The most useful features of CrowdStrike are its workflow automation, host containment, and asset management capabilities. CrowdStrike’s most valuable features include workflow management, host containment, and asset management.workflow automation, host containment, and asset management Review collected by and hosted on G2.com.

We are using the most user-friendly option, and I don't think anyone would dislike it. Review collected by and hosted on G2.com.

The fact that the platform is so insanely robust and granular is an absolute lifesaver. I can make my rules ridiculously complicated if I want to, or I can set up more of a “set and forget” approach that I don’t have to think about again until something actually triggers. The detection rating feels unmatched—the platform gathers more threat intelligence than almost anyone else in the world—and that has been a complete game changer for us. No more spending all day hunting through false positives, and no more overly complex reports that don’t make sense and are frustrating to explain to management. Everything is there, it’s ready, and it’s exportable. You can do just about anything with Crowdstrike, and when I say that, I quite literally mean it.

If you want to sleep at night knowing your organization is protected with what I consider the best protection available on the market, I’d strongly suggest going with Crowdstrike. I’m personally sleeping better at night, and members of my team are far less stressed on weekends—we’re no longer dreading a call that our infrastructure has been compromised.

We use this as our main source of protection across our entire enterprise. Review collected by and hosted on G2.com.

It's a complex beast to master - it takes time. That's not even really a dislike, it's more of a fact. If you want to be able to fully understand the product, and use all of the features to their fullest, you need to sit down, and do some training and education. Anything worth using though, takes time to master. Review collected by and hosted on G2.com.

CrowdStrike Falcon endpoint protection platform provides accurate detection and timely warnings of threats. It also offers centralized management and clear visibility across hosts, making it easier to monitor and manage endpoints from one place. Review collected by and hosted on G2.com.

Setting up the API connectors for Log Management in the Next-Gen SIEM is a bit complicated but support is always there to help with that Review collected by and hosted on G2.com.

It is real time threat detection using AI and machine learning. It provides strong visibility across all endpoints, works without showing down systems, and helps detects & respond to threat quickly from a single cloud based console. Review collected by and hosted on G2.com.

It can be difficult to use for new users because of its complex interface. Some features require advanced knowledge to configure properly, and alert tuning can be taking time. Review collected by and hosted on G2.com.

It has features you don't see in other technologies; it's a fantastic EDR and offers plenty of options for configuration and customization—something that's difficult to find in other technologies. Review collected by and hosted on G2.com.

The learning curve is steep, and there are many modules that change frequently Review collected by and hosted on G2.com.

I think its cloud native architecture and intuitive dashboards are very helpful to manage endpoint security and also their agents are also lightweight so no need of performance drop on endpoints Review collected by and hosted on G2.com.

I have seen other products also so i think their pricing are bit higher than competitors so smaller teams with limited budgets not able to use this and also initial setup is also bit complex for new users Review collected by and hosted on G2.com.

The Kestrel Lead Generator has got to be the best development CrowdStrike has put out so far. This feature has saved me so much time in detection investigations! Review collected by and hosted on G2.com.

The fact that their query language is only slightly different than SQL. If you know SQL and jump into this platform, CQL is similar enough but different enough to slightly annoy you. Review collected by and hosted on G2.com.

CrowdStrike is the best EDR I’ve used. It provides incredible insight into our large number of endpoints on a granular level including Processes, Command Line Arugments, Network traffic, etc. Review collected by and hosted on G2.com.

The Forensics Module is brilliant for rapid triage across our environment but I don’t like playing middle man in AES. I’d rather have access to the actual artifacts. Review collected by and hosted on G2.com.

I find the standout feature of CrowdStrike Falcon Endpoint Protection Platform to be its blazing-fast threat detection powered by cloud AI, which consistently outperformed our old tools. Beyond the cloud AI, I also appreciate Falcon's managed threat hunting and seamless integrations. The 24/7 expert threat detection is excellent at uncovering stealthy threats that our team might miss. Additionally, its lightweight agent and AI prevention have fixed our performance issues from old antivirus software. The initial setup was straightforward, even with our large scale, taking about 2-3 weeks for over 10,000 endpoints. Overall, I rate Falcon a solid 9 out of 10 because of its exceptional prevention, scalability, and unmatched value. Review collected by and hosted on G2.com.

While Falcon excels overall in my firm, some tweaks can make it better like alert tuning challenges when there is a flood of alerts. If there is a custom rule to configure those, that would be great. Some OOTB policies for software dev workflows would be a cherry on top. Role-based dashboard customization which powers different dashboards for devs and full forensics for hunters. Review collected by and hosted on G2.com.

I like CrowdStrike Falcon's lightweight, cloud-native design and strong threat detection. It runs quietly in the background without slowing down systems but is extremely effective at catching known and unknown threats, including fileless attacks. The real-time visibility and detailed threat intelligence make investigations easier, and the console is intuitive once you get used to it. It provides a high level of confidence in endpoint protection without adding operational complexity. The initial setup was easy, requiring only the installation of a lightweight agent, and endpoints were protected almost immediately. The cloud-based console meant there was no on-prem infrastructure to manage, and most default policies worked well out of the box, allowing the team to get up and running quickly. I also appreciate its excellent integration with SIEM tools, identity platforms, and ticketing systems to streamline monitoring, investigations, and incident response workflows. Switching from a traditional antivirus solution to CrowdStrike Falcon gave us better visibility, faster detection, and stronger protection against modern threats. Review collected by and hosted on G2.com.

Reporting and alert tuning can feel complex for new users, and advanced features are costly. Offline protection and granular policy customization could be improved. Reporting and alert tuning have a steep learning curve and need better templates. Advanced features are expensive and would benefit from more flexible pricing. Review collected by and hosted on G2.com.