CrowdStrike Falcon Reviews

My main use case for CrowdStrike Falcon is EDR. I monitor devices to ensure everything is configured correctly. Configuration monitoring is mostly my main focus, but we do all kinds of work within CrowdStrike.

Our team works in endpoint security on the administrative side rather than as a threat detection or incident response team. I use AI within CrowdStrike Falcon to write NGCM queries, and it has significantly sped up the process.

CrowdStrike Falcon has positively impacted my organization by keeping it safe from breaches.

The benefits I have seen from having multiple security capabilities on a single platform include the convenience of having everything in one place rather than scattered across separate tools.

The value of having endpoint identity, cloud, and other security telemetry in CrowdStrike Falcon is that it's consolidated in one location. CrowdStrike Falcon has positively affected the workload and productivity of my security team by saving time, reducing manual work, and improving efficiency.

The best features that CrowdStrike Falcon offers are that it is lightweight, scalable, and aggregates numerous events. The lightweight sensor and event aggregation have specifically helped me and my team, as the alternative would make our work considerably harder.

CrowdStrike Falcon is strong regarding its features, with the lightweight sensor and event aggregation being the main highlights for me. Regarding CrowdStrike Falcon's AI capabilities, its governance and security are great.

The accuracy and reliability of AI output have improved because Charlotte AI has gotten much better in recent weeks, whereas previously it could not even prepare a working workflow. CrowdStrike Falcon's sensor has had no impact on endpoint performance, and my ability to deploy security at scale remains unaffected due to its lightweight nature.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that it's quite mature.

CrowdStrike Falcon can be improved in terms of tracking broken sensors that are no longer communicating with the console. The main improvement needed is related to better management and visibility of these broken sensors.

I have been using CrowdStrike Falcon for two years.

CrowdStrike Falcon is stable.

CrowdStrike Falcon's scalability is excellent. We have over 100,000 endpoints, and it is working very well.

The customer support is great, and I have no complaints.

CrowdStrike Falcon has allowed me to consolidate and replace other security tools such as Symantec Endpoint Protection. The impact of switching from Symantec Endpoint Protection to CrowdStrike Falcon was minimal.

On a scale of 1 to 10, I rate CrowdStrike Falcon a nine. I chose nine out of 10 because I did not experience many issues with it overall.

CrowdStrike Falcon is deployed in my organization in both on-premises and cloud environments. My organization primarily uses Microsoft Azure with CrowdStrike Falcon. Regarding AWS, my organization does not use AWS as the cloud provider for CrowdStrike Falcon.

The advice I would give to others looking into using CrowdStrike Falcon is that they should explore CrowdStrike University.

My main use case for CrowdStrike Falcon is endpoint protection. I use CrowdStrike Falcon for general endpoint remediation if users happen to click on malicious content.

The automated task set is excellent. The best features CrowdStrike Falcon offers include automated tasks that remove the need for me to go in and manually remediate threats.

CrowdStrike Falcon has positively impacted my organization by removing task work that the tech would normally have to complete by using the automation processes. It has definitely saved time for my team's workload.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats as it usually detects threats and remediates them before we even have to take any action, definitely saving us a lot of time.

The benefits from having multiple security capabilities on a single platform include that it is easier to manage from a single pane of glass. CrowdStrike Falcon has allowed us to look into consolidating or replacing other security tools, and we are actually looking into that currently.

In a recent security incident, we noticed a few times where CrowdStrike Falcon stopped potential malware from running and removed it before it could establish a foothold. CrowdStrike Falcon sensor has positively impacted endpoint performance by keeping the systems clean and running optimal, aiding our ability to deploy security at scale.

We heard that the newest features coming soon are a major improvement that we would definitely be interested in. We have seen the announcement for the Red Team, Blue Team features, and they sound excellent. We are planning to use AI within CrowdStrike Falcon in the future.

I have been using CrowdStrike Falcon for about six years.

CrowdStrike Falcon is stable.

So far, there have been no issues with CrowdStrike Falcon's scalability.

The customer support for CrowdStrike Falcon has been excellent. I would rate the customer support a 10 on a scale of 1 to 10.

We did not previously use a different solution.

My experience with pricing, setup cost, and licensing has been that so far, it is very easy to work with licensing and setup.

Before choosing CrowdStrike Falcon, we evaluated other options and currently overlap with Darktrace, but Darktrace's cost is making us look elsewhere.

CrowdStrike Falcon is deployed in my organization using a hybrid cloud setup. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that so far, it is a well-recognized name with good performance and a good overall reputation. I love it. My advice to others looking into using CrowdStrike Falcon is to not look at anything else and to use it instead. It works and it works great. I would rate this product a 10 out of 10.

As an infrastructure organization, we are using CrowdStrike Falcon to enable the tooling for our response, intel, and hunting teams. Currently, we are not using AI within CrowdStrike Falcon platform; our interest is outside the platform where we can access multiple telemetry streams through our SIEM. Although I think there is a use case within the platform itself, we have made the decision as a firm that it is probably better to use that aggregation of telemetry outside of the platform.

CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by providing more advanced telemetry, faster response times, and better intelligence to identify anomalies in the ever-evolving cybersecurity landscape.

The value we have seen from having endpoint, identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform allows other teams with expertise in those cross-domains to communicate more effectively and efficiently amongst the response, intel, and hunting teams.

CrowdStrike Falcon has affected the workload and productivity of my security team by making us more effective and efficient in what we are doing. The work has exploded, but it helps us do more.

CrowdStrike has been a good partner, but there are times when we need to escalate support faster. With any large security organization, it takes a little bit of time to get to the right place, and if we can speed up the support model, that would always be better.

When we get our issues escalated properly, the right teams from CrowdStrike are on board to help me understand the problem in depth and resolve it quickly, but it takes a while to reach that escalation point.

When we open a case, it often takes some time to get it routed to the experts since there are basic questions that do not directly address what we are asking. If our support teams could take a step back and correctly route our queries faster, it would improve the experience.

I have been using CrowdStrike Falcon for approximately six years.

I assess the stability and reliability of CrowdStrike Falcon as very stable, providing us great telemetry. However, I think that there probably could be more done with networking telemetry.

Other than July 19th of 2024, there has been perfect performance with CrowdStrike Falcon, and that specific date has become notable for everyone.

CrowdStrike Falcon sensor allows us to deploy security at scale with a lightweight sensor, which is one of the reasons why we were interested in CrowdStrike Falcon to begin with.

CrowdStrike has been a good partner, but there are times when we need to escalate support faster. With any large security organization, it takes a little bit of time to get to the right place, and if we can speed up the support model, that would always be better.

When we get our issues escalated properly, the right teams from CrowdStrike are on board to help me understand the problem in depth and resolve it quickly, but it takes a while to reach that escalation point.

When we open a case, it often takes some time to get it routed to the experts since there are basic questions that do not directly address what we are asking. If our support teams could take a step back and correctly route our queries faster, it would improve the experience.

Our experience with deploying CrowdStrike Falcon was when we switched from a competitor that was not advanced. We were approved to finish the project in about 18 to 24 months but were asked to complete it within three months, and we significantly reduced our time for deployment, accomplishing it in record time with a small number of resources.

What worked well was our familiarity with the products, but we faced challenges as we were significantly expanding our response team, which was basically non-existent. This allowed us the opportunity to move into hunting and expand that and intel.

My use of CrowdStrike Falcon platform has expanded since the initial deployment, as we have added several modules and now have better correlation across different security domains.

We have seen return on investment with CrowdStrike Falcon. We deployed CrowdStrike Falcon Identity module and immediately started seeing detections that turned out to be true positives, which we were able to mitigate and resolve very quickly. We realized that adding modules provides immediate returns on investment.

CrowdStrike Falcon pricing, setup costs, and licensing are on the expensive side, but we highly value what you provide. The value proposition yields amazing returns but comes at a cost commensurate with the platform's sophistication.

On a scale from one to ten, I would rate CrowdStrike Falcon as a nine; you are great, but I cannot give a perfect score. My advice for other organizations considering CrowdStrike Falcon is that with the right plan and the right support from CrowdStrike, it is possible to deploy CrowdStrike Falcon endpoint very quickly and efficiently in a way that is safe and reliable. I provided this review with an overall rating of nine out of ten.

My main use case for CrowdStrike Falcon is incident response.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by improving the flow with the detections and the alerting. One of the things I also have is the MDR, so that also helps with mitigating a lot of the problems as well.

The benefits I have seen from having multiple security capabilities on a single platform include just the time to remediate and to stop the threat.

The value I have seen from having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform is that you understand what you know and what you don't know. Having all the telemetry data feed into one main system actually helps in quickly detecting threats and also seeing trends, patterns, or connections.

CrowdStrike Falcon has greatly affected the workload and productivity of my security team, which is me, by reducing the time I spend in the platform. With some workflows and creating some automation around it, it has improved my work-life balance because many tasks that I ended up doing multiple times daily are now automated, allowing me to focus on other things that need to be addressed.

I think CrowdStrike Falcon can be improved by making the menu a little bit more intuitive. I know some people like how every menu looks the same, but I don't prefer it because it makes me forget where I am or where I'm going or how to get to some place.

For the next release, I would like to see UI improvements, and also to have it where I don't need to drill into a device's alerting or submenus to just hit contain. If I bring up a device, I want a quick button there to contain it because if I'm clicking on that device, there's something I'm looking into and most likely I've been alerted of something, so I should probably contain it first and then ask questions later.

I have been using CrowdStrike Falcon for two years.

I assess the stability and reliability of CrowdStrike Falcon as pretty solid; it's perfect.

I have experienced no downtime, crashes, or performance issues.

Since my initial deployment, my use of CrowdStrike Falcon hasn't expanded; I think we got rid of some portions. We still have Falcon Complete, but we used to have Falcon Recon, which we got rid of. Now, we are looking back into it because of the Guardian and new steps announced with Recon today. It seems we lowered our use primarily from a customer-facing and interaction standpoint, not due to the technology itself.

For customer service and technical support, it can be spotty at times. With CrowdStrike Recon, we got rid of it due to customer service problems; however, since then, customer reps have been in touch, quite active, vocal, and checking in on us. The support has gotten better since the initial experience.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used is the experience with SentinelOne for EDR and using InsightVM for vulnerability management. I used Adaptive Shield, which is now Falcon Shield, but I would say in the case of Adaptive Shield, it only got worse, mainly from a UI perspective. When it was integrated into CrowdStrike Falcon, it lost its methodical structure, making it hard to navigate. In terms of EDR, I think SentinelOne has an advantage because if I drill into a host or endpoint, I can quickly perform a bunch of actions from the initial click while I already have received the alert and a high confidence rating from CrowdStrike Falcon.

I would describe my experience with deploying CrowdStrike Falcon as easy because I use NinjaOne, which automatically does it. It's great, buy NinjaOne.

What worked well for me was NinjaOne, and I faced honestly zero challenges. The API was easy to set up on both sides within CrowdStrike Falcon and NinjaOne, allowing us to see detections and other things as soon as we were in there. One challenge I faced was on NinjaOne's side, not CrowdStrike Falcon's side, and I would like to see integrations where we have more choice with our third-party vendors.

I can say I've seen a return on investment with CrowdStrike Falcon in terms of time and energy spent gathering information about events, but since I'm not the one spending the money, I can't really say more.

CrowdStrike Falcon hasn't helped me consolidate other tools, but with the announcement of Guardian and using it, it has begun the process of talking about consolidating things because right now, I use InsightIDR as my SIEM and am looking to move to the next-gen SIEM and create more workflows from there.

We haven't yet consolidated, but the impact would be that all the telemetry and plugins and everything I do, especially the workflows, would happen from CrowdStrike Falcon and not third-party. The other impact would be that I can actually integrate more because with Rapid7, I struggle with integrations from a lot of our other partners.

My advice to other organizations considering CrowdStrike Falcon is to take a look at their third-party integrations and see what opportunities exist within CrowdStrike Falcon before making a final purchase. This way, they know which portions of CrowdStrike Falcon they actually need or want, especially since some features tie in deeply with tools like NinjaOne, making daily tasks, deployments, and implementations much easier and more manageable. I would rate this product a 9 out of 10.

My main use case for CrowdStrike Falcon is protecting endpoints and cloud security. For endpoint or cloud security, I do a lot of threat hunting inside my environment using all the telemetry that CrowdStrike Falcon provides, and I tackle incidents by quarantining, deleting, and investigating remotely, among other actions.

I have a lot of old software and operating systems, and CrowdStrike Falcon helps me protect all the boundaries of those systems.

In my opinion, the best features CrowdStrike Falcon offers are the Threat Graph, the investigation page, and the telemetry. The Threat Graph and the telemetry help my team day-to-day by providing insights during my threat hunting process on what's running, what's happening, what rules I can build, and what TTPs may be under the radar, with the Threat Graph being useful for new joiners and day-to-day incident response actions.

CrowdStrike Falcon positively impacts my organization by helping to protect us, providing us with a lot of visibility, and helping to show my board how my protection status is currently. Since using CrowdStrike Falcon, I have seen a lot faster incident response actions, containment, and it helps me mitigate many threats automatically that I previously handled manually.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by bringing a lot faster incident response times, including the MTTR and MTDR key indicators. Having multiple security capabilities on a single platform like CrowdStrike Falcon is helpful because my team does not need to change a lot of interfaces or consoles, and working within just one console is more helpful, which I believe brings more value to my team's time spent on the platform.

CrowdStrike Falcon lowers the workload and augments the productivity of my security team.

I think that bringing more AI and insights into anomalies could be helpful for CrowdStrike Falcon. I would also appreciate having CrowdStrike Falcon on legacy systems such as IBM AIX. Currently, I am not using AI within CrowdStrike Falcon, but I plan to do so.

I have been working in my current field for at least fifteen years.

CrowdStrike Falcon is stable.

I just plug in more licenses and agents for scalability, and there is no complexity involved.

The customer support is excellent, as I receive a lot of help from customer support and also from my technical and sales partner.

I replaced Trend Micro with CrowdStrike Falcon, which brings more value with more precise detection and more automated responses. I previously used Trend Micro Vision One, and I switched because it was impacting me with many false positives and causing production disruptions.

I have seen money saved and time saved, as I have augmented the capacity of my current team without needing to hire more people.

My experience with pricing, setup cost, and licensing was good, as I received a lot of help from CrowdStrike Falcon itself and my sales partner, making it a great experience.

I have evaluated other options, such as Microsoft, before choosing CrowdStrike Falcon.

CrowdStrike Falcon differentiates itself from other cybersecurity platforms I have used or evaluated by having a lower learning curve compared to its competitors, as well as better accuracy and widely recognized superior telemetry. My advice to others looking into using CrowdStrike Falcon is to conduct a POC, as I believe the product proves itself during the POC.

CrowdStrike Falcon is unique in its ability to deploy security at scale quickly, as I do not see other vendors providing such options. I do not see any impact on endpoint performance, and CrowdStrike Falcon is unique in its ability to deploy security at scale quickly, as I do not see other vendors providing such options.

The alerts and capabilities of CrowdStrike Falcon are very precise, and with the AI built in, it brings more value and is becoming more powerful in recent months. I rate this review ten out of ten.

My main use case for CrowdStrike Falcon is installing new customers' CrowdStrike Falcon agents on all their systems and managing the CIDs, configuring all the configurations inside the CID so everything aligns with our standard in our company.

My use of CrowdStrike Falcon has expanded since the initial deployment as I got more into a deep dive. I started from the top and now we are going deeper and deeper into different modules we are deploying.

I cannot say how CrowdStrike Falcon has positively impacted my organization because I am really new, but I can say that it is a growing service we are using and it is getting bigger and bigger from year to year.

What I often hear is that it is really good and better than other products. Customers come to CrowdStrike when they are not having good experiences with their EDR systems, and they come to CrowdStrike expecting a better experience.

I think the use of CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats. They have a better overview, but I cannot say how it was before.

The benefits I have seen from having multiple security capabilities on a single platform are that it gives you a great overview of different sources, which makes it strong because you have one point of overview through all the data.

The value I have seen from having endpoint identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform is that it gives you the best overview you can have.

CrowdStrike Falcon has affected the workload or productivity of my security team by making it more efficient. It is a tool that has many implementations, and using only one tool at a single point gives you all the data you need without having to scroll through different tools, which saves time.

I think we have not seen any impact from using AI within CrowdStrike Falcon, as we are not using it yet, but we are trying to implement it very soon and use it in the NFR.

I think the best features CrowdStrike Falcon offers are a great overview for all the telemetry data that the infrastructure outputs.

When I talk about the overview of telemetry data, I find it most valuable to have all that information in one place. In my daily work, I use the activity dashboard to see if there are any detections, and I can quickly go to the host that it is connected to and see all the information for the detection. This allows me to see all information I need to work in a few seconds.

Regarding CrowdStrike Falcon's AI capabilities, I think its accuracy and reliability of output are really good. It is interesting how you can implement different AI agents with Charlotte AI and use the CrowdStrike skill file for Claude and make templates for Fusion Workflows.

The CrowdStrike Falcon sensor has had no performance impact at all on endpoint performance. It is really lightweight and has a very small amount of host resource usage, so it is really good software.

I think CrowdStrike Falcon is improving really well, with new topics in the newsletter every day, but there should be more API integrations for the last 20% of onboarding. I need the ability to manage the CID group of a customer, the host retention policy, and the user roles, so I can build software for myself that can do a full onboarding, not just 88%. The general settings also are not included right now and should be in there.

I will tell my manager about these needed improvements.

I have been using CrowdStrike Falcon for at least one year.

I think CrowdStrike Falcon is stable. It is super stable.

CrowdStrike Falcon's scalability is excellent. There is no problem using it on big or enterprise infrastructures, and it is scalable easily through different rollout options.

The customer support for CrowdStrike Falcon is really good. When I open a ticket, I get an answer only after a few minutes, and it is really good quality as they really help.

I would rate the customer support 10 out of 10. It is the best support I have ever seen.

There are different ways to set up or manage CrowdStrike Falcon for a customer. We can do it manually or we have different automations we made by ourselves using API integrations to automate about 80% of the onboarding process, and that is how we actually do it.

I have seen a return on investment, as through automation it saves very much time.

I think CrowdStrike Falcon is really good, so I would rate it 9.5 out of 10. There are only a few improvements they could do at the moment, and the rest—95%—is really good.

I chose 9.5 for my rating because I think there is only 5% left to make improvements since there is always space for more, and the rest is what they are doing really well.

CrowdStrike Falcon is deployed in our organization as we are an MSSP using the Europe cloud.

My advice to others looking into using CrowdStrike Falcon is to use CrowdStrike University, as it is a good way to learn about administration in CrowdStrike Falcon.

My main use case for CrowdStrike Falcon is endpoint protection, which is my primary objective, encompassing EDR, MDR, the complete Falcon console, and securing my services at both the gateway and endpoint levels.

A specific example of how I use CrowdStrike Falcon in daily operations is when I face malicious attacks on my networks. CrowdStrike Falcon acts as the first level of defense, connecting with my technical SOC teams to determine if the activity is unusual, allowing me to isolate and follow recommendations to protect my network.

This year, I evaluated the DLP features of CrowdStrike Falcon and successfully deployed nearly 1,500 DLP nodes, which are very effective for my users because, with a single agent, I avoid the complexity of multiple functions.

Currently, I am exploring AI products within CrowdStrike Falcon but have not yet onboarded them into production.

The positive impact CrowdStrike Falcon has had on my organization includes addressing previous major incidents where earlier solutions failed to identify security threats. Since onboarding CrowdStrike Falcon, I have achieved comprehensive protection across my infrastructures, ensuring a secure environment for my customers.

The impact of CrowdStrike Falcon in terms of metrics includes a reduction in downtime, where I can confidently say that I have reduced downtimes to about 99%, and I successfully achieved certifications like ISO 27001 due to my compliance with CrowdStrike Falcon's EDR, MDR, and DLP products.

Using CrowdStrike Falcon has transformed how my security team detects, investigates, and responds to threats. It is now automated, significantly reducing my SOC team's workload since CrowdStrike Falcon takes total ownership of risk.

I experienced a specific incident a couple of months ago when a malware attack targeted my server through the RDP protocol. CrowdStrike Falcon detected and isolated the infected server, allowing me to patch it and move back into production.

The value of integrating endpoint, identity, cloud, and other security telemetry on the same CrowdStrike Falcon platform is substantial.

CrowdStrike Falcon has simplified my processes and made my security operations more efficient.

CrowdStrike Falcon offers the best features, primarily the EDR and MDR solutions, where I find the MDR solution particularly outstanding, along with the DLP features, and I plan to explore SOAR and CrowdStrike Falcon Guardian AI agents as well.

I have covered most of the features I am currently using, especially asset management, application management, monitoring offline nodes, high alerts, notifications, as well as the AI agents and security policies.

The benefits of having multiple security capabilities on CrowdStrike Falcon include comprehensive EDR, MDR solutions, DLPs, SIEM, and more advanced AI agents.

I see a challenge with CrowdStrike Falcon in that if multiple features are integrated into a single product, a failure in that single instance can impact all functions, which is a concern I want to address.

Dashboard usability can be improved. More graphical representations would facilitate easier understanding for my leadership team instead of sifting through logs.

Everything has been satisfactory so far, and I appreciate how consistently CrowdStrike Falcon offers solutions for market security challenges.

I have been using CrowdStrike Falcon for more than five years now, and I am happy that the product plays a major role in ensuring security, as safety is a priority for my CEO.

I have not encountered any significant impacts on performance from the CrowdStrike Falcon sensor. It operates as a lightweight solution with no performance challenges noted.

My use of CrowdStrike Falcon has expanded since the initial deployment, including increased license numbers and new features like DLP added this year.

I have been able to consolidate and replace other security tools.

The tools I replaced include ZTNA and SOAR solutions, which significantly impacted my team's efficiency.

I have some relevant metrics to share regarding ROI, though time is limited for me to elaborate further.

I connect with my CrowdStrike account manager for pricing discussions and consistently find that I am receiving good deals.

I always rate CrowdStrike Falcon a 10 because it serves as my complete security solution.

I choose a rating of 10 because since implementing CrowdStrike Falcon, I have no instances occurring, no downtime, improved business operations, and garnered more security certifications, ensuring my customers are happy with their data security.

I think the governance and security aspects of CrowdStrike Falcon's AI capabilities are well covered, and I will provide more feedback after I establish a product POC.

CrowdStrike Falcon fully meets my expectations with its products that address 100 percent of my needs while tackling emerging threats.

My advice for others considering CrowdStrike Falcon is straightforward: go with CrowdStrike Falcon for a complete security solution.

My main use cases for CrowdStrike Falcon are broad. I mostly work in identity and access management, and I like to have a source of third-party truth module for various activities that we do. I rely on CrowdStrike Falcon to track most of the activities, and I try to use the user login information of various users.

Just because a user has access does not essentially mean they are using that access. In order to find out what sort of access is being used, I know which systems use what groups, but whether they have logged into those systems is something that I can pull in from CrowdStrike Falcon.

My use of CrowdStrike Falcon has expanded since my initial deployment because I learned a lot. I became aware of CrowdStrike Falcon, and then the incident happened, and then I started mostly using it.

The benefits I have seen from having multiple security capabilities on a single platform are substantial, as I appreciate the fact that they have a lot of metadata about metadata logs and about various activities that are happening within the organization. The only part that I get frustrated by is how many repetitions that they have across each part.

When I want to correlate multiple data and create a singularized dashboard, it becomes a nightmare and sometimes even impossible. For example, if you have the assets and you give me the users who logged into those assets, I can get a tabular view of that information. But if I want to create a dashboard out of it and create notifications with it, that is where my pain point comes in.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats because I mostly try to create a couple of dashboards and KPI metrics in CrowdStrike Falcon customs, and that helps me to identify any odd usage of accounts. As an IAM team member, I know which accounts are used by whom and at what point in time they are being used. We can make a considerable guess, and we try to create rules around that and create notifications based on those activities.

CrowdStrike Falcon has affected the workload or productivity of my security team considerably better, because now I have visibility of what is happening within the organization from an identity perspective and a security perspective. Having visibility of all the servers, servers come and go when the organization is big. Having visibility of when the servers are created and who has logged into servers helps us better remediate the accesses and stick to the least access principle and least privilege principles.

I cannot talk about return on investment because I do not know how much it is or how much was invested, but regarding return on effort with CrowdStrike Falcon, I find it really good because with a small amount of effort, I can decipher a lot of information. I would say it is good. What worked well and what challenges I faced include understanding a couple of tables, the headers that you give to the tables, and no flexibility in writing the table headers or the data extraction in the individual tables. There are a couple of columns that I can siphon out, but from an overall perspective, I cannot do much customization around it.

I believe CrowdStrike Falcon can be improved regarding the cross; you have all the information in a kind of a bucket, but when I want to correlate all this information into a singularized view is when I am having issues.

I have been using CrowdStrike Falcon for three or four years, probably.

I would assess the stability and reliability of CrowdStrike Falcon as a ten, because I have never seen it go down. Reliability is also ten, because inconsistency of data is something that I never found. Filters probably rate a five.

I have experienced no downtime, crashes, or performance issues.

I would describe my experience with deploying CrowdStrike Falcon as five or six, because I am still in a learning stage.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that it is more in the sense that instead of having one hundred tools, you have a single tool that performs those one hundred activities.

A security incident where CrowdStrike Falcon helped my team detect or stop a threat is not overall team related, but I mostly use it for investigation purposes from my own. Out of ten, five or six is how much it helps me.

My advice to other organizations considering CrowdStrike Falcon is that it is good to have and gives unified visibility across the organization. With whatever seminars I have been to and a couple of meetings I have attended, I would say a lot of interesting things are happening, so it is worth checking out. I rate this review a seven out of ten.

My main use cases for CrowdStrike Falcon are endpoint security, intrusion detection and response, and a SIM tool.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats because it is much easier to use than any tool I have used before. It feels more like a partnership than just a vendor. CrowdStrike seems to be very quick to adopt new technology.

CrowdStrike Falcon sensor has had an impact on endpoint performance and my ability to deploy security at scale by making it extremely easy to deploy security at a large scale. I have zero issues with performance on my endpoints.

The benefits I have seen from having multiple security capabilities on a single platform are that it is easier to use. Ease of use is paramount. Nobody wants to have to jump into twenty different systems in the event of an emergency.

The value I have seen from having endpoint, identity, cloud, and other security telemetry in the same CrowdStrike Falcon platform is that in the event of an emergency, nobody wants to run to an article or a how-to runbook and dig through the specific scenario in order to know which tool to access. Having everything under a single pane of glass makes it much easier to address issues.

CrowdStrike Falcon has allowed me to consolidate or replace security tools. CrowdStrike Falcon is very much a platform and not a single use tool. I have been able to do a lot of vendor consolidation by bringing on CrowdStrike Falcon.

The impact of consolidating tools is having the ability to do the tasks of multiple vendors in one single pane of glass. That is what has really impressed us.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that it is such a large company that is the top line for pretty much every aspect of their tool. When new technology emerges, they are the first to embrace it, the first to adapt to it, and the first to release updates.

My use of CrowdStrike Falcon has expanded since my initial deployment. I initially deployed it just for endpoint management and then realized all of the things that CrowdStrike Falcon can do, including Overwatch. Now I have a team actually watching over all the anomalies that pop up in my system.

CrowdStrike Falcon can be improved in that the UI takes a little bit to understand where to go and how to get there. With every new release, I see a change in the user interface that makes it much easier to follow.

An additional feature that should be included in the next release is free AI.

I have been using CrowdStrike Falcon for four years.

I assess the stability and reliability of CrowdStrike Falcon as excellent, as we have never had an issue. We are a Mac shop, so we were not part of the outage.

I have not experienced any downtime, crashes, or performance issues. I realize that this is unique, but we are a Mac shop.

I evaluate customer service and technical support as extreme and top of the line.

My experience with deploying CrowdStrike Falcon is that I have had all the support in the world from CrowdStrike to help me navigate any changes. It is very easy to deploy through my MDMs.

What worked well in my deployment is that their online resources were extremely easy and their staff are very quick to respond. Challenges I faced are the same as with any new app in that it is hard to navigate a new user interface. CrowdStrike's UI is a little complicated and takes a while to get used to.

I have seen return on investment for CrowdStrike Falcon by the nature of vendor consolidation and lack of downtime.

My experience with pricing, setup costs, and licensing is great. They work with all of my vendors and resellers, or I could buy directly through the AWS marketplace. The purchasing process is extremely easy.

A security incident where CrowdStrike Falcon helped my team detect or stop a threat involved a contractor who came on who may not have actually been a human. CrowdStrike Falcon helped us discover malicious activity and we were able to remediate without losing anything.

CrowdStrike Falcon has affected the workload and productivity of my security team because it is so easy to use. We have been extremely productive and proactive. CrowdStrike is also the first to tell us about emerging technologies, so we know about it before the general marketplace.

We are using AI within CrowdStrike Falcon in that it is everywhere. AI is a tool to translate extremely complicated technical jargon into very easy to follow runbooks, words, verbiage, how-tos, and automations. That is how we are using it.

The impact AI has had on my security operations is that it allows computers to do computer things, so we do not have to have human interaction when it comes to security frameworks.

The advice I would give to other organizations considering CrowdStrike Falcon is to just implement it. I rate this product a nine out of ten.

CrowdStrike Falcon serves as my organization's main endpoint protection solution, encompassing both the EDR and NG-SIEM components. In a recent situation, I detected and responded to an incident where a user's laptop was stolen. I initiated containment and used the Advanced Event Search feature within the NG-SIEM module to investigate the user's telemetry and determine whether a compromise had occurred.

CrowdStrike Falcon has positively impacted my organization by enabling us to make a significant leap to a mature tool, providing greater overall security across all endpoints and making my team's day-to-day work easier.

Since implementing CrowdStrike Falcon, I have primarily noticed an improvement in exception management. CrowdStrike does not require exceptions, whereas with other EDRs I constantly have to manage them.

Using CrowdStrike Falcon has changed how my security team detects, investigates, and responds to threats. It has made us more agile and allowed better adaptation of the tool to how my team works, compared to other vendors where I have to adapt more to their systems.

The benefits I have noticed from having several security capabilities integrated into a single platform include agility and simplified administration of the tools.

CrowdStrike Falcon has improved my security team's workload and productivity by reducing detections, since I have been able to adapt the tool to my team's needs.

CrowdStrike Falcon has allowed me to consolidate and replace other security tools by unifying EDR and SIEM in a single platform.

The best features that CrowdStrike Falcon offers include the EDR component, which I consider to be a very complete tool due to features such as IOC management, IOA management, device management, and policy management, along with other modules like NG-SIEM, which I also consider quite complete.

The feature I consider especially valuable for my day-to-day work that has made a clear difference in my operations is policy management. It is very well executed, allowing me to go into a lot of detail, and it is well thought out from a management perspective.

What sets CrowdStrike Falcon apart from other cybersecurity platforms I have used or evaluated is mainly the maturity of the product.

I believe CrowdStrike Falcon could improve by listening to customers, as we are the ones who can best provide feedback on the tool, what we are missing in it, and how to improve it.

Regarding workflow management, CrowdStrike Falcon could allow better management of permissions.

I have made several attempts to use artificial intelligence within CrowdStrike Falcon, specifically Charlotte, but since it has not given me good results, I have not continued using it. I made two attempts since acquiring it, and after a recent conference, I am going to give it a third try.

Regarding the artificial intelligence capabilities of CrowdStrike Falcon, my opinion about its governance and security is that if by artificial intelligence you mean Charlotte, at the moment I do not consider it to be working.

In terms of the accuracy and reliability of the results offered by artificial intelligence in CrowdStrike Falcon, I believe there is significant room for improvement.

I have been using CrowdStrike Falcon for approximately one year.

Occasionally, I have noticed an impact of the CrowdStrike Falcon sensor on endpoint performance or on the ability to deploy security at scale, but this occurs in few cases.

I consider CrowdStrike Falcon to be stable at the highest level.

Since my initial deployment, I have expanded the use of CrowdStrike Falcon in my organization. I started with a single CID and a single console, and I now have three.

I rate the scalability of CrowdStrike Falcon as perfect, since it is completely transparent to me and I only need to request it.

I find CrowdStrike Falcon's customer support to be quite good, with areas to improve, but above average compared to other vendors.

I would rate customer support as an eight on a scale from one to ten.

I was previously using another solution, which I cannot mention, and I decided to switch to CrowdStrike Falcon due to limitations of the other tool.

I have seen a return on investment with CrowdStrike Falcon in terms of time savings for my team at the highest level.

Before choosing CrowdStrike Falcon, I did evaluate other options, but I cannot name them.

On a scale from one to ten, I would rate CrowdStrike Falcon a nine.

I give it a nine and not a ten because there is always room for improvement, and there will always be details to polish.

CrowdStrike Falcon is deployed in my organization as Public SaaS.

The cloud provider I use to deploy the solution is CrowdStrike's own console.

My advice for other professionals who are considering using CrowdStrike Falcon is to go for it, as long as they can afford it.