CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

Exceptional endpoint security with minimal overhead. What I appreciate most about CrowdStrike Falcon is how quiet yet effective it is—it proactively detects threats using AI and behavioral analysis without slowing down end-user systems. Policy management through the cloud dashboard feels intuitive and straightforward, making it easy to stay on top of settings without extra hassle. Review collected by and hosted on G2.com.

The management console is feature-dense and fairly complex. Fine-tuning granular policies, navigating deep telemetry, and making effective use of Falcon Query Language (FQL) all require specialized security expertise. Review collected by and hosted on G2.com.

Its capabilities stand out. It has many talents, but my favorite part is the reporting feature it offers for use in audits. Review collected by and hosted on G2.com.

The part I don't like the most is that there are a lot of alarms at the info level. In addition, the fact that it conflicts with some regulations due to the cloud structure is also a negative point for me. Review collected by and hosted on G2.com.

I use CrowdStrike Falcon Endpoint Protection Platform as our primary enterprise endpoint security solution and I really appreciate its incredibly lightweight agent. It provides top-tier, real-time security and behavioral threat detection without hogging system resources or slowing down user machines. I really enjoy the network isolation feature as it works flawlessly, allowing me to instantly disconnect a compromised device from the network with one click while still maintaining my remote connection to fix it. I also found the initial setup to be incredibly easy since it is 100% cloud-native, requiring minimal effort and allowing me to deploy the lightweight agent across all company devices without needing a single reboot. The platform integrates seamlessly with our Microsoft Azure infrastructure and our centralized SIEM system, which aids in consolidated security logging and rapid incident response. I would rate it a solid 10 out of 10 for its flawless cloud management and zero impact on PC performance, making it the ultimate endpoint protection for any enterprise. Review collected by and hosted on G2.com.

The centralized cloud dashboard can feel overwhelming because the user interface has a steep learning curve with too many sub menus. Also, the advanced threat hunting queries (Falcon Insight) require deep specialized knowledge, so making the query syntax more intuitive would be a great improvement for daily operations. Review collected by and hosted on G2.com.

I like CrowdStrike Falcon Endpoint Protection Platform for its strong threat detection and lightweight agent. The cloud-based management console is easy to use and the platform provides excellent visibility into endpoint activity. It allows our team to respond to security incidents quickly and efficiently. The initial setup was easy and efficient, with the lightweight agent deploying quickly and minimal effort required for configuration. I would highly recommend it due to its ease of management, cloud-native architecture, and its ability to help organizations respond to threats quickly. Review collected by and hosted on G2.com.

CrowdStrike Falcon works very well overall, there are few areas that could be improved. The pricing can be relatively high for smaller organizations, especially when additional modules are required. Some advanced features require time to learn and alert tuning is sometimes needed to reduce noise. More flexible reporting and dashboard customization would also be welcome improvements Review collected by and hosted on G2.com.

I like how it gives us clear visibility into our infrastructure. I also appreciate the ability to take a host offline when it’s compromised, along with the alerts, customization options, and overall focus on security. Review collected by and hosted on G2.com.

Reporting for management needs improvement. The platform should provide reports that don’t require technical expertise to understand. Leadership wants to clearly see what Crowdstrikes is doing to protect our infrastructure, without having to get into the technical details. Review collected by and hosted on G2.com.

Cloud-native architecture

Falcon runs from the cloud, so there’s no heavy on-premise infrastructure to maintain. Deployment and updates are usually faster and simpler.

Lightweight agent

Compared to many traditional antivirus tools, the Falcon sensor uses relatively low system resources, which users often appreciate on employee laptops and servers. Review collected by and hosted on G2.com.

High cost

Many organizations feel the licensing and add-on modules can become expensive, especially for smaller companies or growing environments.

Complexity for new users

While powerful, the platform can have a learning curve for administrators who are new to EDR/XDR tools or advanced threat hunting.

Alert volume / tuning required Review collected by and hosted on G2.com.

I appreciate the deep visibility across endpoints while remaining lightweight and easy to deploy. The platform’s AI-driven detection, rapid incident response, and centralized management are invaluable for quickly identifying and stopping threats without heavy infrastructure overhead. It's especially effective for remote or hybrid work environments. The cloud-based setup saved me from managing on-premise servers, and installing the lightweight agent across endpoints was quick. The centralized dashboard makes policy configuration and monitoring easy, supported by helpful documentation and onboarding guides. Review collected by and hosted on G2.com.

Some areas where CrowdStrike Falcon Endpoint Protection Platform could improve include reducing false positives in certain environments, simplifying the user interface for less experienced analysts, and providing more customizable reporting options. Some organizations also find the platform relatively expensive compared to traditional endpoint security tools. Advanced features may require a learning curve, and troubleshooting complex detections can sometimes need specialized expertise. Better integration flexibility with certain third-party tools and more granular policy management would improve the overall experience for some security teams. Review collected by and hosted on G2.com.

I like the reporting in CrowdStike, especially how it uses groups to help me create individual applications. Review collected by and hosted on G2.com.

I don’t dislike anything about it, but I found into one Mac sensor issue. After reinstalling iOS, everything worked fine. Review collected by and hosted on G2.com.

I liked CrowdStrike Falcon Endpoint Protection Platform for its visual process tree, which helped me handle massive text logs and map attack timelines, saving me a lot of time compared to manual work with Windows event logs. The real-time response console was another standout feature for me because it's direct, secure, and uses a CLI-based interface, allowing me to kill malicious processes and delete files without the end user noticing. Its ability to isolate an infected machine with one click and record all system behaviors also made it very useful. Additionally, the initial setup was very easy and simple, thanks to the tiny installer. Review collected by and hosted on G2.com.

The main problem was the price; even after buying Pro, it asked me to pay for features like integrated vulnerability management and automated SOAR workflows. The aggressive tamper protection made it difficult to easily uninstall or fix a broken agent. Another issue was the false positives, as it frequently flagged the dev tool and my custom internal scripts as malicious due to reliance on AI. Review collected by and hosted on G2.com.

What I like best about CrowdStrike Falcon Endpoint Protection Platform is how lightweight and fast it feels compared to many traditional antivirus solutions. It runs quietly in the background without slowing the system too much, while still providing strong real-time threat detection.

The dashboard is also clean and easy to navigate, which makes monitoring alerts and device activity much simpler. I especially like the cloud-based approach because updates and threat intelligence happen quickly without needing constant manual management.

Another strong point is its ability to detect suspicious behavior, not just known viruses, which makes it feel more advanced than standard antivirus software. Review collected by and hosted on G2.com.

One thing I dislike about CrowdStrike Falcon Endpoint Protection Platform is that the amount of information and alerts can sometimes feel overwhelming, especially for people who are not deeply experienced in cybersecurity. There’s a learning curve when trying to fully understand all the features and detection details.

Another downside is that some advanced features and configurations can feel a bit complex during setup or policy management. In certain cases, troubleshooting false positives can also take time because you need to carefully review the detection data before deciding whether something is actually malicious.

It’s a powerful platform overall, but it definitely works best when managed by someone with at least some technical security knowledge. Review collected by and hosted on G2.com.