


CrowdStrike Falcon Insight XDR and Sweet Security compete in the cybersecurity market focusing on threat detection and response. Based on various aspects, CrowdStrike seems to have an edge in endpoint and threat detection, while Sweet Security excels in cloud-native security and application-layer insights.
Features: CrowdStrike Falcon Insight XDR is known for behavior-based detection, real-time alerts, and lightweight agent support, offering comprehensive visibility and threat hunting with features like Falcon Overwatch. Sweet Security provides runtime visibility and contextual attack story presentation, especially excelling in API and microservices protection. It delivers notable application-layer insights.
Room for Improvement: CrowdStrike Falcon Insight XDR requires enhancements in dashboard customization and better legacy system support. Customers suggest reducing false positives, improving report customization, and enhancing third-party tool integration. Sweet Security needs improvements in user interface navigation, integration with playbooks, and better alerting processes to boost its market maturity.
Ease of Deployment and Customer Service: CrowdStrike offers flexible deployment options including on-premises and cloud, but its customer service has mixed reviews, highlighting response time and support knowledge as areas for enhancement. Sweet Security, mainly deployed in the public cloud, is praised for its prompt customer support but still faces challenges in issue resolution speed and user guidance. CrowdStrike's broader environment support can add complexity.
Pricing and ROI: CrowdStrike Falcon Insight XDR is noted for high costs, offering advanced security features that justify its price for larger enterprises. It ensures ROI through robust threat management and resource-saving. Sweet Security provides more cost-effective pricing and ROI by streamlining tool reliance, making it attractive to small and medium businesses with its focus on cloud-native environments and broad security coverage.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
CallStream helps us integrate and automate tasks.
CrowdStrike Falcon saves time and offers good value for money, especially for enterprise companies, because it can stop breaches.
It's very easy to deploy without many IT admins, saving time.
The ROI is that we are not waiting for a breach but being proactive rather than reactive.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
On a scale of one to ten, I would rate the technical support as a 10 because they resolve many issues for us.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
They could improve by initiating calls for high-priority cases instead of just opening tickets.
They are there immediately, providing us with the best technical people, solving any issue we had.
They gave me a trial period, did multiple follow-ups, and were reviewing themselves the findings to actually understand how their product is performing.
I would rate customer support a nine out of ten because they maintain a competitive price, offer trial periods, provide follow-up, are very responsive, and are effectively hands-on in assisting and offering prompt service and support.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
It is absolutely scalable, and I would rate its scalability as nine out of ten.
It has adequate coverage and is easy to deploy.
In terms of scalability, I find CrowdStrike to be stable, and I have not encountered any limitations with it.
There's no scalability limitation from CrowdStrike itself, as it just requires agent deployment.
We don't need to scale it since it's all SaaS.
We are a robust enterprise with thousands of assets in the cloud or tens of thousands.
The user interface that I see doesn't make me very confident that I will be able to extract information in case I had hundreds or thousands of Kubernetes clusters or hundreds or thousands of hosts.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
I have never seen instability in the CrowdStrike tool.
We are following N-1 versions across our environment, which is stable.
The biggest issue occurred when every computer worldwide experienced a blue screen.
Sweet Security delivers cloud-native service updates seamlessly and requires very minimal operational effort.
I would rate the stability of Sweet Security a ten out of ten.
We have never had any issues with stability.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Threat prevention should be their first priority.
The next great thing that Sweet Security can do is to turn toward IAC, how it is handled and enforced, to tackle potential breaches of policy before they really happen.
Maybe they can just show the actual signal and not show that there is a lot of vulnerabilities, but indicate which are important.
The main areas for improvement are related to how Sweet Security needs to be customized.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
The licensing cost and setup costs are affordable.
The solution is a bit expensive.
They're not cheap, but they're not as expensive compared to other companies.
Sweet Security contains very similar features at a much better pricing.
Sweet Security's pricing is quite fair and cost-effective by many users.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
The real-time analytics aspect of CrowdStrike performs well because we get all logs in real-time, with no delay, allowing us to take action immediately.
Being an EDR solution, it helps us identify attacks in real-time.
Sweet Security's reporting tools enhance our insights into potential vulnerabilities and threats as they serve as our eyes and ears inside AWS, telling us what we are doing wrong so we can fix it.
Sweet Security enabled teams to see each detection of activity upon every request made from the application level towards the infrastructure, making it much easier and reducing the time for an analyst to understand what is really happening.
Sweet Security is well-scalable throughout multi-cloud environments and Kubernetes clusters because it relies on lightweight runtime telemetry and cloud native architecture, allowing it to support growing cloud infrastructure of any size.

| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 5 |
| Large Enterprise | 30 |
| Company Size | Count |
|---|---|
| Small Business | 54 |
| Midsize Enterprise | 34 |
| Large Enterprise | 63 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 3 |
| Large Enterprise | 9 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
CrowdStrike Falcon Insight XDR provides adversary-driven detection and response across endpoints and beyond. It combines AI-powered endpoint detection and response with integrated threat intelligence and expert context to deliver high-quality, context-rich detections that help security teams identify and prioritize sophisticated threats.
Automated leads and Charlotte AI, combined with attack-path visibility, adversary context and MITRE ATT&CK mappings, help analysts investigate incidents faster. Real Time Response and Falcon Fusion SOAR support direct and automated remediation at scale. Extend investigations with critical context from identity, cloud, mobile and data protection, while incorporating third-party data in the same console.
What are the key features of CrowdStrike Falcon?
What benefits and reported outcomes can organizations achieve?
In technology sectors, CrowdStrike Falcon commonly supports endpoint protection and threat response initiatives, allowing companies to replace traditional antivirus systems with more advanced solutions. In finance, it secures sensitive data across multiple platforms, ensuring compliance. In healthcare, real-time security analysis protects patient data on critical devices like servers and laptops, utilizing AI to enhance cybersecurity defenses.
Sweet Security offers advanced cybersecurity measures designed to protect enterprise-level networks from complex threats, providing efficient monitoring and robust protection capabilities.
Focused on sophisticated threat detection and network security, Sweet Security provides an enterprise-grade solution for cybersecurity challenges. It integrates seamlessly with existing systems, offering real-time analytics and threat intelligence. Its comprehensive approach ensures high-level data protection and security management, allowing organizations to focus on core functionalities.
What features make Sweet Security stand out?
What benefits or ROI can users expect from Sweet Security?
Implementation of Sweet Security across industries like finance, healthcare, and e-commerce demonstrates its versatility and effectiveness. In finance, it safeguards sensitive financial data; in healthcare, it ensures patient data privacy; and in e-commerce, it protects online transactions from fraud, making it an invaluable asset in today's digital landscape.
We monitor all Identity Threat Detection and Response (ITDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.