CrowdStrike Falcon Cloud Security Reviews

I have been using CrowdStrike Falcon Cloud Security for more than a year, approximately one and a half to two years.

My main use case for CrowdStrike Falcon Cloud Security is in our environment where we run workloads across multiple AWS accounts. Our organization is already using native tools from AWS such as GuardDuty, Inspector, and Security Hub. However, management decided they wanted deeper protection and better monitoring across all accounts. They wanted a centralized solution that would provide an additional layer of security. Although we already have in-house tools, we wanted an overlaying layer for faster threat detection and visibility in one central place. CrowdStrike Falcon Cloud Security helped us bridge this gap and extend our security across all other accounts. It has provided us a good layer of protection across all workloads including EC2, EKS, ECS, and several parts of our Linux servers.

To compare CrowdStrike Falcon Cloud Security to the native AWS tools I mentioned, such as GuardDuty and Inspector, we needed deep visibility and real-time threat protection. Along with the native AWS tools, we wanted an extra overlaying layer of security to our cloud environment to strengthen our environment security. We chose CrowdStrike Falcon Cloud Security to provide faster threat detection. This is why our organization decided to go with this solution.

I have seen a return on investment by preventing potential incidents and reducing threats, anomalies, or misconfigurations.CrowdStrike Falcon Cloud Security has nearly saved us some amount, though I am not exactly sure of the numbers since the Finops team handles the financial side. What we have gained from CrowdStrike Falcon Cloud Security is that EC2 downtime has been prevented and time has been saved considerably, around eight to ten hours per week through automatic onboarding and centralized visibility. We no longer need to switch between ten plus AWS accounts or perform manual scanning. We can now bring all our accounts together in one tool or solution. Our security has been significantly increased and it is pretty stable in our environment. This is one thing that CrowdStrike Falcon Cloud Security literally gave us with a positive impact and makes it a good investment.

To provide more detail about my main use case and how I use CrowdStrike Falcon Cloud Security day-to-day, I can share a specific example where it helped me respond to a threat. Recently, we had production EC2 instances across multiple AWS accounts, and CrowdStrike Falcon sensor was deployed automatically using the SSM Manager. We saw an alert where CrowdStrike detected anomalous behavior originating from some rogue IP address. This appeared to be potentially a DDoS attack in our cloud environment, which is fairly common when hackers try to get inside your network and gather organizational data. CrowdStrike performed very well here, detecting the alert and helping us identify that someone was trying to gain access. This really helped us have a broader view, and we acted accordingly in response to it. In any fault and threat detection, CrowdStrike Falcon plays a crucial role in our environment and gives us a clear point where we can focus our efforts rather than hunting down what is happening.

The best features CrowdStrike Falcon Cloud Security offers include their runtime security, particularly CrowdStrike CWPP. Their runtime security monitors processes at the kernel level and blocks any malicious behavior in real time. This is really good from Falcon as it protects workloads such as EC2 containers and Linux and Windows workloads at the OS level and kernel level. It detects any kind of credential theft or any movement within these workloads. Additionally, we see it elevates container security in terms of EKS, ECS, and ECR. It scans every image in our ECR and provides real-time vulnerability detection and protection for our container workloads.

Their threat intelligence is really good, and that is one part we really appreciate about Falcon threat intelligence.

Regarding how CrowdStrike Falcon Cloud Security can be improved, I would say they can improve their support. There were a couple of cases where we needed to escalate issues in order to get proper support. That part could use some tweaking on their end. Additionally, the recent incident during the last summer literally impacted our systems. We had some of our workloads that affected the business, and it was a difficult experience. Apart from that, it is a good tool and the experience with CrowdStrike Falcon Cloud Security has been excellent. We did not find any kind of issues, but if they could improve their response to security-related incidents and provide on-time support or better understand our concerns and address them accordingly, it could be very helpful.

Regarding needed improvements, I think they should enhance automatic alerting with CI/CD scanning and reporting capabilities. Additionally, it would be better to implement Falcon sensor health monitoring so agents are always active. We could know how it is behaving and how it is treating our environment. That could be a little helpful.

The customer support is pretty good, but it can be improved a little bit. I would rate the customer support on a scale of one to ten as a six. They have many improvements that need to be made.

Before choosing CrowdStrike Falcon Cloud Security, we also looked at Wiz, which is another cloud security platform. We evaluated Wiz before moving to CrowdStrike Falcon Cloud Security.

Regarding my experience with pricing, setup cost, and licensing, the sales team deals directly with this kind of pricing. In terms of licensing, it is a little expensive. CrowdStrike Falcon Cloud Security is on the higher side of the price part.

The advice I would give to others looking into using CrowdStrike Falcon Cloud Security is that if they already have any in-house cloud tools and want to enhance their security in their cloud environment, CrowdStrike Falcon Cloud Security can bring a positive impact. It is a really value-for-money tool. Otherwise, we did not see any issues. It runs lightweight and it gives accurate alerts, so there are no more false alarms. It is a good product to enhance your cloud and strengthen your security. I would rate this product an eight out of ten.

My primary use case for CrowdStrike Falcon Cloud Security is to secure my IAM users, monitor my Lambdas for security vulnerabilities, check whether policies and IAM policies are misconfigured, and verify whether CrowdStrike is installed on all EC2 instances and containers.

A specific example of how I have used CrowdStrike Falcon Cloud Security in my day-to-day work is setting up a workflow that blocks an IAM user or removes all their rights if that user is accessed from an IP address range that is not allowed, preventing them from doing anything in Cloud Security or in the cloud. I have also set up notifications so that I am alerted if a Lambda has security vulnerabilities or if an instance does not have a CrowdStrike sensor installed. Additionally, I automatically install CrowdStrike on all EC2 instances if it is missing there.

I use the DSPM feature in the module to scan my databases to see whether sensitive data is stored or present in the databases.

I protect EC2, containers, and RDS with CrowdStrike Falcon Cloud Security.

The cloud security use cases that are most important for my company include posture management and identity protection. With posture management, I can roll out the CrowdStrike sensor to containers and EC2 instances relatively easily. With identity protection, I can secure my identities so that I am much better positioned there than before.

CrowdStrike Falcon Cloud Security has had a positive impact on my company because it has allowed me to see quite well and easily which policies have too many permissions that they might not need or do not need at all, how long users or policies have not been used, how many runtimes are used for Lambdas that have a security vulnerability or are outdated, and which libraries are used in the Lambdas that contain security vulnerabilities and definitely need to be patched.

I receive automated notifications and always know very quickly when CrowdStrike detects a security vulnerability or sees one within my cloud asset. In the past, I had to search manually and did not know exactly where a security vulnerability existed. CrowdStrike also provides a lot of information from its own database.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize cloud risks or misconfigurations by examining many things within Falcon.

CrowdStrike Falcon Cloud Security detected a misconfiguration when it noticed that in some IAM policies I granted too many rights where these rights were not needed, such as EC2 permissions even though the IAM policy is attached to a role that has no interaction with EC2.

CrowdStrike Falcon Cloud Security has affected collaboration between my security, cloud, and DevOps teams very well. Because I use Cloud Security, the security staff always have very good information about the issues or dangers that are hidden and can make these very clear to the DevOps team so that a very easy, good, and simple solution can be found.

The solution fits into my development, DevOps, or cloud operations workflows very well. My team already uses some functions quite extensively, and the DevOps team was very much against it at first, but after they got to know the Cloud Security module more and more, they were also positively impressed by it.

CrowdStrike Falcon Cloud Security has not yet helped me consolidate tools or reduce the complexity of my cloud security program.

I have experienced benefits from managing cloud security via the comprehensive CrowdStrike Falcon platform such as a very good overview of my assets, a very good overview of the threats in my cloud environment, a very good overview of CloudTrail events, and a relatively simple installation of the CrowdStrike sensor on EC2 instances or containers.

From my perspective, the best features that CrowdStrike Falcon Cloud Security offers include DSPM and the CNAPP, which is the asset overview. It is very good because I can see all assets in the cloud at a glance: how many IAM users, policies, IAM roles, EC2 instances, and containers are present.

I particularly appreciate the asset overview because it offers connections between the resources. In the cloud, I can look at specific resources, but I do not have a concrete overview of how everything is linked together. CrowdStrike Falcon Cloud Security offers a very good way to see as an overview which resources exist or are linked with which others, and how they interact with each other.

I rate the governance and security of the AI features of CrowdStrike Falcon Cloud Security as good.

I find the accuracy and reliability of the AI outputs of CrowdStrike Falcon Cloud Security very good.

CrowdStrike Falcon Cloud Security provides visibility across my cloud environments very effectively. I can get a very good overview of the public cloud I use.

I find the platform very useful for correlating cloud vulnerabilities, identities, configurations, and runtime activities in order to understand actual risks because this platform presents the speed and the overview so well that I can identify in just a few steps where the activity or the risk of something happening exists.

Runtime threat detection and preventive cloud security features play a very large role in my overall security strategy because I benefit from it in terms of security and can act relatively quickly and better. I thus increase the response and handling of these dangerous situations and can protect myself better.

CrowdStrike Falcon Cloud Security could be improved by making the overview of the settings a bit better because recently the settings were moved so that certain things are now located elsewhere. The overview of these settings should perhaps be simplified. Additionally, there should be a solution for pricing or licensing when a tenant is used for multiple companies, so that not all assets necessarily consume a Cloud Security license if they do not want to use Cloud Security.

I have been using CrowdStrike Falcon Cloud Security for 8 months.

CrowdStrike Falcon Cloud Security is stable.

I see the scalability of CrowdStrike Falcon Cloud Security as good.

I find the customer support of CrowdStrike Falcon Cloud Security to be very good.

I used AWS's own security tools or services before.

I have not seen a return on investment from using CrowdStrike Falcon Cloud Security as I have not reduced staff because staff are also very important, but I have improved response times.

I bought CrowdStrike Falcon Cloud Security directly from CrowdStrike. My experiences with pricing, setup costs, and licensing were okay. It was not the best situation or the best experience, but they were adequate.

I have been using CrowdStrike Falcon Cloud Security for almost three years.

My primary use case involves securing endpoints and servers — approximately 6,000 endpoints and over 500 servers running CrowdStrike Falcon under the EDR framework.

In my daily work, we primarily use CrowdStrike Falcon to respond to alerts and handle BAU activities related to malware. This includes investigating both false positives and true positives, as the platform provides comprehensive protection for all our workstations and servers against malicious or suspicious activity.

Additionally, we leverage CrowdStrike Falcon for incident response and antivirus compliance purposes, alongside its robust EDR capabilities.

CrowdStrike Falcon Cloud Security has been a game-changer for us at our organization, securing around 6,000 endpoints and 500+ servers over the past few years. We've seen quicker incident responses, clearer visibility into what's happening across our setup, and less hassle managing tools since everything runs on one platform.

It spots threats in real time using behavioral analytics and machine learning, catching both known bad stuff and sneaky unknowns before they cause trouble. False positives dropped, making daily SOC work smoother without chasing ghosts.

When alerts hit, we isolate issues, kill processes, and remediate fast across on-prem and cloud. Ties right into threat intel for proactive hunting, fitting our endpoint-heavy workflow perfectly.

The best features of CrowdStrike Falcon Cloud Security, in my opinion, include the deployment process and management; it offers a simplified approach that is user-friendly for new users to understand quickly.

The dashboard of CrowdStrike Falcon Cloud Security is particularly helpful because it simplifies creating and maintaining policies, and managing endpoints becomes an easy process by allowing us to isolate endpoints as needed.

In addition to the dashboard, the features related to malware protection, integrated monitoring, file protection, network scanning, firewall policies, and IPS are really good.

CrowdStrike Falcon Cloud Security has positively impacted my organization by reducing false positives and enhancing security day by day; after testing it on 100 to 200 systems, we convinced the client to deploy it across 6,000 workstations and over 500 servers.

I did see significant changes; previously, there were multiple AV products, and after deploying EDR, many initial issues were resolved as we strengthened our policies over time.

I have been using CrowdStrike Falcon Cloud Security for over 2.5 years.

CrowdStrike Falcon Cloud Security is stable in my experience.

The scalability of CrowdStrike Falcon Cloud Security is good, and it can easily scale up to over 20,000 or 30,000 endpoints.

Customer support for CrowdStrike Falcon Cloud Security is good; I find it satisfactory.

I would rate the customer support an eight out of ten.

Positive

Previously, I used multiple solutions including Microsoft Defender, Sentinel, Trend Micro, Trimix, Palo Alto, and Symantec, and while I am currently working with CrowdStrike Falcon Cloud Security and others, I have not made a full switch yet.

CrowdStrike Falcon Cloud Security setup is straightforward.

No integrator, reseller, or consultant was used for CrowdStrike Falcon Cloud Security deployment at our organization.

In-house SOC team handled it directly via lightweight agent scripts and console setup, keeping it straightforward and controlled.

I believe we have seen a return on investment through time saved and managed employee workload, allowing fewer employees to manage everything effectively.

In terms of pricing, the setup cost and licensing are comparatively a bit expensive, but the solution's effectiveness and mechanisms justify the cost.

Before selecting CrowdStrike Falcon Cloud Security, I evaluated Trend Micro because it provides good solutions, the latest being Vision One.

For those considering deploying CrowdStrike Falcon Cloud Security, I strongly suggest deploying it as soon as possible since it reduces both employee workload and time, while enhancing operational efficiency.

Overall, I find CrowdStrike Falcon Cloud Security to be excellent, making it accessible for both beginners and experienced users alike.

I rate this review a nine out of ten.

My main use case for CrowdStrike Falcon Cloud Security is securing containerized applications in Azure and Google Cloud.

A specific example of how I use it to secure those containerized applications is that we're looking at indicators of misconfiguration of where the containers or permissions to the containers are improperly provisioned with Terraform.

The best features CrowdStrike Falcon Cloud Security offers include the attack path analysis and the dependency that shows the dependencies that are running in production.

The attack path analysis has helped our team as we are moving away from base CVSS scores to figure out what is prioritized for our developers to fix, and being able to see what's running in production and vulnerable and reachable with the attack path analysis gives us the ability to prioritize work for our development teams.

CrowdStrike Falcon Cloud Security has positively impacted our organization as we've been able to close a lot of the high-volume, low-severity vulnerabilities by improving the way that we provision cloud applications and cloud environments, reduce noise through that aspect, and get a view of the highly critical things that may not have seemed critical because of how the attack path analysis shows that they're reachable and exploitable.

I find that sometimes the menus in CrowdStrike Falcon Cloud Security are a little confusing, but it's getting better every day.

I have been working in my current field for one year.

I find CrowdStrike Falcon Cloud Security to be 100% stable.

We haven't had any issues with the scalability of CrowdStrike Falcon Cloud Security across our cloud environments.

The customer support for CrowdStrike Falcon Cloud Security is excellent.

I did not previously use a different solution, but we did preview Sysdig before buying ASPM and CSPM.

I have not seen a return on investment, and I don't have any answers to that.

My experience with pricing, setup cost, and licensing for CrowdStrike Falcon Cloud Security is that it was cheaper than the other solutions we tried.

Before choosing CrowdStrike Falcon Cloud Security, I evaluated Sysdig as an option.

I rate CrowdStrike Falcon Cloud Security a 10 out of 10.

I give it a 10 out of 10 because it's a comprehensive solution that really overshadows some of the specific tools that we use for static code analysis and infrastructure as code analysis, and I could see us unifying some of those efforts to that platform in the future.

CrowdStrike Falcon Cloud Security's AI capabilities regarding governance and security are excellent.

I have had no issues with CrowdStrike Falcon Cloud Security's accuracy and reliability of output.

CrowdStrike Falcon Cloud Security is deployed in my organization as a hybrid cloud and also with some on-prem sensors.

We use Azure, Google Cloud, and AWS for our hybrid cloud deployment.

I am protecting basically everything in our cloud environment with CrowdStrike Falcon Cloud Security.

I protect production and staging and development containers, containerized applications, cloud applications, cloud workloads, and also identity and access provisioning to storage, such as cloud storage, with CrowdStrike Falcon Cloud Security.

All cloud security use cases, such as posture management, workload protection, identity protection, or cloud detection and response, are important to my organization because that's why we use CrowdStrike Falcon Cloud Security, as it gives a holistic view.

I feel very confident in CrowdStrike Falcon Cloud Security's visibility across my cloud environments.

The platform is critically important for connecting cloud vulnerabilities, identities, configurations, and runtime activity to understand actual risk because it shows us what is actually running and exploitable and gives a contextual view of the accounts that have access to those things, thus addressing the perfect storm lined up with mis-provisioned accounts, account access, vulnerable packages running on workloads, and vulnerable containers.

We did not consolidate any tools with CrowdStrike Falcon Cloud Security, and I feel that it has made it a bit more complex, but only because there was no visibility into these issues before.

CrowdStrike Falcon Cloud Security has affected collaboration between my security, cloud, and DevOps teams positively, as we've been able to help the operations and DevOps team close out a lot of misconfigured items and reduce their ticket count because they're provisioning things more securely.

I would rate the customer support for CrowdStrike Falcon Cloud Security a 10 on a scale of 1 to 10.

I would advise others looking into using CrowdStrike Falcon Cloud Security to make sure that the onboarding plan is clear and that they're booking follow-up meetings with customer success to ensure they're understanding the use of the product.

My overall review rating for CrowdStrike Falcon Cloud Security is 10 out of 10.

Our main use case for CrowdStrike Falcon Cloud Security is that we currently have no visibility into our cloud environments. We use a private cloud provider called OVH and a public cloud provider in a private version of Azure, while also currently evaluating Google Cloud. We need transparency and visibility across our entire infrastructure—from servers to actual VMs that are still running to Kubernetes containerization and all related components.

With CrowdStrike Falcon Cloud Security, we were able to monitor our entire Kubernetes landscape, which means we could see exactly what the individual pods are doing and what CVEs exist for PHP-to-shell or NodeJS-to-shell. Based on that visibility, we were able to react more quickly and patch the systems accordingly.

CrowdStrike Falcon Cloud Security is deployed in our company using a hybrid cloud environment. In our hybrid cloud environment, we mainly use Azure and OVH. We specifically protect our legacy stack and our new Kubernetes stack with CrowdStrike Falcon Cloud Security.

The most important cloud security use case for our company is cloud detection and response, which we use very often because we are also looking at where vulnerabilities might exist. Identity and access management is also central to me personally, focusing on checking where identities are stored, who enters which credentials, how they are secured, and so on.

Identity and access management is central to our company because it addresses problems we face due to a lack of knowledge about where all the access comes from. Considering we have many possible applications including external connections to banks, we face significant challenges around access execution, data locations, data outflows, user identification security, and addressing potentially compromised accounts.

In our overall strategy, runtime threat detection and preventive cloud security play essential roles since we are a cloud-first company facing challenges in transparency and awareness due to not owning our infrastructure. With CrowdStrike Falcon Cloud Security, we have created visibility to manage what is happening beneath the surface and how we can mitigate risks.

CrowdStrike Falcon Cloud Security has a positive impact on our company overall, especially in the sense that we now have not only transparency but also speed, enabling us to respond faster to security incidents and patch everything accordingly while also adjusting and optimizing our processes. We no longer have to look at five or six dashboards at the same time but actually just at one central dashboard, which is a truly significant advantage. This allows us to secure additional full-time positions with management and raise awareness for security to get a higher priority.

I can estimate the time and resources we have saved through the use of the central dashboard and the faster response capabilities. We evaluated everything from a purely mathematical standpoint and concluded that over the course of a year, we save the equivalent of at least one full-time position. We now have more transparency with less investment compared to before, when we had less transparency but a full-time employee and a SOC-NOC involved with ongoing contracts. This allowed us to mitigate or downgrade this managed service and effectively save one full-time role.

Collaboration between our security team, cloud team, and DevOps has changed through CrowdStrike Falcon Cloud Security as the team as a whole has grown closer together, resulting in more centralized insights. We still have a three-lines-of-defense model which now raises more requirements because increased visibility brings more tasks to manage.

CrowdStrike Falcon Cloud Security fits particularly well into our DevOps workflows, as my colleagues there are always open to new things. It has been well received by our security department and second line of defense, especially after migrating from a vendor that did not work as effectively, which made things much easier.

I have experienced benefits from managing our cloud security across the entire CrowdStrike Falcon platform. Visibility is one of the biggest factors from which we gained speed.

What I appreciate most about CrowdStrike Falcon Cloud Security is that we have a unified dashboard for everything, providing a global, transparent overview of all the solutions we use and the diverse challenges such as VMs and Kubernetes containerization. All of these are consolidated in one place, queried centrally and accompanied by guidelines that we can follow through, making it very helpful in truly creating transparency and awareness—both within our team for my employees and also toward management.

In my daily work, this central transparency and the dashboard help us significantly. For instance, with the latest findings around PHP-to-shell or NodeJS-to-shell, which affected us, we had the transparency to get an immediate overview. This allowed us to quickly take everything down, patch it, and bring the services back up again, enabling us to be back online within a very short time.

I think the governance and security features of the AI in CrowdStrike Falcon Cloud Security are very impressive. Overall, I am very positive about it. Complete cloud security is an important approach that we should have started implementing much earlier, as it undoubtedly makes our everyday work easier, saves us time, and serves as a defense against black hats, making it a key building block for our implementation.

CrowdStrike Falcon Cloud Security helps me address challenges in identity and access management. The product itself is the greatest help. It is the whole, the big picture, where every puzzle piece brings its advantages to form a comprehensive solution.

The platform is very helpful in correlating cloud vulnerabilities, identities, configurations, and runtime activities to understand actual risks. In today's world, where vulnerabilities appear in shorter timeframes, it is really a question not of whether we apply security updates but how quickly we can apply them and how automated we can make the process. This focuses on timing and quicker hardening while ensuring transparency about our existing resources.

To improve CrowdStrike Falcon Cloud Security, I would like to have not only API integration and the integrated AI used in a more interactive way but also an option to chat directly with an AI. This would give me an agent function that directly builds and implements everything for me so that starting from a blank page, it can be completely revised and built accordingly.

I find that no major adjustments have been made to the AI results from CrowdStrike Falcon Cloud Security, and I am missing the agent functionality where things would be automatically implemented.

We have only started using CrowdStrike Falcon Cloud Security recently, approximately two months ago.

CrowdStrike Falcon Cloud Security is stable.

I do not think there are any limitations regarding the scalability of CrowdStrike Falcon Cloud Security in my environment. I see it very positively.

I am very satisfied with the customer support of CrowdStrike Falcon Cloud Security so far. Follow-up questions were answered directly, and I have had no negative experiences.

On a scale from one to ten, I would rate customer support a ten.

With CrowdStrike Falcon Cloud Security, we consolidated tools by replacing Sophos, specifically its Cloud Optix module. We moved to a state-of-the-art solution since Sophos was using a model that was no longer being developed, creating the pressure that led us to advance our processes.

Before using CrowdStrike Falcon Cloud Security, we utilized Sophos' Cloud Optix module but decided to switch due to Sophos discontinuing their service and not wanting to develop it further.

As of now, the return on investment amounts to roughly one service contract of around €300,000 plus an additional full-time position for a year based on our calculations, although this still needs further evaluation to confirm its accuracy.

My experience with pricing, setup costs, and licensing for CrowdStrike Falcon Cloud Security has been pretty smooth. We had a strategic partner help us set everything up, making the process very intuitive. We do not need managed service in the future and can handle implementation and further development ourselves.

Before deciding on CrowdStrike Falcon Cloud Security, we evaluated other solutions, including Palo Alto Cortex XDR.

On a scale from one to ten, I would rate CrowdStrike Falcon Cloud Security a ten.

I chose a ten specifically because we saved a full-time position, cut external service providers, and gained speed, more transparency, and more visibility, leading to a clear ten for me.

I suggest that other companies looking into CrowdStrike Falcon Cloud Security or planning an implementation start step by step, experiment gradually, and definitely get started.

My main use case for CrowdStrike Falcon Cloud Security is protecting cloud workloads. We operate cloud workloads and use cloud security to protect them.

Identity protection is one of the most important things for our organization because we see a lot of attacks against identities and misuse of them.

CrowdStrike Falcon Cloud Security has positively impacted my organization by giving us more overview and solving our problems faster.

Having that overview and faster problem solving has helped my team and organization by allowing us to see faster what is going on and where our security issues are with fewer people.

Regarding CrowdStrike Falcon Cloud Security's AI capabilities, governance and security are very important, so being able to see exactly what happens in cloud security helps me create management reports about governance in cloud.

Its accuracy and reliability of output are improving for us, and at the moment, it is the right decision to use it as we get a lot of improvements in our daily jobs.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize cloud risks and misconfigurations by giving us a good overview about misconfigurations so that we could react fast to the findings and change the configuration accordingly.

The platform is very useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity to understand actual risk because the combination of all that helps a lot and speeds up the oversight about these risks and helps us to improve it.

Managing cloud security through the broader CrowdStrike Falcon platform provides advantages such as a better overview and faster reaction times.

To improve CrowdStrike Falcon Cloud Security, I suggest using an agentless solution to inspect AWS setups, infrastructure, and services to visualize how cloud workloads are protected, working, and exchanging data within the cloud.

I have been using CrowdStrike Falcon Cloud Security for one year.

CrowdStrike Falcon Cloud Security is stable.

In our environment, CrowdStrike Falcon Cloud Security scales well.

The customer support is very good with fast reaction times and good solutions; specialists are great at CrowdStrike.

I would rate the customer support a nine on a scale of one to ten.

I have not seen savings regarding personnel as our security team is very small, but we save time, allowing us to concentrate on a higher level of maturity in regards to vulnerability management.

My experience with CrowdStrike Falcon Cloud Security's pricing, setup cost, and licensing is that it is very expensive; even though it helped a lot, it is rather expensive.

I would rate CrowdStrike Falcon Cloud Security an eight on a scale of one to ten because it is not perfect.

Currently, the solution does not fit well into our development, DevOps, or cloud operations workflows, as we do not have good communication between DevOps and security, so we have to improve our internal setup.

My advice for others looking into using CrowdStrike Falcon Cloud Security is to know your setup, know your infrastructure, prepare to invest some time, and you will get out benefits.

My main use case for CrowdStrike Falcon Cloud Security is detecting malicious activity.

A quick specific example of how I use it to detect malicious activity is that we always depend upon CrowdStrike Falcon Cloud Security signatures to alert any unusual activity like identity changes, deletion, or addition of new identities and assigning new privileges.

I am protecting parts of my cloud environment with CrowdStrike Falcon Cloud Security including M365 and ServiceNow.

The most important cloud security use case for my organization is cloud security, specifically posture management, as it has real-time visibility of all the activities performed and it can correlate the logs and trigger alerts.

CrowdStrike Falcon Cloud Security has impacted my organization positively by giving complete visibility and providing a good AI solution to act fast on any compromise.

Since using CrowdStrike Falcon Cloud Security, I have noticed faster response times.

CrowdStrike Falcon Cloud Security has helped my team identify and prioritize cloud risks or misconfigurations because the product identifies risks, monitors all the activities of all the SaaS applications, and triggers alerts.

CrowdStrike Falcon Cloud Security has affected collaboration between my security, cloud, and DevOps teams by providing valuable input to the DevOps team and cloud security team with relevant logs and actions taken.

CrowdStrike Falcon Cloud Security has helped consolidate tools and reduce complexity in my cloud security program because it has a single pane of glass where we can have more visibility, and we do not need to use different tools to monitor different applications. In the past, we used Carbon Black for application security, and now we are using Airlock.

Runtime threat detection and preventative cloud security capabilities play a great role in my overall security strategy because it prevents cloud security threats and has really helped influence the maturity score of my organization.

I have experienced great advantages from managing cloud security through the broader CrowdStrike Falcon platform.

The best features CrowdStrike Falcon Cloud Security offers include being proactive and being able to detect threats earlier and having AI capabilities, which I believe is best in market.

The AI aspect helps me in my day-to-day work and decision making because it makes my job easier and faster.

CrowdStrike Falcon Cloud Security has features including taking a backup of identity, and if anything goes wrong, I can use an identity snapshot to replace the identity.

Regarding CrowdStrike Falcon Cloud Security's AI capabilities, I think it has a pre-built framework that really helps.

My thoughts on CrowdStrike Falcon Cloud Security's accuracy and reliability of output are that it is really impressive.

CrowdStrike Falcon Cloud Security effectively provides visibility across my cloud environments by giving a solution and complete coverage of all the clouds, and most of the cloud solutions are supported, which is why we are using it.

The platform is useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity to understand actual risk because visibility is very important. Having visibility over vulnerability, identity, and configuration gives a complete understanding of how attacks happen and how I can act on them.

The solution fits perfectly into my development, DevOps, and cloud operations workflows as CrowdStrike integrates with other SaaS applications, providing complete visibility and logs with AI-generated descriptions.

I feel the improvements needed for CrowdStrike Falcon Cloud Security are not in my hand, and I think the CrowdStrike team needs to work on it.

I rate it a six because the visibility part, I feel, is a bit lacking. For example, it needs to improve because we have a lot of SaaS solutions that we worked on CrowdStrike Falcon Cloud Security to cover, but I feel it is not complete, and there are some improvements required.

I have been using CrowdStrike Falcon Cloud Security for two years.

CrowdStrike Falcon Cloud Security is stable.

Its scalability is really impressive.

Customer support is great.

I would rate the customer support as eight on a scale of one to ten.

Previously, we used McAfee, and now we are using CrowdStrike Falcon Cloud Security.

Before choosing CrowdStrike Falcon Cloud Security, we evaluated McAfee.

On a scale of one to ten, I would rate CrowdStrike Falcon Cloud Security as six.

My advice to others looking into using CrowdStrike Falcon Cloud Security is that it is very easy to handle, it gives more visibility and information, and it is more advanced. I recommend using it.

CrowdStrike Falcon Cloud Security protects my company's cloud subscriptions and the different cloud environments where we have servers deployed.

We deploy CrowdStrike in the AWS or Google subscription, where it secures the virtual servers we have in public and private clouds to ensure they are properly protected and do not suffer any tampering by a person or external attacker.

We rely heavily on the product because it provides quite good security and we believe it is one of those points that are irreplaceable and indispensable to continue working normally from a security standpoint.

CrowdStrike Falcon Cloud Security is deployed in our organization using both public cloud and private cloud, with mainly AWS and Google Cloud Service.

I am currently protecting everything in my cloud environment with this tool, together with other tools.

The most important cloud security use case for my organization is endpoint protection, as we are protecting the doors to our house, so it is essential that this works well in order for us to feel protected.

CrowdStrike Falcon Cloud Security has had a positive impact on my organization by giving us the peace of mind we need to know that we are protected; in fact, if we do not have CrowdStrike in some subscription, we do not consider ourselves safe or at ease.

The reduction in incidents is the main thing since I implemented this solution, besides the time saved in detection, and above all we are agile when it comes to detecting, mitigating, and isolating any machine that could be dangerous.

CrowdStrike Falcon Cloud Security has affected collaboration between the security, cloud, and DevOps teams in my organization positively; we detect issues, download the reports, and send them to the people responsible for maintaining the applications so they can fix them.

I have experienced advantages from managing cloud security through the broader CrowdStrike Falcon platform, as it complements other modules very well, and I have a global view of my entire perimeter.

The best features offered by CrowdStrike Falcon Cloud Security are being able to detect any type of threat in real time and contain it.

As soon as a trigger is set off by a malicious action that we see with anomalous behavior, which usually differs from normal behavior, it is able to protect it, isolate it, and create a use case for its investigation in the CrowdStrike SOC, so we can contain the threat.

CrowdStrike Falcon Cloud Security provides a lot of visibility across all my cloud environments into the endpoints, into the actions that take place, the calls it makes to the kernel and the different parts, and also when it tries to pivot to other parts of the network, so it gives us complete visibility for forensics or for an investigation.

CrowdStrike Falcon Cloud Security helps my team identify and prioritize risks or misconfigurations in the cloud quite a lot; it helps us with recommendations, configurations, and above all to have visibility into what is happening.

We do not have a continuous CI/CD flow of Continuous Integration/Continuous Development, but we do try to download some weaknesses, whether in applications in CVE format or especially in containers, and we try to download and get those CVEs to then pass them on to the development teams so they can fix them.

CrowdStrike Falcon Cloud Security works with other cloud tools we have that are complementary; we do not depend solely on CrowdStrike.

Real-time threat detection and preventive capabilities play an important role in my overall cloud security strategy; what I value most is the capability to actually find what is dangerous and what is a threat so it can be fixed, as it removes a lot of noise and is able to get straight to what really matters.

The improvements could focus on knowing about the threat and the less time we need to solve the problem or isolate it; it already has good levels, but if it improves, even better.

The communication and ease of use can be improved visually so that it is more user-friendly, given that it requires a bit more specialization, but in automated cloud services it always works well; still, it can improve.

CrowdStrike Falcon Cloud Security connects cloud vulnerabilities, identities, configurations, and real-time activity in order to understand the actual risk, and while the vulnerabilities part is important and may be where the tool has to improve the most, it does offer a more or less holistic, complete view of the landscape; it is true that we rely on other vendors for vulnerability remediation on the machines.

Regarding the artificial intelligence capabilities of CrowdStrike Falcon Cloud Security, I think its governance and security is something that is in its early stages and has to improve little by little.

I cannot tell for sure about the accuracy and reliability of the results offered by Falcon Cloud Security's artificial intelligence because these modules have been around for relatively little time, but I think they need to be refined a bit more, although overall I think it is fine and adds value.

I have been using CrowdStrike Falcon Cloud Security for approximately a year and a half.

I consider CrowdStrike Falcon Cloud Security to be a very stable solution.

I would rate the scalability of CrowdStrike Falcon Cloud Security as very good, with no limit.

My experience with customer support has been very good, as we open a case or have direct access to the SOC, and within reasonable times they can respond to us.

I would rate customer support an eight.

I did use another solution before CrowdStrike Falcon Cloud Security; we have not replaced it, as we have Wiz and we keep it in parallel.

The return on investment comes from the cost savings from the possible incidents we might have, as a server that has CrowdStrike is a server that is obviously protected, and it is much less likely to actually have a security incident, so the costs derived from a security incident are the ones we are avoiding.

CrowdStrike Falcon Cloud Security is expensive, but we are talking about a good tool that gives us a lot of peace of mind, so in that sense we are happy with the product's quality–cost ratio because of the peace of mind it provides.

I evaluated other options before choosing CrowdStrike Falcon Cloud Security, and I considered mainly competitors.

I would rate CrowdStrike Falcon Cloud Security an eight because it is a good score, a high score, and obviously it means we are happy with the tool and we always leave a bit of room for improvement for future versions.

My advice to others considering using CrowdStrike Falcon Cloud Security is that even if it is a solution that can have a major impact on the budget, it is worth every cent invested.

We use cloud security comprehensively, including CSPM, DSPM, AISPM, and CDR, not just for our organization, but because we are partners and provide services for our customers who are using cloud security.

For us and for our customers, identity and CDR (Cloud Detection and Response) are essential. Everything starts with identity and protecting individuals, so we need to protect our cloud environments with respect to security identity.

I believe that the most important aspect of visibility is ASPM (Application Security Posture), which gives us a view of every application and everything we need to understand regarding what needs to be migrated and what is already in the cloud. We can see everything that we need to protect.

We are starting a project with cloud container security with our customers, and we found that security must be integrated into everything running independently. CrowdStrike Falcon Cloud Security helps us show what matters in security environments like containers and IT environments with containers, pods, and namespaces that are running without security. We are able to show our customers the problems in unsecured environments without Falcon security.

Especially regarding AI security, I want to discuss Image Analyzer because we saw that we can use a plugin to Jenkins. We can integrate into all the cores with DevOps architecture. We found that it fits well because we can have security from the beginning throughout the application to the public.

Regarding cloud deployment, we recently helped a customer that was under attack. We installed the Falcon sensor on the AD machine. The customer reported that many processes were running at high levels, which was probably due to the attack, but this was not related to cloud deployment.

CrowdStrike Falcon Cloud Security provides valuable cloud risks based on Mitre, which helps us identify real risks and address workflows to fix problems at the right time.

We found that identifying real risks through cloud risks helps us objectively understand the attack path. We identified many opportunities to disregard anything that is high risk but is not an attack path. This helps us prevent intrusions and operational issues.

CrowdStrike Falcon Cloud Security is a unique platform that solves everything in one place, which is very beneficial for our customers. In Brazil, we observed many platforms to view information, and our competitors had the same issue with different clouds and different platforms for obtaining information. CrowdStrike Falcon Cloud Security is a unique platform that unifies information, and we can build security together with our customers because it is easier to find information, integrate outside information, and configure all the necessary settings to be secure.

Regarding CSPM specifically, when we compared other tools such as Tenable and Wiz, we were able to provide our customers with real-time security through CrowdStrike Falcon Cloud Security. Most unsuccessful implementations of other tools result from their inability to provide real-time information, and CrowdStrike Falcon Cloud Security truly delivers this capability.

I am aware that just as we have a one-click sensor for faster deployment of the agent, there is probably a tool that will be available to deploy the sensor for container security. Falcon CAC and Falcon Image Analyzer are not problematic, but I believe that CrowdStrike needs to provide a faster way to deploy CrowdStrike Falcon Cloud Security for container security, similar to how the one-click sensor is useful and faster for deployment.

Regarding cloud security overall, the implementation process for container security is an issue. I feel concerned when I need to request access to customer environments to implement new features.

I would rate CrowdStrike Falcon Cloud Security at 9 to 9.5 overall because the only aspect I truly dislike is the container security implementation process.

We have been using this solution for two years.

We previously used Trend Micro as our primary solution. We also tried Fortinet and Sophos.

I believe that CrowdStrike Falcon Cloud Security is not expensive for United States-based companies. For Brazil, however, this pricing is very expensive.

CrowdStrike is genuine about protection and focuses on one sensor and one platform. Our competitors are not prioritizing real protection and consolidation, which is why we chose CrowdStrike.

Real-time security is a critical consideration. This is a painful issue for most of our customers, as some previously had information about problems two days after they occurred. CrowdStrike Falcon Cloud Security represents the most improved aspect for us regarding real-time visibility.

We created a new tool for our portfolio called Falcon Security Journey to demonstrate how effectively customers are using the platform. This tool provides a path to use other tools by showing, for example, that if customers have Falcon EDR, they should consider their identity management. Customers can grow their percentage of platform utilization by implementing identity, SIEM, AI, and Sherlock features. This approach provides visibility to improve security using other tools within CrowdStrike Falcon Cloud Security.

Trend Micro was terrible in this regard, which is exactly why we ended our partnership with them. This is one of the reasons we appreciate being CrowdStrike partners. My overall rating for CrowdStrike Falcon Cloud Security is 9 out of 10.

I am protecting my cloud asset directory and prioritizing vulnerabilities with CrowdStrike Falcon Cloud Security.

My environment is AWS.

The most important cloud security use case for my organization is identity.

Identity protection is crucial for me, specifically in the area of threat protection.

Posture management, identity protection, and cloud detection and response are the most important to me.

These are important to me because I see them as potential attack surfaces, so I am concentrating more on them.

CrowdStrike Falcon Cloud Security improves my ability to see cloud risks in context; instead of reviewing vulnerabilities, misconfigurations, identities, and workloads separately, I can prioritize issues based on exposure and potential impact.

The main benefits of cloud security in identifying and prioritizing risks or misconfigurations are centralized visibility, earlier identification of misconfigurations, better vulnerability prioritization, and improved coordination between security, infrastructure, and cloud engineering teams.

CrowdStrike Falcon Cloud Security facilitates easier communication with cloud and development teams since findings can be linked to specific assets, identities, workloads, and remediation steps.

CrowdStrike Falcon Cloud Security is useful for connecting cloud vulnerabilities, identities, configurations, and runtime activity, helping me understand whether a cloud finding is merely theoretical or connected to real suspicious activity.

This is important because it reduces manual reviews and helps me focus on the highest risk issues.

CrowdStrike Falcon Cloud Security helps consolidate tools and reduce complexity in my security programs; AI assists with summarizing cloud findings, explaining risk, identifying relationships between assets, and recommending investigation or remediation steps.

The advantages of managing cloud security through CrowdStrike Falcon Cloud Security include reducing the need for separate tools, covering cloud posture, workload security, and vulnerability prioritization, which results in simpler administration and a more consistent view of cloud risk.

CrowdStrike Falcon Cloud Security could be better by connecting cloud posture and workload information with endpoint, identity, and threat data, providing a broader security context than a tool that only reports cloud misconfigurations.

In my opinion, it could be better; however, I am not an engineer in this area, so I think CrowdStrike Falcon Cloud Security is doing it well.

I have been using CrowdStrike Falcon Cloud Security for several months.

Cloud security fits into my development, DevOps, or cloud operations workflows; the impact on workload performance is generally limited when the deployment is planned correctly, and scalability depends on the cloud architecture.

I was not using another solution before CrowdStrike Falcon Cloud Security.

In AWS, I only have security groups; that is all.

I would describe my experience with deploying CrowdStrike Falcon Cloud Security as working best when cloud accounts, roles, ownership, and tagging standards have already been organized.

I was involved in the deployment; my admin tells me that the main challenge was onboarding multiple environments and resolving ownership of findings.

My highest security analyst is involved more in analyzing, detecting, and preventing threats and working with the module very strongly, but in the deployment, it is something from the operation side of the administrators.

That is mostly my part, but they also participate; they are now using the software more than deploying it, and I do not do administration.

As a cloud solution, I considered using no other tools.

I have not evaluated other solutions before implementing CrowdStrike Falcon Cloud Security; I go with it since I already have CrowdStrike Falcon Cloud Security.

I rate CrowdStrike Falcon Cloud Security a nine out of ten; I find it effective, though I cannot describe exactly why due to my lack of experience.