CrowdStrike Falcon Endpoint Protection
CrowdStrikeExternal reviews
361 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Cloud-Native Security That Delivers Fast, Powerful Protection
What do you like best about the product?
Its cloud-native architecture enables fast deployment and low system overhead.
Real-time protection works effectively without relying on heavy local agents.
Behavior-based Detection helps identify both known and unknown threats.
Integrated threat intelligence strengthens overall security effectiveness.
Continuous monitoring supports quick investigation and response.
The centralized console is user-friendly and simplifies endpoint management.
Real-time protection works effectively without relying on heavy local agents.
Behavior-based Detection helps identify both known and unknown threats.
Integrated threat intelligence strengthens overall security effectiveness.
Continuous monitoring supports quick investigation and response.
The centralized console is user-friendly and simplifies endpoint management.
What do you dislike about the product?
The platform can be expensive for an small organisation,since the program is solution as premium solution,
Alert volume can be high until the system is turned properly,which can initially create more noise for security team.
Some integrations and advanced features require additional setup or expertise.
Alert volume can be high until the system is turned properly,which can initially create more noise for security team.
Some integrations and advanced features require additional setup or expertise.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon Endpoint Protection Platform tackles the challenge of advanced cyber threats such as malware, ransomware, and fileless attacks by offering real-time detection and prevention. Its behavior-based monitoring, combined with integrated threat intelligence, allows for the rapid identification of both known and unknown threats. For me, this means my endpoints stay secure, the risk of breaches is minimized, incident investigations are more straightforward, and I can respond to potential threats more quickly and effectively.
User-Friendly with Comprehensive Detection Insights
What do you like best about the product?
The software is user-friendly and provides comprehensive information regarding detections and incidents. Implementation is straightforward, and the customer support team is responsive and helpful.
What do you dislike about the product?
The ON-DEMAND SCAN feature can be somewhat troublesome to use on the platform. It scans only PE files.
What problems is the product solving and how is that benefiting you?
Traditional antivirus (AV) solutions, which typically rely on signature-based detection, often have difficulty keeping up with advanced threats such as zero-day exploits, fileless malware, ransomware, and other sophisticated attack methods. Falcon’s next-generation antivirus (NGAV) engine uses machine learning (ML) and behavioral analysis to identify and stop even threats that have not been seen before. This approach results in stronger protection with fewer vulnerabilities. Faster detection and containment also help minimize potential damage and reduce downtime.
Exceptional Malware Protection
What do you like best about the product?
I am impressed with CrowdStrike Falcon Endpoint Protection Platform's outstanding malware protection, which is truly the best. This level of protection ensures that I experience no slowness due to malware attacks, which is a huge advantage for maintaining the efficiency of my systems. Additionally, I appreciate the platform's minimal resource consumption, which allows my endpoints to run smoothly without unnecessary strain. The initial setup process was seamless, making the transition to using CrowdStrike Falcon Endpoint Protection Platform a breeze. Since moving from Trellix, I am pleased with the switch and find great value in the security and performance enhancements provided by CrowdStrike. My overall experience with the platform has been positive enough that I would highly recommend it, evidenced by my willingness to rate it a 9 out of 10 for recommendations to friends and colleagues.
What do you dislike about the product?
I find the price of CrowdStrike Falcon Endpoint Protection Platform to be on the higher side. A lower renewal price could be beneficial.
What problems is the product solving and how is that benefiting you?
I find CrowdStrike Falcon Endpoint Protection Platform provides excellent malware protection, ensuring no threats and less resource consumption. It prevents slowness from malware attacks, offering robust endpoint security.
Real-Time Threat Detection Without Slowing Down Systems
What do you like best about the product?
1. The platform picks up a suspicious behavior in real time without slowing down systems.
2. It doesn't come up with very bulky signatures or heavy updates.
3. Their intel consistently helps identify advanced attack early, especially fileless or behavioral - based threats.
4. Everything runs from the cloud, so endpoints stay fast and protected.
5. Deployment is surprisingly very easy, because the lightweight agent installs quickly.
6. Falcon integrates well with SIEM, SOAR tools, and other security platforms.
2. It doesn't come up with very bulky signatures or heavy updates.
3. Their intel consistently helps identify advanced attack early, especially fileless or behavioral - based threats.
4. Everything runs from the cloud, so endpoints stay fast and protected.
5. Deployment is surprisingly very easy, because the lightweight agent installs quickly.
6. Falcon integrates well with SIEM, SOAR tools, and other security platforms.
What do you dislike about the product?
1. The solution is powerful but can feel expensive for smaller teams and organizations with tight budgets.
2. Advanced features like threat hunting require some experience to fully leverage.
3. The interface is packed with features, which takes time for new users to get used to it.
4. Customer support responses during busy periods, can take longer than expected.
2. Advanced features like threat hunting require some experience to fully leverage.
3. The interface is packed with features, which takes time for new users to get used to it.
4. Customer support responses during busy periods, can take longer than expected.
What problems is the product solving and how is that benefiting you?
1. CrowdStrike Falcon blocks ransomware, malware and fileless attacks at the behavioral level, which keeps my endpoints safe even when threats try to bypass traditional antivirus.
2. Because it's cloud-native, it protects devices without heavy scans or signatures, keeping user machines fast and productive.
3. The platform correlates alerts automatically, helping me understand the root cause quickly instead of manual digging through logs.
2. Because it's cloud-native, it protects devices without heavy scans or signatures, keeping user machines fast and productive.
3. The platform correlates alerts automatically, helping me understand the root cause quickly instead of manual digging through logs.
Outstanding Endpoint Security with Reliable Threat Detection
What do you like best about the product?
The Crowdstrike Falcon EPP is a fantastic solution to secure endpoints within our organisation. We have performed multiple attack solutions and it has been able to detect all of them successfully.
What do you dislike about the product?
Nothing to dislike about this platform altogether. Maybe increasing costs is a cause of concern though.
What problems is the product solving and how is that benefiting you?
Crowdstrike Falcon EPP helps secure our organisation from cyber threats and data exfiltration attempts within internal employee machines.
Real-Time Threat Protection with Minor Dashboard Complexity
What do you like best about the product?
I appreciate the CrowdStrike Falcon Endpoint Protection Platform for its lightweight performance, which operates quickly without causing system slowdowns. The real-time threat detection is incredibly valuable as it allows us to identify security threats instantly and respond swiftly, which is crucial for maintaining the safety of our IT infrastructure. Moreover, I find the strong endpoint protection feature to be a significant asset, providing robust security measures that ensure all endpoints remain secure from potential malware attacks. The platform was easy to set up, which made the initial deployment seamless and efficient. Overall, these features make CrowdStrike Falcon an integral part of our security protocol, and I confidently rate it a 10 for recommendation.
What do you dislike about the product?
I find the dashboard complex for new users. It feels overwhelming at first, and could greatly benefit from being simplified. Providing clear tutorial videos would enhance the user experience for beginners.
What problems is the product solving and how is that benefiting you?
I find CrowdStrike Falcon Endpoint Protection Platform effective for real-time threat detection and malware protection, ensuring fast performance without slowing systems. It secures all our endpoints robustly.
Excellence in Workflow Automation and Asset Management
What do you like best about the product?
The most useful features of CrowdStrike are its workflow automation, host containment, and asset management capabilities. CrowdStrike’s most valuable features include workflow management, host containment, and asset management.workflow automation, host containment, and asset management
What do you dislike about the product?
We are using the most user-friendly option, and I don't think anyone would dislike it.
What problems is the product solving and how is that benefiting you?
We are working on security features focused on host blocking, threat monitoring, IOA analysis, workflow integration, and automated script execution. Our work focuses on enhancing security through host blocking, threat monitoring, IOA detection, workflow integration, and script automation. We are developing advanced security features, including host containment, real-time threat monitoring, IOA-based detection, workflow automation, and script execution capabilities.
Crowdstike Falcon EDR: A SOC Analyst 's Hands-On review
What do you like best about the product?
As a SOC Analyst, I really value CrowdStrike Falcon’s real-time threat detection and visibility. The threat graph and behavioral analytics make it easier to investigate incidents and correlate activities quickly. I also like how lightweight the agent is—it doesn’t slow down endpoints, and updates are seamless. The dashboard is intuitive, and the detailed telemetry gives deep insights for hunting and responding to threats.
What do you dislike about the product?
The main drawback is the steep learning curve for new analysts, especially when diving into advanced hunting queries. Some of the alerts can be very noisy, requiring fine-tuning to avoid false positives. The pricing is also on the higher side compared to other EDR solutions, which might be challenging for smaller organizations.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon helps us detect and respond to endpoint threats in real-time. It provides detailed telemetry and behavioral analytics that improve our investigation speed and reduce dwell time. The cloud-based architecture ensures scalability and seamless updates. Overall, it has strengthened our SOC capabilities by giving us better visibility, faster containment, and reduced risk of data breaches.
State-of-Art solution that provides Visibility, Threat Analysis and Response
What do you like best about the product?
Falcon offers visibility, detection and response, and integration within a single agent. It is easy to deploy across different platforms and brings everything together in a unique central management console for threat analysis and orchestration. This setup allows for the creation of automatic and proactive responses to adversaries and other threats.
What do you dislike about the product?
Falcon Crowdstrike Marketplace apps are not updated regularly, which can be frustrating when trying to get a response from vendor integration during a proof of concept. The lack of timely updates sometimes makes the process more challenging than it should be.
What problems is the product solving and how is that benefiting you?
Visibility, integration, and protection are among the key benefits of using FALCON. These features enhance the way threat hunting, data analysis, and extended response are carried out within IT Security Architecture, offering solutions for every layer of security.
CS deployment is very straight forward, they are not only an endpoint but also a top security firm
What do you like best about the product?
The ease of implementation stood out. Deployment was fast with minimal disruption. The interface is intuitive, and the lightweight agent doesn’t impact system performance. Its broad feature set (threat detection, EDR, vulnerability management) is robust, and the frequency of use is daily since it runs seamlessly in the background. Customer support has been responsive and knowledgeable, and integration with other security tools has been straightforward.
What do you dislike about the product?
The cost can be somewhat concerning, particularly when considering the price of additional modules such as IAM and SOAR. I hope they will consider offering free access for at least 50 to 100 devices to allow users to test their features, as this could encourage customers like me to take their product more seriously. Overall, I like their product and believe it is worth the investment.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon addresses the challenge of advanced endpoint protection by detecting and stopping threats that traditional antivirus solutions often overlook. It gives us real-time visibility into attacks, suspicious activities, and vulnerabilities across all our endpoints, whether on-premises or remote.
This has led to a noticeable reduction in security incidents, less downtime, and better compliance with internal and regulatory security standards. Since it is cloud-native, we avoid the need to maintain heavy infrastructure, and updates are applied seamlessly. As a result, our IT and security teams now spend less time responding to incidents and can focus more on proactive defense.
This has led to a noticeable reduction in security incidents, less downtime, and better compliance with internal and regulatory security standards. Since it is cloud-native, we avoid the need to maintain heavy infrastructure, and updates are applied seamlessly. As a result, our IT and security teams now spend less time responding to incidents and can focus more on proactive defense.
showing 1 - 10