Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Netwrix Auditor comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Security Information and Event Management (SIEM)
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
135
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Netwrix Auditor
Ranking in Security Information and Event Management (SIEM)
27th
Average Rating
9.2
Reviews Sentiment
7.2
Number of Reviews
8
Ranking in other categories
GRC (11th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (16th), Active Directory Management (2nd)
 

Mindshare comparison

As of December 2025, in the Security Information and Event Management (SIEM) category, the mindshare of CrowdStrike Falcon is 3.6%, down from 4.0% compared to the previous year. The mindshare of Netwrix Auditor is 0.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon3.6%
Netwrix Auditor0.6%
Other95.8%
Security Information and Event Management (SIEM)
 

Featured Reviews

Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
RishiPandit - PeerSpot reviewer
Lead - Technical Services at Impetus
Optimizing time and effort through comprehensive auditing features
Netwrix Auditor doesn't have many competitors at the level in which it is placed. All other companies provide auditing solutions but not up to the feature list; it is very broad and robust. The best features include flexibility to interact directly with MS-SQL. Real-time alerts help identify potential security threats. The ability to streamline audits with insights into configuration states is helpful, as the access reviews and audit reports are really insightful. This is a good tool. The search functionality is available, but comparative to other vendors, this is a bit slower. Reports are effective; the compliance reports and all the reports are very insightful. That is good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very easy to set up."
"CrowdStrike enables the infrastructure managers to visualize all the events and get information about the network."
"This solution consistently releases improvements. They have communicated their next two years of development which is powerful and covers all of our needs."
"Among CrowdStrike Falcon's most valuable capabilities are its UEBA and SOAR functionalities, along with its seamless integration with any other SIEM solution."
"Everything is automatic. I install the sensor and renew the service. Periodically, I get a notice that they've shut something down."
"The solution's most valuable feature is that it is robust and can detect almost every malicious activity that occurs within the endpoint."
"The Protect functionality on the laptops provides great visibility into what's occurring, and the cloud management of the platform is what we needed."
"It has good features for threat detection."
"The most valuable feature is the real-time monitoring."
"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."
"I am impressed with the tool's reporting feature and notifications."
"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."
"Netwrix provides features that no other solution on the market does."
"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."
"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."
"Netwrix Auditor doesn't have many competitors at the level in which it is placed; all other companies provide auditing solutions but not up to the feature list—it is very broad and robust."
 

Cons

"This solution could be improved with greater scope for admins to make changes to the solution."
"There are some aspects of the UI that could use some improvement, e.g., working in groups. I build a group, then I have to manually assign prevention policies, update policies, etc., but there is no function to copy that group. So, if I wanted to make a subgroup for troubleshooting or divide workstations into groups of laptops and desktops, then I have to manually build a brand new group. I can't just copy a build from one to another. Additionally, in order to do any work within a group, I have to first do the work on the respective prevention policy page or individual policy page, then remove the group if the group is assigned to a different prevention policy, remove the prevention policy, and then add the new one in. So, it can get a little hectic. It would be easier if I could add and remove things from the group page rather than having to go into the policy pages to do it."
"One thing that is not yet available is attack simulation."
"The detection time has room for improvement."
"The biggest issue occurred when every computer worldwide experienced a blue screen."
"We encounter occasional issues, such as when disabling network access for a host that uses CrowdStrike."
"The installation process for this software needs to be simplified."
"The technical support could improve because I am in India and the support I receive is from the UK or Australia. It is difficult to manage the time difference. The service could be faster. However, when we do have the support they are knowledgeable."
"There is room for improvement with the introduction of AI functionality."
"There is room for improvements when it comes to the licensing."
"The solution lacks self-service on password reset. It also needs to improve its scalability."
"In the UI, we have to adjust and resize our console many times, and sometimes it appears, sometimes you have to close and open it, and sometimes it does not give a scroll bar to navigate."
"The Linux compatibility of this solution could be improved."
"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."
"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."
"When there are issues I would like remediation to be in one place."
 

Pricing and Cost Advice

"We are at about $60,000 per year."
"The price is too high."
"All I can say about the licensing cost is that it's negotiable."
"The price is high in comparison to similar brands."
"The cost is usually a challenge in the industry. I think we pay around sixty-eight dollars."
"CrowdStrike Falcon can be more expensive than some competitors, and its base price doesn't cover every feature."
"The price of CrowdStrike Falcon is expensive."
"The pricing is good and there are no costs in addition to the standard licensing fees."
"This solution is reasonably priced. I would rate it a nine out of ten."
"The tool's price is fair."
"There is a license for this solution and we are on an annual license. The price is reasonable."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
876,419 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Financial Services Firm
13%
Government
9%
Manufacturing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise61
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise4
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What do you like most about Netwrix Auditor?
The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities.
What is your experience regarding pricing and costs for Netwrix Auditor?
I don't know about the pricing of this, but it is good at this price point because our organization has purchased it, which means it was in budget. We usually do not buy expensive solutions, so the...
What needs improvement with Netwrix Auditor?
The areas of improvement include the front end, as the UI should be more intuitive and there should be fewer bugs. In the UI, we have to adjust and resize our console many times, and sometimes it a...
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
No data available
 

Overview

 

Sample Customers

Information Not Available
AT&T, SanDisk, Siemens, Verizon, Electrolux, Allianz, Societe Generale
Find out what your peers are saying about CrowdStrike Falcon vs. Netwrix Auditor and other solutions. Updated: November 2025.
876,419 professionals have used our research since 2012.