CrowdStrike Falcon Reviews

My main use case for CrowdStrike Falcon is endpoint detection. We look at the telemetry data from endpoint protection and determine policy violation, abnormal activities, and usage details for endpoint detection.

CrowdStrike Falcon has improved the workload and productivity of my security team by force multiplying our existing capability. The Falcon sensor has positively impacted endpoint performance and my ability to deploy security at scale because it is a one-click solution. We can pick the policies we want to roll out based on the targeted group, and we are able to do that.

The best features CrowdStrike Falcon offers are the telemetry data at the endpoint and the ability to control sensitive actions such as screenshot, copy-paste, and printing.

The controls over sensitive actions help my team detect unjustified business use cases of taking actions. Through CrowdStrike Falcon endpoint monitoring, we are able to detect who is taking these unjustified accesses, and then we take corrective action.

CrowdStrike Falcon has positively impacted our organization by enabling us to detect unauthorized business use cases early enough. We have built our machine learning models to raise the alarm to detect data exfiltration sooner and improve the time to response.

Using the Falcon platform has changed the way our security team detects, investigates, and responds to threats by providing more insight on the data. That insight used to be reactive; now, proactively we can set the control based on this data, and based on the baseline usage, we can deploy our security controls.

The benefits I have seen from having multiple security capabilities on a single platform is that it is a one-stop shop, allowing me to have all the capabilities under one platform so I do not have to navigate between multiple tools.

CrowdStrike Falcon can be improved with more capabilities such as watermarking and preventing sensitive content from being screenshotted.

CrowdStrike Falcon is pretty accurate and reliable, but the only part where we lack visibility is whether the endpoint has started reporting or is not reporting. We do not have data on how many endpoints on a given day are reporting versus not reporting, so we would appreciate that visibility. This way, we know where the endpoint is not recording and can take corrective action to ensure we have updated endpoints.

I have been using CrowdStrike Falcon for over three years.

CrowdStrike Falcon is stable.

CrowdStrike Falcon's scalability is good, as we are able to scale to half a million endpoints.

We do not directly deal with CrowdStrike customer support, but we have a dedicated team who obtained our licensing. We work with them and provide our input to them, and they in turn work with CrowdStrike support to get things addressed.

Before using CrowdStrike Falcon, we used Reveal and next-generation Reveal, and we are still using it. Once the parity between Reveal and CrowdStrike Falcon is there, we will deprecate Reveal and move on to Falcon.

CrowdStrike Falcon is deployed in my organization in a private cloud.

I have seen a return on investment, and as I mentioned, our partner team handles all the licensing and cost aspects. We are the consumers of the Falcon endpoint data.

I do not directly handle the pricing, setup cost, and licensing, as we work with a partner team who handles the licensing and cost. I do not have to worry about it.

Before choosing CrowdStrike Falcon, I evaluated Reveal as an option.

The advice I would give to others looking into using CrowdStrike Falcon is that they have great capabilities and good pricing options. They offer good stability as well as large coverage, so they are truly a leader in the market. The Falcon sensor has positively impacted endpoint performance and my ability to deploy security at scale because it is a one-click solution. We can pick the policies we want to roll out based on the targeted group, and we are able to do that.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is its scale and ease of deployment, plus the telemetry data. However, there are some capabilities which I still need CrowdStrike Falcon to update, so that will provide an edge over the other existing tools which I am using.

Falcon has not yet allowed me to consolidate or replace other security tools, as we are still using other competitive tools, but our end goal is to have those benefits existing in CrowdStrike Falcon, so that we can deprecate other tools and use CrowdStrike Falcon exclusively.

I can describe a security incident where Falcon helped my team detect a threat by allowing us to see a user accessing unauthorized GenAI third-party applications, which is not within their business standard operating procedure. We took action and blocked those third-party websites, and that insight came from CrowdStrike Falcon endpoint data.

I would rate this product an eight out of ten.

My main use case for CrowdStrike Falcon is detection. I use CrowdStrike Falcon for endpoint detection, for example, detecting the execution of malware.

We are using the basic models of CrowdStrike. Unfortunately, we did not use the module for having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform.

I am using AI within CrowdStrike Falcon for summaries of detections. My use of CrowdStrike Falcon has not expanded; it was rolled out on any new server or client.

Having just one sensor for all modules has helped my team by saving time in enrollment. Additionally, if we purchase a new product from CrowdStrike, it saves time deploying another sensor or program onto clients or servers.

CrowdStrike Falcon has positively impacted our organization by reducing incidents. We have seen numbers going down and also save time investigating on our SOC side.

I can describe a security incident where CrowdStrike Falcon helped my team detect and stop a threat by stopping malware execution on a client caused through phishing.

The benefits I have seen from having multiple security capabilities on a single platform like CrowdStrike Falcon include it being a good long-term strategic partner. CrowdStrike Falcon has positively affected the workload and productivity of my security team.

CrowdStrike Falcon has allowed me to consolidate or replace other security tools, classically endpoint protection.

The best features that CrowdStrike Falcon offers are its all-in-one sensor, where every product is included in one sensor, so I only deploy one sensor and all modules are connected with it.

Regarding CrowdStrike Falcon's AI capabilities, I think its governance and security are good. I also find its accuracy and reliability of output to be helpful for summaries of incidents or detections.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is having a good product portfolio that covers nearly every part of the industry.

CrowdStrike Falcon can be improved by better correlating or improving the SIEM.

I chose nine out of ten because it is a closed architecture where I cannot be that open for third-party products in all of the modules, which makes it fall just short of a perfect score.

I have been using CrowdStrike Falcon for about four years.

CrowdStrike Falcon is stable.

The CrowdStrike Falcon sensor has had no negative impact on endpoint performance and my ability to deploy security at scale. CrowdStrike Falcon's scalability is really good.

The customer support is good. I would rate the customer support on a scale of 1 to 10 as an eight.

I have not seen a return on investment.

My experience with pricing, setup cost, and licensing has been good because of the flex model.

I would rate CrowdStrike Falcon a nine out of ten. My advice to others looking into using CrowdStrike Falcon is that if you choose CrowdStrike Falcon, then do it fully and do not choose other vendors with it. Just stick to CrowdStrike Falcon.

My main use case for CrowdStrike Falcon is to deploy it to our endpoints, set update policies, and sometimes use the advanced search to search up specific events.

I also used it in the past to query app usage, and the sensor collects DNS request logs that I use to determine whether or not people are actively using the licenses that we give them, such as Cloud licensing, ChatGPT, Figma, and others.

My usage of CrowdStrike Falcon is limited to the advanced search feature. I am not a security engineer, and I use it to help fill in the gaps for my job function.

Since we don't have much of a security team, we let CrowdStrike Falcon operate independently. My use of CrowdStrike Falcon has not expanded since my initial deployment. I use my limited time to look at things when necessary, and my usage has been limited to what I have already described.

I believe the advanced search is one of the best features CrowdStrike Falcon offers.

What stands out to me about the advanced search in CrowdStrike Falcon is that it gives me a lot of insight into what my endpoints are doing, which is helpful as a sysadmin.

CrowdStrike Falcon has positively impacted my organization by being a lightweight sensor. In the past, we dealt with issues where users complained that our deployed endpoint detection and remediation tool was using too much bandwidth on a computer or CPU usage. However, I found no complaints with CrowdStrike Falcon, which is beneficial.

Regarding how the lightweight sensor of CrowdStrike Falcon affected my team's productivity, there are fewer complaints about slowdowns from my end users and less time spent in a console trying to figure out why slowdowns are occurring, which definitely frees up time.

CrowdStrike Falcon can be improved by adding some sort of data-at-rest insights into what is on these PCs. I know there are other tools that CrowdStrike offers that do this, but I have not had any experience with them.

I have been using CrowdStrike Falcon for about three years.

CrowdStrike Falcon is stable.

CrowdStrike Falcon's scalability is good.

I have limited contact with customer support for CrowdStrike Falcon, but the group that helped onboard us was great.

I can rate the customer support based on my limited experience. The onboarding team deserved a ten.

I started directly with CrowdStrike Falcon and did not previously use a different solution.

I have used CrowdStrike Falcon to replace Sophos, which was the tool that users were complaining was causing slowdowns.

The setup process is very easy.

I have not seen a return on investment from CrowdStrike Falcon. It provided me a little more insight into what is going on in my environment, but it is difficult to quantify into a dollar amount.

My experience with pricing, setup cost, and licensing for CrowdStrike Falcon was that pricing was very expensive, so much so that we could not justify onboarding it at first. However, after some back and forth with CrowdStrike representatives and getting quotes from other providers, CrowdStrike was willing to work with us to adjust some items included in the subscription contract and provided us a price that we could justify to our finance team.

Before choosing CrowdStrike Falcon, I evaluated other options such as Sophos, Microsoft Defender, and Carbon Black.

I have no experience with CrowdStrike Falcon's AI capabilities.

I have no experience with the accuracy and reliability of output from CrowdStrike Falcon's AI capabilities.

I cannot comment on whether CrowdStrike Falcon is deployed in my organization on public cloud, private cloud, hybrid cloud, or on-premises, as I have no experience with how it is deployed.

The benefits of having multiple security capabilities on a single platform like CrowdStrike Falcon include ease of access, as I don't need to jump between tools, and compatibility, as things just work.

I can describe a security incident where CrowdStrike Falcon helped my team detect a threat. We needed to determine whether the Axios attack was going to impact us and whether any sensitive proprietary code may have been stolen. With CrowdStrike Falcon's advanced search, I was able to determine that we were not affected and that we had nothing to worry about.

CrowdStrike Falcon has affected the workload of my IT team by making us seem more competent in the security aspect of things. I was able to quickly provide an update to my CTO on whether this was going to impact us, and that is a significant achievement for me.

My advice to others looking into using CrowdStrike Falcon is that it is a very powerful tool that provides a lot of insights. I have trusted it for three years and believe you could as well. I would rate this product a perfect ten.

I primarily rely on CrowdStrike Falcon for endpoint security EDR and host-based firewall.

In my day-to-day work, I have policies for endpoint security where, for example, using Teams and Netskope, I have different rules from the endpoints, and I also use it for device control.

Since the initial deployment of CrowdStrike Falcon, I have added more features. I was using a limited host-based firewall, and now I am using more of it, and I am also expanding it on macOS.

Using CrowdStrike Falcon has positively impacted my organization, and I have seen changes in my security posture and operations since using it. I would rate it an eight.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats, and it is really effective.

Having multiple security capabilities all on a single platform like CrowdStrike Falcon is valuable because I do not have to use and integrate with multiple products, which is really good.

Having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform is beneficial. CrowdStrike Falcon has affected the workload and productivity of my security team positively, and I find it very accurate.

I really like Guardian One, which is very nice and futuristic for an AI.

The feature that stands out to me about Guardian One is that I have a lot of new AI agents, and I have a new team monitoring and securing them, which is very important. I do not have it as of now, and I am still exploring, and this will definitely add value to my company and security.

Regarding CrowdStrike Falcon's AI capabilities, I think its governance and security are pretty good, but I am yet to explore it further.

I find the accuracy and reliability of output from CrowdStrike Falcon's AI capabilities interesting since I attended the session for Guardian, but I just did a lab, and I am not really sure how it would work in a practical environment, so I am yet to explore.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that it is very accurate and I think there are not many false positives, making it more effective than any other product.

I find the console not very user-friendly. Sometimes, creating a policy is not very straightforward since I need to create a user group, a rule group, and a policy, making it kind of complicated compared to Palo Alto XDR or EDR or any other product. Even though it is very secure, it could be more user-friendly.

I have been using CrowdStrike Falcon for one year.

I have not noticed much change regarding the impact of CrowdStrike Falcon sensor on endpoint performance and my ability to deploy security at scale. CrowdStrike Falcon is stable.

I think its scalability is pretty good.

The customer support is not really great. It is pretty complicated, especially when I ask very difficult questions or dig deep into the features, as I do not see good support most of the time, so I think it is important to improve this.

I was previously using McAfee, but now I am using CrowdStrike Falcon, and it is performing better than McAfee.

In my previous company, I was using Cortex XDR, Sophos, and McAfee, but now I am using CrowdStrike Falcon, and I made the switch as a Security Specialist.

Before choosing CrowdStrike Falcon, I evaluated other options, particularly McAfee.

I rate it an eight mainly because it is not that user-friendly; otherwise, I would give it a nine.

I would rate CrowdStrike Falcon a nine out of ten overall, as it is mainly the user-friendliness that affects my rating. As a cybersecurity product, it is really great and very futuristic, but just because it is not that user-friendly sometimes, I would rate it a nine.

I would advise others reading reviews on PeerSpot that for the upcoming AI world, CrowdStrike Falcon is doing really great and has very good features with a lot of new AI-powered capabilities, so I think switching to CrowdStrike Falcon is a really good idea.

My main use cases for CrowdStrike Falcon in our company are to protect all our endpoints and partially our servers, and I mainly use it as a next-generation AV solution with a focus on EDR, particularly for real-time protection.

Our environment is quite complex, with 90% being cloud-based across multiple public and private clouds, consisting of virtual machines, physical servers, and Kubernetes.

I utilize all types of public cloud providers due to our ongoing acquisitions and the need to manage different environments for about three years after an acquisition.

Recently, we had a security incident where CrowdStrike Falcon helped our team detect and stop a threat; an endpoint was infected by malware attempting to exfiltrate data, and Falcon detected that malware, blocked the command, and alerted us, prompting an investigation using Falcon Forensics Collector to gather forensic data to find the root cause.

In that specific case, it took us roughly one hour to detect and resolve the issue, which is not always that fast or easy.

Using CrowdStrike Falcon has changed the way our security team detects, investigates, and responds to threats because we switched from our old EDR solution to Falcon.

CrowdStrike Falcon has significantly reduced the mean time to detect and mean time to respond to our incidents, mainly because we no longer monitor 10 tools, only two or three, and our analysts feel confident using Falcon.

Having multiple security capabilities on a single platform like CrowdStrike Falcon benefits us because we can perform many tasks directly in Falcon instead of switching between different tools, allowing us to collect forensic data, run queries, and block threats company-wide, thus focusing on how to properly use fewer tools.

Currently, I am not using the built-in AI in CrowdStrike Falcon, but I am integrating Falcon with my AI workflows through some MCP servers.

Using AI through MCP with CrowdStrike Falcon helps us with our 24/7 on-call duty, mimicking tier one analyst functions so we only receive alerts for events that require our attention.

In my opinion, CrowdStrike Falcon could be improved by making the forensics collection module more user-friendly in the UI and better integrating it with the RTR functionalities.

To make it a 10, I feel Falcon Forensics Collector needs better integration with the rest of the UI, and we have encountered occasional issues with the containment and uncontainment process.

I have been using CrowdStrike Falcon for at least four years.

The impact of CrowdStrike Falcon's sensor on endpoint performance has been negligible; on some servers, I managed any minor impact by creating sensor visibility exclusions.

As far as I remember, we have not experienced any downtime or performance issues with CrowdStrike Falcon.

Since the initial deployment, I have expanded the usage of CrowdStrike Falcon platform; it is automatically deployed on any Windows server or system, and we are continuously growing the number of sensors deployed.

CrowdStrike Falcon differentiates itself from other cybersecurity platforms I have used or evaluated by being a mature and reliable solution; it works effectively and provides strong support, which is essential for our infrastructure and customer trust.

My old solution was Cyber-Reason, which I replaced; I gained a lot of visibility, and it is easier for our analysts to use, which makes it a powerful tool for detection, reaction, collection of forensic data, and investigation of incidents.

I have replaced my old EDR solution, Cyber-Reason, with CrowdStrike Falcon, and while I have plans to consolidate other tools, I prefer not to rely solely on one tool for everything, seeking better coverage from different vendors.

My experience deploying CrowdStrike Falcon was overall fine; the deployment was quite straightforward, although I only deployed it on physical or virtual machines, not on Kubernetes or containers.

On a scale of one to 10, I would rate CrowdStrike Falcon platform an eight or nine.

My main use case for CrowdStrike Falcon is mostly endpoint detection, scanning the endpoints to protect our endpoints in our hospital environment against any malicious files, downloads, and executions. A specific example of how I have used CrowdStrike Falcon for endpoint detection is when it catches a suspicious PowerShell execution from a suspicious file and a suspicious exe exemption. I investigate those events accordingly. CrowdStrike usually stops that execution, but there is some possibility that it may not block those executions. I investigate those incidents using CrowdStrike along with other tools, not only CrowdStrike.

In my opinion, the best features CrowdStrike Falcon offers are definitely the MDR solution, which is the best in the field. I also appreciate its next-gen SIEM solutions, and I am interested in CrowdStrike's DLP solutions as well. There is also an OverWatch MSSP feature, but I don't use it in my environment yet.

Out of those features I mentioned, I rely on the MDR solution the most day-to-day. I definitely use MDR, which is what I pay for the most. I use next-gen SIEM, but I use Splunk as a SIEM solution, so in CrowdStrike's next-gen SIEM, I use it only for the CrowdStrike events. I don't ingest data from other tools to CrowdStrike's next-gen SIEM. The EDR solution is my favorite one.

CrowdStrike Falcon has positively impacted my organization day-to-day when it catches any suspicious activities or any malicious files in my environment. That definitely impacts my organization positively.

There are definitely a couple of things CrowdStrike Falcon should improve, but I don't have all of them in my mind at this moment. I would need to check my notes to provide you with a comprehensive list.

I have been working in my current field for two years.

CrowdStrike Falcon has no issues and is stable.

CrowdStrike Falcon handles growth well, and its scalability is good.

Customer support is great. I am happy with my representative.

I previously used Dell EDR.

Regarding CrowdStrike Falcon's AI capabilities, I don't work in the governance department, and my organization doesn't 100% implement the AI features in my environment. I know CrowdStrike is using AI to triage the events, so the events are 99% triaged before coming to me. I don't have a better answer for this question.

Regarding the accuracy and reliability of CrowdStrike Falcon's AI output, I am not able to answer that question as I have no information about it.

CrowdStrike Falcon has not allowed me to consolidate or replace other security tools.

Having multiple security capabilities on a single platform like CrowdStrike Falcon definitely has advantages but also disadvantages. I don't want to put all the eggs in one basket, so I appreciate CrowdStrike and use some of its capabilities, but I don't want to put all my security investments in CrowdStrike. I prefer to use other tools as well.

CrowdStrike Falcon's sensor has not had any issues on endpoint performance, and my ability to deploy security at scale has not been negatively impacted.

CrowdStrike Falcon has made things easier regarding the workload and productivity of my security team.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is definitely its innovation, common usage, and ease of use. I would rate my overall experience with this product a nine out of ten.

My main use case for CrowdStrike Falcon is vulnerability management.

The benefits I have seen from having multiple security capabilities on a single platform are that you get to see things at different angles. Instead of just one perspective, you get multiple perspectives.

The value I have seen from having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform is that it is nice having everything in one place, but also we just get visibility into something that we would not have known about at all before.

CrowdStrike Falcon has allowed us to consolidate or replace other security tools because it is our only one.

CrowdStrike Falcon can be improved because there are a lot of duplicated endpoints and CrowdStrike does not know how to identify that smartly. That would be a huge improvement. Additionally, the user interface is a little bulky and could use some streamlining. It often feels hard to understand and know exactly where to click to find the information that you need. Although there are a lot of options that make CrowdStrike Falcon powerful, it also makes it very difficult to navigate to exactly what you are looking for. It almost takes an expert in the platform to be able to extract the information that you need.

I have been using CrowdStrike Falcon for three years.

I assess the stability and reliability of CrowdStrike Falcon as good, with no complaints there.

I have not experienced any downtime, crashes, or performance issues with CrowdStrike Falcon.

The impact of CrowdStrike Falcon sensor on endpoint performance is little to none. Deploying security at scale with CrowdStrike Falcon as our main tool for vulnerabilities and exposures means it is a big impact for our company.

The impact of using CrowdStrike Falcon is that we have visibility into our endpoint management and we can address it as things come across.

I would evaluate customer service and technical support, but I may not be the best person to answer this question because I have never had to engage customer service or technical support.

I would describe my experience with deploying CrowdStrike Falcon as I did not deploy it, so I do not have a strong opinion on that.

I have seen return on investment with CrowdStrike Falcon, though maybe not in a traditional sense because we have not had any serious breaches. We are pretty good at remediating the critical issues before they happen, which I think is a testament to CrowdStrike Falcon.

My experience with pricing, setup costs, and licensing is beyond my knowledge at the organization level because I did not deal with any of that as far as the pricing goes.

CrowdStrike Falcon has definitely increased the workload of my security team. They definitely have a lot more to do because they see a lot more. The main issue is not with CrowdStrike Falcon itself but with how my team prioritizes things properly, which is a personal concern.

We had a lot of browser vulnerabilities that we recently remediated. CrowdStrike Falcon found those vulnerabilities for us and we patched them up and they are good to go now.

The advice I would give to other organizations considering CrowdStrike Falcon is that it is definitely worth using, but you should have somebody become an expert in the platform. My overall rating for CrowdStrike Falcon is 8.7 out of 10.

My main use case for CrowdStrike Falcon is endpoint security. A concrete example of this is querying vulnerabilities and handling detections.

My use of CrowdStrike Falcon has changed and expanded since it was first introduced in the company. The platform has developed to include new areas and functions such as Cloud Security Exposure Management, Falcon for IT, and Falcon for Mobile.

CrowdStrike Falcon has had a positive impact on my company by providing a better overview of all assets, vulnerabilities, and installation status.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats. Through API integration, work has become faster and more successful, and the data from CrowdStrike is very accurate.

The best features that CrowdStrike Falcon offers are the alerting, the API integration, and vulnerability management.

These features support my daily work by giving us a better overview of all vulnerabilities, which we can pass on via API if necessary to various departments. The alerting via the SOC is very helpful.

I consider the accuracy and reliability of the results I have obtained through CrowdStrike Falcon's AI features to be very accurate.

The advantages I see in consolidating several security functions on a single platform are that you have a single source of truth. The added value in having endpoint, identity, cloud, and other security telemetry brought together in CrowdStrike Falcon is that CrowdStrike is currently positioned in the best possible way.

What sets CrowdStrike Falcon apart from other cybersecurity platforms I have used or evaluated is that it is more advanced and easier to use.

CrowdStrike Falcon could be improved with better and clearer API documentation.

I have been using CrowdStrike Falcon for three years.

The Falcon sensor affects the performance of my endpoints positively, as I don't notice any poor performance, and the performance is great, meaning security has been improved on the individual devices.

CrowdStrike Falcon is stable in my opinion.

I rate the scalability of CrowdStrike Falcon a 9 on a scale from 1 to 10.

I am satisfied with CrowdStrike Falcon's customer support and rate it a 10 on a scale from 1 to 10.

CrowdStrike Falcon has not enabled me to consolidate or replace other security tools.

CrowdStrike Falcon is deployed in my company via an MDM. The Mobile Device Management system through which CrowdStrike Falcon is integrated is Baramundi.

My experiences with pricing, setup costs, and licensing for CrowdStrike Falcon indicate that it could always be cheaper.

I rate CrowdStrike Falcon a 10 due to the satisfaction I feel from the fact that everything works and everyday work is made easier.

My advice for others who are considering CrowdStrike Falcon is to bring in each module one by one and first test it through a POC.

My main use case for CrowdStrike Falcon is deploying agents on endpoints and using it as antimalware. Additionally, I utilize functions that allow me to monitor servers and log applications being used within the institution.

Through the platform, I review events generated by endpoints and investigate alerts or reported events in detail. I also use it to log events reported by our SIEM and provide traceability to identify failure points.

I have integrated CrowdStrike Falcon with other tools that allow me to measure the maturity and security posture of the solution in its configurations, which has been valuable for our organization.

I use tools that are approved within the bank through CrowdStrike Falcon, directly managing these tools and controlling who has access to them.

Regarding policy control and robustness, CrowdStrike Falcon has positively impacted daily security management by controlling ATMs and cash machines, which prevents equipment access via USB and effectively blocks these devices.

CrowdStrike Falcon has had a positive impact on my organization by helping us act when events or alerts are generated and by providing traceability of those events. It also allows us to monitor and provide the number of assets being protected.

Since we can act on events and provide traceability, I have seen improvements in response times and a reduction in incidents. I have internal KRI metrics that validate the effectiveness of this tool, and the response times have been very good using CrowdStrike Falcon.

Using CrowdStrike Falcon has changed how my security team detects, investigates, and responds to threats by providing excellent alert generation that allows us to see traceability and manage this effectively within the team.

The benefit I have observed from having several security capabilities integrated into a single platform is complete visibility and traceability.

CrowdStrike Falcon helped my team detect and stop a threat involving the execution of unapproved files and installation of unauthorized programs within the institution.

CrowdStrike Falcon has positively affected the workload and productivity of my security team by providing traceability without being overly complex, with no negative impact.

Even though the CrowdStrike Falcon sensor is very light in terms of resource consumption, it has had an effective impact on endpoint performance and on my ability to deploy security at scale.

I consider the best features offered by CrowdStrike Falcon to be the robustness of the firewall and policy control at the endpoint level, including firewall rules and control of external device connections such as USBs or tokens inserted into machines.

The integration with other tools provides complete visibility of configurations and events.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated are the capabilities for policy configuration and the ability to provide traceability in events.

Regarding the artificial intelligence capabilities of CrowdStrike Falcon, I find them to be very well developed and quite clear regarding the direction of governance policies for the tool.

The accuracy and reliability of results delivered by CrowdStrike Falcon's artificial intelligence are not perfect and have certain limitations, but overall it has been very helpful and works well.

I believe CrowdStrike Falcon could be improved by integrating with MFA.

I have not been able to integrate the tool with a third-party MFA authentication tool.

Additionally, operating system patching functions would be a functionality I would like to see implemented in the future.

I have been using this tool for approximately four years.

I consider CrowdStrike Falcon to be a stable solution.

I rate the scalability of CrowdStrike Falcon as excellent, and it is a scalable solution.

CrowdStrike Falcon's customer support is very good, and we have not had any issues so far.

I previously used Microsoft, which was changed because of its support and distribution.

I have not seen a return on investment from using CrowdStrike Falcon in terms of exact data, but in terms of a reduction in events or incidents, we have definitely experienced that.

Before choosing CrowdStrike Falcon, I considered other options such as Kaspersky and Microsoft Defender.

I rate CrowdStrike Falcon a nine on a scale from one to ten. I give CrowdStrike Falcon a nine because I have not been able to integrate it with third-party MFA in terms of functionality.

Currently, CrowdStrike Falcon has not allowed us to consolidate or replace other security tools, but we are analyzing the capabilities for artificial intelligence control.

Since its initial implementation, my use of CrowdStrike Falcon has evolved as several features and add-ons have been added that make the platform much more complete, providing more information about what we have on each of the endpoints.

My advice to those considering using CrowdStrike Falcon is that it is a robust tool that works well and has a lot of granularity for its configurations, making it the recommended solution. My overall rating for CrowdStrike Falcon is nine out of ten.

Our main use cases for CrowdStrike Falcon include sensor updates, prevention policies, policy sensor, and firewall.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats in an excellent way that enables us to see threats ahead of time and provides us with reports so we are able to see how we are lagging behind.

CrowdStrike Falcon has reduced the workload and productivity demands on my security team dramatically.

The Falcon sensor has positively affected endpoint performance and our ability to deploy security at scale because it helped us scale at a faster rate since we do not have to always focus on identifying minor issues here and there. We have been able to address threats ahead of time, and we are able to mitigate ahead of time as well.

CrowdStrike Falcon has allowed us to consolidate or replace security tools, and right now we are trying to look at SSPM, which will give us more visibility into Salesforce. We are hoping to gain much more visibility into SaaS applications.

Improving CrowdStrike Falcon could involve slowing down the release of sensor updates and prevention policies, as I appreciate how they release them, but if they could slow down the release, that would help us catch up. I do not have any additional features that should be included in the next release.

I have been using CrowdStrike Falcon for five years.

I have experienced downtime, crashes, or performance issues only once, which happened during the overall worldwide incident in July. Apart from that, everything is functioning properly.

Since our initial deployment, our use of CrowdStrike Falcon is expanding as we look to integrate more, and I hope it will keep expanding since you keep bringing on more.

I think the support team is excellent and able to push our tickets through efficiently. I evaluate customer service and technical support as excellent.

I have not experienced any other cybersecurity platforms since I joined the firm as it has been CrowdStrike, so I do not know if there are any that the organization had in the past.

I would describe my experience with deploying CrowdStrike Falcon as easy. It is straightforward and easy to navigate.

I have not seen a return on investment with CrowdStrike Falcon.

My advice to other organizations considering CrowdStrike Falcon is to give it a try if it works for them. I know there are many tools out there, but you should look for a tool that works for your organization. I would rate CrowdStrike Falcon overall a 10 on a scale from 1 to 10.