This is a security solution used for its antivirus, endpoint detection, and response capabilities.
Head Of Information Security (CISO) at a financial services firm with 1,001-5,000 employees
Strong security solution with user-friendly dashboard and great features
Pros and Cons
- "There are many different modules with this solution where vulnerability and inventory management can be carried out. The solution has a good dashboard and offers a lot of insights into your systems."
- "I would like to have the option to deploy on-premise."
What is our primary use case?
What is most valuable?
There are many different modules with this solution where vulnerability and inventory management can be carried out. The solution has a good dashboard and offers a lot of insights into your systems.
What needs improvement?
I would like to have the option to deploy on-premise.
For how long have I used the solution?
I have been using this solution for two and a half years.
Buyer's Guide
CrowdStrike Falcon Complete MDR
January 2026
Learn what your peers think about CrowdStrike Falcon Complete MDR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,768 professionals have used our research since 2012.
What do I think about the stability of the solution?
This solution is very stable.
What do I think about the scalability of the solution?
Since this is a SaaS, it is very scalable. Based on your requirements, you are able to scale on the fly whenever necessary. We currently have over five thousand users.
How are customer service and support?
I had to contact support for some minor issues and they were able to help us out pretty well.
Which solution did I use previously and why did I switch?
We previously had a signature-based AV prior to switching to CrowdStrike.
How was the initial setup?
The initial setup is pretty straightforward but can vary based on the individual organization's requirements. You do need to push clients to the endpoints which can take time but the overall configuration does not take that much time.
What about the implementation team?
We used a partner for installation.
We now have two administrators and one round-the-clock manager for maintenance of the platform.
What's my experience with pricing, setup cost, and licensing?
There is an annual subscription.
What other advice do I have?
CrowdStrike is one of the top two EDRs on the market. Since the solution is lightweight, it is able to offer a lot of features and provide you with strong protection against different attacks.
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Account Manager at a tech services company with 201-500 employees
Comes with good threat-hunting and behavior-based analysis capabilities, and provides quick protection against new threats
Pros and Cons
- "The most valuable feature is that it has a zero-day approach. It does not work with the signature itself. It looks into what is happening on an endpoint and protects you better against threats that are not yet known but are captured in a signature. It provides far better detection than when it is only signature-based. You get much quicker protection against any new threat. This is the most important feature of the CrowdStrike solution."
- "They are doing very well in continuously improving their product. The only thing is that it is completely cloud-based, and some customers don't really like that type of approach, but you can only provide such a solution when you have cloud-based intelligence. On the other end, we know that it is sometimes a breaking point for some of the customers. They could potentially have an on-prem or hybrid solution. Any antivirus needs to have its features updated. If there could be a relay between them, it would be helpful, but that's very hard to do. So, you either accept that approach and have the benefit with this little disadvantage."
What is most valuable?
The most valuable feature is that it has a zero-day approach. It does not work with the signature itself. It looks into what is happening on an endpoint and protects you better against threats that are not yet known but are captured in a signature. It provides far better detection than when it is only signature-based. You get much quicker protection against any new threat. This is the most important feature of the CrowdStrike solution.
They have very good knowledge of how to hunt for threats. It is all about the intelligence you put into a solution for detection. It is about making sure that if you see a number of things, you can interpret them correctly and take the right action against them. They're one of the best vendors because they come from that background.
What needs improvement?
They are doing very well in continuously improving their product. The only thing is that it is completely cloud-based, and some customers don't really like that type of approach, but you can only provide such a solution when you have cloud-based intelligence. On the other end, we know that it is sometimes a breaking point for some of the customers. They could potentially have an on-prem or hybrid solution. Any antivirus needs to have its features updated. If there could be a relay between them, it would be helpful, but that's very hard to do. So, you either accept that approach and have the benefit with this little disadvantage.
For how long have I used the solution?
I have been working with this solution for three years.
What do I think about the stability of the solution?
We don't see any specific limitations on that at the moment.
What do I think about the scalability of the solution?
We have large implementations, and we don't really see any issues with the scalability of the solution. It seems to be able to scale up fairly quickly within the environment.
How are customer service and support?
Their support is top-notch. They're very dedicated. Their experts are online when you need them.
How was the initial setup?
It is very straightforward. It takes very limited time to set it up. People get used to it very quickly.
Being a cloud-based solution, you don't really have to do a lot of installation. They have their own cloud. It is maintaining itself. There are automatic updates. That's one of the reasons why you want to go to the cloud-based approach. It is very easy in terms of maintenance.
What other advice do I have?
I would advise anyone interested in such a solution to try it out. It is very easy to try it out.
It is an absolute requirement to get an EDR solution in place. You should go with the ones that really have the most advanced capabilities for threat hunting. It is best to go with the experts. They've had some competition from Microsoft, which is not a bad solution, but Microsoft is not a security expert. CrowdStrike knows very well how to identify threats and link them to specific behavior. That's what you really want to have in there, and that's their strength. One of the reasons why they're still leading is that they are the only ones who can say, "We manage your network, and we would give you money back if we could not detect the issues upfront." That's one of their strong points.
If they don't do any specific scanning, they will adapt themselves to that. If it is a new system, they would need to learn that. If there is something new in there, it could be harder for them to detect it because they don't yet know the behavior, and they have to learn about it. That's the only negative element I see in it.
They're doing quite a bit of work in improving it. They are doing a good job in evolving the product. I don't see any specific needs at this given moment on that. You could ask a lot, but in the end, you still need to make sure that the core is functioning well. They should stick with what they do best. Evolve that but not start doing everything. That's because it will not work. I'd rather have them stick to their niche.
I would rate it a nine out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
CrowdStrike Falcon Complete MDR
January 2026
Learn what your peers think about CrowdStrike Falcon Complete MDR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
879,768 professionals have used our research since 2012.
Chief Technology Officer at a manufacturing company with 501-1,000 employees
Easy initial setup
Pros and Cons
- "The initial setup was easy."
- "An MDM, Mobile Device Manager, should be added in the next release."
What is our primary use case?
We use the solution for protecting the endpoints.
How has it helped my organization?
The solution simplified our structure.
What is most valuable?
The Falcon Spotlight is a most valuable feature.
What needs improvement?
While the pricing does not bother us, it is a bit on the high side. It could be lower.
An MDM, Mobile Device Manager, should be added in the next release.
For how long have I used the solution?
We just started implementing CrowdStrike Falcon Complete a couple of weeks ago.
What do I think about the stability of the solution?
We have only recently started to implement the solution, so I am not in a position to comment on its stability.
How are customer service and technical support?
We have not had occasion to contact technical support.
Which solution did I use previously and why did I switch?
We did not use a different solution in the past.
How was the initial setup?
The initial setup was easy.
What about the implementation team?
We handled the initial setup on our own. We make use of CrowdStrike's help.
What's my experience with pricing, setup cost, and licensing?
The pricing could be lower. The solution is a bit expensive.
Which other solutions did I evaluate?
In addition to CrowdStrike Falcon Complete, we also looked at FireEye from Palo Alto and at other solutions from Symantec. We decided to go with CrowdStrike Falcon Complete.
What other advice do I have?
I rate CrowdStrike Falcon Complete as an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sr Manager - Information Security & Researcher at a tech services company with 1,001-5,000 employees
Can be used to dig deeper while doing an investigation
Pros and Cons
- "Its IOCs alerting mechanism is good. I think it is AI based and categorizes behaviors which are unusual."
- "Pricing is definitely a problem. It could be cheaper for licensing."
What is our primary use case?
It's an EDR group solution. We use it for behavioral-based analysis.
On our endpoints, we have signature-based and behavioral-based analyses, and we use CrowdStrike Falcon Complete for behavioral-based analyses.
What is most valuable?
I think it has very good features that help dig deeper while doing an investigation. Its IOCs alerting mechanism is good. I think it is AI based and categorizes behaviors which are unusual.
CrowdStrike Falcon Complete has good instrumentation, and the user interface is good too.
What needs improvement?
Pricing is definitely a problem. It could be cheaper for licensing.
For how long have I used the solution?
I've been using CrowdStrike Falcon Complete for 5 years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is scalable as well. It's a cloud-based solution, so I don't doubt the scalability. I think it's good.
We have 6,000 end users who are using it.
How are customer service and technical support?
The technical support is good. You raise a complaint, and they respond immediately.
How was the initial setup?
The installation was smooth and didn't take much time.
What about the implementation team?
We did it by ourselves. We have two or three engineers who run it and perform the rolling, installation, and upgrades.
What's my experience with pricing, setup cost, and licensing?
We have a yearly license, and it could be cheaper.
Which other solutions did I evaluate?
We evaluated Trend Micro and Sophos before choosing CrowdStrike Falcon Complete.
What other advice do I have?
CrowdStrike Falcon Complete is great, and I would rate it at eight on a scale from one to ten.
If you go with this solution, I think that you should also obtain another service called Hybrid Analysis, the premium edition. I think with this, you'll get malware samples you can correlate, and it will be a good tool for the SOC team.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Global Data Protection/Privacy Manager, FIP, CIPP/E, CIPM, CISSP at a manufacturing company with 10,001+ employees
Stable, flexible, and free of any issues
Pros and Cons
- "The solution is quite flexible."
- "The solution should include some sort of DLP capabilities."
What is our primary use case?
Currently, we're trying to understand which solution would be able to help us to block external ports on computers. We're looking at Crowdstrike and working to understand how they can help us handle this.
What is most valuable?
While I'm not directly on the team that deals with the solution daily, I would say that the solution is very stable.
The solution is quite flexible.
We haven't had any issues with the product so far.
What needs improvement?
It's my understanding that the reporting aspect of the solution could be improved. It should be more flexible and robust.
The solution should include some sort of DLP capabilities.
For how long have I used the solution?
I've been using the solution for a while. It's been about three years or so.
What do I think about the stability of the solution?
The stability of the solution is very good. There are no bugs or glitches. It doesn't crash or freeze. It's reliable. The performance is great.
What do I think about the scalability of the solution?
We have more than 25,000 users on the solution currently.
We are currently evaluating the solution to see if we will continue to use it or not going forward. Until that is done, I can't speak to if there are plans to increase usage.
How are customer service and technical support?
I've never been in touch with technical support. A different team handles that aspect. I cannot speak to how helpful or responsive they are. I can't provide any useful insights at this time.
How was the initial setup?
The initial setup took place about three years ago. At the time it was installed I wasn't a part of the company. Therefore, I can't speak to how easy or difficult the solution is to set up and deploy. I wasn't a part of the process.
What's my experience with pricing, setup cost, and licensing?
We pay a licensing fee in order to use the solution, however, I can't speak to the overall cost. It's not an aspect of the solution I directly deal with.
What other advice do I have?
My company is a customer and an end-user of the solution. It doesn't have any direct affiliation with Crowdstrike.
We're using the latest version of the solution at this time. I can't speak to what the actual version number is.
I'd rate the solution, on a scale from one to ten, at an eight. We're mostly quite satisfied with the solution.
I'd recommend the solution to other users and organizations.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Partner at Fortium Partners: Interim, virtual & fractional CISO and CPO at a tech services company with 51-200 employees
Good intelligence, outstanding security whitepapers, excellent support, and does what it is supposed to do
Pros and Cons
- "Their intelligence is really good. The security whitepapers that they write are outstanding. They handle it all for the clients. CrowdStrike Complete is managed by CrowdStrike. They only call a client if there is a problem that they can't address. They pretty much contain and eradicate. This is not something that every vendor provides."
- "People should be able to obtain training at any point of the engagement so that if somebody who doesn't have the basic knowledge is getting thrown into it, they are able to get trained, and CrowdStrike is able to help them out. CrowdStrike is really doing what they're supposed to be doing, but it is like anything else where they have to keep up on their research and development, or they'll fall behind. This is a fast-paced environment, and I've seen that vendors that were really good three years ago are terrible now. CrowdStrike is trying to stay ahead of the bad guys. They have AI. I have not had a problem with them missing anything. If they missed something, they should just make sure that they don't miss it again and understand why they missed it. I don't know if they did."
What is our primary use case?
Our clients use it for protecting themselves from getting ransomware. Their use case is just to protect their endpoints because it is really bad out there.
It is a hybrid deployment. You have to have agents on all the endpoints, and all the CrowdStrike AI is on the cloud.
What is most valuable?
Their intelligence is really good. The security whitepapers that they write are outstanding.
They handle it all for the clients. CrowdStrike Complete is managed by CrowdStrike. They only call a client if there is a problem that they can't address. They pretty much contain and eradicate. This is not something that every vendor provides.
What needs improvement?
People should be able to obtain training at any point of the engagement so that if somebody who doesn't have the basic knowledge is getting thrown into it, they are able to get trained, and CrowdStrike is able to help them out.
CrowdStrike is really doing what they're supposed to be doing, but it is like anything else where they have to keep up on their research and development, or they'll fall behind. This is a fast-paced environment, and I've seen that vendors that were really good three years ago are terrible now. CrowdStrike is trying to stay ahead of the bad guys. They have AI. I have not had a problem with them missing anything. If they missed something, they should just make sure that they don't miss it again and understand why they missed it. I don't know if they did.
For how long have I used the solution?
I have been using this solution for years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is easy. All you need to do is to get the correct pricing. When you add more endpoints, you are going to pay more for the license. When you do mergers and acquisitions, it is always a concern. If you've got really good security products in one company but not in the other one, you have to bring them in.
Most of our clients are medium-sized companies. We also have large clients, but they have got full security staff. CrowdStrike does well in medium-sized companies because they need them really badly. With CrowdStrike Complete, they don't have to have the staff to manage it.
How are customer service and technical support?
I have interacted with them, and they are excellent.
Which solution did I use previously and why did I switch?
Our clients had other solutions, and they switched because they got ransomware. A lot of solutions aren't always what they say they are. Some are good, but people don't have the staff to manage them. With CrowdStrike Complete, you don't have to have the staff to manage it.
How was the initial setup?
Its initial setup is very straightforward. The agents are really easy to roll out.
I always tell my clients that it is a partnership. You have to do health checks with them to make sure that you're doing what you should be doing and they're doing what they're supposed to be doing. Sometimes, clients put products in place, and they leave them. Then they find out that they didn't set them right, and now they're a victim of a ransomware attack that they could have avoided. They had the right security product in place.
CrowdStrike should be promoting these health checks with their clients, and they do, but I don't know if all salespeople do it. That is so important because sometimes it is not the vendor that caused the issue. It is the client, but they didn't know any better.
What's my experience with pricing, setup cost, and licensing?
They are really reasonable for the services they are providing. When you add more endpoints, you are going to pay more for the license.
What other advice do I have?
I would recommend this solution. I would advise others to get the best pricing and doing it around the quarters. You should really understand the pricing structure and the fact that you still need somebody to be able to take their call if there is something they can't do. Do health checks, and make sure that it is implemented correctly and you have got all your endpoints covered. It is a partnership between the vendor and the customer, and CrowdStrike is really good at that.
I would rate CrowdStrike Falcon Complete a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior security consultant at a computer software company with 51-200 employees
Easy, lightweight, 100% reliable, and able to stop zero-day and ransomware attacks
Pros and Cons
- "It is a major anti-malware solution. It can stop zero-day attacks and ransomware attacks. There are so many features in CrowdStrike. Falcon Overwatch is a valuable module. It is lightweight on the endpoints. It doesn't have any scanning mechanism. It works on artificial intelligence, static analysis, and dynamic analysis. There is no signature available on this. It is a pretty easy solution. It is cloud-based, so there is no driver maintenance or anything like that. You can go anywhere in the world. If you have internet, you'll get connected to the cloud and the policies that it contains. It is pretty simple."
- "Its support should be improved. The product is amazing, but the problem is that their support team is overconfident about the product. If something happens, they don't listen. They keep arguing with the customer. It should have more reporting. Reports are not that customizable. We need customizable reports for our customers, but they not there in CrowdStrike as well as SentinelOne."
What is our primary use case?
It is an advanced anti-malware solution. Our clients replace the existing traditional antivirus with this solution. We are an implementer. We sell this solution, and then I go and understand the existing environment to deploy it.
What is most valuable?
It is a major anti-malware solution. It can stop zero-day attacks and ransomware attacks. There are so many features in CrowdStrike.
It is lightweight on the endpoints. It doesn't have any scanning mechanism. It works on artificial intelligence, static analysis, and dynamic analysis. There is no signature available on this.
It is a pretty easy solution. It is cloud-based, so there is no driver maintenance or anything like that. You can go anywhere in the world. If you have internet, you'll get connected to the cloud and the policies that it contains. It is pretty simple.
What needs improvement?
Its support should be improved. The product is amazing, but the problem is that their support team is overconfident about the product. If something happens, they don't listen. They keep arguing with the customer.
It should have more reporting. Reports are not that customizable. We need customizable reports for our customers, but they not there in CrowdStrike as well as SentinelOne.
For how long have I used the solution?
I have been providing this solution for three years.
What do I think about the stability of the solution?
It is a 100% reliable solution. We had some small glitches with it, but we were able to rectify those issues by tuning it.
What do I think about the scalability of the solution?
It is pretty good. We have four customers, and there are a total of 15,000 to 20,000 users.
One of our clients has been using this for over a year now, and they have acquired more companies. They will possibly buy more. They really like the product and are happy with the product.
How are customer service and technical support?
The first level of support is with us. If I'm not able to solve an issue, then I'll raise a case to Falcon with the help of the customer. I get guidance from the customer to raise the ticket about the issue and everything. As a partner or a vendor, we cannot raise a case for another customer.
Their support team is overconfident about the product. If something happens, they don't listen. They keep arguing with the customer.
Which solution did I use previously and why did I switch?
I have got experience with SentinelOne Vigilance. The major difference between SentinelOne Vigilance and CrowdStrike Falcon is the pricing. CrowdStrike is more expensive. Otherwise, both work in almost the same manner. They are cloud-based, and they are next-generation endpoints. They block cyber attacks.
How was the initial setup?
Its initial setup is straightforward. It is pretty simple. It is a very powerful product that doesn't take much time to be set up. Unlike traditional antivirus, you don't need to create a lot of policies and build up the server. I have a link, and I enable the license and download the agent. That's it. It is pretty fast.
The deployment duration depends on the environment and the number of clients. It could take from three days to one week depending upon the number of agents. In most cases, the customer will opt to deploy for 50 machines. A customer has around 6,000 endpoints, and I have also deployed for only 50. It depends upon the customer.
What about the implementation team?
We are a team of two. I and my colleague do the deployment.
It definitely needs upgrade, fine-tuning, and exclusions. No security product is 100% accurate, so we need fine-tuning. I am responsible for the maintenance for our clients. They have something called an Annual Maintenance Contract (AMC). Every quarter, I need to do a health check of their endpoints. After that, I send a report to them about the fine-tuning findings and the fine-tuning steps that need to be performed.
What was our ROI?
Our clients have definitely seen ROI. They were attacked with ransomware, but CrowdStrike blocked it. They reported to us, and we reported to CrowdStrike.
What's my experience with pricing, setup cost, and licensing?
CrowdStrike is more expensive than SentinelOne. Licensing works on the number of agents and the modules you buy. CrowdStrike has different modules, such as Falcon, Falcon Overwatch, Falcon Complete, etc. The pricing depends upon the module that the customer wants. They have different Incident Response (IR) teams, which are very expensive.
What other advice do I have?
We definitely need to move to the next-generation solutions because these days attacks are pretty intense, and the traditional antivirus solutions are not going to stop them. CrowdStrike gives a proper security block. It is a 100% protector.
There was a customer who was impacted by ransomware. We put SentinelOne over there, and we were able to catch the file that their antivirus couldn't. These solutions are 100% reliable and definitely good for any company that wants their enterprise to be protected on the endpoints.
I would rate CrowdStrike Falcon Complete an eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Implementer
Director Operaciones SOC at a tech services company with 1-10 employees
Good managed detection and response features, and easy to use, but the reporting needs to be improved
Pros and Cons
- "The most valuable feature is the Managed Detection and Response."
- "All of our customers complain about the reporting and say that it is very poor."
What is our primary use case?
We are a solution provider and CrowdStrike Falcon Complete is one of the products that we offer to our customers. We have several different customers for which we provide this software as a service. In other cases, customers purchase licenses for it through us and we administrate it.
What is most valuable?
The most valuable feature is the Managed Detection and Response.
What needs improvement?
All of our customers complain about the reporting and say that it is very poor.
Technical support in Latin America could be improved.
It is not difficult to use and it is fast to implement.
I would like to have a feature to collect logs and explore the information.
In the next release, I would like to have a simplified remote installation.
For how long have I used the solution?
CrowdStrike Falcon Complete
What do I think about the scalability of the solution?
It is easy to scale this product. We have approximately 20,000 users.
How are customer service and technical support?
Technical support in Latin America is delayed. Many times, the customers ask for something from support but they speak Spanish, and that delays the response.
How was the initial setup?
The initial setup is straightforward and pretty easy to complete.
The implementation is fast.
What's my experience with pricing, setup cost, and licensing?
The average price is approximately $500 per customer.
What other advice do I have?
I would rate this solution a seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free CrowdStrike Falcon Complete MDR Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Product Categories
Managed Detection and Response (MDR)Popular Comparisons
IBM Security QRadar
Huntress Managed EDR
Binary Defense MDR
Intercept X Endpoint
Arctic Wolf Managed Detection and Response
SentinelOne Vigilance
Adlumin Security Operations
Trend Micro Worry-Free Services Suites
CompassOne by Blackpoint Cyber
Secureworks Taegis Managed XDR / MDR
Field Effect MDR
Fidelis Elevate
ConnectWise SIEM
Buyer's Guide
Download our free CrowdStrike Falcon Complete MDR Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- How do you estimate ROI of a Managed Detection and Response (MDR) solution?
- When evaluating Managed Detection and Response (MDR), what aspect do you think is the most important to look for?
- Which solution do you prefer: Optiv Managed Security Services or eSentire?
- Why is Managed Detection and Response (MDR) important for companies?















