Try our new research platform with insights from 80,000+ expert users

Cortex Xpanse vs CrowdStrike Falcon comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex Xpanse
Ranking in Attack Surface Management (ASM)
5th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
No ranking in other categories
CrowdStrike Falcon
Ranking in Attack Surface Management (ASM)
1st
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
135
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)
 

Mindshare comparison

As of October 2025, in the Attack Surface Management (ASM) category, the mindshare of Cortex Xpanse is 4.1%, up from 4.0% compared to the previous year. The mindshare of CrowdStrike Falcon is 11.4%, down from 25.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Attack Surface Management (ASM) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon11.4%
Cortex Xpanse4.1%
Other84.5%
Attack Surface Management (ASM)
 

Featured Reviews

Ali Mohamed - PeerSpot reviewer
Proactively manages security and identifies vulnerabilities with good alerts
We use Cortex Xpanse as a security control for attack surface management in our organization When there is an alert from Cortex Xpanse regarding a certificate or surface, it prompts us to take immediate action. It checks vulnerabilities periodically, ensuring they are addressed, which helps in…
Waleed Omar - PeerSpot reviewer
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When there is an alert from Cortex Xpanse regarding a certificate or surface, it prompts us to take immediate action."
"The most valuable features of the solution are its firewall and antivirus."
"Cortex Xpanse is a strong solution for attack surface management, including digital brand protection and continuous monitoring."
"The best feature of the product is that it's easy to manage when we have set it up, and the beneficial impact of Cortex Xpanse for the company is security."
"Cortex Xpanse has an easy-to-use user interface."
"The most valuable aspect is its ability to catch trojans and malware."
"The most valuable aspect is its ability to catch trojans and malware."
"As an attack surface manager, I highly recommend Cortex Xpanse, especially if there are many services exposed publicly on the internet."
"As an EDR tool, we can integrate log management and event management. The solution deals with threats automatically, that's the advantage."
"The real-time analytics aspect of CrowdStrike performs well because we get all logs in real-time, with no delay, allowing us to take action immediately."
"The most valuable feature is that we don't need to re-image machines as much as we had to."
"CrowdStrike enables the infrastructure managers to visualize all the events and get information about the network."
"The most valuable feature is the machine learning that they use to check certain patterns in the endpoint devices. It checks the whole ecosystem or entire environment."
"CrowdStrike Falcon's most valuable feature is the fact that it's not getting in the way of our workforce and their workflow."
"We have seen a reduction to the performance hit to our operating systems."
"The most valuable feature of CrowdStrike Falcon is its accuracy."
 

Cons

"Cortex Xpanse should offer better customization and configuration options on its dashboard."
"Cortex Xpanse should offer better customization and configuration options on its dashboard."
"There is an issue with the old versions of Cortex, and so when we have an older one with Windows or any OS, we have a problem with its connectivity with the cloud."
"It's challenging to confirm the absolute coverage and penetration of Cortex Xpanse into the Dark Web. The solution lacks comprehensive intelligence on adversaries and risks, which other competitors might provide."
"Some improvements are needed in the user interface."
"Regarding technical support, I would rate it as a seven."
"Some improvements are needed in the user interface. It may require more enhancements."
"Cortex Xpanse needs to add dark-web scanning."
"Whenever there is a feature release (upgrade) where we push to all the endpoints, it causes something to be blocked without us knowing."
"Enhancements in reporting and forensic analysis could benefit the product."
"The solution isn't known in my market. The brand isn't as recognizable. Their shortcomings are more on the marketing side."
"In terms of features, I would like them to add detailed logging functionality in CrowdStrike. Currently, CrowdStrike detects the threats immediately based on the IOCs and the signature-based policies or many threat behaviors, but in terms of logging those threats, it is not very good. The information that they provide in the logs is very little. They can build more analytics into it."
"I would rate it an eight out of ten. It does what it needs to do but there's always room for improvement."
"Support, particularly related to after-sales and after deployment, could be improved a bit. If you need to connect to support, it takes at least a day to reach the support team and get a proper reply."
"If we have a dashboard capability to uninstall agents, I think that would be great."
"The overall cost of CrowdStrike Falcon could be reduced."
 

Pricing and Cost Advice

"Cortex Xpanse is cheaper than other solutions."
"The tool's cost is too high."
"Pricing and licensing seem to be in line with what they offer. We are a smaller organization, so pricing is important. Obviously, we would make a business case if it is something we really needed or felt that we needed. So, the pricing is in line with what we are getting from a product standpoint."
"The cost of CrowdStrike Falcon in Latin America seems high relative to the economic conditions in the region."
"We are at about $60,000 per year."
"I am not aware of the price, but I believe that it is among the most expensive XDRs out there. Of course, this is dependent on the features you choose. Depending on the features, the price might increase."
"With respect to pricing, my suggestion to others is to evaluate the environment and purchase what you need."
"It's an expensive solution but you get a very good product for the price. Compared to other products, SentinelOne is definitely cheaper and the Microsoft E5 package is probably more expensive. Not many companies are willing to purchase CrowdStrike Falcon in Turkey due to the cost, but the market is changing."
"The tool is a little bit expensive compared to other products, but I think it's okay owing to its quality."
"The other administrator and I can log in to check the exact details of what happened, what was running, and what caused the detection. We know exactly what was happening on the end users PC and we can tell if it's something that we actually need or something that's malicious."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
872,778 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
11%
Government
10%
Manufacturing Company
9%
Computer Software Company
14%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise61
 

Questions from the Community

What is your experience regarding pricing and costs for Cortex Xpanse?
I don't know the licensing or setup cost; I have no idea about the cost.
What needs improvement with Cortex Xpanse?
I'm not sure right now; I have nothing to comment on regarding what could be improved in the product. We are using it and we are satisfied. I have nothing to comment right now on what other feature...
What is your primary use case for Cortex Xpanse?
Cortex Xpanse is usually used for security from clients.
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
 

Also Known As

No data available
CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
 

Overview

Find out what your peers are saying about Cortex Xpanse vs. CrowdStrike Falcon and other solutions. Updated: September 2025.
872,778 professionals have used our research since 2012.