The CrowdStrike falcon platform, above protecting the endpoint, is quickly becoming our source of truth about all things endpoint related. From patch compliance to remediation. Review collected by and hosted on G2.com.

Some of the menus are feeling dated and clunky, with no possibility of meaningful customisation. We’re ready for a kestrel experience Review collected by and hosted on G2.com.

I like that the AI/ML detection provides more granular level information and results in fewer false positive alerts. I also appreciate how it provides end-to-end flow information for each alert, making it easier to navigate and identify which events need attention. The rapid deployment capability is impressive too, as rapid deployment was possible for us. Review collected by and hosted on G2.com.

I find adding hash values (IOC) and IOA to have limited functions. Specifically, we cannot add more than 200,000 IOC, and we can only monitor them for a lesser period. Review collected by and hosted on G2.com.

Its lightweight agent, real-time threat detection, and cloud-native architecture provide excellent visibility into endpoints. It helps identify and stop advanced threats quickly, and it’s also easy to deploy and manage. Review collected by and hosted on G2.com.

Some advanced features take time to learn for new users, especially for smaller IT teams that don’t have dedicated security expertise. Review collected by and hosted on G2.com.

CrowdStrike Falcon stands out for its lightweight, single-agent architecture, real-time cloud-based threat intelligence, and fast EDR capabilities, all with almost no performance impact. Review collected by and hosted on G2.com.

The licensing cost is high, and the noisy detections create alert fatigue. Offline protection also feels limited when endpoints lose cloud connectivity. Review collected by and hosted on G2.com.

I like the best feature about falcon is their strong detection capabilities and ai driven threat detection system its too good features Review collected by and hosted on G2.com.

I think tuning for removing noice is hard and it takes too much effort and also their advance feature required more modules so its complex and also cost is high for that Review collected by and hosted on G2.com.

CrowdStrike Falcon have user friendly dashboard, have a stable agent, gives less false positives, provides detailed analysis of the incident and it is very feasible to integrate with other tools. Review collected by and hosted on G2.com.

I don't see something to dislike other than the bizarre incident that happened last year. Other than that cost is a factor to dislike, but it is worth the money I would say. Review collected by and hosted on G2.com.

I love that with CrowdStrike Falcon Endpoint Protection Platform, I don't have to worry about my endpoints. If there's a problem, they take care of it and notify me, which allows me to sleep much better at night knowing that CrowdStrike Falcon has our back. The platform is worth every penny. It's very easy to set up, and we were able to automate the deployment of the agent, making it very helpful for our team. Review collected by and hosted on G2.com.

Absolutely nothing! Review collected by and hosted on G2.com.

What I like best about CrowdStrike Falcon is how fast and reliable it is when detecting threats. Just recently, it flagged a suspicious PowerShell script running on one of our endpoints. Within minutes, we had a full timeline of the activity, including the parent process and command line details. That helped us respond quickly and avoid any impact.

As a SOC analyst , I also appreciate how easy it is to navigate. The interface is clean, and the alerts are well-organized, which makes it easier to learn and understand real-world attack patterns. It doesn’t just throw alerts—it gives context, which is super helpful when you're still building your skills. Review collected by and hosted on G2.com.

While CrowdStrike Falcon is a powerful and reliable platform, some features can be a bit overwhelming for new users. It takes time to get used to the interface and understand how to use all the modules effectively. Also, the filtering options in the investigation tab could be improved—sometimes it's hard to narrow down alerts quickly when you're dealing with a large volume.

A helpful improvement would be to make the search and filtering more flexible and user-friendly, especially in the event timeline and process tree views. That would make investigations faster and smoother, especially for SOC teams handling multiple incidents. Review collected by and hosted on G2.com.

As a SOC Analyst, I really value CrowdStrike Falcon’s real-time threat detection and visibility. The threat graph and behavioral analytics make it easier to investigate incidents and correlate activities quickly. I also like how lightweight the agent is—it doesn’t slow down endpoints, and updates are seamless. The dashboard is intuitive, and the detailed telemetry gives deep insights for hunting and responding to threats. Review collected by and hosted on G2.com.

The main drawback is the steep learning curve for new analysts, especially when diving into advanced hunting queries. Some of the alerts can be very noisy, requiring fine-tuning to avoid false positives. The pricing is also on the higher side compared to other EDR solutions, which might be challenging for smaller organizations. Review collected by and hosted on G2.com.

The ease of implementation stood out. Deployment was fast with minimal disruption. The interface is intuitive, and the lightweight agent doesn’t impact system performance. Its broad feature set (threat detection, EDR, vulnerability management) is robust, and the frequency of use is daily since it runs seamlessly in the background. Customer support has been responsive and knowledgeable, and integration with other security tools has been straightforward. Review collected by and hosted on G2.com.

The cost can be somewhat concerning, particularly when considering the price of additional modules such as IAM and SOAR. I hope they will consider offering free access for at least 50 to 100 devices to allow users to test their features, as this could encourage customers like me to take their product more seriously. Overall, I like their product and believe it is worth the investment. Review collected by and hosted on G2.com.