CrowdStrike Falcon Reviews

Name: CrowdStrike Falcon
Brand: CrowdStrike
Rating: 4.3 (132 reviews)

4.3 out of 5

132 reviews
96% willing to recommend

What is CrowdStrike Falcon?

CrowdStrike Falcon provides AI-powered endpoint detection and protection with minimal system impact. Its real-time monitoring and cloud-native design support efficient threat analysis and integration with other platforms, enhancing security management and workflow.

Get the CrowdStrike Falcon Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon, Microsoft Defender for Endpoint, Wazuh and more!

CrowdStrike Falcon is the #1 ranked solution in top Threat Intelligence Platforms, #1 ranked solution in EDR tools, #1 ranked solution in XDR Security products, #1 ranked solution in top Attack Surface Management (ASM) solutions, #1 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #2 ranked solution in endpoint security software, #2 ranked solution in top Identity Threat Detection and Response (ITDR) solutions, and #6 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give CrowdStrike Falcon an average rating of 8.6 out of 10. CrowdStrike Falcon is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon vs Microsoft Defender for Endpoint. CrowdStrike Falcon is popular among the large enterprise segment, accounting for 53% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 865,295 peers since 2012

Featured CrowdStrike Falcon reviews

Waleed Omar

Information Security Specialist at Arab Open University

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Sumanth Kandanuru

Security Analyst at NTT Ltd

Obviously, when checking in the SIEM, not all logs are available. In CrowdStrike, unlike SIEM, actions are clearly defined. For example, a regular AV like Symantec might indicate a file was quarantined or failed to quarantine, but in CrowdStrike, I can verify the action. As an incident response analyst, I can use CrowdStrike to perform actions like directly wiping a file from a host if given access. I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections. Event search also allows for detailed investigations, showing accessed files and remote installations.

Read full review

Shubham Sinha.

Senior Principal Information Security Analyst at Veritas Technologies LLC

The best benefit of CrowdStrike Falcon is 99% MITRE coverage. It detects suspicious or undetected activities on the system and provides protection for zero-day vulnerabilities. If there is a sudden rise in CPU consumption or abnormal storage use, it helps us by creating a ticket, allowing us to investigate any abnormal behavior present. We can look into the machine and investigate. It reduces the false negatives common with other technologies. The real-time response helps with MTTR. We achieve faster detection and response times. It helped prevent breaches. In the past, there was abnormal consumption of RAM along with CPU on a server. It also started communicating with other subnets. CrowdStrike Falcon triggered an alert. We did our investigation and found that we had ransomware. We successfully mitigated it.

Read full review

CrowdStrike Falcon mindshare

Product category:

As of August 2025, the mindshare of CrowdStrike Falcon in the Extended Detection and Response (XDR) category stands at 14.1%, down from 19.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Extended Detection and Response (XDR)

PeerResearch reports based on CrowdStrike Falcon reviews

Type	Title	Date
Category	Extended Detection and Response (XDR)	Aug 20, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 20, 2025	Download
Comparison	CrowdStrike Falcon vs Microsoft Defender XDR	Aug 20, 2025	Download
Comparison	CrowdStrike Falcon vs SentinelOne Singularity Complete	Aug 20, 2025	Download
Comparison	CrowdStrike Falcon vs Trend Vision One	Aug 20, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Endpoint	4.1	N/A	94%	197 interviews Add to research
Wazuh	3.7	11.1%	80%	48 interviews Add to research

Valuable Features

CrowdStrike Falcon excels with its endpoint visibility, threat analysis, and real-time monitoring capabilities. Its lightweight design minimizes system impact. Features like threat intelligence, automatic alerts, forensics, and user-friendly interface add value. Cloud-native architecture enhances flexibility. Centralized management, comprehensive dashboards, robust detection capabilities, and simple integration with existing tools provide depth. Advanced AI-driven detection, cross-platform integration, and 24/7 monitoring make it highly efficient for threat prevention and response tasks, helping organizations maintain a secure operational environment efficiently.

"I find nothing to miss in terms of stability; there are no glitches, and the solution is stable."
"The most beneficial features of CrowdStrike Falcon are that it is easy to install, easy to manage, lightweight, and it can stop breaches."
"CrowdStrike Falcon serves as a next-gen AV, which basically does AI-based behavioral analysis to detect and act on malware or ransomware."

Room for Improvement

CrowdStrike Falcon requires improvements in compatibility with operating systems, better integration with other technologies, and enhanced reporting features. Users have noted issues with the dashboard's export capabilities and speed, and there is a need for improved threat correlation and machine learning. The management and log aggregation tools need refinement, and the GUI can be sluggish. Users also mention the high pricing and the need for support enhancements, particularly regarding technical expertise.

"I believe nothing can be done to make CrowdStrike Falcon a ten out of ten, as I think it's one of the best solutions in the market. However, rating it a ten overall would imply there's no scope for improvement, but to survive in the market, changes must be made every day."
"As for stability, I would rate it around eight because last year they faced some downtime with around eight thousand computers, but it will improve."
"During these two years with CrowdStrike Falcon, I certainly faced some problems, including the known CrowdStrike outage, which was quite pinching and brought many of the Windows-related services to a halt just because of one bad configuration push from CrowdStrike tracks."

ROI

CrowdStrike Falcon has significantly reduced manpower and operational costs, increased staff productivity by about 25%, and minimized downtimes due to malware infections. Users have reported faster incident resolution, less system overhead, and notable savings from discontinuing previous solutions. Many have observed cost efficiency, a decrease in support requests, and improved security without affecting system performance. While quantifying exact savings is challenging, organizations appreciate enhanced security, resource savings, and peace of mind.

Pricing

CrowdStrike Falcon's pricing is perceived as high, with annual costs varying widely depending on features and number of users. Many companies report costs between $10,000 to $100,000 annually, while others mention significant discounts for volume or through resellers. Despite being more expensive than some competitors like Bitdefender and SentinelOne, its robust value proposition and feature set justify the premium for larger enterprises. Licensing is flexible, allowing selection based on specific needs. Setup is praised for its simplicity.

"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"The solution's pricing is great for us."
"The product is expensive."

Popular Use Cases

CrowdStrike Falcon is primarily used for endpoint protection, featuring capabilities like threat detection, real-time ransomware protection, and advanced threat management. It integrates cloud-based features for seamless security operations, serving as an EDR and next-gen antivirus while offering forensic investigation and malware analysis. Many organizations use it for system monitoring, threat hunting, and abnormal behavior detection, securing devices, servers, and remote endpoints across cloud and on-premise environments.

Service and Support

CrowdStrike Falcon's customer service receives mixed feedback. Many users praise its responsive and knowledgeable technical support, with fast response times and helpful assistance. Others highlight areas for improvement, citing occasional delays and less personalized interactions as the company has grown. Some experience challenges in reaching specialized support, while others find the support team proactive and efficient. Premium service is highly rated, though standard support can vary in its responsiveness and effectiveness.

Deployment

Users found CrowdStrike Falcon's initial setup straightforward and easy, often requiring minimal time and resources. The cloud-based nature simplified deployment and management, allowing for quick installation via agents on endpoints. Issues were rare, though some environments faced challenges with integrations or specific configurations. Many noted the setup process as seamless, with automatic updates and minimal maintenance needed. For larger deployments, phased approaches ensured smooth implementation with minimal disruption.

Scalability

CrowdStrike Falcon scales efficiently for various organizations. Its cloud-based architecture allows for rapid growth and management of multiple endpoints without performance issues. Many organizations utilizing CrowdStrike report seamless expansion, and it easily accommodates increasing security needs across diverse environments, including on-premise and cloud platforms. Users highlight its ability to quickly deploy and manage endpoints, providing a scalable security solution suitable for small to expansive global enterprises, ensuring consistent protection and performance.

Stability

CrowdStrike Falcon demonstrates high stability with users rarely encountering significant issues. Many report reliable performance, noting only minor glitches. Some express satisfaction with its stability in environments with thousands of endpoints, praising its ability to operate smoothly. Occasional problems, such as feature release disruptions and a past update issue, have been resolved swiftly. Users appreciate its cloud-based nature, which enhances its reliable performance, and they mention that the solution effectively handles updates.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our CrowdStrike Falcon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Retailer

University

Educational Organization

Comms Service Provider

Healthcare Company

Insurance Company

Construction Company

Real Estate/Law Firm

Media Company

Energy/Utilities Company

Non Profit

Wholesaler/Distributor

Hospitality Company

Legal Firm

Performing Arts

Outsourcing Company

Transportation Company

Recreational Facilities/Services Company

Consumer Goods Company

Pharma/Biotech Company

Marketing Services Firm

Aerospace/Defense Firm

Compare CrowdStrike Falcon with alternative products

Learn more about CrowdStrike Falcon

CrowdStrike Falcon is renowned for its comprehensive cybersecurity features, offering automatic threat analysis and AI-driven protection. Users appreciate its cloud-native flexibility and seamless integration capabilities. Its real-time monitoring, incident response, and vulnerability assessment deliver detailed insights and threat intelligence. Despite its robust features, improvements in integration with other technologies, dashboard functionalities, log management, and support for outdated systems are desired. Enhanced reporting, detailed malware analysis, and reduced false positives can improve user experiences. Organizations leverage Falcon for endpoint protection, threat detection, ransomware defense, and forensic investigations with its effective AI capabilities.

What are the key features of CrowdStrike Falcon?

Endpoint Detection: Provides comprehensive monitoring and AI-driven analysis to identify threats.
Automatic Threat Analysis: Uses machine learning to swiftly analyze potential threats.
AI-Driven Protection: Employs advanced AI for proactive security measures.
Real-Time Monitoring: Offers immediate detection and alerting of security issues.
Incident Response: Facilitates efficient response to security incidents and breaches.
Vulnerability Assessment: Identifies and evaluates security vulnerabilities effectively.
Seamless Integration: Easily connects with other platforms for unified security management.
Threat Intelligence: Provides in-depth insights into security threats and activities.

What benefits should users look for in reviews?

Minimal Performance Impact: Ensures systems run efficiently without significant resource use.
Cloud-Native Flexibility: Offers scalable and adaptive use without on-premises constraints.
Detailed Insights: Provides comprehensive data for informed decision-making and threat assessment.
Robust Protection: Keeps evolving threats at bay with customizable policies and frequent updates.
Enhanced Workflow: Improves user productivity with an efficient, streamlined dashboard.

In finance and healthcare, CrowdStrike Falcon is implemented to protect against advanced threats and ensure compliance. Its AI-driven capabilities aid in real-time threat detection and vulnerability management, making it an essential tool for companies aiming to secure sensitive data and maintain operational continuity. Manufacturing sectors utilize it for securing production systems against potential cyber threats, ensuring uptime and safety. CrowdStrike Falcon's adaptable architecture benefits these industries by providing reliable protection across varied operating environments.

CrowdStrike Falcon was previously known as CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface.