CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

The efficiency and simplicity. One cloud native console gives full visibility of the environment, with no signature updates, no reboots and no extra infrastructure to maintain. It reduces the operational effort of the security team considerably. Review collected by and hosted on G2.com.

The licensing model. The platform is modular and many capabilities are sold as separate SKUs, which makes budgeting and comparison more complex for the customer, especially in smaller environments. Review collected by and hosted on G2.com.

One lightweight sensor handles everything. You deploy a single, small agent with no heavy footprint, no constant signature updates, and minimal performance impact, yet it still covers next-gen antivirus (NGAV), endpoint detection and response (EDR/XDR), device control, firewall management, IT hygiene, and more. When you enable new modules, they turn on without needing to install any additional agents. Review collected by and hosted on G2.com.

Modules are sold separately, so the costs can add up quickly if you’re aiming for the full platform. For smaller organizations, that can lead to real sticker shock once the initial sales pitch is over and the total price becomes clear. Review collected by and hosted on G2.com.

The ability for the Falcon sensor to be used, report information, and enhance security is next to none. The type of data reporting that you unlock just from using the sensor, the ability to push updates/packages/commands with RTR, and the easy to use dashboards on the portal make this a no brainer. You can enhance your XDR with all sorts of add ons as needed as well. I've used MDE, Cortex, Falcon, Wazuh, Onion sensors, and Falcon is the single best one by a mile. Review collected by and hosted on G2.com.

How convoluted the management system is and ability to change settings. I use the API to get around this. Review collected by and hosted on G2.com.

I appreciate how CrowdStrike Falcon Endpoint Protection Platform gives us a lot of visibility into our environment and acts as a CMDB because the rest of the environment doesn't always keep up with security's needs. I like that it continues to evolve and has always gotten better and stayed on top of things. The product protects our environment from threat actors, gives us visibility into what users are doing, and helps us determine threats from legitimate users. I've been using it for about five years, and I'm pleased that they have made integrations like the Charlotte AI and user interface improvements over time. I enjoy using the API to marry the tools we use. Review collected by and hosted on G2.com.

I think the interface can sometimes be a little confusing. There doesn't seem to be a whole lot of consistency. Like, if you're querying hosts versus querying identities, some of it is inconsistent. Maybe they have their reasons, but it doesn't always make a whole lot of sense. Sometimes you can search for something in bulk on one screen, and you can't search for bulk in another. The search varies between being very basic and very advanced. It depends on what screen you're in, and that can be frustrating. Sometimes I want more out of the UI. Also, the way it lists out data in their sorta unique UI can make it hard to resize or rescale to see all the data in the cell. These are minor UI tweaks I've gotten used to, but they definitely could be improved. Nothing that prevents me from doing my job. Review collected by and hosted on G2.com.

I feel like CrowdStrike Falcon Endpoint Protection Platform does a better job of protecting my endpoint than Microsoft Defender. The agent is relatively lightweight and does not bog down the computer, which is really important to me. I also rely on their Complete Care to manage endpoint security alerts so I can focus on other parts of my job. The insights from the browser extension have been rewarding, allowing me to help end users and protect against various threats. Additionally, the setup was extremely easy, which I appreciated. Review collected by and hosted on G2.com.

The only negative thing I can think of is the pricing, but otherwise, it's a very robust product. Review collected by and hosted on G2.com.

I like how CrowdStrike Falcon Endpoint Protection Platform is easy to use and gives me confidence in its efficiency and performance. The platform's ability to automatically isolate and protect assets without constant monitoring is very reassuring. It allows my users to free up their time to get other work done without worrying about assets. I also find the web console helpful as it makes accessing the environment easy and allows me to determine where our issues are, following the flow as it happens. Additionally, I'm impressed with the platform's ability to automatically protect an isolated machine. The initial setup was very easy, as it required minimal effort—just adding it to an active directory group or setting it to install automatically on Jamf, and it deployed quickly. Review collected by and hosted on G2.com.

It works pretty good other than that glitch they had a little while ago. We had some machines that weren't able to log in until it was resolved due to a bad patch. But other than that, it was pretty reliable. Review collected by and hosted on G2.com.

I like that again, contextual awareness of everything that’s happening not just on the detection and the alert, but give some relevant context to parent processes, child processes, time lining, and anything that helps with case management Review collected by and hosted on G2.com.

I think a good part of the console is a little bit spread out and a little difficult for any newly on boarded colleagues to discover and find exactly what they’re looking for. There’s just a lot of different segments in sections even within and point protection and security on its own that you just have to go through they may or may not be relevant to what you’re trying to accomplish. Review collected by and hosted on G2.com.

I find CrowdStrike Falcon Endpoint Protection Platform easy to implement, with fast agent deployment that doesn't require a lot of system resources. I appreciate how it allows me to quickly get to a protection posture with my customers and ensures visibility into threats within the environment. The platform also helps me with quick alert identification and reduces the mean time to resolution, which ultimately helps in decreasing my customers' risk. Review collected by and hosted on G2.com.

I think it would be great if the platform could support EOL operating systems. Because that is the area that a lot of companies usually have issues because it's hard to replace those old platforms since they still have old software that can only run on end-of-life OS's. Review collected by and hosted on G2.com.

RTR is the standout — I can isolate hosts, kill processes, and pull forensic data fleet-wide from one console without touching individual machines. The agent is lightweight enough that it doesn’t tax endpoints, even on older hardware, and detection accuracy holds up well with few enough false positives that alerts are worth actually investigating Review collected by and hosted on G2.com.

There’s a steep learning curve, and the navigation isn’t very intuitive. Review collected by and hosted on G2.com.

I appreciate that CrowdStrike Falcon Endpoint Protection Platform is lightweight, unlike legacy antivirus software that heavily taxed our systems. The lightweight design doesn't lock up our machines, as it runs quietly in the background. I also value the automatic blocking feature, which keeps my mind at ease, knowing it handles threats without intervention. I find the ability to isolate a computer from the network a handy feature for isolating issues quickly. One of the standout features is the extensive visual process tree, which streamlines alerts by showing a clear attack chain. It has changed how I handle investigations by providing precise sequences of events, like spotting if a user opened a phishing link that triggered a hidden script. This feature is a lifesaver for my team, making our daily tasks less cumbersome by eliminating guesswork and providing fast answers to executive queries. Also, it gives us a complete history of events in less than two minutes, letting us address concerns promptly and find the root cause of issues efficiently. Review collected by and hosted on G2.com.

I find the interface fields scattered. Over the years, as new modules have been added, it feels like they made it scattered. I think they need a simple mode toggle or workspace customization for general IT administrators who don't need to see all the dense, advanced features. Another issue is with update trust. Ever since a massive, global update glitch, managing and tracking which endpoints missed an update can be clunky. They should offer more granular control over updates and clearer alerts when a sensor update fails to apply. Also, they should consider lowering the cost. Finally, I think adding a junior analytics alert feature could help, so that lower-level team members can access what they need. Review collected by and hosted on G2.com.