvement?

    CrowdStrike Falcon Complete MDR can be improved with better dashboards and better monthly reports. I would like to see better drill-down reports and better information for executive teams in the dashboards or reports.

    For how long have I used the solution?

    I have been using CrowdStrike Falcon Complete MDR for six years.

    What do I think about the stability of the solution?

    CrowdStrike Falcon Complete MDR is very stable.

    What do I think about the scalability of the solution?

    I believe CrowdStrike Falcon Complete MDR's scalability is great because it is on the endpoint and it sees a lot of things happening in our environment.

    How are customer service and support?

    Customer support for CrowdStrike Falcon Complete MDR is the best of the best.

    Which solution did I use previously and why did I switch?

    I previously used Bitdefender. We switched to CrowdStrike Falcon Complete MDR because we had a ransomware attack in our company.

    How was the initial setup?

    My experience with pricing, setup cost, and licensing is that pricing is on the high end, but it is worth it.

    What was our ROI?

    I have seen a return on investment because I do not need to have a cybersecurity person on-site and do not pay a cybersecurity person because I have Falcon Complete.

    Which other solutions did I evaluate?

    I did not evaluate other options before choosing CrowdStrike Falcon Complete MDR.

    What other advice do I have?

    My experience with CrowdStrike Falcon Complete MDR's capabilities for threat detection, investigation, and response has been good. When we got the cyber attack, I got the team to respond, and it was fairly easy to do, and it was calming when we had the cyber attack.

    My experience with CrowdStrike's 24/7 monitoring and response capabilities has been great, as it gives me peace of mind. I have high visibility into the investigations and actions performed by the Falcon Complete team.

    The combination of CrowdStrike technology and human security expertise in the MDR service is highly valuable. I met a couple of your people that helped us out, and it has been great. CrowdStrike Falcon Complete MDR works alongside my internal security team or existing SOC processes as it is embedded in our cybersecurity practice.

    CrowdStrike Falcon Complete MDR has changed the workload of my internal security team by allowing my team to be more free and to focus more specifically on different tasks.

    The security challenges that led my organization to choose CrowdStrike Falcon Complete MDR were due to a major cyber attack where we had ransomware.

    My advice to others looking into using CrowdStrike Falcon Complete MDR is to get it today and get it deployed right away.

    CrowdStrike Falcon Complete MDR's AI capabilities, governance and security are the best out there in the market. The governance piece is great, and I appreciate the way they do hierarchy and then let us know when there is a high event. It has around 95% to 98% accuracy, though there are always some false positives where we need to check with the end users to make sure the issue is correct.

    My additional thoughts about CrowdStrike Falcon Complete MDR are that it is the best in the market, and we are happy that we have that solution in our environment. I would rate this solution a 10 out of 10.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Sep 1, 2026
    Flag as inappropriate
    PeerSpot user
    reviewer2894538 - PeerSpot reviewer
    System Administrator at a construction company with 501-1,000 employees
    Real User
    Top 10
    Sep 2, 2026
    Managed detection has reduced incident workload but now needs stronger focus on medium threats
    Pros and Cons
    • "CrowdStrike Falcon Complete MDR has transformed the workload of my internal security team because incidents are automatically resolved, so I do not have to worry about them."
    • "My experience with pricing, setup costs, and licensing has been challenging."

    What is our primary use case?

    I have been using CrowdStrike Falcon Complete MDR for two years. CrowdStrike Falcon Complete MDR was already in place when I joined my organization, which was the reason my organization chose this solution.

    What is most valuable?

    CrowdStrike Falcon Complete MDR has transformed the workload of my internal security team because incidents are automatically resolved, so I do not have to worry about them.

    Whenever I access the console, most of the information is already available, and any higher-priority tickets are automatically resolved by the time I review them.

    The 24/7 monitoring and response capabilities have been excellent so far. The most notable aspect is that by the time I examine the incidents that appear, they are already resolved for the most part.

    I have extensive visibility into the investigations and actions performed by CrowdStrike Falcon Complete MDR team. I receive considerable detail including the endpoint information, hostname, actions taken, file paths, different behavioral aspects, and how the attacks occurred.

    CrowdStrike Falcon Complete MDR has positively affected my organization's mean time to detect, investigate, and respond to threats. The service has been very effective, and I do not have to worry about threat response.

    What needs improvement?

    In some cases, the team only focuses on higher-level threats, and medium or lower threats do not receive the same attention, which requires me to invest additional effort into those cases.

    CrowdStrike Falcon Complete MDR could be improved by addressing medium-level threats more thoroughly. Since it is an MDR solution and an all-in-one offering, the overall workload management is excellent, but I would appreciate better metrics and responses to medium-level threats.

    Regarding additional features for future releases, the product is well-established and feature requests are not typically dictated by individual users. I do not have specific additional features to suggest at this time.

    Which solution did I use previously and why did I switch?

    Before adopting CrowdStrike Falcon Complete MDR, I worked at a previous organization that used SentinelOne. At that organization, we did not have MDR capabilities, so MDR was new for me in the past few years. It is very beneficial that I do not have to manually investigate and respond to most threats.

    What was our ROI?

    I have observed return on investment with CrowdStrike Falcon Complete MDR as I learned about the dashboards. However, I have not yet determined a way to monetize the benefits to demonstrate its value to the organization. I am still working on quantifying the financial impact.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup costs, and licensing has been challenging. The service can become expensive depending on which modules are needed. Sometimes there are too many modules available, making it difficult to determine which ones to purchase or which ones apply to our specific requirements. At times, features that sound valuable are only available as part of modules we do not currently have. When discussing these features, pricing considerations become complicated, which is the most challenging aspect of the purchasing process.

    Which other solutions did I evaluate?

    During my evaluation process, my organization examined a competitor solution for comparison. The feature sets were comparable between the two options, but the decision was primarily based on pricing considerations.

    What other advice do I have?

    I cannot describe a specific example where CrowdStrike Falcon Complete MDR identified or contained a threat that would have required significant effort from my team because I would need to review the console records. Most of the threats I recall involve PowerShell scripts, and typically the patterns I see are scripts and Python-based attacks.

    CrowdStrike Falcon Complete MDR has improved my confidence in my organization's ability to respond to security incidents. I am actively seeking more information to deepen my understanding of the product.

    CrowdStrike Falcon Complete MDR operates alongside my internal security team and existing SOC process as we are still developing our security operations. The combination of CrowdStrike technology and human security expertise in the MDR service has been valuable based on my experience so far. Although I have not yet handled any high escalations, the service appears to be effective.

    I am aware that CrowdStrike Falcon Complete MDR includes Charlotte AI capabilities. One of the recommendations was the ability to create custom Charlotte AI implementations, and I understand this feature is available, but I have not yet learned enough about it.

    On a scale from one to ten, I would rate CrowdStrike Falcon Complete MDR a seven overall. I rate it a seven because it performs its intended function effectively. I was also instructed to evaluate whether it is truly delivering as intended, which has been challenging to assess. I believe it is doing a great job so far, and that is why I rate it between a six or seven. Once I gain more knowledge about the product, this rating may change. I am currently a supporter of the solution.

    For other organizations considering CrowdStrike Falcon Complete MDR, I would offer both positive and negative observations. CrowdStrike is one of the leading solutions in the industry and appears to be maintaining its position. They are keeping up with emerging threats and staying ahead of threat actors, which is a significant positive factor. The negative aspects are that the console is difficult to use and there are too many modules, making it challenging to determine what to purchase. I hope that Charlotte AI will improve the overall user experience and platform usability. My overall rating for this product is seven out of ten.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Sep 2, 2026
    Flag as inappropriate
    PeerSpot user
    System Engineer Associate at a manufacturing company with 11-50 employees
    Real User
    Nov 5, 2026
    Managed detection has provided peace of mind but needs more tailored policies and contact
    Pros and Cons
    • "The staff's expertise from CrowdStrike Falcon Complete MDR has helped me because they spend more time analyzing threats than I am able to do and they can qualify incidents better than I can."
    • "I think having a personal point of contact and not changing agents for CrowdStrike Falcon Complete MDR would be good."

    What is our primary use case?

    Our main use case for CrowdStrike Falcon Complete MDR is endpoint detection and response and having a managed environment.

    We run the sensors on our devices for endpoint detection and response and stop threats before they become active.

    We also use CrowdStrike Falcon Complete MDR for 24/7 monitoring because our team is too small so far to watch everything that's happening 24/7, so it is good to have professionals in the background.

    How has it helped my organization?

    CrowdStrike Falcon Complete MDR helps us with our peace of mind for device security.

    Regarding that peace of mind with CrowdStrike Falcon Complete MDR, I notice no specific changes in incident response or security outcomes since using it.

    What is most valuable?

    I think the best features that CrowdStrike Falcon Complete MDR offers are the sensor that consolidates many signals into one overview, and also the staff that is very knowledgeable and sits behind the service.

    I can see what is happening on my devices group-wise, and the staff's expertise from CrowdStrike Falcon Complete MDR has helped me because they spend more time analyzing threats than I am able to do and they can qualify incidents better than I can.

    What needs improvement?

    I think having a personal point of contact and not changing agents for CrowdStrike Falcon Complete MDR would be good.

    I think having adapted policies that are really specialized for the company would be good instead of a generic policy set that you have to use to make full use of the service.

    For how long have I used the solution?

    I have been using CrowdStrike Falcon Complete MDR for the last six months.

    What other advice do I have?

    I rate CrowdStrike Falcon Complete MDR a seven on a scale of one to ten. I rate it a seven because a personalized agent and more personalized quarterly reviews would help us provide management with better KPIs.

    I would want others reading reviews on PeerSpot to know that a dedicated point of contact and customized quarterly performance reviews would significantly enhance the value we receive from this service.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Nov 5, 2026
    Flag as inappropriate
    PeerSpot user
    Muhammad  Fahad - PeerSpot reviewer
    Assistant Director to ACIR at Board Of Revenue
    Real User
    Top 5
    Sep 4, 2025
    Enhanced security team efficiency and proactive threat management with room to improve alert management and cost-efficiency
    Pros and Cons
    • "The solution offers seamless SOC extension, zero-day protection, advanced threat intelligence, and rapid incident containment."
    • "There are several issues we are facing with CrowdStrike Falcon Complete MDR, including data overload, noise, and false positive alerts."

    What is our primary use case?

    There are several use cases for CrowdStrike Falcon Complete MDR. The main ones include 24/7 threat monitoring, business continuity assurance, and incident response and containment. The solution provides rapid isolation of endpoints and prevents lateral movement.

    What is most valuable?

    The solution offers seamless SOC extension, zero-day protection, advanced threat intelligence, and rapid incident containment. There are four main categories regarding the features: detection capabilities, response capabilities, operational value, and business value.

    The threat intelligence features provide numerous benefits, including a customizable dashboard, automated enrichment, and real-time threat feeds. The real-time threat feeds provide reduced alert fatigue and faster incident response capabilities.

    What needs improvement?

    There are several issues we are facing with CrowdStrike Falcon Complete MDR, including data overload, noise, and false positive alerts. We experience alert fatigue, contextual gaps, integration complexity, and timeliness of intelligence challenges in our environment.

    Areas that should be improved include noise reduction, prioritization, real-time delivery, and advanced threat coverage. The filtering algorithm should be improved to address these concerns.

    For how long have I used the solution?

    The customer has around two to three years of experience with this tool.

    What was my experience with deployment of the solution?

    The deployment was seamless. While there were some hurdles, we mitigated them accordingly. We received assistance from a consultant from the local vendor side.

    What do I think about the stability of the solution?

    The stability is approximately 80% satisfactory.

    What do I think about the scalability of the solution?

    There were several hurdles regarding scalability levels. We needed to implement policies and make various adjustments. After a certain period, we achieved our objectives accordingly. Once all objectives were met, the solution proved to be fully scalable.

    How are customer service and support?

    The L1 engineer should be more technical to improve the support.

    How would you rate customer service and support?

    Neutral

    Which solution did I use previously and why did I switch?

    We previously used the Kaspersky solution. After spending considerable time with Kaspersky and experiencing numerous issues and hurdles, we decided to switch to CrowdStrike.

    How was the initial setup?

    The initial setup provided smooth onboarding, rapid deployment, 24/7 expert monitoring, and faster detection and response capabilities.

    What about the implementation team?

    We received assistance from a consultant from the local vendor side.

    What was our ROI?

    We have a strategic plan and intend to work with the solution on a long-term basis.

    What's my experience with pricing, setup cost, and licensing?

    The cost is not reasonable and should be more cost-efficient. From an enterprise level perspective, it should be reduced by approximately 20 to 25%.

    Which other solutions did I evaluate?

    There were several hurdles regarding scalability levels. We needed to implement policies and make various adjustments. After a period of time, we achieved our objectives accordingly.

    What other advice do I have?

    My position is Assistant Director, and I can be reached at fahad.jamil@punjab-zami.gov.pk. I am available anytime, though scheduling an appointment in advance is preferred. After multiple attempts, we finally managed to connect, and it has been a great meeting with both you and the CrowdStrike team. The reviewer rated CrowdStrike Falcon Complete MDR a 7 out of 10.

    Which deployment model are you using for this solution?

    On-premises

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer2921910 - PeerSpot reviewer
    Cyber Security Engineer at a security firm with 1-10 employees
    Real User
    Top 20
    Nov 4, 2026
    Behavioral security has tightened defenses and now simplifies multi-tenant threat detection
    Pros and Cons
    • "Security has been a lot tighter with CrowdStrike Falcon Complete MDR, there have been no artifacts or anything left on any machines, and it runs smoothly within my environment."

      What is our primary use case?

      My main use case for CrowdStrike Falcon Complete MDR is the detection engine and identity, cloud, and I'm moving into the AIDR space to use Guardian.

      I can give you a quick specific example of how I've used CrowdStrike Falcon Complete MDR for detection or identification in my cloud environment: I have it set up for every customer at the moment, and I constantly review the information that comes in there, providing it back to my customers and the MSP with the information.

      How has it helped my organization?

      CrowdStrike Falcon Complete MDR has positively impacted my organization in that prior to using it, I did a review of MDR solutions within the marketplace, and there was nothing that ticked the same boxes that CrowdStrike does. Since implementing CrowdStrike Falcon Complete MDR in my current job, I've found that security has been a lot tighter. There have been no artifacts or anything left on any machines, and it runs smoothly within my environment.

      I can share specific outcomes or metrics that highlight those improvements: faster response times. As soon as anything is detected on a machine from its behavior analytics, the application, file, or whatever it would be seen on the device, the IOC would be removed or quarantined instantly.

      CrowdStrike Falcon Complete MDR has changed the workload of my internal security team, but this is very hard to quantify due to the fact that my customer base is constantly growing. Whilst I look after my own internal security, as an MSP, I'm looking after the security for many other customers.

      What is most valuable?

      The best features that CrowdStrike Falcon Complete MDR offers are the ease of use and the single agent being pushed out, with everything from that one agent pulling in the same amount of telemetry if I turn a module on. The agents activate straight away on the endpoint, and there is no further customization that needs to be made from the user perspective, and I can manage everything from the cloud.

      CrowdStrike Falcon Complete MDR has made my day-to-day work easier in the simplistic way that as soon as a module is being added for a customer, I can turn it on, I can put a change request in, and knowing the time when the new module is going to go live, I can turn that on, and this will have next to zero effect from an endpoint user perspective. I get the telemetry, and I can make the security changes as and when I need to.

      Regarding CrowdStrike Falcon Complete MDR's AI capabilities, I think its governance and security have been really good since implementing the Guardian feature. There is a lot more information that I'm finding out from there, which really helps me to drill down and see what users are actually doing.

      Concerning CrowdStrike Falcon Complete MDR's AI capabilities, I think its accuracy and reliability of output are very reliable, but with any information or alert that does pop up, it always needs review. It has been very rare that I've found anything that hasn't been legitimate.

      I can describe my experience with CrowdStrike Falcon Complete MDR's capabilities for threat detection, investigation, and response as being very easy to check the entire customer base.

      What needs improvement?

      I cannot think of any improvements to CrowdStrike Falcon Complete MDR at this moment. There is nothing, even a small thing, that could be improved or added to make my experience better in the future, and there are no improvements needed for CrowdStrike Falcon Complete MDR that I haven't mentioned.

      For how long have I used the solution?

      I have been using CrowdStrike Falcon Complete MDR for a while.

      Which solution did I use previously and why did I switch?

      The security challenges or resource constraints that led my organization to choose CrowdStrike Falcon Complete MDR stemmed from a review of the market. The place I work at the moment used to be a very heavy Cisco house, and there were a few things that weren't ticking the boxes for the business coming from AMP. After reviewing the market, I was able to see that CrowdStrike Falcon Complete MDR was a better choice to fit my business use cases. Once I had looked into purchasing it, the ease of use and being able to push out the application via the one agent, as I previously mentioned, has made everything a lot easier. The constraints that I was finding prior to that were related to the resourcing to be able to push everything out to deploy the agent to the devices. Since then, this has been alleviated.

      How was the initial setup?

      CrowdStrike Falcon Complete MDR is deployed in my organization depending on what the customer environment is currently set up as. Internally, I use a private cloud, and I do have customers that have on-premise deployments which use group policy, but Intune, Jamf, and there are a lot of different ways this is pushed out via my whole customer base.

      What other advice do I have?

      On a scale of one to ten, I would rate CrowdStrike Falcon Complete MDR overall as ten. I would give it a ten because of the way that the application works. CrowdStrike Falcon Complete MDR being behavioral based, it picks up on a lot of information and telemetry that I wouldn't normally find from a hash-based detection engine. I use Microsoft as my cloud provider for my private cloud deployment. I purchased CrowdStrike Falcon Complete MDR through a Disti.

      Which deployment model are you using for this solution?

      Private Cloud

      If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

      Disclosure: My company has a business relationship with this vendor other than being a customer. MSP
      Last updated: Nov 4, 2026
      Flag as inappropriate
      PeerSpot user
      reviewer2921610 - PeerSpot reviewer
      Business Development Manager, Security at a tech vendor with 10,001+ employees
      Real User
      Top 20
      Nov 3, 2026
      Managed security service has expanded partner offerings and delivers complete SOC coverage
      Pros and Cons
      • "The Complete team handles everything from implementation to remediation, which is excellent, especially for many SMB customers that don't have that competence themselves."
      • "In terms of the Nordic market, the variety in pricing from CrowdStrike could be better, as it sometimes tends to get expensive for the SMB market."

      What is our primary use case?

      I have a partner in Sweden that chose to go with CrowdStrike Falcon Complete MDR for Service Provider in their quest to create an end customer-facing needs offering, so everything in that needs offering is driven by the Falcon Complete MDR team.

      I have a couple of other partners that are also working with CrowdStrike Falcon Complete MDR, both the normal Complete and the for Service Provider, and I think it's a solid product. Many partners are asking about it, and many end customers as well, since it's an offering from CrowdStrike that works well towards the SMB and mid-market segment due to the good pricing. Many other SOC services from partners tend to be quite expensive for the SMB and mid-market, which is one of the reasons it hits so well in the Nordics.

      How has it helped my organization?

      CrowdStrike Falcon Complete MDR has positively impacted my organization and my partners. The first partner I mentioned is really excited about it, and it has increased their go-to-market offering quite substantially. The experience they've had from the Falcon Complete MDR team has been excellent, both when it comes to day-to-day work and in terms of situations where the Complete team had to act on threats in customer environments.

      What is most valuable?

      The best features that CrowdStrike Falcon Complete MDR offers, in my view, is the fact that it's a full-fledged SOC for an end customer and the Complete team handles everything from implementation to remediation, which is excellent, especially for many SMB customers that don't have that competence themselves.

      Comparing the implementation and remediation support from CrowdStrike Falcon Complete MDR team to that of partner SOCs, it stands out because partner SOCs usually require more competency from the end customers, while the Falcon Complete MDR team doesn't require that kind of competence from the end customers in the SMB and mid-market segment, which is really good.

      What needs improvement?

      In terms of the Nordic market, the variety in pricing from CrowdStrike could be better, as it sometimes tends to get expensive for the SMB market. From a technical perspective, I think it's really solid, and the fact that the Complete team offers more services than just the MDR with Falcon Complete for Identity, Falcon Complete for Cloud, and the upcoming Falcon Complete for Guardian offering, is beneficial.

      For how long have I used the solution?

      In my role as a distributor, I don't use CrowdStrike Falcon Complete MDR myself, but I have facilitated selling it to several partners in the Nordics, specifically Falcon Complete for Service Provider.

      What other advice do I have?

      On a scale of one to ten, I would rate CrowdStrike Falcon Complete MDR a solid eight.

      I choose eight instead of a higher or lower number because it feels reasonable. It's a solid product and a solid offering, but the Nordic market tends to be somewhat immature regarding what Falcon Complete offers, but that's a market issue, not a CrowdStrike issue.

      My advice for others looking into using CrowdStrike Falcon Complete MDR is to compare it to the market. It's a solid offering that allows partners who don't have the capability to create their own SOC to offer the market a full-fledged SOC service, covering a broad perspective in terms of MDR, Identity, Cloud, and Guardian capabilities.

      Which deployment model are you using for this solution?

      Hybrid Cloud

      If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

      Disclosure: My company has a business relationship with this vendor other than being a customer. Distributor
      Last updated: Nov 3, 2026
      Flag as inappropriate
      PeerSpot user
      Buyer's Guide
      Download our free CrowdStrike Falcon Complete MDR Report and get advice and tips from experienced pros sharing their opinions.
      Updated: October 2026
      Buyer's Guide
      Download our free CrowdStrike Falcon Complete MDR Report and get advice and tips from experienced pros sharing their opinions.