CrowdStrike Falcon is used for incident response.
IT Specialist at a consultancy with 1-10 employees
Remote investigations with enhanced visibility and easy to use
Pros and Cons
- "The ability to remote into other devices for investigation and the way it presents a graphical representation of the detection, like the parent-child process, are valuable features."
- "The new interface, the UI, seems a bit messy."
What is our primary use case?
How has it helped my organization?
It is very easy to hunt a threat in the organization. It keeps logs, making it very easy to investigate any kind of incident using CrowdStrike by looking at the processes that are running on a machine. There's more visibility over the endpoint through CrowdStrike.
What is most valuable?
The ability to remote into other devices for investigation and the way it presents a graphical representation of the detection, like the parent-child process, are valuable features.
What needs improvement?
The new interface, the UI, seems a bit messy. The previous one was quite clear. It might be because of my adaptation to it. That's what I see as needing improvement.
Buyer's Guide
CrowdStrike Falcon
May 2025

Learn what your peers think about CrowdStrike Falcon. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
855,156 professionals have used our research since 2012.
For how long have I used the solution?
I have been using CrowdStrike Falcon for more than three years, around three and a half years.
What do I think about the stability of the solution?
It is quite stable. I would rate it eight or nine out of ten.
How are customer service and support?
I would rate customer service and support a ten. I am very satisfied with the support.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have used antiviruses like Symantec before. Compared to all of that, I found CrowdStrike quite striking. Even compared to Defender, I find CrowdStrike more appealing.
What was our ROI?
On the terms of investigating, I find it's quite easy to investigate an event and have a broader look at the event using CrowdStrike. I would rate the time saved around eight, nine, or even ten out of ten. Compared to Defender, it makes it faster to investigate.
What's my experience with pricing, setup cost, and licensing?
I think the pricing is quite reasonable with the services they provide.
What other advice do I have?
For an incident investigator, it's quite easy to use, and it provides great visibility over the processes.
I'd rate the solution ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Oct 15, 2024
Flag as inappropriate
Managing Director at a tech services company with 11-50 employees
Is user-friendly, maintenance-free, and stable
Pros and Cons
- "I like the vulnerability assessment and proactive hunting features of CrowdStrike Falcon."
- "To simplify the budgeting process for our clients, CrowdStrike should consider offering bundled packages that include essential features."
What is our primary use case?
We are a CrowdStrike Falcon distributor that helps clients monitor their environments for malicious activity coming from the internet.
How has it helped my organization?
Both users and administrators find CrowdStrike Falcon easy to use.
What is most valuable?
I like the vulnerability assessment and proactive hunting features of CrowdStrike Falcon.
What needs improvement?
To simplify the budgeting process for our clients, CrowdStrike should consider offering bundled packages that include essential features. The separate model pricing structure can make it challenging for clients to gain approval for their security needs.
CrowdStrike could consider regional pricing models to better reflect the economic realities of different markets.
For how long have I used the solution?
I have been using CrowdStrike Falcon for 2 years.
What do I think about the stability of the solution?
CrowdStrike Falcon is stable.
What do I think about the scalability of the solution?
CrowdStrike Falcon is scalable.
Which solution did I use previously and why did I switch?
We have also used Sophos. CrowdStrike Falcon is a better solution but Sophos is more affordable.
How was the initial setup?
The deployment is straightforward.
What's my experience with pricing, setup cost, and licensing?
The cost of CrowdStrike Falcon in Latin America seems high relative to the economic conditions in the region.
What other advice do I have?
I would rate CrowdStrike Falcon 9 out of 10.
To realize the benefits of CrowdStrike Falcon, it's recommended to conduct a proof of concept first. You should then start to see the advantages within a few months.
No maintenance is required from our end.
To ensure the successful implementation of CrowdStrike Falcon, it's essential to have a complete network map and inventory of all resources and devices.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Buyer's Guide
CrowdStrike Falcon
May 2025

Learn what your peers think about CrowdStrike Falcon. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
855,156 professionals have used our research since 2012.
Vice President at a financial services firm with 10,001+ employees
Helps protect against malware and the maintenance is straightforward, but there are a lot of false positives
Pros and Cons
- "The malware protection is the most valuable feature of CrowdStrike Falcon."
- "The current database schema presents challenges and has potential for improvement."
What is our primary use case?
Our organization relies on CrowdStrike, a standalone endpoint security solution, to safeguard our bare-metal machines. CrowdStrike continuously monitors for threats on all endpoints. If it detects any suspicious activity, such as malware or malicious processes, it immediately alerts us for investigation.
What is most valuable?
The malware protection is the most valuable feature of CrowdStrike Falcon.
What needs improvement?
The current database schema presents challenges and has potential for improvement.
The technical support response time can be improved.
There are a lot of false positives reported.
For how long have I used the solution?
I have been using CrowdStrike Falcon for almost four years.
What do I think about the stability of the solution?
CrowdStrike Falcon is stable.
What do I think about the scalability of the solution?
CrowdStrike Falcon is scalable.
How are customer service and support?
The technical support is good but the response time can be improved.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We previously used VMware Carbon Black Endpoint. CrowdStrike Falcon is more of an EDR solution.
What other advice do I have?
I would rate CrowdStrike Falcon a seven out of ten.
The maintenance is straightforward.
CrowdStrike Falcon is deployed independently in our environment and we have 30 users.
While CrowdStrike Falcon offers valuable security tools for larger organizations with extensive infrastructure, its complexity might not be ideal for smaller businesses with limited IT resources.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Director of Information Technology at Slice
Effective for threat detection and remediation
Pros and Cons
- "The most valuable features are the complete IPS and IDS."
- "Forensic controls have room for improvement."
What is our primary use case?
Our primary use case is IPS and IDS.
How has it helped my organization?
CrowdStrike Falcon is extensively used by all 2,000 employees.
What is most valuable?
The most valuable features are the complete IPS and IDS. Both the feature provide good measures for threat detection and prevent network intrusions.
What needs improvement?
Forensic controls have room for improvement, and CrowdStrike Falcon can add more features here.
Another improvement could be the support for this product could be cheaper.
For how long have I used the solution?
I have been using CrowdStrike Falcon for two years. We are using version 6.5.1.
What do I think about the stability of the solution?
It is a stable solution. I would rate it a nine out of ten.
What do I think about the scalability of the solution?
The scalability of CrowdStrike Falcon is quite good. There are around 2,000 users in our organization. I would rate it an eight out of ten. There are a few things, such as the forensic part and the investigation, that can be improved.
Which solution did I use previously and why did I switch?
I have worked on many other IDS solutions, but I found CrowdStrike Falcon to be the best.
How was the initial setup?
The setup is pretty straightforward. The deployment took some time because we didn't have an NBM solution. We installed it two years ago. But now it's clear, and we don't need much time to deploy it.
What about the implementation team?
The tech support is good but can be expensive when it goes out of the subscription.
What was our ROI?
I have seen a good return on investment.
What's my experience with pricing, setup cost, and licensing?
There is a license-based model. We use the yearly license. I would rate pricing a seven out of ten, where one is cheap, and ten is very expensive.
What other advice do I have?
I highly recommend people use CrowdStrike Falcon. Overall, I rate it a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Security Principal at Trifecta Cloud Security Solutions
A highly stable solution that is primarily used for its EDR and XDR capabilities
Pros and Cons
- "Regarding features, I appreciate its integration capabilities with identity providers...Stability-wise, I rate the solution a ten out of ten."
- "CrowdStrike needs to quit making up stuff about its features and functionality to bash its competition."
What is our primary use case?
The solution is primarily utilized for EDR and XDR capabilities, with some identity management features integrated through Falcon. In essence, it is employed like other endpoint protection platforms.
How has it helped my organization?
CrowdStrike Falcon no longer stands out compared to other endpoint protection platforms like Carbon Black or Microsoft Defender. Therefore, neither is superior to the other when used in our organization.
What is most valuable?
Regarding features, I appreciate its integration capabilities with identity providers, but it would have been better if they had their own identity product. The documentation is well-done in the solution.
What needs improvement?
CrowdStrike needs to quit making up stuff about its features and functionality to bash its competition.
I would like to see CrowdStrike become closer to an agentless solution where I wouldn't have to deploy software and maintain the version of the solution.
For how long have I used the solution?
I have been using CrowdStrike Falcon for a year. Also, I am using the solution's latest version.
What do I think about the stability of the solution?
There is no doubt about the stability of the solution. Stability-wise, I rate the solution a ten out of ten.
What do I think about the scalability of the solution?
The solution has been successfully deployed in thousands of enterprises, so it is proven to be scalable. Major customers are using it, indicating that scalability is not a concern.
How are customer service and support?
There are two numbers to reach out to the technical support team. Considering the time taken to reach out to them with a request and get a response, I rate them a ten. Based on the technical skills of the customer support team to solve a problem, I rate them between a six and seven.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup process of the solution was straightforward. However, it is important to note that I was only setting up the solution in a POC (Proof of Concept) environment and not in a production one.
What was our ROI?
That's a difficult question to answer because CrowdStrike Falcon was implemented to replace a previous solution. While it was cheaper than the previous solution, the only initial return on investment was cost savings, as we have not yet developed key performance indicators to measure the security benefits of using CrowdStrike Falcon.
The effectiveness of a solution is not always easily measurable by simply avoiding a hack on a given day. Instead, it often requires analyzing reporting data to determine its environmental impact. This data must then be used to calculate the return on investment and compare it to the cost of ownership. In my experience, the only clear return on investment has been in the initial deployment of the solution. The solution's price has typically been lower than that of previous solutions.
What's my experience with pricing, setup cost, and licensing?
In my opinion, the pricing of CrowdStrike Falcon seems aggressive.
What other advice do I have?
I recommend anyone planning to use CrowdStrike Falcon to ensure that they have an integration team. This is because the solution does not have many built-in features, and it relies on partnership integration with other significant players, such as identity and network vulnerability solutions. Consequently, when deploying CrowdStrike, hiring additional personnel is necessary to comprehend the integration process. If CrowdStrike is ranked number one, then Microsoft is above CrowdStrike due to its fully integrated features. If Microsoft ever got details of incorrect licenses, it would run CrowdStrike out of business. Overall, I rate the product eight point nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Owner at IT Solution
Good detection and performance and uses very few resources
Pros and Cons
- "It is an easy product to deploy."
- "We can't do scanning audits or device blocking or application control."
What is our primary use case?
We primarily use the product for the security of the endpoints to protect against viruses and malware. It protects our devices from infection.
What is most valuable?
The solution offers a very low footprint and provides very good protection.
The resources that it uses are much lower than any other EDR or antivirus solution. The amount of RAM that it uses and the CPU that it uses are much lower than the other antivirus solutions.
It is an easy product to deploy.
We've found the product to be scalable.
It is stable and reliable.
What needs improvement?
We can't do scanning audits or device blocking or application control. There are traditional antivirus features missing in XDR, and that is an issue.
For how long have I used the solution?
I've been using the solution for 15 months.
What do I think about the stability of the solution?
It is a very stable solution. There are no bugs or glitches, and it doesn't crash or freeze.
What do I think about the scalability of the solution?
We have 55 people currently using the solution.
This is a scalable product.
How are customer service and support?
We have yet to contact technical support. I can't speak to how their services are.
Which solution did I use previously and why did I switch?
We were using another antivirus previously. However, it was heavier. We liked how this solution used much fewer resources and the fact that we didn't need to update our machines.
How was the initial setup?
The solution is simple to set up and deploy. It's cloud-based, which makes everything easy. It is already configured; you just need to prepare it on the endpoint.
You can deploy the solution within a day.
What's my experience with pricing, setup cost, and licensing?
We are a partner and therefore get the solution for free.
What other advice do I have?
We are Crowdstrike partners.
I'm not sure which version of the solution I'm using; however, it is likely the latest.
From the theoretical perspective, it's a good product. They just need more features. You can't just replace an antivirus with it; you first need to ensure it's covering all of your requirements.
I'd rate the product nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer: partner/customer
Pre-Sales Engineer at EliteVAD
Light with good detection capabilities and able to expand
Pros and Cons
- "The stability is very good."
- "The pricing is a bit too high."
What is our primary use case?
We primarily use the solution for antivirus and endpoint security.
What is most valuable?
I like its detection capabilities, number one. It's also very light. It doesn't slow down my machine.
The solution is stable.
It's quite scalable.
What needs improvement?
The pricing is a bit too high. They need to adjust their target market.
I'd like to see a risk assessment or vulnerability management feature to show the company risk factors for the endpoints that have Crowdstrike deployed.
I'm not sure if they offer patch management. If they don't, they really should. For larger enterprises, managing all those endpoints and trying to figure out which needs a patch can get tedious.
For how long have I used the solution?
I've used the solution for a few months. We're still in the initial engagement.
What do I think about the stability of the solution?
The stability is very good. I can't complain about it. The only concern would be pricing. For this market, it's mostly SMEs and mid-market that we would target, and many would be those looking for antivirus or endpoint security.
What do I think about the scalability of the solution?
The product is scalable. We have about 15 people working on it right now.
How are customer service and support?
We just went through training and were able to do most things ourselves. We haven't needed technical support.
Which solution did I use previously and why did I switch?
I'm also working with Bitdefender.
I switched companies. My previous company was using Crowdstrike and my new one is on Bitdefender. It uses multiple Bitdefender products.
What's my experience with pricing, setup cost, and licensing?
They do have relatively high pricing.
The target market is large enterprises. Maybe they could work on something that can be offered to even small and medium markets.
I was working for a vendor, and we were sharing pricing with a large enterprise, and it was around $800,000 USD or thereabout.
What other advice do I have?
I was a Crowdstrike partner and was working with the vendor. I've since changed jobs.
Whether or not it makes sense to use the solution depends on your budget and your pocket. The features are pretty similar to other options. Whether or not it makes sense to use depends on what you're looking for in endpoint security.
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Information Technology Security Consultant at Sify Technologies
Your dashboards will tell you the number of the endpoints being protected and the incidents.
Pros and Cons
- "CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform. You only need to deploy the light agents on the licensed endpoints, and you're ready to work. Your dashboards will tell you the number of the endpoints being protected and the incidents. There are also incident dashboards with alerts that will tell you about the details."
- "CrowdStrike should provide better visibility in its reporting. There should be more forensic details about detected threats."
What is our primary use case?
CrowdStrike Falcon is an Endpoint Detection and Response system that uses agents deployed on each endpoint. It works on mobile or wired devices. The operator provides you real-time and online protection against the latest malware and wireless attacks.
What is most valuable?
CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform. You only need to deploy the light agents on the licensed endpoints, and you're ready to work. Your dashboards will tell you the number of the endpoints being protected and the incidents. There are also incident dashboards with alerts that will tell you about the details.
What needs improvement?
CrowdStrike should provide better visibility in its reporting. There should be more forensic details about detected threats.
For how long have I used the solution?
I've been using CrowdStrike Falcon for two years.
What do I think about the stability of the solution?
CrowdStrike is highly stable.
What do I think about the scalability of the solution?
CrowdStrike is a cloud-based solution, so it's always scalable. You can adjust your endpoint licenses at any time, so if your endpoint is decommissioned, you can reduce the licenses. If you want to add few more endpoints, you only need to deploy the agents. We have provided CrowdStrike Falcon EDR solutions for many clients, and the largest is about 2,000 licenses.
How are customer service and support?
CrowdStrike support is great. Palo Alto and CrowdStrike both have outsourced support.
How was the initial setup?
Deploying CrowdStrike is straightforward. You can mass-deploy it using any management solution like WSS. It's a light agent that only requires 30 to 40 MB of space, so it's deployed in minutes.
One person is enough to manage the solution. A single admin can create a group based policy and deploy on hundreds of systems in a day if they are connected with their AD or WSS. If they are out of the network and out of the reach, then you need to do it manually, and that takes times for the endpoint availability.
What other advice do I have?
I rate CrowdStrike Falcon eight out of 10. I strongly recommend it.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator

Buyer's Guide
Download our free CrowdStrike Falcon Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2025
Product Categories
Extended Detection and Response (XDR) Security Information and Event Management (SIEM) Endpoint Protection Platform (EPP) Threat Intelligence Platforms Endpoint Detection and Response (EDR) Attack Surface Management (ASM) Identity Threat Detection and Response (ITDR) AI-Powered Cybersecurity PlatformsPopular Comparisons
Microsoft Defender for Endpoint
Fortinet FortiEDR
Microsoft Sentinel
Splunk Enterprise Security
Darktrace
SentinelOne Singularity Complete
Microsoft Defender XDR
Cortex XDR by Palo Alto Networks
IBM Security QRadar
Fortinet FortiClient
Elastic Security
HP Wolf Security
Symantec Endpoint Security
Buyer's Guide
Download our free CrowdStrike Falcon Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- I would like to compare CrowdStrike and Carbon Black. On what basis should I decide?
- What is the biggest difference between Carbon Black CB Defense, CrowdStrike, and SentinelOne?
- What do you recommend to choose when replacing Symantec EDR: SentinelOne or CrowdStirke Falcon?
- What is the biggest difference between CrowdStrike and Cylance?
- CrowdStrike Falcon vs Microsoft Defender ATP: Comparison of features and performance
- Is Crowdstrike Falcon better than Trend Micro Deep Security?
- What are the pros and cons of Darktrace vs CrowdStrike Falcon vs alternative EPP solutions?
- Which solution do you prefer: CrowdStrike Falcon or SentinelOne Singularity Complete?
- How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
- How does Crowdstrike Falcon compare with FireEye Endpoint Security?