CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

The single lightweight agent is the biggest win. One sensor covers EDR, identity protection, vulnerability management with Spotlight, and log shipping into Next-Gen SIEM, so I’m not juggling multiple products or consoles. Detections are high fidelity with very little noise, and having endpoint, identity, and SIEM data correlated in one platform makes investigations much faster Review collected by and hosted on G2.com.

The modular licensing adds up fast, and it’s not always obvious which capabilities need an additional SKU until you go to use them. The CQL query language in Next-Gen SIEM has a real learning curve if you’re coming from KQL or Splunk, and some of the out-of-box dashboards and reporting could be stronger for leadership-facing summaries. Support is generally good but complex tickets can take a few rounds to get to the right engineer. Review collected by and hosted on G2.com.

What I like most about CrowdStrike Falcon Endpoint Protection is its strong combination of prevention, detection, and response in one lightweight platform. The visibility it provides into endpoint activity makes investigations much easier, while its AI/behavior-based detection helps identify sophisticated threats beyond traditional signature-based antivirus. Review collected by and hosted on G2.com.

Some advanced features require additional modules or licensing, which can make the overall solution expensive. The console can also have a learning curve, especially for new administrators, and some reporting and configuration workflows could be more intuitive. Review collected by and hosted on G2.com.

The single-agent architecture actually lives up to the marketing buzz coming from an environment that was bogged down by clunky legacy av suites rolling out the falcon sensor via SCCM was incredibly straightforward. our end-users don't even notice it running because it barely touches local system resources there are no heavy local signature updates choking up machine memory at 9 AM.

From an incident response perspective, the great graph visualization makes life significantly easier during a triage. being able to trace a malicious process execution tree from a stray script back to its origin down to the exact command-line arguments saves us a massive amount id investigation time the behavioral detection tuning handle zero-days without throwing an un Review collected by and hosted on G2.com.

The tool is incredibly capable but the platform's modular structure can be a bit overwhelming during budget planning as getting advanced capabilities like hyper-granular identity telemetry or specialized USB controls means adding specific modules that said it does allow you to build a highly customized security stack rather than paying for a bloated all-in-one suite you don't fully use.

One the administrative side the management console has a sharp learning curve for tier-1 analysts the UI is exceptionally logic it takes some dedicated hands -on-time to confidently map out policy exclusions without feeling a bit intimidated by the sheer number of prevent toggles Review collected by and hosted on G2.com.

What I like best about CrowdStrike Falcon Endpoint Protection Platform is its cloud-native architecture, strong threat detection capabilities, and ease of management. The platform provides real-time visibility across endpoints, helps identify and stop advanced threats quickly, and reduces the workload on security teams through automation and AI-driven insights. Its lightweight agent and scalable design also make deployment and ongoing operations efficient and effective. Review collected by and hosted on G2.com.

One challenge with CrowdStrike Falcon Endpoint Protection Platform is that its broad range of features can create a learning curve for new administrators. Some advanced capabilities may require additional training to fully leverage, and licensing can become complex when adding multiple modules. However, these challenges are generally outweighed by the platform’s strong security capabilities, visibility, and ease of management. Review collected by and hosted on G2.com.

The behavioral detection is what really won me over — it caught a suspicious lateral movement attempt that signature-based tools would've easily missed. The Threat Graph makes visualizing attack chains simple, which saves a lot of investigation time. Agent is super lightweight, no performance complaints from end users whatsoever. SIEM integration was painless and alerts are actually actionable, not just noise. Overall, it's shifted our team from constantly reacting to actually staying ahead, which makes a huge difference day to day. Review collected by and hosted on G2.com.

The learning curve is real — when we first onboarded, junior team members struggled to make sense of the alert volume and what actually needed immediate attention. Policy tuning also took longer than expected to get right, lots of trial and error in the beginning. And if you want to dig deep into investigations, you really need someone with solid security experience on the team otherwise you're just scratching the surface of what the platform can do. Review collected by and hosted on G2.com.

I like how easy it is to deploy CrowdStrike Falcon Endpoint Protection Platform. Because it’s entirely cloud-based, it’s straightforward to roll out at scale across endpoints and servers. Resource utilization is minimal, so end users aren’t bottlenecked during day-to-day work. The detection rate is top-notch and, in my experience, among the best in the industry, which helps give us an edge over attackers.

I also value the different modules it can integrate with, since it works seamlessly with other Falcon modules as well as third-party vendors. The initial setup was simple, and the documentation was robust and genuinely helpful. CrowdStrike Charlotte AI has also been very useful for investigations and log correlation. Review collected by and hosted on G2.com.

The pricing for SMBs can be improved. The UI/UX can also be improved as it's outdated and it needs to be more intuitive. Also, if the other Falcon modules were included with endpoint protection in the base package, it would be a great advantage. The current UI/UX of CrowdStrike seems outdated and it's not easy to navigate and not easy on the eyes. Review collected by and hosted on G2.com.

I like how easy it is to deploy CrowdStrike Falcon Endpoint Protection Platform. Because it’s entirely cloud-based, it’s straightforward to roll out at scale across endpoints and servers. Resource utilization is minimal, so end users aren’t bottlenecked during day-to-day work. The detection rate is top-notch and, in my experience, among the best in the industry, which helps give us an edge over attackers.

I also value the different modules it can integrate with, since it works seamlessly with other Falcon modules as well as third-party vendors. The initial setup was simple, and the documentation was robust and genuinely helpful. CrowdStrike Charlotte AI has also been very useful for investigations and log correlation. Review collected by and hosted on G2.com.

The pricing for SMBs can be improved. The UI/UX can also be improved as it's outdated and it needs to be more intuitive. Also, if the other Falcon modules were included with endpoint protection in the base package, it would be a great advantage. The current UI/UX of CrowdStrike seems outdated and it's not easy to navigate and not easy on the eyes. Review collected by and hosted on G2.com.

Its strong real-time threat detection and response capabilities. It provides good visibility across endpoints, helps identify suspicious activity and makes it easier to investigate and respond to security incidents from centralized console. Review collected by and hosted on G2.com.

The platform can be expensive and some advanced features require additional licenses. Review collected by and hosted on G2.com.

Charlotte AI from CrowdStrike isn't just a regular chatbot. It's kind of an ecosystem. The new Charloette AI AgentWorks platform can help organizations to build their autonomius AI agents which can performs taks lik auto-triage alerts, stitch together an attack timeline, and even suggest or execute response workflows. Review collected by and hosted on G2.com.

I feel they push out updates incredibly fast. Which is kind of a good and bad thing both. The platform can feel a bit overwhelming. With all the new modules, the dashboard has become incredibly complex. Review collected by and hosted on G2.com.

Falcon sensor supports multiple systems—Windows, MacOS, and Linux—under the same management. I’m able to drill down into the process chain to understand what triggered an event. Since everything is delivered from the cloud, there’s no on-premise infrastructure required, which made deployment fast. It’s one sensor and one platform, with more and more features built into the same sensor over time, so there’s no need for additional deployments. Sensor update management is also straightforward and easy. Review collected by and hosted on G2.com.

At times, it can generate a lot of false-positive alerts, although this seems to depend on how aggressively your detection/prevention policy is configured. I also wish the on-demand scan supported more file types. Review collected by and hosted on G2.com.