Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs NetMon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Identity Threat Detection and Response (ITDR)
2nd
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
135
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), AI-Powered Cybersecurity Platforms (1st)
NetMon
Ranking in Identity Threat Detection and Response (ITDR)
16th
Average Rating
7.6
Reviews Sentiment
7.7
Number of Reviews
11
Ranking in other categories
Network Monitoring Software (53rd)
 

Mindshare comparison

As of October 2025, in the Identity Threat Detection and Response (ITDR) category, the mindshare of CrowdStrike Falcon is 15.6%, up from 13.3% compared to the previous year. The mindshare of NetMon is 0.1%. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon15.6%
NetMon0.1%
Other84.3%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

Waleed Omar - PeerSpot reviewer
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
AshishDubey - PeerSpot reviewer
A stable and scalable tool useful for network behavior analysis, DPA, and network forensic services
I have not worked much on LogRhythm NetMon to be able to comment on what needs improvement in the product since there is another team in our company that is working on the solution presently. LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently. With players like IBM QRadar that propose QNI or Darktrace in the market, LogRhythm NetMon needs to consider a reduction in its pricing model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very easy to set up."
"The managed services are distinguished, responsive, dynamic, flexible, and assertive when taking action."
"CrowdStrike is deployed on every workstation, so policy changes can be enforced on all of them. It lowers the manual work on each of the workstations. It has helped us manage device usage in our environment."
"The most valuable aspects of CrowdStrike Falcon for me are its device observability, identification, and software and OS recognition."
"The CS falcon agent is a lightweight agent compared with other agents of EDR products."
"I like the vulnerability assessment and proactive hunting features of CrowdStrike Falcon."
"The CrowdStrike Falcon dashboard is good, and we haven't had any problems with it."
"The initial setup was straightforward."
"The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well. The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization."
"The analytics feature is the most valuable feature."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"It is a stable solution...It is a scalable solution."
"It has a very strong artificial intelligence engine."
"NetMon's best feature is traffic analysis."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
 

Cons

"To simplify the budgeting process for our clients, CrowdStrike should consider offering bundled packages that include essential features."
"We would like to be able to perform on-demand scanning, rather than relying on the scheduler."
"The management of the solution could improve."
"We have had to open a case with the technical support to get some issues and bugs resolved."
"The solution should have included remote wipe capability out of the box."
"The technical support team often just replies to an issue with a link to an article rather than actually calling back and talking to someone and making sure the problem is solved. To me, that's kind of weak."
"Sometimes CrowdStrike changes the GUI, and they need to be better at informing us and providing guidance concerning that."
"CrowdStrike should provide better visibility in its reporting. There should be more forensic details about detected threats."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"Could use a topology diagram which would help get an exact visual."
"The platform's integration features often need to be improved."
"The training for this product is not very good and needs to be improved."
"LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently."
"Sometimes it's hard to find the network devices' self-audit logs."
 

Pricing and Cost Advice

"The pricing and licensing are fairly good. It is definitely not a cheap product, but I have felt that it is worth the money that we spent. So, we have discussed it in the past, and were like, "Yes, it is probably pricier than some other solutions, but we also feel they really are the leader. We are very comfortable with their level of expertise. So, it's kind of worth the price that we pay.""
"Crowdstrike Falcon is relatively cheap."
"The tool is a little bit expensive compared to other products, but I think it's okay owing to its quality."
"All I can say about the licensing cost is that it's negotiable."
"In my opinion, the pricing of CrowdStrike Falcon seems aggressive."
"The pricing is not bad. It's on the higher end of the market, but you get what you pay for."
"CrowdStrike is a reasonably priced tool."
"The price is too high."
"NetMon's licensing costs about $85k per year, with some extra costs for support."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"The product is expensive for smaller companies."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
869,202 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Performing Arts
22%
Financial Services Firm
20%
Insurance Company
12%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise61
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise6
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What do you like most about LogRhythm NetMon?
It has a very strong artificial intelligence engine.
What is your experience regarding pricing and costs for LogRhythm NetMon?
I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships.
What needs improvement with LogRhythm NetMon?
The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for ea...
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
LogRhythm Network Monitor
 

Overview

 

Sample Customers

Information Not Available
Sera-Brynn
Find out what your peers are saying about CrowdStrike Falcon vs. NetMon and other solutions. Updated: September 2025.
869,202 professionals have used our research since 2012.