CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

I appreciate that CrowdStrike Falcon Endpoint Protection Platform is lightweight, unlike legacy antivirus software that heavily taxed our systems. The lightweight design doesn't lock up our machines, as it runs quietly in the background. I also value the automatic blocking feature, which keeps my mind at ease, knowing it handles threats without intervention. I find the ability to isolate a computer from the network a handy feature for isolating issues quickly. One of the standout features is the extensive visual process tree, which streamlines alerts by showing a clear attack chain. It has changed how I handle investigations by providing precise sequences of events, like spotting if a user opened a phishing link that triggered a hidden script. This feature is a lifesaver for my team, making our daily tasks less cumbersome by eliminating guesswork and providing fast answers to executive queries. Also, it gives us a complete history of events in less than two minutes, letting us address concerns promptly and find the root cause of issues efficiently. Review collected by and hosted on G2.com.

I find the interface fields scattered. Over the years, as new modules have been added, it feels like they made it scattered. I think they need a simple mode toggle or workspace customization for general IT administrators who don't need to see all the dense, advanced features. Another issue is with update trust. Ever since a massive, global update glitch, managing and tracking which endpoints missed an update can be clunky. They should offer more granular control over updates and clearer alerts when a sensor update fails to apply. Also, they should consider lowering the cost. Finally, I think adding a junior analytics alert feature could help, so that lower-level team members can access what they need. Review collected by and hosted on G2.com.

Exceptional endpoint security with minimal overhead. What I appreciate most about CrowdStrike Falcon is how quiet yet effective it is—it proactively detects threats using AI and behavioral analysis without slowing down end-user systems. Policy management through the cloud dashboard feels intuitive and straightforward, making it easy to stay on top of settings without extra hassle. Review collected by and hosted on G2.com.

The management console is feature-dense and fairly complex. Fine-tuning granular policies, navigating deep telemetry, and making effective use of Falcon Query Language (FQL) all require specialized security expertise. Review collected by and hosted on G2.com.

Its capabilities stand out. It has many talents, but my favorite part is the reporting feature it offers for use in audits. Review collected by and hosted on G2.com.

The part I don't like the most is that there are a lot of alarms at the info level. In addition, the fact that it conflicts with some regulations due to the cloud structure is also a negative point for me. Review collected by and hosted on G2.com.

I use CrowdStrike Falcon Endpoint Protection Platform as our primary enterprise endpoint security solution and I really appreciate its incredibly lightweight agent. It provides top-tier, real-time security and behavioral threat detection without hogging system resources or slowing down user machines. I really enjoy the network isolation feature as it works flawlessly, allowing me to instantly disconnect a compromised device from the network with one click while still maintaining my remote connection to fix it. I also found the initial setup to be incredibly easy since it is 100% cloud-native, requiring minimal effort and allowing me to deploy the lightweight agent across all company devices without needing a single reboot. The platform integrates seamlessly with our Microsoft Azure infrastructure and our centralized SIEM system, which aids in consolidated security logging and rapid incident response. I would rate it a solid 10 out of 10 for its flawless cloud management and zero impact on PC performance, making it the ultimate endpoint protection for any enterprise. Review collected by and hosted on G2.com.

The centralized cloud dashboard can feel overwhelming because the user interface has a steep learning curve with too many sub menus. Also, the advanced threat hunting queries (Falcon Insight) require deep specialized knowledge, so making the query syntax more intuitive would be a great improvement for daily operations. Review collected by and hosted on G2.com.

I like CrowdStrike Falcon Endpoint Protection Platform for its strong threat detection and lightweight agent. The cloud-based management console is easy to use and the platform provides excellent visibility into endpoint activity. It allows our team to respond to security incidents quickly and efficiently. The initial setup was easy and efficient, with the lightweight agent deploying quickly and minimal effort required for configuration. I would highly recommend it due to its ease of management, cloud-native architecture, and its ability to help organizations respond to threats quickly. Review collected by and hosted on G2.com.

CrowdStrike Falcon works very well overall, there are few areas that could be improved. The pricing can be relatively high for smaller organizations, especially when additional modules are required. Some advanced features require time to learn and alert tuning is sometimes needed to reduce noise. More flexible reporting and dashboard customization would also be welcome improvements Review collected by and hosted on G2.com.

I like how it gives us clear visibility into our infrastructure. I also appreciate the ability to take a host offline when it’s compromised, along with the alerts, customization options, and overall focus on security. Review collected by and hosted on G2.com.

Reporting for management needs improvement. The platform should provide reports that don’t require technical expertise to understand. Leadership wants to clearly see what Crowdstrikes is doing to protect our infrastructure, without having to get into the technical details. Review collected by and hosted on G2.com.

Cloud-native architecture

Falcon runs from the cloud, so there’s no heavy on-premise infrastructure to maintain. Deployment and updates are usually faster and simpler.

Lightweight agent

Compared to many traditional antivirus tools, the Falcon sensor uses relatively low system resources, which users often appreciate on employee laptops and servers. Review collected by and hosted on G2.com.

High cost

Many organizations feel the licensing and add-on modules can become expensive, especially for smaller companies or growing environments.

Complexity for new users

While powerful, the platform can have a learning curve for administrators who are new to EDR/XDR tools or advanced threat hunting.

Alert volume / tuning required Review collected by and hosted on G2.com.

I appreciate the deep visibility across endpoints while remaining lightweight and easy to deploy. The platform’s AI-driven detection, rapid incident response, and centralized management are invaluable for quickly identifying and stopping threats without heavy infrastructure overhead. It's especially effective for remote or hybrid work environments. The cloud-based setup saved me from managing on-premise servers, and installing the lightweight agent across endpoints was quick. The centralized dashboard makes policy configuration and monitoring easy, supported by helpful documentation and onboarding guides. Review collected by and hosted on G2.com.

Some areas where CrowdStrike Falcon Endpoint Protection Platform could improve include reducing false positives in certain environments, simplifying the user interface for less experienced analysts, and providing more customizable reporting options. Some organizations also find the platform relatively expensive compared to traditional endpoint security tools. Advanced features may require a learning curve, and troubleshooting complex detections can sometimes need specialized expertise. Better integration flexibility with certain third-party tools and more granular policy management would improve the overall experience for some security teams. Review collected by and hosted on G2.com.

I like the reporting in CrowdStike, especially how it uses groups to help me create individual applications. Review collected by and hosted on G2.com.

I don’t dislike anything about it, but I found into one Mac sensor issue. After reinstalling iOS, everything worked fine. Review collected by and hosted on G2.com.

I liked CrowdStrike Falcon Endpoint Protection Platform for its visual process tree, which helped me handle massive text logs and map attack timelines, saving me a lot of time compared to manual work with Windows event logs. The real-time response console was another standout feature for me because it's direct, secure, and uses a CLI-based interface, allowing me to kill malicious processes and delete files without the end user noticing. Its ability to isolate an infected machine with one click and record all system behaviors also made it very useful. Additionally, the initial setup was very easy and simple, thanks to the tiny installer. Review collected by and hosted on G2.com.

The main problem was the price; even after buying Pro, it asked me to pay for features like integrated vulnerability management and automated SOAR workflows. The aggressive tamper protection made it difficult to easily uninstall or fix a broken agent. Another issue was the false positives, as it frequently flagged the dev tool and my custom internal scripts as malicious due to reliance on AI. Review collected by and hosted on G2.com.