CrowdStrike Falcon Cloud Security

I have been using CrowdStrike Falcon Cloud Security  for almost three years.

My primary use case involves securing endpoints and servers — approximately 6,000 endpoints and over 500 servers running CrowdStrike Falcon  under the EDR framework.

In my daily work, we primarily use CrowdStrike Falcon  to respond to alerts and handle BAU activities related to malware. This includes investigating both false positives and true positives, as the platform provides comprehensive protection for all our workstations and servers against malicious or suspicious activity.

Additionally, we leverage CrowdStrike Falcon for incident response and antivirus compliance purposes, alongside its robust EDR capabilities.

CrowdStrike Falcon Cloud Security  has been a game-changer for us at our organization, securing around 6,000 endpoints and 500+ servers over the past few years. We've seen quicker incident responses, clearer visibility into what's happening across our setup, and less hassle managing tools since everything runs on one platform.

It spots threats in real time using behavioral analytics and machine learning, catching both known bad stuff and sneaky unknowns before they cause trouble. False positives dropped, making daily SOC work smoother without chasing ghosts.

When alerts hit, we isolate issues, kill processes, and remediate fast across on-prem and cloud. Ties right into threat intel for proactive hunting, fitting our endpoint-heavy workflow perfectly.

The best features of CrowdStrike Falcon Cloud Security, in my opinion, include the deployment process and management; it offers a simplified approach that is user-friendly for new users to understand quickly.

The dashboard of CrowdStrike Falcon Cloud Security is particularly helpful because it simplifies creating and maintaining policies, and managing endpoints becomes an easy process by allowing us to isolate endpoints as needed.

In addition to the dashboard, the features related to malware protection, integrated monitoring, file protection, network scanning, firewall policies, and IPS are really good.

CrowdStrike Falcon Cloud Security has positively impacted my organization by reducing false positives and enhancing security day by day; after testing it on 100 to 200 systems, we convinced the client to deploy it across 6,000 workstations and over 500 servers.

I did see significant changes; previously, there were multiple AV products, and after deploying EDR, many initial issues were resolved as we strengthened our policies over time.

I recommend enhancing CrowdStrike Falcon Cloud Security, particularly in the areas of vulnerability management and agent troubleshooting. Improvements in these aspects would help streamline the troubleshooting process and strengthen overall security management.

I have been using CrowdStrike Falcon Cloud Security for over 2.5 years.

CrowdStrike Falcon Cloud Security is stable in my experience.

The scalability of CrowdStrike Falcon Cloud Security is good, and it can easily scale up to over 20,000 or 30,000 endpoints.

Customer support for CrowdStrike Falcon Cloud Security is good; I find it satisfactory.

I would rate the customer support an eight out of ten.

Positive

Previously, I used multiple solutions including Microsoft Defender, Sentinel , Trend Micro, Trimix, Palo Alto, and Symantec, and while I am currently working with CrowdStrike Falcon Cloud Security and others, I have not made a full switch yet.

CrowdStrike Falcon Cloud Security setup is straightforward.

No integrator, reseller, or consultant was used for CrowdStrike Falcon Cloud Security deployment at our organization.

In-house SOC team handled it directly via lightweight agent scripts and console setup, keeping it straightforward and controlled.

I believe we have seen a return on investment through time saved and managed employee workload, allowing fewer employees to manage everything effectively.

In terms of pricing, the setup cost and licensing are comparatively a bit expensive, but the solution's effectiveness and mechanisms justify the cost.

Before selecting CrowdStrike Falcon Cloud Security, I evaluated Trend Micro because it provides good solutions, the latest being Vision One.

For those considering deploying CrowdStrike Falcon Cloud Security, I strongly suggest deploying it as soon as possible since it reduces both employee workload and time, while enhancing operational efficiency.

Overall, I find CrowdStrike Falcon Cloud Security to be excellent, making it accessible for both beginners and experienced users alike.

I rate this review a nine out of ten.

Public Cloud

Amazon Web Services  (AWS )

What do you like best about the product?

What I appreciate most about CrowdStrike Falcon Cloud Security is how it delivers unified visibility and intelligent protection throughout the entire cloud environment.

What do you dislike about the product?

One aspect I find less appealing about CrowdStrike Falcon Cloud Security is its expensive pricing, which, combined with its complexity, can make it difficult for smaller teams to handle effectively.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon Cloud Security addresses cloud misconfigurations and provides real-time threat detection, enhancing our security while also minimizing the need for manual intervention.

What do you like best about the product?

“The platform provides excellent threat visibility, a lightweight agent, and highly accurate real-time detection. It is very reliable, performs consistently well, and the investigation and response capabilities are strong. The management console is intuitive, and the detection quality is noticeably hig

What do you dislike about the product?

“Overall, I am very satisfied. I would only prefer to see some advanced filtering options on the dashboard become more intuitive. Other than that, I have not experienced any significant issues.”

What problems is the product solving and how is that benefiting you?

“It helps us maintain continuous visibility across our cloud workloads and quickly detect misconfigurations, vulnerabilities, and abnormal behaviors. By consolidating cloud posture management, threat detection, and analytics on a single platform, it significantly reduces investigation time and strengthens our overall cloud security posture. This results in faster response, reduced operational overhead, and greater confidence in the security of our cloud environment.”

What do you like best about the product?

The platform offers real-time threat detection and displays reports directly on the dashboard.

What do you dislike about the product?

My main concern with this product is its cost. Additionally, it tends to use a significant amount of system resources, and its features are quite limited when used offline.

What problems is the product solving and how is that benefiting you?

It helps protect against serious threats such as zero-day attacks and ransomware, reducing the risk of successful breaches. This added layer of security makes me feel more confident about my system's safety.

I have been using CrowdStrike Falcon Cloud Security  for more than a year, approximately one and a half to two years.

My main use case for CrowdStrike Falcon Cloud Security  is in our environment where we run workloads across multiple AWS  accounts. Our organization is already using native tools from AWS  such as GuardDuty, Inspector , and Security Hub. However, management decided they wanted deeper protection and better monitoring across all accounts. They wanted a centralized solution that would provide an additional layer of security. Although we already have in-house tools, we wanted an overlaying layer for faster threat detection and visibility in one central place. CrowdStrike Falcon Cloud Security helped us bridge this gap and extend our security across all other accounts. It has provided us a good layer of protection across all workloads including EC2 , EKS, ECS, and several parts of our Linux servers.

To compare CrowdStrike Falcon Cloud Security to the native AWS tools I mentioned, such as GuardDuty and Inspector , we needed deep visibility and real-time threat protection. Along with the native AWS tools, we wanted an extra overlaying layer of security to our cloud environment to strengthen our environment security. We chose CrowdStrike Falcon Cloud Security to provide faster threat detection. This is why our organization decided to go with this solution.

I have seen a return on investment by preventing potential incidents and reducing threats, anomalies, or misconfigurations.CrowdStrike Falcon Cloud Security has nearly saved us some amount, though I am not exactly sure of the numbers since the Finops team handles the financial side. What we have gained from CrowdStrike Falcon Cloud Security is that EC2  downtime has been prevented and time has been saved considerably, around eight to ten hours per week through automatic onboarding and centralized visibility. We no longer need to switch between ten plus AWS accounts or perform manual scanning. We can now bring all our accounts together in one tool or solution. Our security has been significantly increased and it is pretty stable in our environment. This is one thing that CrowdStrike Falcon Cloud Security literally gave us with a positive impact and makes it a good investment.

To provide more detail about my main use case and how I use CrowdStrike Falcon Cloud Security day-to-day, I can share a specific example where it helped me respond to a threat. Recently, we had production EC2 instances across multiple AWS accounts, and CrowdStrike Falcon  sensor was deployed automatically using the SSM Manager. We saw an alert where CrowdStrike detected anomalous behavior originating from some rogue IP address. This appeared to be potentially a DDoS attack in our cloud environment, which is fairly common when hackers try to get inside your network and gather organizational data. CrowdStrike performed very well here, detecting the alert and helping us identify that someone was trying to gain access. This really helped us have a broader view, and we acted accordingly in response to it. In any fault and threat detection, CrowdStrike Falcon  plays a crucial role in our environment and gives us a clear point where we can focus our efforts rather than hunting down what is happening.

The best features CrowdStrike Falcon Cloud Security offers include their runtime security, particularly CrowdStrike CWPP . Their runtime security monitors processes at the kernel level and blocks any malicious behavior in real time. This is really good from Falcon  as it protects workloads such as EC2 containers and Linux and Windows workloads at the OS level and kernel level. It detects any kind of credential theft or any movement within these workloads. Additionally, we see it elevates container security in terms of EKS, ECS, and ECR. It scans every image in our ECR and provides real-time vulnerability detection and protection for our container workloads.

Their threat intelligence is really good, and that is one part we really appreciate about Falcon  threat intelligence.

Regarding how CrowdStrike Falcon Cloud Security can be improved, I would say they can improve their support. There were a couple of cases where we needed to escalate issues in order to get proper support. That part could use some tweaking on their end. Additionally, the recent incident during the last summer literally impacted our systems. We had some of our workloads that affected the business, and it was a difficult experience. Apart from that, it is a good tool and the experience with CrowdStrike Falcon Cloud Security has been excellent. We did not find any kind of issues, but if they could improve their response to security-related incidents and provide on-time support or better understand our concerns and address them accordingly, it could be very helpful.

Regarding needed improvements, I think they should enhance automatic alerting with CI/CD scanning and reporting capabilities. Additionally, it would be better to implement Falcon sensor health monitoring so agents are always active. We could know how it is behaving and how it is treating our environment. That could be a little helpful.

The customer support is pretty good, but it can be improved a little bit. I would rate the customer support on a scale of one to ten as a six. They have many improvements that need to be made.

Before choosing CrowdStrike Falcon Cloud Security, we also looked at Wiz , which is another cloud security platform. We evaluated Wiz  before moving to CrowdStrike Falcon Cloud Security.

Regarding my experience with pricing, setup cost, and licensing, the sales team deals directly with this kind of pricing. In terms of licensing, it is a little expensive. CrowdStrike Falcon Cloud Security is on the higher side of the price part.

The advice I would give to others looking into using CrowdStrike Falcon Cloud Security is that if they already have any in-house cloud tools and want to enhance their security in their cloud environment, CrowdStrike Falcon Cloud Security can bring a positive impact. It is a really value-for-money tool. Otherwise, we did not see any issues. It runs lightweight and it gives accurate alerts, so there are no more false alarms. It is a good product to enhance your cloud and strengthen your security. I would rate this product an eight out of ten.

Hybrid Cloud

Amazon Web Services (AWS)