Sold by
CrowdStrike Falcon Platform
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
Reviews (668)
reviewer2811576
Security team has strengthened endpoint control and now monitors threats with full traceability
Reviewed on Oct 14, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for CrowdStrike Falcon is deploying agents on endpoints and using it as antimalware. Additionally, I utilize functions that allow me to monitor servers and log applications being used within the institution.
Through the platform, I review events generated by endpoints and investigate alerts or reported events in detail. I also use it to log events reported by our SIEM and provide traceability to identify failure points.
I have integrated CrowdStrike Falcon with other tools that allow me to measure the maturity and security posture of the solution in its configurations, which has been valuable for our organization.
I use tools that are approved within the bank through CrowdStrike Falcon, directly managing these tools and controlling who has access to them.
How has it helped my organization?
Regarding policy control and robustness, CrowdStrike Falcon has positively impacted daily security management by controlling ATMs and cash machines, which prevents equipment access via USB and effectively blocks these devices.
CrowdStrike Falcon has had a positive impact on my organization by helping us act when events or alerts are generated and by providing traceability of those events. It also allows us to monitor and provide the number of assets being protected.
Since we can act on events and provide traceability, I have seen improvements in response times and a reduction in incidents. I have internal KRI metrics that validate the effectiveness of this tool, and the response times have been very good using CrowdStrike Falcon.
Using CrowdStrike Falcon has changed how my security team detects, investigates, and responds to threats by providing excellent alert generation that allows us to see traceability and manage this effectively within the team.
The benefit I have observed from having several security capabilities integrated into a single platform is complete visibility and traceability.
CrowdStrike Falcon helped my team detect and stop a threat involving the execution of unapproved files and installation of unauthorized programs within the institution.
CrowdStrike Falcon has positively affected the workload and productivity of my security team by providing traceability without being overly complex, with no negative impact.
Even though the CrowdStrike Falcon sensor is very light in terms of resource consumption, it has had an effective impact on endpoint performance and on my ability to deploy security at scale.
What is most valuable?
I consider the best features offered by CrowdStrike Falcon to be the robustness of the firewall and policy control at the endpoint level, including firewall rules and control of external device connections such as USBs or tokens inserted into machines.
The integration with other tools provides complete visibility of configurations and events.
What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated are the capabilities for policy configuration and the ability to provide traceability in events.
Regarding the artificial intelligence capabilities of CrowdStrike Falcon, I find them to be very well developed and quite clear regarding the direction of governance policies for the tool.
The accuracy and reliability of results delivered by CrowdStrike Falcon's artificial intelligence are not perfect and have certain limitations, but overall it has been very helpful and works well.
What needs improvement?
I believe CrowdStrike Falcon could be improved by integrating with MFA.
I have not been able to integrate the tool with a third-party MFA authentication tool.
Additionally, operating system patching functions would be a functionality I would like to see implemented in the future.
For how long have I used the solution?
I have been using this tool for approximately four years.
What do I think about the stability of the solution?
I consider CrowdStrike Falcon to be a stable solution.
What do I think about the scalability of the solution?
I rate the scalability of CrowdStrike Falcon as excellent, and it is a scalable solution.
How are customer service and support?
CrowdStrike Falcon's customer support is very good, and we have not had any issues so far.
Which solution did I use previously and why did I switch?
I previously used Microsoft, which was changed because of its support and distribution.
What was our ROI?
I have not seen a return on investment from using CrowdStrike Falcon in terms of exact data, but in terms of a reduction in events or incidents, we have definitely experienced that.
Which other solutions did I evaluate?
Before choosing CrowdStrike Falcon, I considered other options such as Kaspersky and Microsoft Defender.
What other advice do I have?
I rate CrowdStrike Falcon a nine on a scale from one to ten. I give CrowdStrike Falcon a nine because I have not been able to integrate it with third-party MFA in terms of functionality.
Currently, CrowdStrike Falcon has not allowed us to consolidate or replace other security tools, but we are analyzing the capabilities for artificial intelligence control.
Since its initial implementation, my use of CrowdStrike Falcon has evolved as several features and add-ons have been added that make the platform much more complete, providing more information about what we have on each of the endpoints.
My advice to those considering using CrowdStrike Falcon is that it is a robust tool that works well and has a lot of granularity for its configurations, making it the recommended solution. My overall rating for CrowdStrike Falcon is nine out of ten.
Information Technology and Services
Lightweight, Cloud-Native Protection with Fast Deployment
Reviewed on Oct 13, 2026
Review provided by G2
What do you like best about the product?
CrowdStrike Falcon is its lightweight, cloud-native architecture. A single small agent provides next-gen antivirus, EDR, device control and firewall management, all managed from one web console with no on-premises servers to maintain. Deployment is fast, and there is no noticeable impact on endpoint performance, which matters a lot for users.
What do you dislike about the product?
need to take permission to uninstall it,
What problems is the product solving and how is that benefiting you?
Before CrowdStrike Falcon, we relied on traditional signature-based antivirus, which struggled against modern threats like ransomware, fileless attacks and zero-day malware.
Aamir M.
CrowdStrike Falcon Review - From a Threat Hunter’s Perspective
Reviewed on Oct 12, 2026
Review provided by G2
What do you like best about the product?
Having worked with numerous EDR and XDR solutions throughout my threat hunting career, CrowdStrike Falcon remains one of the most capable and operationally effective platforms I have used. Its rich endpoint telemetry, exceptional visibility into attacker behaviors, and highly intuitive investigation workflows enable hunters to rapidly pivot from initial indicators to full attack-path analysis. The platform consistently delivers high-fidelity detections with minimal noise, allowing analysts to focus on genuine threats rather than spending valuable time triaging false positives.
What truly sets Falcon apart is its speed and efficiency in both detection and response. The ability to quickly contain affected hosts, investigate adversary TTPs, and remediate threats significantly reduces response times and strengthens overall security posture. From proactive threat hunting and incident response to enterprise-scale endpoint protection, Falcon empowers defenders with the tools and intelligence needed to stay ahead of modern threats. I would confidently recommend CrowdStrike Falcon to any organization seeking a world-class security platform that combines powerful protection, rapid remediation, and outstanding analyst experience.
What truly sets Falcon apart is its speed and efficiency in both detection and response. The ability to quickly contain affected hosts, investigate adversary TTPs, and remediate threats significantly reduces response times and strengthens overall security posture. From proactive threat hunting and incident response to enterprise-scale endpoint protection, Falcon empowers defenders with the tools and intelligence needed to stay ahead of modern threats. I would confidently recommend CrowdStrike Falcon to any organization seeking a world-class security platform that combines powerful protection, rapid remediation, and outstanding analyst experience.
What do you dislike about the product?
There is only 1 thing I dislike about Falcon is the lack of URL logging, only FQDNS are logged in DNS telemetry.
What problems is the product solving and how is that benefiting you?
The biggest benefit has been faster investigations and better operational efficiency. Our SOC and Threat Hunting teams can quickly triage alerts, validate suspicious activity, and respond to incidents with greater confidence, enabling us to spend more time on proactive threat hunting and security improvement initiatives rather than manual investigation tasks.
Barış P.
Crowstrike EDR from a GRC perspective
Reviewed on Oct 12, 2026
Review provided by G2
What do you like best about the product?
Its capabilities stand out. It has many talents, but my favorite part is the reporting feature it offers for use in audits.
What do you dislike about the product?
The part I don't like the most is that there are a lot of alarms at the info level. In addition, the fact that it conflicts with some regulations due to the cloud structure is also a negative point for me.
What problems is the product solving and how is that benefiting you?
As a GRC specialist, he primarily focuses on resolving control-related issues across multiple standards, gathering audit evidence, and producing subsequent reports.
Munene D.
Powerful Real-Time Threat Detection with Great Endpoint Visibility
Reviewed on Sep 30, 2026
Review provided by G2
What do you like best about the product?
Its strong real-time threat detection and response capabilities. It provides good visibility across endpoints, helps identify suspicious activity and makes it easier to investigate and respond to security incidents from centralized console.
What do you dislike about the product?
The platform can be expensive and some advanced features require additional licenses.
What problems is the product solving and how is that benefiting you?
It helps us detect and respond to endpoint threats quickly by providing centralized visibility, which reduces the time we need to investigate and contain incidents.
Mahesh C.
CrowdStike Reporting Shines with Flexible Group-Based App Creation for Windows & MAC devices
Reviewed on Sep 30, 2026
Review provided by G2
What do you like best about the product?
I like the reporting in CrowdStike, especially how it uses groups to help me create individual applications.
What do you dislike about the product?
I don’t dislike anything about it, but I found into one Mac sensor issue. After reinstalling iOS, everything worked fine.
What problems is the product solving and how is that benefiting you?
It solves our endpoint protection needs and also helps protect us from ransomware.
Andy S.
World Leading Endpoint Protection
Reviewed on Sep 28, 2026
Review provided by G2
What do you like best about the product?
Very simple to deploy. I rolled out thousands of endpoints over a weekend during an incident response. Being able to go from zero to full protection within hours is amazing.
It’s also great to be able to trust that the platform will take care of the threats.
It’s also great to be able to trust that the platform will take care of the threats.
What do you dislike about the product?
It could use some quality-of-life improvements, such as being able to customise severities. For example, in this case what’s marked as “Low” could actually be a high alert. When managing several customers, some customers have different risk profiles, so not every critical is a critical for them.
Also, being able to uninstall sensors from the cloud wouldn’t be good, either.
Also, being able to uninstall sensors from the cloud wouldn’t be good, either.
What problems is the product solving and how is that benefiting you?
Ease of deployment. It gives me confidence that my environment is safe and that it will pick up any threats. It’s fantastic to use operationally, and it’s just as strong for security-related needs.
Hospital & Health Care
Great EDR solution for any OS with helpful telemetry and nice interface
Reviewed on Sep 14, 2026
Review provided by G2
What do you like best about the product?
detections provided by crowdstrike are very insightful and clear
What do you dislike about the product?
until you tune up the alerts, it can be noisy
What problems is the product solving and how is that benefiting you?
helped with alert fatigue and provides cleaner interface with endpoint management and detections
Financial Services
Cloud-Native Endpoint Protection with Powerful EDR and Rapid Response
Reviewed on Sep 13, 2026
Review provided by G2
What do you like best about the product?
What I like best about CrowdStrike Falcon is its cloud-native, unified approach to endpoint protection. It combines strong prevention, EDR visibility, managed threat hunting options, and rapid response capabilities in a single platform with a lightweight endpoint agent.
What do you dislike about the product?
The licensing and entitlement management is complex. It would be nice if that were much simpler to understand and manage.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon helps address endpoint threats such as malware and ransomware by providing real-time prevention, endpoint detection and response, and centralized visibility across the environment. This benefits us by improving detection and investigation speed, reducing the likelihood and impact of security incidents, and strengthening incident-response capabilities.
Non-Profit Organization Management
One of the best EDR platform on the market
Reviewed on Sep 09, 2026
Review provided by G2
What do you like best about the product?
Falcon sensor supports multiple systems—Windows, MacOS, and Linux—under the same management. I’m able to drill down into the process chain to understand what triggered an event. Since everything is delivered from the cloud, there’s no on-premise infrastructure required, which made deployment fast. It’s one sensor and one platform, with more and more features built into the same sensor over time, so there’s no need for additional deployments. Sensor update management is also straightforward and easy.
What do you dislike about the product?
At times, it can generate a lot of false-positive alerts, although this seems to depend on how aggressively your detection/prevention policy is configured. I also wish the on-demand scan supported more file types.
What problems is the product solving and how is that benefiting you?
We migrated from a traditional AV vendor to CrowdStrike Falcon EDR. Falcon EDR gives us a centralized view and management across our entire fleet, spanning multiple types of operating systems. It also helps us use it as an asset inventory management system, so we can cross-reference it with other systems. We’re able to view all alerts in one central place and then drill down into the details when needed.