External reviews
External reviews are not included in the AWS star rating for the product.
Crowdstrike Falcon Well Worth the Money
What do you like best about the product?
I think the best thing about Crowdstrike is it can rely not only on signatures but analyzes behavior to detect malicious items in the environment. It finds all sorts of things traditional antivirus would never see.
What do you dislike about the product?
They tend to nickel and dime you on add on's—a lot of addons that should be part of the product you have to purchase separately.
What problems is the product solving and how is that benefiting you?
We needed a nontraditional antivirus product that wasn't signature-based and was not resource-hogging.
- Leave a Comment |
- Mark review as helpful
From the initial sales call through to the end of deployment, a solid product and company.
What do you like best about the product?
Small, lightweight agent, easy to deploy. A lot of powerful tools are built-in. Easy to navigate.
What do you dislike about the product?
Splunk queries can be a bit of a learning curve.
What problems is the product solving and how is that benefiting you?
Endpoint protection and improved visibility, device control. Faster incident response.
Recommendations to others considering the product:
Do a thorough trial and throw everything at it. Ask a lot of questions; the support team is helpful. There will likely be some growing pains after the fact, but probably nothing major. Expect some false positives at the beginning, but that will reduce as time goes on.
CrowdStrike makes it easy
What do you like best about the product?
There are a low amount of false positives.
What do you dislike about the product?
There is nothing I have found to dislike.
What problems is the product solving and how is that benefiting you?
As a hospital, many of our users have drivers that often get picked up a virus. Due to how CrowdStrike works, it ends many of our false positives.
Great experience
What do you like best about the product?
Falcón crowdstrike it's a great solution for endpoint security, one of my preferred features is the option to isolate a compromised host and be able to run commands in the same computer
What do you dislike about the product?
The vulnerabilities option stop the task if you log out because of idle time
What problems is the product solving and how is that benefiting you?
The security for al my endpoints and servers, and the suspicious activity monitoring
Recommendations to others considering the product:
I recommen falcon, because it is a robust solution for EDR, which everyday it's achieving more goals in the market, it's an all in one solution, which bring control and security over your entire computers in the network
The Best AV we have used so far
What do you like best about the product?
CrowdStrike Falcon is one of the best AVs we have gone through it. We have mostly liked the lightweight agent with less memory consumption agent at the endpoint level. AI-Based detection is the core feature of this AV.
What do you dislike about the product?
Just perfect and meeting our requirements.
What problems is the product solving and how is that benefiting you?
The benefit we have realized is the Dashboard which provides a lot of information that helps our security team to deep down into it and be able to achieve and protect our environment.
CrowdStrike has become the most important Security vendor and it's helping a LOT of organizations!
What do you like best about the product?
Falcon ecosystem is very vast and with a SINGLE and lightweight agent it can provide many different security related protection capabilities. The console is very easy to understand, it's cloud native so it also saves a money with regards infrastructure and maintenance.
I really like the way it can be integrated with other solutions to share security telemetry data and enhance the power of the tools to see what others can't see and find dirty stuff within the events that are being collected by it's sensor.
The minimum number of false positives it's the BEST this solution can offer, any Security Operations team should have the time to review only CRITICAL alerts without distracting from false positives or noisy alerts. If that's not enought, the tool has the power to correlate those detection events and create a summarized version on an Incident, that will help the security analysts to save time and respond faster than anyone else. Endpoint Protection is the start of the service,
i think this product it's going to continue growing and adding more and more features to allow their costumers to focus on strategic security related topics rather than technology related topics.
I really like the way it can be integrated with other solutions to share security telemetry data and enhance the power of the tools to see what others can't see and find dirty stuff within the events that are being collected by it's sensor.
The minimum number of false positives it's the BEST this solution can offer, any Security Operations team should have the time to review only CRITICAL alerts without distracting from false positives or noisy alerts. If that's not enought, the tool has the power to correlate those detection events and create a summarized version on an Incident, that will help the security analysts to save time and respond faster than anyone else. Endpoint Protection is the start of the service,
i think this product it's going to continue growing and adding more and more features to allow their costumers to focus on strategic security related topics rather than technology related topics.
What do you dislike about the product?
Since it's cloud-based, currently, there's no solution for air-gapped systems. We, as a manufacturing company, used to have unplugged network devices, and it would be good this level of protection expanded to the manufacturing sites where there's more risk for a physical attack.
It also doesn't offer protection for legacy obsolete OS versions, and it's not the only vendor that doesn't have this. Still, it will be a market differentiator and a "nice to have" capability.
There's no AD Integration; that's another good feature that I would love to have on this tool, that one could raise the efficiency for deployments and identification of users faster.
Last but not least, ON-DEMAND SCAN is not available! And this still has an impact on our company; some departments NEED this functionality a lot!
It also doesn't offer protection for legacy obsolete OS versions, and it's not the only vendor that doesn't have this. Still, it will be a market differentiator and a "nice to have" capability.
There's no AD Integration; that's another good feature that I would love to have on this tool, that one could raise the efficiency for deployments and identification of users faster.
Last but not least, ON-DEMAND SCAN is not available! And this still has an impact on our company; some departments NEED this functionality a lot!
What problems is the product solving and how is that benefiting you?
CrowdStrike has become our #1 security-related host threat protection tool; it's currently handling our Security Operations Protection+Detection defenses.
We used another tool, which was a pain; with CrowdStrike, the false positives have become a minor issue, making deployments easier.
We have also gained TRUST across many different business areas, and working with key stakeholders has become faster. Now they are happy to help since the implementation's outages were minimal, and the tool has provided that confidence to continue finding that balance between SECURITY and OPERATION.
We used another tool, which was a pain; with CrowdStrike, the false positives have become a minor issue, making deployments easier.
We have also gained TRUST across many different business areas, and working with key stakeholders has become faster. Now they are happy to help since the implementation's outages were minimal, and the tool has provided that confidence to continue finding that balance between SECURITY and OPERATION.
Recommendations to others considering the product:
CrowdStrike Falcon salespeople are very open and transparent; you will find a good time working with them!
Make sure you try the solution before you buy it. But this is a tool you will love!
Make sure you try the solution before you buy it. But this is a tool you will love!
Must have solution for Endpoint protection
What do you like best about the product?
Protection against zero-days
easy to deploy
highly reliable
It doesn't rely on signatures
easy to deploy
highly reliable
It doesn't rely on signatures
What do you dislike about the product?
Add-on Features will going to add up the cost
It certainlly requires some false positive tuning intially but as you progress, it works like a charm
It certainlly requires some false positive tuning intially but as you progress, it works like a charm
What problems is the product solving and how is that benefiting you?
Zero Days protection against malware and ransomware
Realtime endpoint threat detection and remediation
Centralized console to manage the whole program
Ability to create custom rules to block or allow certain files
Realtime endpoint threat detection and remediation
Centralized console to manage the whole program
Ability to create custom rules to block or allow certain files
Vendor requires registration in their own portal, but never made contact
To complete registration, CrowdStrike requires registration at their own portal. They say they will contact me in the next 2 business days, but two months later and nothing.
In addition, tried to contact the vendor via the support email and got no response. Bad service, can't use the subscription at all.
EDR Capabilities
What do you like best about the product?
A centralized web console can be managed by many things.
What do you dislike about the product?
Every device which are having falcon sensor need to internet connection.
What problems is the product solving and how is that benefiting you?
Endpoint protection having enhanced detection features than traditional anti-virus.
Crowd Strike Flacon X Threat Intelligence solution
What do you like best about the product?
Falcon X it's ease to use and powerful tool. Low false positive hit.
What do you dislike about the product?
No direct connection with web portal threat actor name and real threat actor
What problems is the product solving and how is that benefiting you?
Integration of SIEM information with intelligence information
showing 151 - 160