Tech specs
1-8 of 68 reviews
What is our primary use case? I am an analyst in cybersecurity with a focus on detection and response. I entered this portal because I needed comprehensive, comparative bundles for endpoints. My experience includes working with CrowdStrike, SentinelOne, Microsoft Defender, and Kaspersky using the licenses we have. I am an endpoint analyst in deployment services, and we practice reclamation. We use this in our clients, primarily for detection and response. The next-gen Censi works best with other clients, but detections perform best with our clients. What is most valuable? The features of Firewall Management control, combined with controls in NextGen, are the most useful for our clients. These features are crucial in detection. We have achieved 100% success in detection with our clients and have no need for reclamation. The documentation is well-prepared for deployment, and the support team responds quickly. Processing performance for detection and configuration is also beneficial. What needs improvement? There is room for improvement in the AI of CrowdStrike, known as Charlotte AI, which my team does not currently use. I have not had contact with it at this moment. Additionally, patch management in vulnerabilities needs improvement. For how long have I used the solution? I have worked with CrowdStrike Falcon for two years, although I do not currently have a certificate. I am studying to obtain a Falcon certificate. What do I think about the stability of the solution? The solution is stable, like Falcon, and does not cause any problems for the agent to work with minimal memory. It does not have the right processes in workstations, which is different from other endpoints. What do I think about the scalability of the solution? Regarding the scalability of CrowdStrike, I don't have any problems. It is easy to scale with the support of CrowdStrike. How are customer service and support? With the support of the CrowdStrike team, I rate them a ten out of ten. I don't have any problems with support. Almost every time I send a message to support, the response is fast. The CrowdStrike team does not break the SLA time. We maintain separate communication within SLA time. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? I have experience with the product we've been working with, Kaspersky, Defender, and SentinelOne. How was the initial setup? The setup is easy. The documentation is well-prepared for deployment. Deploy is mostly migrated, making it easier to pass to the final client. What about the implementation team? My team is composed of five members who work in deploying clients. We include five cybersecurity analysts. My squad has both CrowdStrike and three people. What was our ROI? They expect a return of 30% to 40%. Which other solutions did I evaluate? I have experience with the product we've been working with, Kaspersky, Defender, and SentinelOne. What other advice do I have? I recommend this product as it is a very powerful endpoint. Compared to other endpoints, it is one of the best in detection and response. I rate it nine out of ten. The management with the console is easy, costs are low, and the detection response alerts are very fast. I mentioned AI and patch management in vulnerabilities earlier. Which deployment model are you using for this solution? On-premises Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner
What is our primary use case? I use the solution in my company on the endpoint, and then we're using it on our point of sales in all of our franchisees' locations, and then we have about seven brands. We are deploying a new point. We are using it as our main endpoint protection. We are trying to monitor all activities happening at our franchisees' locations proactively, allowing us to realize we have to be very proactive. Most of the time, our franchisees are not as proactive. The changes in PCI DSS 4.0 are forcing everyone to be a little bit more proactive, so we have to educate and be a little more involved to ensure we have solutions in place because we are the ones who select the point of sale system. We often tell the franchisee what point of sale to use in the back end, and because of that, they feel like that is our company's responsibility, but it is really a shared responsibility. Even though we make that selection and buy the tool, they also own the responsibility of making sure they protect the brand. We decided to take that out of their hands and decide their endpoint solution. We made it a part of the package, and it got deployed, but that allows us to be proactive in protecting our brands. If they do anything that actually puts our brands in jeopardy, we are able to proactively respond and stay on top of that to avoid breaches and things of that nature. What is most valuable? The most valuable features of the solution stem from the fact that we can track all of it in one place across all those different locations. Because it's cloud-based and reports up to the cloud, we also have access to the back end, and an incident response team monitors all incidents. We also have an escalation process in place. From my perspective, there are other pieces of CrowdStrike that the security architect team uses as well, but I don't get involved with those as much. I usually just wait for the end results or the notification if I need to get involved if there is an incident. What needs improvement? The tool's customer service team’s inability to respond to our company’s queries is an area where improvements are needed. For how long have I used the solution? I have been using CrowdStrike Falcon Complete MDR for a year. What do I think about the scalability of the solution? The number of endpoints we deal with is changing, but ultimately, there will probably be at least 12,000 endpoints. It is a two-year project, so we are only tagging it by the end of the year for our new point of sale. Currently, the endpoints are only on one point of sale we use. We have an initiative to push out our new point of sale, and the solution is included. As we standardize one point of sale, we will cover that piece of it, but again, it is probably going to be about 12,000 endpoints. How are customer service and support? I would say the tool's customer service has been able to respond and give us the answers that we needed. I rate the technical support an eight out of ten. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? Before CrowdStrike, we had Cylance. We switched from Cylance to CrowdStrike because, and I just want to make sure, it probably had more to do with the cloud side of things because we also use CrowdStrike for our cloud or AWS environment. We needed a platform that allowed us to unify the management piece of it, so we switched over to CrowdStrike, which manages the endpoint side. We also use that on our AWS business side to manage that whole infrastructure. How was the initial setup? The product's initial setup phase was very straightforward. I was involved in the setup phase with the original part when a testing piece happened at the store level. I was involved in making sure that the infrastructure could operate and function with that endpoint protection piece. The part that I was involved with came with a lot of requests for firewall changes. The implementation strategy was able to when a point of sale is being pushed or updated or upgraded to the franchisees, that it is part of a package or image, the agents were automatically installed. It rolled into the store deployment piece of it, and that was probably the biggest strategy, making sure that it was a part of the actual roll out for the point of sale system. The solution was deployed with an internal team of 15 people, counting the third-party support teams we outsource with, which provided the first-level support for the tool. Even after we deploy the tool, it is all about making sure those guys are able to respond and things of that nature. A lot of times, infrastructure had to be standardized, but along with that, standardization allowed us to be able to the point of sale, include the endpoint solution, and move forward. What was our ROI? Speaking about ROI, we have seen what a breach can cost us. With a couple of years behind us, we have seen where breaches cost us. Not having a solution that allows us to be proactive is one of the main reasons the solution is being deployed. We are seeing how to take more than 6,000 locations across the US and stay on top of incidents and security changes happening daily. We know that the return is huge just from being proactive. When there are incidents, the fact that we can control and manage it across all of our brands is probably one of the biggest wins for us because before, we had different points of sale, but not all of them had endpoint protection, so we were very vulnerable. Which other solutions did I evaluate? I know for a fact we evaluated other options. I have no clue about what they are or were because I wasn't one of the evaluators. Andy and Willy evaluated the different options, and they came back with CrowdStrike. We had started deploying CrowdStrike even before Andy joined the team, and he took it over with Willy and added more features to it. What other advice do I have? The good part about it for us is that one of the big questions is that I think CrowdStrike is definitely one of the leaders, and we love the product. One of our big challenges was trying to figure out the cost around it and how to take that cost and push it back to our franchisee. I think we are starting to figure that piece out. One of the good things about the CrowdStrike Falcon Complete MDR on the endpoints side of it is that we were looking for something that supported Windows, iOS, Android, and Linux. I think they check all the boxes. I think I'm finalizing what we will be able to do on the Android side of things and the iOS side of things. I think we are at a point where we're getting to a point with CrowdStrike where we know what the cost is, and we know that it's a viable solution. It is about getting the numbers together to see if it makes sense from a financial standpoint. I know that the team was working on getting better numbers, and they did. I think that allowed us to be able to move forward on working on the numbers to present to our executive team. I got to speak with them this morning, and I know that they got the numbers, so I think we have a good place, to be honest with you, as far as numbers now. The maintenance part is good. The main thing is that we are in the retail sector, and somebody at the end of the day on the retail side will manage things when a point of sale goes up or down, making sure that everything is in place. There is somebody on the security side who manages everything and has to address when an endpoint is being removed or is offline, so there are two people on it. There is also a 24-hour support team, whether that be our offshore team, which is mostly going to be an offshore team that will respond to issues. But again, you have a security team that is going to monitor the endpoints and know when they are offline, kick off tickets, and push to the support team to make them look into it. Somebody on the retail team should be able to tell us that a particular solution has been upgraded, so there is always a little checking and balancing when it comes to things on top of what is happening on the point-of-sale side of things on the payment side of things. The tool offered us the flexibility that we needed. The biggest thing is that it allows us to work because we are moving to a franchisee or hospitality solution or platform solution, especially for security-conscious people. In my industry, it has not always been as security-conscious. Security was only pulled on an as-needed basis. We are changing the atmosphere. We are changing that and being more proactive. That is why some of our processes take us a minute. We are not just in all locations, making things a little more challenging. You have to push and make sure the cost doesn't disrupt what a franchisee has going on. You have to look at it from a holistic standpoint. The solution has allowed us to do that and gradually push the security needs that we need to have in place. I rate the tool a nine out of ten. Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? It basically works as an XDR. We have the kind of servers on which our XDR CrowdStrike is installed, and it generates alerts. For example, if someone tries to install a systematic agent from their end, it generates an alert. We can then investigate through the incident task and see all the information: the device name, the hostname, and which servers and devices are trying to uninstall the particular product. How has it helped my organization? It basically works as a security device and provides an extra layer of security to our devices and computers. Earlier, we used SentinelOne. CrowdStrike has more features than SentinelOne. For example, SentinelOne doesn't have as many features like remediating and showing more information. In CrowdStrike, we can see more information about the incident. What is most valuable? It has a great dashboard and interface, which is very user-friendly. It also provides a detailed analysis of each incident. What needs improvement? It should be integrated with AI and ML. For example, if we face zero-day vulnerabilities on our VCs, integrating them with AI and ML would be great. It's like SOAR, which we use, which automatically remediates everything, eliminating human work. If CrowdStrike also implements this kind of AI and ML feature, it would be beneficial. For how long have I used the solution? I switched my organization to it about three months ago, in April. So, since April I have been using CrowdStike. What do I think about the stability of the solution? I haven't seen any bugs. If I encounter null errors or errors while doing integration or other tasks, I report them. Until now, I haven't seen any bugs. Since I haven't seen any issues so far, I would give it a ten out of ten. What do I think about the scalability of the solution? We have deployed it on every device, so we use it in a large number. I would rate the scalability a nine out of ten. Which solution did I use previously and why did I switch? In my previous organization, I used SentinelOne, which is also an XDR. When I switched to a new organization, they were using CrowdStrike. That's how the switch happened. How was the initial setup? It's cloud-based. I think the cloud is good because deploying on-prem is difficult compared to the cloud. In the cloud, we have better security options, we can log in from anywhere, and we don't have to manage the servers ourselves. Deployment time: It depends on the number of servers we are using. If we have many servers, it will take some time to install on each device. If the environment is small, it would be a quick installation. If we need help, we can contact the CrowdStrike Falcon team. What was our ROI? It's quite good. Our organization is very big and has a good budget, but the licensing part is handled by upper-level management. What's my experience with pricing, setup cost, and licensing? CrowdStrike has a reasonable price. It's a good price, but if CrowdStrike offered coupons or discounts on a monthly or quarterly basis, it would be more beneficial for smaller vendors trying to implement security. Cutting down some prices would be better so that everyone can use it. What other advice do I have? I would recommend CrowdStrike. Even if I were using it and someone asked me which tool to use, I would recommend CrowdStrike. Overall, I would rate the solution a ten out of ten. Which deployment model are you using for this solution? Public Cloud Disclaimer: My company has a business relationship with this vendor other than being a customer:MSP
What is our primary use case? CrowdStrike Falcon Complete is our EDR solution. It has many modules including vulnerability management, discovery, account application, and assets Compared to our previous security products, CrowdStrike offers greater efficiency with its various modules that provide full functionality. We've found it to be a helpful tool overall. However, there are some challenges depending on the specific use case and industry, such as finance or retail. This is likely because we're accustomed to our legacy products and CrowdStrike is still new, requiring a learning and testing phase for our team. We implemented CrowdStrike Falcon Complete to replace the legacy solutions in our environment. How has it helped my organization? We are impressed with CrowdStrike Falcon Complete SLAs. The most effective features for detecting and mitigating cyber threats are machine learning and behavior analytics which are well-versed. CrowdStrike Falcon Complete significantly enhanced our overall security by minimizing false positives, eliminating the need for system restarts during or after deployment. CrowdStrike Falcon Complete helps us detect and mitigate threats quickly through positive alerts and fast response times. The management console is user-friendly. What is most valuable? All of the modules are good. The exposure management covers vulnerability management in discovery. What needs improvement? We find CrowdStrike Falcon Complete to have a steeper learning curve when it is deployed in certain industries such as finance and retail. For how long have I used the solution? I have been using CrowdStrike Falcon Complete for three years. How are customer service and support? The technical support is good. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? We were previously using legacy solutions and replaced them with CrowdStrike Falcon Complete because of the next-gen EDR capabilities it offered. CrowdStrike Falcon offers superior support and technology, making it a better choice than our outdated legacy solutions. What other advice do I have? I would rate CrowdStrike Falcon Complete eight out of ten. CrowdStrike Falcon Complete provides clear and detailed documentation. Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? I use the solution for a lot of things. It has more visibility than core tech. For example, it's better the TSC scores and that any integration visibility with Zscalar. How has it helped my organization? The solution helps to provide a better security posture. What is most valuable? The solution provides more visibility than Zscaler. There's more security. It provides enhanced security with integration capabilities with third-party tools. The threat detection and response are easy. If you have a subscription for the Falcon Consultant Complete sublicense, then they will take care of your MDL service. They will assign their team to it, and they will manage your incident detection and monitoring. CrowdStrike will take care of it via its own expertise so you don't have to overload your existing resources. It helps improve our security posture by integrating with web security, email security, and other forms of security. There are also a lot of third-party tools. You have the opportunity for more alerts and security. CrowdStrike shares information with third-party tools that really help with visibility. The solution is constantly being updated. I've been satisfied with the interface. What needs improvement? We'd like to see the option for an uninstall feature directly on the cloud. It's a tokenless install; however, you should have a token while installing and uninstalling. The installation could always be a bit easier. You need to install it manually at the endpoint. For how long have I used the solution? I've used the solution for a year. What do I think about the stability of the solution? The stability is very good. I have not witnessed any downtime. What do I think about the scalability of the solution? This is a cloud-based solution, You can easily scale it. How are customer service and support? Technical support has been very good. They are very helpful. It's a strong point for the product. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? I have also used different solutions. For example, I have used Cortex. How was the initial setup? The initial setup is very straightforward. It was a simple process. What's my experience with pricing, setup cost, and licensing? I'm a technical engineer and don't have visibility on the pricing. However, it can be a bit lower than other options. What other advice do I have? I'd rate the solution 8 out of 10. I can completely rely on CrowdStrike. Which deployment model are you using for this solution? Public Cloud Disclaimer: My company has a business relationship with this vendor other than being a customer:partner
What is our primary use case? We use CrowdStrike Falcon Complete as our MSSP. We previously relied on antivirus products like Sophos and Malwarebytes, which seemed to function adequately. However, Sophos lacked centralized management, requiring our IT team to manually review over a hundred security notifications daily. This became an unsustainable workload, prompting us to seek a solution that could automate the notification review process. That's when we began exploring different options. How has it helped my organization? CrowdStrike Falcon Complete has significantly bolstered our security posture. While the active monitoring itself is valuable, it was consuming resources from our IT team. Now, with CrowdStrike's Managed Detection and Response service, our IT team is freed up to focus on other critical tasks. What is most valuable? The response service is the most valuable as it frees up our IT staff to focus on other tasks. What needs improvement? Like any other solution, a lower price would make CrowdStrike Falcon Complete more appealing. For how long have I used the solution? I have been using CrowdStrike Falcon Complete for one month. What do I think about the stability of the solution? CrowdStrike is stable. What do I think about the scalability of the solution? CrowdStrike is scalable. How are customer service and support? CrowdStrike's service is excellent. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? We previously used Sophos in their cloud environment. While it performed adequately for its intended purpose, it lacked managed detection and response capabilities. This meant our IT team shouldered the burden of MDR, which is why we transitioned to CrowdStrike to offload that responsibility. How was the initial setup? The initial deployment was straightforward. Our strategies ensure comprehensive agent deployment across all machines in the organization. Therefore, we leverage deployment tools to efficiently distribute software throughout our network. One person from IT was required for the deployment. What about the implementation team? The implementation was completed in-house. What was our ROI? The return on investment comes from two key benefits: a more secure environment and the offloading of security log monitoring from our team to CrowdStrike's experts. What's my experience with pricing, setup cost, and licensing? We pay $50,000 for the 200 endpoints we have. Which other solutions did I evaluate? In our search for a managed security service provider, we shortlisted three vendors: SentinelOne, Carbon Black, and CrowdStrike. After consulting with some security specialists, we determined that CrowdStrike would be the best fit for our needs. What other advice do I have? I would rate CrowdStrike Falcon Complete eight out of ten. The costs met our expectations. After consulting with Hamilton, CDW, and an independent security consultant, CrowdStrike Falcon Complete emerged as the leading solution in the field. We therefore decided to implement it. The maintenance is completed by CrowdStrike. Which deployment model are you using for this solution? Private Cloud Disclaimer: I am a real user, and this review is based on my own experience and opinions.
What is our primary use case? We leverage CrowdStrike Falcon Complete, our EDR solution, alongside Microsoft Defender. We implemented CrowdStrike Falcon Complete to safeguard our end users from unwanted applications, as recommended. Its IoC technology prevents the installation of both vulnerable applications and adware. CrowdStrike Falcon Complete is deployed in the AWS, Azure, and GCP clouds. How has it helped my organization? CrowdStrike Falcon Complete made our incident response and remediation effort smoother. Deep analysis is a valuable tool because whenever an unauthorized process is executed, it provides us with a comprehensive understanding of how the attacker is behaving within our system. CrowdStrike Falcon Complete's 24/7 monitoring simplifies security management for our organization. We receive notifications through the message center regarding any detected incidents. Additionally, their cybersecurity engineers are available for consultation via phone call should any questions arise. Our organization has benefited significantly from CrowdStrike Falcon Complete. It allows us to easily add Indicators of Compromise and perform on-demand scans. When threats are detected during these scans, the files are automatically blocked, preventing them from executing on the machine. Additionally, the support team is responsive and helpful, offering assistance without requiring the creation of a ticket. Our overall security response time has improved by up to 80 percent. What is most valuable? Two of the most valuable features of CrowdStrike Falcon Complete are the remote terminal and unlimited IoCs. Most security solutions limit IoCs to around 20, but Falcon Complete allows us to upload as many as we need. Additionally, the centralized security management system is a great feature. It lets us run on-demand scans on our devices and view the results conveniently in the cloud. What needs improvement? CrowdStrike Falcon Complete does not include patch management functionality. For how long have I used the solution? I have been using CrowdStrike Falcon Complete for eight months. What do I think about the stability of the solution? I would rate the stability of CrowdStrike Falcon Complete nine out of ten. What do I think about the scalability of the solution? CrowdStrike Falcon Complete is scalable, but to expand its capabilities, you'll need to acquire additional licenses. The cloud-native architecture allows us to just focus on the work and not worry about the hardware. How are customer service and support? CrowdStrike Falcon Complete offers faster technical support compared to Microsoft, which often has long response times and redirects customers to partners. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? We switched from Sophos to CrowdStrike Falcon Complete for its broader capabilities. How was the initial setup? The deployment process, involving six people and supported by CrowdStrike, took eight months to complete. We uninstalled our existing applications from the machines and installed the token as part of the deployment. What was our ROI? We have seen a medium to high return on investment. What's my experience with pricing, setup cost, and licensing? While CrowdStrike Falcon Complete is expensive, it offers great features and functionality. Which other solutions did I evaluate? We evaluated Kaspersky and Microsoft Defender. What other advice do I have? I would rate CrowdStrike Falcon Complete nine out of ten. CrowdStrike Falcon Complete is user-friendly and simple to set up, ensuring a smooth user experience without any added complexity. It automatically detects and blocks infected files or devices, protecting your end users. I recommend CrowdStrike Falcon Complete. Which deployment model are you using for this solution? Public Cloud If public cloud, private cloud, or hybrid cloud, which cloud provider do you use? Amazon Web Services (AWS) Disclaimer: I am a real user, and this review is based on my own experience and opinions.customer
What is our primary use case? We are partners with CrowdStrike and implement CrowdStrike Falcon Complete for all our customers to help protect their environments against breaches and cyber incidents. Our customers are switching to CrowdStrike Falcon Complete for several reasons. First, their current antivirus solutions are up for renewal. Second, they lack EDR capabilities, which limits their visibility into their security posture. This lack of visibility is a major challenge for them. Finally, they are seeking proactive threat hunting, a service their current Security Operations Center provider doesn't offer. Instead, they receive an unmanaged threat-hunting service, which they find inadequate. How has it helped my organization? CrowdStrike's Falcon Complete service simplifies endpoint security by using a single sensor we install on our devices. Once installed, CrowdStrike's managed services take care of everything, including monitoring, threat detection, remediation, and alert management. Our customers only need to handle adding new users or groups. CrowdStrike Falcon Complete improves our ability to respond to and remediate cyber threats. CrowdStrike Falcon Complete boasts AI-powered analytics that hold significant promise. While I haven't used it personally, we'll be implementing it with a few clients. Once their quarterly reviews are completed, we should gain valuable feedback. The generative AI capabilities seem comprehensive, which is positive for our needs. The real-time threat-hunting capabilities stand out for us. Falcon Complete incident response feature works in the background where a team at the threat center reviews the detections and automatically remediates the threats. We're continually evolving our cybersecurity posture, and Falcon Complete has significantly improved our response time to cyber threats. We don't have an in-house SOC team so Falcon Complete has been crucial in helping with threat detection and resolution. What is most valuable? Overwatch is the most valuable feature of CrowdStrike Falcon Complete. Threat hunting is the most valuable feature for strengthening our cybersecurity posture. What needs improvement? I would like to see CrowdStrike Falcon Complete XDR integrate more effectively with other technologies. For how long have I used the solution? I have been using CrowdStrike Falcon Complete for a few months. What do I think about the stability of the solution? CrowdStrike Falcon Complete is extremely stable. What do I think about the scalability of the solution? I would rate the scalability of CrowdStrike Falcon Complete ten out of ten. How are customer service and support? The technical support is excellent. How would you rate customer service and support? Positive Which solution did I use previously and why did I switch? Before our partnership with CrowdStrike, we offered Trend Micro, McAfee, and Symantec products. We transitioned to CrowdStrike Falcon Complete due to its ideal alignment with our customer needs and its inclusion of threat hunting and cyber insurance within the service package. How was the initial setup? The initial deployment is straightforward. We integrated with ADR in SCCM and pushed all the software agents on all the machines. The deployment required two people. What was our ROI? We have seen a return on investment with CrowdStrike Falcon Complete. What other advice do I have? I would rate CrowdStrike Falcon Complete ten out of ten. CrowdStrike Falcon Complete is a managed service so it does not require maintenance from our end. I recommend CrowdStrike Falcon Complete to others. Which deployment model are you using for this solution? Public Cloud Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner