MCP Server for CrowdStrike Falcon

What do you like best about the product?

I like most about CrowdStrike Falcon Cloud Security is its ability to provide visibility across cloud environments and identify potential security threats from one platform. The dashboard is easy to understand, and I like how it helps security teams monitor risks, detect suspicious activities and respond quickly. It also makes managing cloud security a bit easier without having to switch between multiple tools.

What do you dislike about the product?

One thing I dislike is that the platform can feel a little complex for new users, especially when exploring advanced security features and configurations. It also takes some time to understand all the alerts and reports properly. The pricing could be a concern for smaller organizations as well. Overall, the product is good, but I feel the initial learning experience could be made a bit simpler.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon Cloud Security helps solve the problem of limited visibility into cloud environments and makes it easier to identify security risks, misconfigurations and suspicious activities. It helps our team understand potential threats before they become bigger issues. The biggest benefit is having better visibility and centralized monitoring, which saves time during security checks and makes it easier to manage cloud risks. Overall, it gives more confidence in maintaining a secure cloud environment.

What do you like best about the product?

K8s coverage is a solid feature, and it’s easy to manage overall.

What do you dislike about the product?

The interface can feel complex at times, which makes it harder to find the information I’m looking for.

What problems is the product solving and how is that benefiting you?

The coverage of CrowdStrike in Kubernetes infrastructure clusters.

What do you like best about the product?

Does what it is supposed to do - protect wirklichste in the cloud

What do you dislike about the product?

Installation is complicated - would prefer easier deployment

What problems is the product solving and how is that benefiting you?

Defend wirklichste I. The cloud from Cyber Monsters

What do you like best about the product?

One of the aspects I appreciate most about CrowdStrike Falcon Cloud Security is the comprehensive visibility it provides into an organisation's overall security posture and potential vulnerabilities.

I particularly value its ability to highlight a wide range of security risks, including potentially compromised accounts, duplicate or reused passwords, accounts potentially vulnerable to Kerberoasting attacks, dormant accounts, and other identity-related security weaknesses. Having this information readily available makes it significantly easier to identify areas of concern and prioritise potential remediation activities.

I also find the platform incredibly useful when conducting customer security reviews. The ability to review security posture findings, identify affected assets and accounts, and gather relevant information to support security assessments makes the review process considerably more efficient.

Rather than having to manually investigate numerous potential security weaknesses across different systems, CrowdStrike provides a centralised overview that helps streamline security assessments and enables analysts to provide customers with meaningful, actionable recommendations.

Overall, I find the platform to be an invaluable tool for vulnerability management, security posture assessments, and proactively identifying potential risks before they can be exploited.

What do you dislike about the product?

One area I feel could be improved is the workflow for reviewing vulnerabilities and their associated affected assets. While CrowdStrike provides excellent visibility into security posture and potential vulnerabilities, investigating individual findings can sometimes be more time-consuming than necessary.

For example, when reviewing a vulnerability affecting multiple assets or users, it would be beneficial to have a consolidated view displaying all relevant information in one place. Currently, I often find myself having to navigate into each affected asset individually to review the associated details, which can become quite tedious when assessing vulnerabilities across a larger environment.

Another limitation I've encountered is the apparent lack of a straightforward option to formally accept the risk associated with a particular finding and subsequently clear or suppress the corresponding recommendation. In situations where a vulnerability has been assessed and the associated risk has been formally accepted by the organisation, having a more accessible risk acceptance workflow would help streamline vulnerability management and reduce unnecessary outstanding recommendations.

Overall, these are primarily workflow and usability improvements rather than criticisms of the platform's detection capabilities, which I find to be excellent.

What problems is the product solving and how is that benefiting you?

I primarily use CrowdStrike Falcon to conduct quarterly identity protection and security posture reviews for various customers.

The platform helps address the challenge of identifying and assessing potential security weaknesses across customer environments by providing centralised visibility into identity-related risks, such as compromised accounts, reused passwords, dormant accounts, and potential Kerberoasting vulnerabilities.

This is particularly beneficial when conducting quarterly security reviews, as it allows me to efficiently identify areas of concern, assess affected accounts and assets, and gather the relevant information needed to provide customers with meaningful security recommendations.

Having this information readily available significantly reduces the time spent manually gathering evidence and enables a more structured, proactive approach to identifying and addressing potential security risks.

Overall, it makes the quarterly review process considerably more efficient while helping customers better understand their security posture and areas requiring attention.

What do you like best about the product?

CrowdStrike leverages its Falcon sensor for active, kernel-level runtime protection. Offers agentless scanning via cloud control-plane APIs for instant asset discovery, vulnerability checks, and misconfigurations

What do you dislike about the product?

Premium pricing. Individuals that are not already proficient with the Falcon platform or Splunk-like query syntax face onboarding hurdle.

What problems is the product solving and how is that benefiting you?

It can automatically detect and terminate malicious processes, prevent container escapes, and isolate compromised cloud instances in real time. This is saving us a lot of time.

What do you like best about the product?

The overview of all cloud assets and out of the box set of security rules.

What do you dislike about the product?

The impossibility to tailor rules to specific needs. The lack of support of AWS-compatible API on 3rd party IaaS providers.

What problems is the product solving and how is that benefiting you?

Ensuring security of over 100k cloud assets

What do you like best about the product?

Overview over all assets and subscriptions.

What do you dislike about the product?

The price :) but the rest is good and helps us a lot

What problems is the product solving and how is that benefiting you?

Runtime security for cloud assets

What do you like best about the product?

The security in Falcon's identity application

What do you dislike about the product?

The difficulty in workflows because they are complex

What problems is the product solving and how is that benefiting you?

Hygiene and security

What do you like best about the product?

My experience, like with all the CrowdStrike modules we use at the company, has been excellent. Having the option to keep everything in one place is convenient, and adding cloud security is another plus.

At first, my knowledge of the tool was limited, but the clear, extensive documentation and the training available on their training platform helped a lot with adapting. As for the module itself, being able to manage different cloud solutions in one spot, along with the easy deployment, discovery, and management of assets, has been very good. The security and investigation capabilities have also been solid.

What do you dislike about the product?

My understanding of cloud was limited, and the many options available made it confusing and overwhelming at first.

What problems is the product solving and how is that benefiting you?

This cloud security solution helps us keep better track of our cloud resources and their security.

What do you like best about the product?

Performance. Ease of deployment and maintenance

What do you dislike about the product?

Too many modules and products Registration of accounts

What problems is the product solving and how is that benefiting you?

Coverage. Discovery and runtime protection.