CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

CrowdStrike's falcon EDR is one of best EDRs I have worked with, really good coverage of overall protection multiple threat landscapes.

Product functionality and performance

Product roadmap and future vision

Strong consulting partnership

Strong services expertise

Strong user community Review collected by and hosted on G2.com.

Licensing costs., sometime some of the modules are comes as additional ad-on with high costs. Review collected by and hosted on G2.com.

El onboarding de los agentes es muy versátil: no satura los servidores ni los endpoints y no afecta la operación ni las actividades del usuario, ya que consume muy pocos recursos del sistema, dando un rendimiento de la solución optimo.

La función de Threat Graph no facilita tener visibilidad de los comportamientos anómalos.

La capacidad de respuesta casi automática del RTR nos ayuda a aislar equipos en casos extraordinarios, así como a ejecutar scripts para la remediación sin necesidad de interactuar físicamente con el equipo. Review collected by and hosted on G2.com.

El ajuste inicial para evitar falsos positivos en integraciones internas requiere la intervención de un especialista, no solo en la solución, sino también con conocimientos del negocio.

La solución puede llegar a considerarse costosa a medida que se agregan más funcionalidades, especialmente si no se realiza un ejercicio de retorno de inversión. Review collected by and hosted on G2.com.

Very simple to deploy. I rolled out thousands of endpoints over a weekend during an incident response. Being able to go from zero to full protection within hours is amazing.

It’s also great to be able to trust that the platform will take care of the threats. Review collected by and hosted on G2.com.

It could use some quality-of-life improvements, such as being able to customise severities. For example, in this case what’s marked as “Low” could actually be a high alert. When managing several customers, some customers have different risk profiles, so not every critical is a critical for them.

Also, being able to uninstall sensors from the cloud wouldn’t be good, either. Review collected by and hosted on G2.com.

CrowdStrike provides strong endpoint protection, excellent threat detection, and good visibility across the environment. The Falcon platform is easy to manage from a centralized console, and its detection and investigation capabilities help security teams respond to threats quickly. I also find the lightweight endpoint agent and the overall quality of telemetry very useful for day-to-day security operations. Review collected by and hosted on G2.com.

The platform has a broad range of capabilities, which can make the initial configuration and tuning somewhat complex. Some advanced features also require additional time and experience to configure effectively. The amount of information available can occasionally be overwhelming for teams that are new to the platform, so having clearly defined use cases and policies from the beginning is helpful. Review collected by and hosted on G2.com.

CrowdStrike has been an excellent partner for our organization. Their team has taken the time to understand our environment, along with the security, regulatory, and operational challenges that are unique to the tribal gaming and hospitality industry. That industry awareness has made their recommendations more applicable and their support more effective.

Throughout our partnership, they have stayed attentive to our needs. They respond quickly to questions, take our concerns seriously, and remain engaged well beyond implementation. When we have needed guidance or expressed interest in expanding our CrowdStrike services, their team has worked with us to clarify what we are trying to accomplish and to identify a practical path forward.

The Falcon platform has exceeded our expectations. It gives our team strong visibility across our endpoints and provides the detection, investigation, and response capabilities we need to act quickly when suspicious activity occurs. As we continue to expand our use of its capabilities, the platform keeps adding value.

Overall, CrowdStrike has delivered an exceptional product backed by a consistently positive customer experience. That level of service is becoming increasingly difficult to find, and it is a key reason CrowdStrike has become a trusted partner for our organization. Review collected by and hosted on G2.com.

The biggest drawback is the complexity and cost of expanding across the Falcon platform. CrowdStrike provides a broad set of valuable capabilities, but many of them are licensed as separate modules. As a result, it can be hard to tell exactly what’s included, where features overlap, and how to plan a predictable long-term roadmap. Clearer packaging and more flexible licensing would make it easier for customers to add services over time and take fuller advantage of the platform. Review collected by and hosted on G2.com.

I really like how much of the endpoint protection stack is consolidated into one platform with CrowdStrike Falcon Endpoint Protection Platform. It's very easy to manage, and it runs lightly on user devices and servers. The initial deployment was very easy, and even though configuring all its features can be a bit challenging, once it's set up, it runs smoothly. I also think it protects better, works well, and offers easier management compared to others like SentinelOne, Bitdefender, and Kaspersky. Review collected by and hosted on G2.com.

I wish CrowdStrike had DNS filtering capabilities. The initial setup was easy-ish; it was very easy to deploy, but a little harder to fully configure due to its massive amount of features. However, once it's configured, it runs very well. Review collected by and hosted on G2.com.

CrowdStrike Falcon delivers strong endpoint protection through effective threat detection and real-time monitoring. I especially appreciate the centralized management and the detailed visibility it provides into endpoint activity. Its rapid detection and response capabilities, along with the investigation tools, make it easier to dig into incidents and understand what’s happening. Overall, it helps security teams quickly identify suspicious activity and respond to potential threats. Review collected by and hosted on G2.com.

The platform can be somewhat complicated to configure, especially when you’re trying to set up advanced policies or conduct more detailed threat investigations. Review collected by and hosted on G2.com.

I have been using CrowdStrike Falcon Endpoint EDR for approximately five months in a manufacturing company with 1,001–5,000 employees. I am responsible for EDR and MDR operations.

The biggest benefit is that the MDR service monitors potential attacks and responds quickly when suspicious activity occurs. This reduces the need for our internal team to constantly monitor every event and gives us greater confidence that attempted attacks will be handled promptly.

Overall, Falcon Endpoint EDR and its MDR service have helped reduce our operational burden and improve our endpoint security response. One area for improvement would be faster responses to our MDR-related inquiries. Review collected by and hosted on G2.com.

The MDR service can respond quickly when an attack attempt or suspicious activity occurs, without requiring our internal team to continuously monitor every event. This reduces our operational burden and gives us confidence that endpoint threats are being handled. Review collected by and hosted on G2.com.

We used this in combination with the Falcon Complete MDR solution, and it has provided great visibility into our environment. We’ve deployed it across multiple platforms, including Windows, Mac, and Linux. The centralized console correlates endpoint and identity data, which helps our security team investigate threats faster and reduces the operational burden of managing security at scale. Review collected by and hosted on G2.com.

The biggest drawback is that Falcon’s broad scope can make it complicated to configure, fine-tune, and integrate. Some of the more advanced response capabilities also depend on having supported connectors in place and complete coverage across the environment, so realizing the full value often requires ongoing administration and continued investment. Review collected by and hosted on G2.com.

The single lightweight agent is the biggest win. One sensor covers EDR, identity protection, vulnerability management with Spotlight, and log shipping into Next-Gen SIEM, so I’m not juggling multiple products or consoles. Detections are high fidelity with very little noise, and having endpoint, identity, and SIEM data correlated in one platform makes investigations much faster Review collected by and hosted on G2.com.

The modular licensing adds up fast, and it’s not always obvious which capabilities need an additional SKU until you go to use them. The CQL query language in Next-Gen SIEM has a real learning curve if you’re coming from KQL or Splunk, and some of the out-of-box dashboards and reporting could be stronger for leadership-facing summaries. Support is generally good but complex tickets can take a few rounds to get to the right engineer. Review collected by and hosted on G2.com.