CrowdStrike, Inc. [Private Offer Only]

For human and non-human identity discovery, my principal use case is mostly monitoring privileged users.

The risk rating gives a better view than Idera Discovery. Idera also has account discovery, but when you compare that to CrowdStrike, it is a lot better. It has more information regarding the account and includes a risk rating with a severity index and types of breaches that could happen. This really helps us in formulating the IAM strategy.

CrowdStrike has Falcon's endpoint protection feature, and it definitely enhances incident response because we recently had one and it really helped. The improvement in incident response was that it detected unauthorized access. Based on the trigger that it provided, we did an entire investigation and found what it was and who it was. This was because of the trigger that CrowdStrike provided.

I think the risk rating that comes up for each account in CrowdStrike is my favorite part. It pretty much gives you attack pathways for that account, showing how that account could be compromised. That is something that is really good, and it is a really good platform.

My impression of real-time threat intelligence in CrowdStrike is positive.

I would say AI in CrowdStrike's Falcon is efficient for identifying potential threats, but we have a policy in our company that has turned off all AI across platforms. We are building agents, but only for internal purposes. There is nothing external happening. Obviously, with tools CrowdStrike will pick up what the threats are. If there are AI agents involved, hopefully it will pick it up. I think the way agentic AI is progressing, I think it is going to be very difficult.

Falcon's behavioral analytics does help to reduce false positives in my case.

I won't be able to quantify by how much because I only look at the identity protection module, as that is my day-to-day role. I don't look at Falcon or any other option there, so I wouldn't be able to say anything on that.

I am relying frequently on threat hunting tools that Falcon provides.

I won't be able to provide examples or specific metrics as I don't work on that; it is a different team.

I see drawbacks in CrowdStrike in the application field, where it detects if applications get used or not. For Entra applications, sometimes the application activity, such as if someone is logged in, is not picked up. We actually have to go and check if it is actually there or not. That is something that could be improved upon.

I started using CrowdStrike this year. It has been less than 12 months so far.

CrowdStrike is pretty stable. It deserves a rating of 10 out of 10 for stability.

CrowdStrike is quite scalable. You can run it both on Azure servers and on-premises servers. It is pretty good, deserving a rating of 10 out of 10 for scalability.

In terms of technical service and support from CrowdStrike, it is pretty good. CrowdStrike support deserves a rating of eight out of 10.

I think deployment and installation of CrowdStrike are not that difficult. You just have to install all agents across the servers. I wasn't involved in the implementation, but from what I heard, it wasn't a long process. However, the PAM one takes a long time.

I don't think the most difficult part in CrowdStrike deployment is that complex. The rollout is pretty straightforward. I think it is about one or two months before it is kicking.

CrowdStrike does provide value for money. However, Idera is pretty expensive. For basic vaulting and other features, Idera is okay, but I think they have a lot to improve upon.

Identifying any threat, flagging any unauthorized behavior or lateral movement, and privilege abuse are examples of value for money in CrowdStrike. CyberArk does have a dashboard that says these accounts are high risk, but it doesn't actually give alerts CrowdStrike provides.

I think the biggest difference I see between Idera and CrowdStrike is that CrowdStrike updates its threat modules pretty much on a daily basis. Idera does not. There are a lot of problems with their module discovery.

I am the customer when it comes to CrowdStrike. It is on cloud. We have agents across all our servers, but the main portal is on cloud. We have not hosted on-premises, but it does communicate with the cloud. My final rating for CrowdStrike, if we summarize everything discussed, is 10 out of 10. About seven years ago, I started my career in this business, working in this domain with security tools.

My major use case for CrowdStrike is endpoint security.

On the analytics side of it, my impression of analytics in CrowdStrike is that we are utilizing the product for basic analytics, which we provide, and are not using anything more than that.

I am not working with the threat hunting tools of Falcon at this moment.

We are not very familiar with the threat hunting tools at this moment, so I cannot comment on that.

As a customer, what I appreciate most about the product is that it has already proven its worth because it was able to safeguard us against a clear cyberattack.

It basically protects all our endpoints across the entire company, and that is where it has given us the maximum benefits.

We use EDR right now from CrowdStrike, and those are my favorite features that stand out.

Real-time threat intelligence in Falcon does help with our security.

Falcon Endpoint Protection helps to enhance incident response.

Behavioral analytics with the help of Falcon does help to reduce false positives in my case.

AI in Falcon is another animal right now, and it is going to impact us quite tremendously going forward, which is why we would prefer to see CrowdStrike becoming more AI-aware and utilize it, as we also utilize it coming up to the desktop level now, and therefore, we expect CrowdStrike as an agent to protect us from any AI-generated unethical events.

At this moment, I do see that CrowdStrike could improve on how they handle the AI-related threats on cybersecurity, as we are not very familiar with that and don't have enough information on how CrowdStrike is going to deal with that part.

We don't know if the AI part is very developed here yet, and that's what I'm trying to say; we don't have much information.

If it's available to us regarding the AI part, we would definitely have a look at that.

We would like to see CrowdStrike looking at all these vulnerabilities on the AI part of it and basically develop their product in order to mitigate those kinds of incidents.

I started working with CrowdStrike about two years back and have two years of experience.

CrowdStrike is a 99.9% stable and reliable solution.

CrowdStrike is very scalable because we have been scaling it up.

We have direct support from CrowdStrike, and I do have a positive impression of technical support.

I think they deserve anything between eight and nine for the support, where 10 is the best.

It was easy to deploy CrowdStrike. It's all on-cloud. It's CrowdStrike's cloud, as we do not work with cloud providers like AWS, Azure, or GCP.

We have already seen a return on investment.

When we implemented CrowdStrike, about two months after that, which was two years back, we had a cyberattack, and CrowdStrike with OverWatch was able to cancel that attack for us.

ROI was already achieved within the first year of implementation.

At this moment, I would say the price in the product is well within our price range.

It is relatively okay, as the price is reasonable.

CrowdStrike is quite advanced already because I've looked at other products also, and I don't find their functionalities as advanced as CrowdStrike.

I'm talking about SentinelOne, which we looked at quite extensively before we decided to go with CrowdStrike.

Products such as SentinelOne and other vendors do lack some functionality that CrowdStrike has.

The solution is moving in that direction. One of the things I appreciate about this is that it is not a closed environment. When you look at organizations like Secureworks and Rapid7, they are trying to lock things down. The versatility and agility of Falcon solution provides a better angle in terms of endpoint detection response and endpoint security.

Improving user behavior analytics is what I am focusing on. That is core. Understanding what users are doing, how they are doing it, what is anticipated, being very reactive and zeroing in on zero days, and being able to knock it down quickly is where I am looking for them to focus.

CrowdStrike, Inc. [Private Offer Only] is the core of the EDR endpoint detection response in the market right now and it still is. The combination of AI Defense moving in that direction and them incorporating artificial intelligence is significant. Overall, when I speak to customers, CrowdStrike, Inc. [Private Offer Only] is my core versus others. Although they have some issues with too much built-in functionality, they are going to have to streamline because of artificial intelligence, but I think they are going to refine that in their next deployment.

Beyond just the threat intelligence, the Falcon app was upgraded to Falcon because of the SOC in that ES solution. The biggest aspect for Falcon from an e-discovery perspective is retention issues for that in terms of investigation and bringing Falcon in for a breach. The upgrade was at the MBTA for a breach issue with Keolis, which was my last experience of using Falcon for that purpose.

They should listen more to their community. They need to do a lot more bundling of things as part of it instead of treating everything as an upgrade or an enhancement. The problem that is hurting them is that there is a cost all the time for upgrading.

They are late in the game. When you look at Exabeam, they have always been focused on behavior analytics. This new journey into that era has enhanced it because it provides detection and baselining of behavior when someone is using that endpoint. It is an added feature that has benefited the enterprise in terms of defensive depth. It is definitely a good feature.

I have been using CrowdStrike, Inc. [Private Offer Only] for a long time. Before CrowdStrike, Inc. [Private Offer Only] came to market, that company was bought by BlackBerry, and I deployed that solution. This has been since approximately 2017, 18, or 19.

I give customer service a rating of 10. I do recommend it to my clients. I have found it to be very good, though I am just concerned about price.

I have not used every feature myself. My team has used it in part to augment other tools. There are other tools that have come out on the market that do a better job than what CrowdStrike, Inc. [Private Offer Only] can do in certain areas, but the Falcon ecosystem itself, both from a reactive and proactive perspective, has benefited the company. However, you cannot be a master of everything and a master of none, so you have to be careful. That is what I worry about them.

I am an end user and have been an end user for a long time. I have attended their conference a long time ago. Watching them, I believe that before everybody wants to get into the market with the opportunity of being better, I am looking for consistency. I tell people to look for someone who has good technical support and good response in terms of incident response when you do have an incident. That is where Falcon comes in. They have certainly served us well in the past and in a couple of incidents that I have been involved in with Falcon. I think that it is a great product as far as EDR goes, and I think it is going to many places. My overall review rating for this solution is 9.5 out of 10.