External reviews
External reviews are not included in the AWS star rating for the product.
Crowdstrike Falcon Well Worth the Money
What do you like best about the product?
I think the best thing about Crowdstrike is it can rely not only on signatures but analyzes behavior to detect malicious items in the environment. It finds all sorts of things traditional antivirus would never see.
What do you dislike about the product?
They tend to nickel and dime you on add on's—a lot of addons that should be part of the product you have to purchase separately.
What problems is the product solving and how is that benefiting you?
We needed a nontraditional antivirus product that wasn't signature-based and was not resource-hogging.
- Leave a Comment |
- Mark review as helpful
From the initial sales call through to the end of deployment, a solid product and company.
What do you like best about the product?
Small, lightweight agent, easy to deploy. A lot of powerful tools are built-in. Easy to navigate.
What do you dislike about the product?
Splunk queries can be a bit of a learning curve.
What problems is the product solving and how is that benefiting you?
Endpoint protection and improved visibility, device control. Faster incident response.
Recommendations to others considering the product:
Do a thorough trial and throw everything at it. Ask a lot of questions; the support team is helpful. There will likely be some growing pains after the fact, but probably nothing major. Expect some false positives at the beginning, but that will reduce as time goes on.
CrowdStrike makes it easy
What do you like best about the product?
There are a low amount of false positives.
What do you dislike about the product?
There is nothing I have found to dislike.
What problems is the product solving and how is that benefiting you?
As a hospital, many of our users have drivers that often get picked up a virus. Due to how CrowdStrike works, it ends many of our false positives.
CrowdStrike has become the most important Security vendor and it's helping a LOT of organizations!
What do you like best about the product?
Falcon ecosystem is very vast and with a SINGLE and lightweight agent it can provide many different security related protection capabilities. The console is very easy to understand, it's cloud native so it also saves a money with regards infrastructure and maintenance.
I really like the way it can be integrated with other solutions to share security telemetry data and enhance the power of the tools to see what others can't see and find dirty stuff within the events that are being collected by it's sensor.
The minimum number of false positives it's the BEST this solution can offer, any Security Operations team should have the time to review only CRITICAL alerts without distracting from false positives or noisy alerts. If that's not enought, the tool has the power to correlate those detection events and create a summarized version on an Incident, that will help the security analysts to save time and respond faster than anyone else. Endpoint Protection is the start of the service,
i think this product it's going to continue growing and adding more and more features to allow their costumers to focus on strategic security related topics rather than technology related topics.
I really like the way it can be integrated with other solutions to share security telemetry data and enhance the power of the tools to see what others can't see and find dirty stuff within the events that are being collected by it's sensor.
The minimum number of false positives it's the BEST this solution can offer, any Security Operations team should have the time to review only CRITICAL alerts without distracting from false positives or noisy alerts. If that's not enought, the tool has the power to correlate those detection events and create a summarized version on an Incident, that will help the security analysts to save time and respond faster than anyone else. Endpoint Protection is the start of the service,
i think this product it's going to continue growing and adding more and more features to allow their costumers to focus on strategic security related topics rather than technology related topics.
What do you dislike about the product?
Since it's cloud-based, currently, there's no solution for air-gapped systems. We, as a manufacturing company, used to have unplugged network devices, and it would be good this level of protection expanded to the manufacturing sites where there's more risk for a physical attack.
It also doesn't offer protection for legacy obsolete OS versions, and it's not the only vendor that doesn't have this. Still, it will be a market differentiator and a "nice to have" capability.
There's no AD Integration; that's another good feature that I would love to have on this tool, that one could raise the efficiency for deployments and identification of users faster.
Last but not least, ON-DEMAND SCAN is not available! And this still has an impact on our company; some departments NEED this functionality a lot!
It also doesn't offer protection for legacy obsolete OS versions, and it's not the only vendor that doesn't have this. Still, it will be a market differentiator and a "nice to have" capability.
There's no AD Integration; that's another good feature that I would love to have on this tool, that one could raise the efficiency for deployments and identification of users faster.
Last but not least, ON-DEMAND SCAN is not available! And this still has an impact on our company; some departments NEED this functionality a lot!
What problems is the product solving and how is that benefiting you?
CrowdStrike has become our #1 security-related host threat protection tool; it's currently handling our Security Operations Protection+Detection defenses.
We used another tool, which was a pain; with CrowdStrike, the false positives have become a minor issue, making deployments easier.
We have also gained TRUST across many different business areas, and working with key stakeholders has become faster. Now they are happy to help since the implementation's outages were minimal, and the tool has provided that confidence to continue finding that balance between SECURITY and OPERATION.
We used another tool, which was a pain; with CrowdStrike, the false positives have become a minor issue, making deployments easier.
We have also gained TRUST across many different business areas, and working with key stakeholders has become faster. Now they are happy to help since the implementation's outages were minimal, and the tool has provided that confidence to continue finding that balance between SECURITY and OPERATION.
Recommendations to others considering the product:
CrowdStrike Falcon salespeople are very open and transparent; you will find a good time working with them!
Make sure you try the solution before you buy it. But this is a tool you will love!
Make sure you try the solution before you buy it. But this is a tool you will love!
EDR Capabilities
What do you like best about the product?
A centralized web console can be managed by many things.
What do you dislike about the product?
Every device which are having falcon sensor need to internet connection.
What problems is the product solving and how is that benefiting you?
Endpoint protection having enhanced detection features than traditional anti-virus.
Best product in the market and nothing to worry about protection. I myself using it.
What do you like best about the product?
How detections show with a process tree. The detail view is easy to understand to any user.
What do you dislike about the product?
No dislikes actually. Favourite product of mine.
What problems is the product solving and how is that benefiting you?
No need to worry about malware. Easy to deploy and managed. Policies are easy to create. Nothing much to exclude. user friendly and no impact on user performances.
Recommendations to others considering the product:
One of the best product in the market and easy to manage. EDR feature is very helpful with the endpoint protection. Really can guarantee the protection with this product and I'm using this too.
NGAV Crowdstrike Review
What do you like best about the product?
Falcon Complete gives you the peace of mind in terms of the new attacks in the market. Customer does not have to worry about the management of their NGAV. Everything is managed by Crowdstrike which gives you time to focus on other areas.
What do you dislike about the product?
Cost- Crowdstrike is too costly in comparision to others
What problems is the product solving and how is that benefiting you?
Scanless detection and Prevention
Recommendations to others considering the product:
Please go for the Crowdstrike, this will give you peace of mind.
CrowdStrike NGAV is complete enterprise solution. I like it more rather then any other SIEM solution
What do you like best about the product?
It is integrated with solutions against adversaries like MITRE and kill chain are really useful to prevent against any known or unknown malware or threat. and the best part is , I do not need to rely on signatures even if it's disconnected. and also investigation graph for deeper analysis.
What do you dislike about the product?
It does not comes with demo environment. they do not provide you any demo environment for lab training or something. neither it is paid or free. crowdstrike should provide free or paid demo console access to everyone not only on organization level like microsoft or aws.
What problems is the product solving and how is that benefiting you?
as a admin, it helps with real time response, sensor updates, keeping eye on dashboard for recent activites, event search through spl, reporting.
Falcon NGAV gave me an experience beyond words.
What do you like best about the product?
fantastic protection, effortless deployment
What do you dislike about the product?
Limited features in the free tier, which does not allow people to explore the product
What problems is the product solving and how is that benefiting you?
We deployed it at an enterprise level to cover more than 20k+ employees. It helped restrict significant exploitation attempts with Machine learning and artificial intelligence detections of unknown malware and ransomware.
Behavior-based indicators play an essential role in diagnosing unexpected issues.
Behavior-based indicators play an essential role in diagnosing unexpected issues.
Very easy to protect system from any type of attack
What do you like best about the product?
The best thing that I like about Crowdstrike tool is it gives us a complete picture about what all progress was executed which leads to detect the file as suspicious like it tell us attack pattern in case of true positive
What do you dislike about the product?
Sometimes it becomes difficult to fetch event logs or we are unable to fetch list of incident we got in particular time frame
What problems is the product solving and how is that benefiting you?
The benefits of using crowdstrike is that it is able to detect any suspicious activity carried out on specific device where crowdstrike is installed
showing 81 - 90