G2

Verified User in Consulting

Mid-Market (51-1000 emp.)

9/1/2026

"Fast Cloud-Based SaaS Detection and Response with Growing Integrations"

5/5

What do you like best about CrowdStrike Falcon Shield?

Falcon Shield’s repository of integrations keeps growing year over year, and that delivers ROI on your original investment in the module. With a single module, you can orchestrate detection and response across several SaaS applications with zero impact on performance, since everything runs in the cloud and is processed via Next-Gen-Siem. Onboarding doesn’t even require endpoint deployment; it’s driven by user telemetry and correlated through API integrations, which makes it fast and easy to roll out. Great Review collected by and hosted on G2.com.

What do you dislike about CrowdStrike Falcon Shield?

It’s genuinely hard to find something to dislike about Shield. That said, if we’re talking about areas for improvement, I’d like to see more providers support OAuth integrations via API, rather than relying on SAML chaining for SSO through certificates. Review collected by and hosted on G2.com.

What problems is CrowdStrike Falcon Shield solving and how is that benefiting you?

When it comes to SaaS attack surfaces—especially with M365 integrations Falcon Shield helps solve an ongoing problem caused by the outdated GUI in EntraID/Azure/MDE and the fact that important information can be hard to find. It provides impactful telemetry in a well-organized way, which supports containment and remediation and ultimately improves the organization’s security posture. The output is also simple to understand and follow. For example, when security gaps are identified in an integration, Falcon Shield provides the necessary context and information related to potential remediation. Review collected by and hosted on G2.com.