Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Heimdal Endpoint Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Endpoint Protection Platform (EPP)
2nd
Ranking in Threat Intelligence Platforms
1st
Ranking in Endpoint Detection and Response (EDR)
1st
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
135
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)
Heimdal Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
42nd
Ranking in Threat Intelligence Platforms
22nd
Ranking in Endpoint Detection and Response (EDR)
32nd
Average Rating
9.0
Reviews Sentiment
8.6
Number of Reviews
1
Ranking in other categories
Anti-Malware Tools (26th), Domain Name System (DNS) Security (12th), Ransomware Protection (13th)
 

Mindshare comparison

As of September 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of CrowdStrike Falcon is 8.2%, down from 11.1% compared to the previous year. The mindshare of Heimdal Endpoint Security is 0.3%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon8.2%
Heimdal Endpoint Security0.3%
Other91.5%
Endpoint Protection Platform (EPP)
 

Featured Reviews

Waleed Omar - PeerSpot reviewer
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
DEEPAK KUMAR PACHDEO DUBEY - PeerSpot reviewer
Delivers efficiency and agility with USB control limitations
One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use the privilege manager feature called Elevation. What we lack is granular USB control. We have an issue where we can only switch USB on or off. I want to whitelist specific devices in the network, which I currently cannot do.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"As an EDR tool, we can integrate log management and event management. The solution deals with threats automatically, that's the advantage."
"Its integration capability is valuable. It integrates easily with any OS."
"It's given me a level of confidence that my network is secure."
"CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform. You only need to deploy the light agents on the licensed endpoints, and you're ready to work. Your dashboards will tell you the number of the endpoints being protected and the incidents. There are also incident dashboards with alerts that will tell you about the details."
"CrowdStrike is deployed on every workstation, so policy changes can be enforced on all of them. It lowers the manual work on each of the workstations. It has helped us manage device usage in our environment."
"The features we showcase to potential customers are prevention, malware protection, zero-day protection, and application scripting. Vulnerability assessment is another valuable feature."
"CrowdStrike displays a threat score when it detects an infection. This is helpful because not all detections are the same. It will classify them as ransomware, malware, phishing, etc. This feature helps us prioritize and cross-check with other EDR tools."
"The machine learning behavior for anomaly detection is a valuable feature. It helps identify any suspicious or unusual activities within the system."
"Heimdal is a very agile and lightweight solution."
"As compared to multiple solutions I have used in the past, Heimdal is a very agile and lightweight solution."
 

Cons

"The ability to receive text alerts natively in the console would be kind of cool."
"One area for improvement in CrowdStrike Falcon could be the user interface and reports; it requires some improvements to be easily handled."
"The solution could improve the policies themselves."
"CrowdStrike Falcon sometimes wrongly flags things as malicious. Let's say a user is active on Chrome only. Sometimes, our cross-segmenting will fetch from the backend data and show that it is malicious because of memory or CPU utilization."
"I would like a centralized deployment where I could roll out or push it to all endpoints."
"Support, particularly related to after-sales and after deployment, could be improved a bit. If you need to connect to support, it takes at least a day to reach the support team and get a proper reply."
"I've found that CrowdStrike's technical support could benefit from increased technical expertise."
"Deployment in cloud environments is challenging. Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options."
"What we lack is granular USB control. We have an issue where we can only switch USB on or off."
"What we lack is granular USB control."
 

Pricing and Cost Advice

"The pricing on CrowdStrike is per license. It was about $42 per seat yearly."
"The more endpoints an organization adds the cheaper the cost."
"There are approximately a hundred different modules you have to purchase, depending on what you want to do. I have most of the modules. How it works is you buy the portfolio, you have to decide all the components you want in it, and then they price out a bundle for you. I have almost all of the package features in my bundle. You only need to pay for the modules you want."
"We bought a very small number of licenses, then ran it for a year. We bought a 100 licenses for a year, so we didn't actually do a proof of concept. We just bought them. Then, the next year, we bought 10,000 licenses."
"The price is high in comparison to similar brands."
"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"The other administrator and I can log in to check the exact details of what happened, what was running, and what caused the detection. We know exactly what was happening on the end users PC and we can tell if it's something that we actually need or something that's malicious."
"All I can say about the licensing cost is that it's negotiable."
Information not available
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
867,021 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Computer Software Company
21%
Non Profit
9%
Comms Service Provider
7%
Media Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise61
No data available
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for Heimdal Endpoint Security?
Pricing, compared to what we had before, was quite economical. There was a difference of about twenty percent or something between the solutions.
What needs improvement with Heimdal Endpoint Security?
One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use the privilege manager feature called Elevation. What we lack is granular USB contr...
What is your primary use case for Heimdal Endpoint Security?
My company colleagues and I use this antivirus solution. I am part of a company where I deploy solutions, and I also work in the IT department of that company. Therefore, I have chosen this antivir...
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
Heimdal Next-Gent Endpoint Antivirus, Thor Vigilance Enterprise, Heimdal Endpoint Detection and Response, Heimdal DNS Security - Endpoint, Heimdal Threat Prevention, Heimdal Ransomware Encryption Protection
 

Overview

 

Sample Customers

Information Not Available
Brother, Symbion, CPH West
Find out what your peers are saying about Microsoft, CrowdStrike, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: August 2025.
867,021 professionals have used our research since 2012.