I appreciate the deep visibility across endpoints while remaining lightweight and easy to deploy. The platform’s AI-driven detection, rapid incident response, and centralized management are invaluable for quickly identifying and stopping threats without heavy infrastructure overhead. It's especially effective for remote or hybrid work environments. The cloud-based setup saved me from managing on-premise servers, and installing the lightweight agent across endpoints was quick. The centralized dashboard makes policy configuration and monitoring easy, supported by helpful documentation and onboarding guides. Review collected by and hosted on G2.com.

Some areas where CrowdStrike Falcon Endpoint Protection Platform could improve include reducing false positives in certain environments, simplifying the user interface for less experienced analysts, and providing more customizable reporting options. Some organizations also find the platform relatively expensive compared to traditional endpoint security tools. Advanced features may require a learning curve, and troubleshooting complex detections can sometimes need specialized expertise. Better integration flexibility with certain third-party tools and more granular policy management would improve the overall experience for some security teams. Review collected by and hosted on G2.com.

I liked CrowdStrike Falcon Endpoint Protection Platform for its visual process tree, which helped me handle massive text logs and map attack timelines, saving me a lot of time compared to manual work with Windows event logs. The real-time response console was another standout feature for me because it's direct, secure, and uses a CLI-based interface, allowing me to kill malicious processes and delete files without the end user noticing. Its ability to isolate an infected machine with one click and record all system behaviors also made it very useful. Additionally, the initial setup was very easy and simple, thanks to the tiny installer. Review collected by and hosted on G2.com.

The main problem was the price; even after buying Pro, it asked me to pay for features like integrated vulnerability management and automated SOAR workflows. The aggressive tamper protection made it difficult to easily uninstall or fix a broken agent. Another issue was the false positives, as it frequently flagged the dev tool and my custom internal scripts as malicious due to reliance on AI. Review collected by and hosted on G2.com.

What I like best about CrowdStrike Falcon Endpoint Protection Platform is how lightweight and fast it feels compared to many traditional antivirus solutions. It runs quietly in the background without slowing the system too much, while still providing strong real-time threat detection.

The dashboard is also clean and easy to navigate, which makes monitoring alerts and device activity much simpler. I especially like the cloud-based approach because updates and threat intelligence happen quickly without needing constant manual management.

Another strong point is its ability to detect suspicious behavior, not just known viruses, which makes it feel more advanced than standard antivirus software. Review collected by and hosted on G2.com.

One thing I dislike about CrowdStrike Falcon Endpoint Protection Platform is that the amount of information and alerts can sometimes feel overwhelming, especially for people who are not deeply experienced in cybersecurity. There’s a learning curve when trying to fully understand all the features and detection details.

Another downside is that some advanced features and configurations can feel a bit complex during setup or policy management. In certain cases, troubleshooting false positives can also take time because you need to carefully review the detection data before deciding whether something is actually malicious.

It’s a powerful platform overall, but it definitely works best when managed by someone with at least some technical security knowledge. Review collected by and hosted on G2.com.

I like that the number of false positive alerts is very low and the detections are very accurate. I also appreciate getting PowerShell access to investigate and take action, as well as the ability to run Python scripts. Investigating the machine's event history is straightforward. The detection and response capabilities are much better than what I was used to with our previous product. The setup was also easy. Review collected by and hosted on G2.com.

In CrowdStrike, drive/volume references are shown as device paths rather than Windows drive letters (volume# instead of C: or E:). It would be better if they were changed to Windows style letters. Review collected by and hosted on G2.com.

The single lightweight Falcon sensor is a standout — it deploys in minutes across all major operating systems with zero performance impact. The AI-powered threat detection catches malware-free attacks and behavioral anomalies in real time, which legacy tools simply miss. Charlotte AI dramatically speeds up alert triage and investigation, reducing response time from hours to minutes. The unified visibility across endpoints, identity, and cloud in one console is a huge operational advantage. Review collected by and hosted on G2.com.

The pricing can be a barrier for smaller organizations, as the platform is clearly designed with enterprise budgets in mind. The sheer number of modules across the Falcon platform can feel overwhelming initially, and onboarding requires a decent learning curve to get full value. Additionally, the July 2024 sensor update incident that caused widespread outages was a concern, though CrowdStrike has since improved its update validation processes. Review collected by and hosted on G2.com.

I like CrowdStrike Falcon Endpoint Protection Platform for its real-time threat detection and cloud-based visibility. It's fast and lightweight, and the automated response features really reduce the need for manual intervention. The platform helps me quickly identify suspicious activity before it escalates into a serious incident. The cloud-based visibility is valuable because I can monitor everything from a single dashboard, which is very easy to manage. The automated response saves time by containing or isolating threats instantly. Review collected by and hosted on G2.com.

It can sometimes be a bit complex to configure at the very beginning, especially for fine-tuning policies. Also, the alert volume can feel high without good filtering, so it takes some time to adjust. Review collected by and hosted on G2.com.

I like the lightweight agent of CrowdStrike Falcon Endpoint Protection Platform, which allows for fast deployment and strong real-time threat detection capabilities. The user-friendly dashboard provides excellent visibility into endpoint activities, making investigation and response much easier. I appreciate the AI-driven threat intelligence, automated detection, and quick incident response features that help reduce manual effort and improve overall security efficiency. Additionally, the cloud-based management console simplifies configuration and monitoring, offering better threat detection and enhanced endpoint visibility compared to our previous solution. The platform's scalability is impressive, as it effectively supported our organization with 500–1000 employees. Review collected by and hosted on G2.com.

One area that could be improved is reducing false positives, as some alerts may require additional manual investigation. The platform can also feel complex for new users due to the large number of features and detailed configurations. Additionally, reporting and customization options could be more flexible, and the pricing may be higher compared to some alternative endpoint security solutions. Review collected by and hosted on G2.com.

I like the real-time threat detection and the easy-to-use cloud-based dashboard of CrowdStrike Falcon Endpoint Protection Platform. It provides strong security without slowing down my system, and the centralized monitoring makes it easy to manage and respond to threats quickly. The lightweight agent and fast incident response are major advantages. The cloud-based management offers a user-friendly experience with centralized visibility of all endpoints, making it faster and more efficient for managing alerts and responding to incidents. Review collected by and hosted on G2.com.

One area that could be improved is the pricing, as it can be expensive for smaller organizations. Some advanced features also require additional training for new users to fully understand and utilize effectively. Apart from that, occasional false-positive alerts can sometimes require extra verification from the security team. Review collected by and hosted on G2.com.

I use CrowdStrike Falcon Endpoint Protection Platform for advanced endpoint security, threat and malware detection, especially appreciating its real-time malware detection and monitoring. It's great at solving issues related to malware and ransomware attacks, significantly improving real-time threat detection and providing system visibility. The platform's ability to detect and stop malware and ransomware attacks and monitor real-time traffic is its most important feature. These features help me quickly identify and stop threats that could impact my system, and the real-time monitoring gives visibility to investigate incidents and maintain organizational protection from ransomware. Review collected by and hosted on G2.com.

I think the dashboard can be made more user-friendly for new users. Also, the resource usage during scans and updates is very high sometimes. Review collected by and hosted on G2.com.

I have used multiple EDR tools, but most of all crowdstrike is the best. It has many features which makes an engineer's life easy. Sensor updates, well organized and detailed dashboard, isolation made easy. Easy to catch threats. I would say best used AI to detect zero days. Review collected by and hosted on G2.com.

As the AI works in crowdstrike there is a chance of detecting multiple false positives Review collected by and hosted on G2.com.