CrowdStrike Falcon Cloud Security for Red Hat OpenShift Service on AWS

What do you like best about the product?

security about network and fast detection about bugs and port error issues.

What do you dislike about the product?

unnecessary port Block sometimes then need to open that again

What problems is the product solving and how is that benefiting you?

its resolved issue related to network Block when remote connection while using software and licensing error, it helps good...

What do you like best about the product?

I love the seamless integration and the intuitive dashboard of CrowdStrike Falcon Cloud Security. Its powerful threat intelligence provides real-time visibility across multi-cloud environments without slowing down our infrastructure. The product streamlines our security workflows and reduces reaction time to critical alerts. It saves significant team effort by eliminating the need to manage multiple disconnected security tools across our clouds. The initial setup was very straightforward and easy to deploy, thanks to the cloud-native agent and automated integration templates that made the initial setup fast with minimal hassle.

What do you dislike about the product?

I find the licensing cost to be relatively high, and the documentation for advanced custom configurations could be more streamlined and easier to navigate. Adding step-by-step configuration templates, more real-world use cases, and short video walkthroughs would make the documentation much easier to search and implement.

What problems is the product solving and how is that benefiting you?

I use CrowdStrike Falcon Cloud Security for real-time protection of our multicloud environments, preventing cloud misconfiguration, and streamlining compliance monitoring. It reduces alert fatigue, enhances threat detection, integrates seamlessly, and saves team effort by consolidating security tools.

What do you like best about the product?

Data security is the main purpose, and the software fully meets that purpose.

What do you dislike about the product?

So far, I haven’t found any major issues. If anything comes up, I can report it.

What problems is the product solving and how is that benefiting you?

The main problem it solves is protecting against cyber threats.

What do you like best about the product?

The unified, single-agent architecture is the biggest advantage for me: the same Falcon sensor extends from endpoints to cloud workloads and containers, which removes the overhead of deploying and managing separate agents. Threat Graph then correlates endpoint, identity, and cloud telemetry into unified detections, giving a clearer view across the entire attack surface.

What do you dislike about the product?

Pricing is my biggest issue. It’s noticeably higher than many competitors, and the costs for individual modules add up fast, which can make it hard for smaller organizations to justify or afford. On top of that, the licensing feels overly complex, and the lack of clear, transparent pricing for enterprise tiers only adds to the frustration.

What problems is the product solving and how is that benefiting you?

Falcon Cloud Security addresses the critical issue of fragmented cloud security tools by bringing CSPM, CWPP, CDR, and CIEM together in a single CNAPP platform. By consolidating these capabilities, it reduces the complexity and cost of managing multiple point products

What do you like best about the product?

It helps security teams quickly identify vulnerabilities, monitor activity, and respond to threats in a timely, effective way.

What do you dislike about the product?

It feels complex to use, and I get a high number of security notifications and alerts.

What problems is the product solving and how is that benefiting you?

It reduces the time I spend investigating risks and improves my ability to respond quickly to threats.

What do you like best about the product?

What I like best about CrowdStrike Falcon Cloud Security is its unified approach to cloud security. It provides strong visibility across cloud environments, helps identify misconfigurations and vulnerabilities, and makes it easier to prioritise risks from one platform. The real-time threat detection and integration with the broader Falcon platform are also valuable, especially for teams looking to reduce the number of separate security tools they need to manage.

What do you dislike about the product?

One downside of CrowdStrike Falcon Cloud Security is that it can feel complex at first, especially for teams that are new to the Falcon platform. There can be a learning curve when configuring policies and navigating some of the more advanced features. Pricing can also be relatively high compared with simpler cloud security solutions, particularly for smaller organisations.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon Cloud Security helps solve challenges around cloud visibility, misconfigurations, vulnerabilities, and potential security threats across cloud environments. It gives us a more centralised view of risks and helps prioritise the issues that need attention first. This saves time for the security team, reduces manual monitoring, and allows us to identify and respond to potential threats more quickly.

What do you like best about the product?

The unified visibility across multi-cloud environments is easily the standout feature. Being able to manage posture, workload protection, and permissions from a single console saves huge amounts of time that would otherwise be spent jumping between AWS, Azure, and GCP tools. The lightweight agent is another major plus because it delivers real-time container security and threat detection without causing performance drag or system overhead on active workloads. Having instant, AI-driven behavioral alerts for misconfigurations and active runtime threats makes it much easier to catch security risks before they can actually be exploited.

What do you dislike about the product?

The biggest issue is the high enterprise licensing cost and complex tier structure, which makes scaling pretty expensive if you're not a huge organization. The dashboard also comes with a steep learning curve because there are so many features and dense telemetry data to sift through. Beyond that, the massive global IT outage in July 2024 was a huge reality check. A single faulty Falcon update caused widespread Blue Screen of Death crash loops on millions of Windows machines worldwide. That incident really highlighted the risks of kernel-level access and showed why IT teams need way more control over when and how updates are pushed to their systems.

What problems is the product solving and how is that benefiting you?

Before switching to Falcon Cloud Security, managing fragmented tools across AWS, Azure, and multi-cloud infrastructure meant constantly chasing down false positives and wrestling with cloud visibility blind spots. It solves that disjointed workflow by consolidating posture management, workload protection, and container security into a single platform. The biggest benefit has been speeding up incident response times and cutting down alert fatigue—our team can pinpoint real misconfigurations and active runtime threats immediately, allowing us to fix vulnerabilities before they can be exploited.

What do you like best about the product?

Unified "One Agent" Architecture: CrowdStrike’s biggest advantage is its lightweight Falcon Sensor. It combines a kernel-mode driver with a user-mode service that operates across desktops, servers, and cloud workloads. This eliminates the need for organizations to deploy multiple heavy, competing security agents, drastically reducing CPU overhead and simplifying deployment.

What do you dislike about the product?

Occasional Kernel Issues: Because the Falcon sensor operates at the kernel level for maximum visibility and tamper-resistance, any faulty updates pushed by the vendor can have catastrophic, system-wide impacts—such as the massive, highly publicized global IT outage in mid-2024 that caused millions of Windows machines to crash into a "Blue Screen of Death".

What problems is the product solving and how is that benefiting you?

Threat Graph Correlation: Telemetry from the endpoint sensors is streamed continuously to the cloud-native Falcon platform, where the Threat Graph database correlates trillions of events per day. Because it relies on AI-based behavioral patterns rather than just heavy local signature databases, it excels at blocking zero-day threats and sophisticated attacks like privilege escalation in real-time.

What do you like best about the product?

What I like best about CrowdStrike Falcon Cloud Security is its strong visibility across cloud environments and its ability to quickly identify risks and misconfigurations, helping improve security posture and streamline threat detection.

What do you dislike about the product?

What I dislike about CrowdStrike Falcon Cloud Security is that some features can be complex to navigate at first, and the volume of alerts or findings can sometimes take time to sort through and prioritize effectively.

What problems is the product solving and how is that benefiting you?

CrowdStrike Falcon Cloud Security helps solve the challenge of identifying cloud misconfigurations, security risks, and potential threats across environments, which improves visibility, strengthens security posture, and helps us respond to issues more quickly and efficiently.

What do you like best about the product?

So far, it has been a solid tool within the organization. Incident management is carried out without major issues, and at the same time, a lot of innovation is perceived in the product.

What do you dislike about the product?

The protection capabilities for Linux equipment are limited. Another aspect that would be beneficial is having more configuration options available to the administrator, especially for the integration of MFA or integration with SAML at login.

What problems is the product solving and how is that benefiting you?

It is important how the tool performs real-time threat detection. Beyond conducting malware analysis, Crowdstrike allows for complete visibility over the interaction of cloud tools. Additionally, integration with other tools allows us to conduct threat hunting and mitigation of erroneous configurations within the various tools that are part of the organization's cloud environment.