CrowdStrike Falcon Platform

What do you like best about the product?

Its strong real-time threat detection and response capabilities. It provides good visibility across endpoints, helps identify suspicious activity and makes it easier to investigate and respond to security incidents from centralized console.

What do you dislike about the product?

The platform can be expensive and some advanced features require additional licenses.

What problems is the product solving and how is that benefiting you?

It helps us detect and respond to endpoint threats quickly by providing centralized visibility, which reduces the time we need to investigate and contain incidents.

What do you like best about the product?

I like the reporting in CrowdStike, especially how it uses groups to help me create individual applications.

What do you dislike about the product?

I don’t dislike anything about it, but I found into one Mac sensor issue. After reinstalling iOS, everything worked fine.

What problems is the product solving and how is that benefiting you?

It solves our endpoint protection needs and also helps protect us from ransomware.

What do you like best about the product?

Very simple to deploy. I rolled out thousands of endpoints over a weekend during an incident response. Being able to go from zero to full protection within hours is amazing.

It’s also great to be able to trust that the platform will take care of the threats.

What do you dislike about the product?

It could use some quality-of-life improvements, such as being able to customise severities. For example, in this case what’s marked as “Low” could actually be a high alert. When managing several customers, some customers have different risk profiles, so not every critical is a critical for them.

Also, being able to uninstall sensors from the cloud wouldn’t be good, either.

What problems is the product solving and how is that benefiting you?

Ease of deployment. It gives me confidence that my environment is safe and that it will pick up any threats. It’s fantastic to use operationally, and it’s just as strong for security-related needs.

What do you like best about the product?

detections provided by crowdstrike are very insightful and clear

What do you dislike about the product?

until you tune up the alerts, it can be noisy

What problems is the product solving and how is that benefiting you?

helped with alert fatigue and provides cleaner interface with endpoint management and detections

What do you like best about the product?

What I like best about CrowdStrike Falcon is its cloud-native, unified approach to endpoint protection. It combines strong prevention, EDR visibility, managed threat hunting options, and rapid response capabilities in a single platform with a lightweight endpoint agent.

What do you dislike about the product?

The licensing and entitlement management is complex. It would be nice if that were much simpler to understand and manage.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon helps address endpoint threats such as malware and ransomware by providing real-time prevention, endpoint detection and response, and centralized visibility across the environment. This benefits us by improving detection and investigation speed, reducing the likelihood and impact of security incidents, and strengthening incident-response capabilities.

What do you like best about the product?

Falcon sensor supports multiple systems—Windows, MacOS, and Linux—under the same management. I’m able to drill down into the process chain to understand what triggered an event. Since everything is delivered from the cloud, there’s no on-premise infrastructure required, which made deployment fast. It’s one sensor and one platform, with more and more features built into the same sensor over time, so there’s no need for additional deployments. Sensor update management is also straightforward and easy.

What do you dislike about the product?

At times, it can generate a lot of false-positive alerts, although this seems to depend on how aggressively your detection/prevention policy is configured. I also wish the on-demand scan supported more file types.

What problems is the product solving and how is that benefiting you?

We migrated from a traditional AV vendor to CrowdStrike Falcon EDR. Falcon EDR gives us a centralized view and management across our entire fleet, spanning multiple types of operating systems. It also helps us use it as an asset inventory management system, so we can cross-reference it with other systems. We’re able to view all alerts in one central place and then drill down into the details when needed.

What do you like best about the product?

CrowdStrike provides strong endpoint protection, excellent threat detection, and good visibility across the environment. The Falcon platform is easy to manage from a centralized console, and its detection and investigation capabilities help security teams respond to threats quickly. I also find the lightweight endpoint agent and the overall quality of telemetry very useful for day-to-day security operations.

What do you dislike about the product?

The platform has a broad range of capabilities, which can make the initial configuration and tuning somewhat complex. Some advanced features also require additional time and experience to configure effectively. The amount of information available can occasionally be overwhelming for teams that are new to the platform, so having clearly defined use cases and policies from the beginning is helpful.

What problems is the product solving and how is that benefiting you?

CrowdStrike helps us improve endpoint security by providing centralized visibility, real-time threat detection, and investigation capabilities across our environment. It reduces the time required to identify and investigate suspicious activity and helps the security team respond to incidents more efficiently. The platform also helps reduce the risk associated with malware, endpoint compromise, and other security threats.

What do you like best about the product?

CrowdStrike has been an excellent partner for our organization. Their team has taken the time to understand our environment, along with the security, regulatory, and operational challenges that are unique to the tribal gaming and hospitality industry. That industry awareness has made their recommendations more applicable and their support more effective.

Throughout our partnership, they have stayed attentive to our needs. They respond quickly to questions, take our concerns seriously, and remain engaged well beyond implementation. When we have needed guidance or expressed interest in expanding our CrowdStrike services, their team has worked with us to clarify what we are trying to accomplish and to identify a practical path forward.

The Falcon platform has exceeded our expectations. It gives our team strong visibility across our endpoints and provides the detection, investigation, and response capabilities we need to act quickly when suspicious activity occurs. As we continue to expand our use of its capabilities, the platform keeps adding value.

Overall, CrowdStrike has delivered an exceptional product backed by a consistently positive customer experience. That level of service is becoming increasingly difficult to find, and it is a key reason CrowdStrike has become a trusted partner for our organization.

What do you dislike about the product?

The biggest drawback is the complexity and cost of expanding across the Falcon platform. CrowdStrike provides a broad set of valuable capabilities, but many of them are licensed as separate modules. As a result, it can be hard to tell exactly what’s included, where features overlap, and how to plan a predictable long-term roadmap. Clearer packaging and more flexible licensing would make it easier for customers to add services over time and take fuller advantage of the platform.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon is helping us tackle several challenges, including limited endpoint visibility, complex incident investigations, and the need to detect and contain threats quickly across a large, diverse environment.

The platform gives our security team centralized visibility into endpoint activity and the context needed to understand what happened, which systems were affected, and what actions to take next. Its behavioral detection capabilities help identify suspicious activity that traditional signature-based tools may miss, and its response features let us isolate systems and start containment without waiting for physical access to a device.

Falcon has also improved both the speed and the quality of our investigations. Our analysts can work from a single platform rather than pulling information from multiple disconnected sources. This reduces manual effort, supports faster decision-making, and helps us respond to potential incidents before they grow into larger problems.

Overall, Falcon has strengthened our endpoint security posture, increased our team’s efficiency, and given us greater confidence that suspicious activity can be identified, investigated, and contained quickly.

What do you like best about the product?

The sensor is light and it captures everything

What do you dislike about the product?

It can be difficult at times to deploy through Microsoft intune.

What problems is the product solving and how is that benefiting you?

It’s giving us data on our endpoints with AIDR

What do you like best about the product?

I really like how much of the endpoint protection stack is consolidated into one platform with CrowdStrike Falcon Endpoint Protection Platform. It's very easy to manage, and it runs lightly on user devices and servers. The initial deployment was very easy, and even though configuring all its features can be a bit challenging, once it's set up, it runs smoothly. I also think it protects better, works well, and offers easier management compared to others like SentinelOne, Bitdefender, and Kaspersky.

What do you dislike about the product?

I wish CrowdStrike had DNS filtering capabilities. The initial setup was easy-ish; it was very easy to deploy, but a little harder to fully configure due to its massive amount of features. However, once it's configured, it runs very well.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon Endpoint Protection Platform provides on-endpoint protection, consolidates protection stacks, and runs smoothly and efficiently on devices. It's easy to manage, making it an efficient solution for protecting our customers' environments.