CrowdStrike Falcon Endpoint Protection Platform Reviews & Product Details

I have used multiple EDR tools, but most of all crowdstrike is the best. It has many features which makes an engineer's life easy. Sensor updates, well organized and detailed dashboard, isolation made easy. Easy to catch threats. I would say best used AI to detect zero days. Review collected by and hosted on G2.com.

As the AI works in crowdstrike there is a chance of detecting multiple false positives Review collected by and hosted on G2.com.

What I like most is the lightweight agent and powerful real-time threat detection capabilities. The platform runs smoothly without impacting system performance, which is critical in a production environment. It's behavioral-based detection and AI-driven analysis provide excellent protection against advanced threats, including ransomware and zero-day attacks. Having a centralized cloud console also gives strong visibility across our endpoints, making monitoring and incident investigation much more efficient. Review collected by and hosted on G2.com.

I think the main drawback is the pricing structure, which we all know it can be expensive, especially for smaller organizations or when additional modules are required. Also, there is a learning curve when first navigating the dashboard and configuring advanced features. While the interface is very powerful and useful especially during investigation, it can feel complex for teams that are new to EDR/XDR platforms. Review collected by and hosted on G2.com.

The solution keeps on evolving and some new features keeps on coming every now and then, Crowdstrike Falcon Endpoint Protection is one of the best product in the market with it's detection and response capabilities. Our SOC is really happy with the product as this product never disappoints. Support is really fast and agile. Review collected by and hosted on G2.com.

The integration with other solutions takes time and is a bit lengthy which needs to be improved Review collected by and hosted on G2.com.

As an individual user, what I appreciate most about CrowdStrike Falcon is how unobtrusive yet effective it feels. Once it’s installed, it runs quietly in the background without noticeably slowing down my system, which makes a big difference in day-to-day work. I don’t have to actively manage it or constantly watch for alerts, yet I still feel confident knowing my device is protected.

From my perspective, it’s also reassuring that the platform emphasizes real-time threat detection and behavior-based analysis rather than relying only on traditional antivirus signatures. Overall, it gives me a strong sense of security while allowing me to stay focused and keep my normal workflow uninterrupted. Review collected by and hosted on G2.com.

Because it’s an enterprise-level security tool, most of the controls are managed by the IT or security team. As an individual user, that means my visibility into what the software is doing behind the scenes is fairly limited, and I don’t always have much context when something happens. Occasionally, legitimate applications or processes get flagged, and resolving that typically requires coordinating with IT to review and approve whatever was blocked. Even so, it comes across more as a cautious safeguard than a true flaw, and it’s understandable given the level of protection the tool is designed to provide. Review collected by and hosted on G2.com.

What I like best about CrowdStrike Falcon is how easy it is to use and implement. The platform offers a rich set of features while still feeling intuitive, and it integrates smoothly with other tools. Their customer support is responsive and helpful, and I use the platform frequently because it consistently delivers reliable protection without adding complexity Review collected by and hosted on G2.com.

One thing I dislike about CrowdStrike Falcon is that some of the advanced features can feel a bit overwhelming for new users, and the pricing can be on the higher side. However, once you get familiar with the platform, its strong protection, speed, and visibility definitely make up for those initial challenges Review collected by and hosted on G2.com.

I like that CrowdStrike Falcon Endpoint Protection Platform offers real-time threat detection and prevention, which helps us quickly identify and stop malware and suspicious activity before it impacts systems. I appreciate the centralized management feature, which makes it easy to monitor and manage all endpoints from a single console, reducing manual work and enabling faster threat detection. Additionally, the customer support is the best and ensures quick assistance, which is very helpful. Review collected by and hosted on G2.com.

The platform is good but the initial setup like onboarding takes some time and after offboarding also it takes some time to offboard users from the console. Onboarding can be time-consuming due to initial configuration and deployment across endpoints. Offboarding users or endpoints is not always immediate from the console, so faster synchronization and better automation will help IMO. Review collected by and hosted on G2.com.

One of the standout features of CrowdStrike Falcon is its versatility as a data source, providing deep visibility into endpoint activity and threat telemetry. The platform’s CrowdStrike Query Language (CQL) is intuitive yet powerful, enabling security teams to perform complex queries without requiring extensive training. This makes investigations and threat hunting highly efficient.

Additionally, the ability to create dashboards quickly and customize them to specific operational needs is a major advantage for monitoring and reporting. The integration with CrowdStrike’s Next-Gen SIEM capabilities further enhances the platform’s value by centralizing and correlating data across multiple sources, improving detection and response times.

Another aspect I truly appreciate is that the CrowdStrike team is constantly improving the platform and actively listens to customer feedback. They are highly engaged and will not hesitate to address issues or implement enhancements—especially when you meet them at Fal.Con, where collaboration and innovation are clearly prioritized.

Finally, CrowdStrike’s support team is exceptional—fast, knowledgeable, and proactive in resolving issues, which significantly reduces downtime and ensures smooth operations. Review collected by and hosted on G2.com.

Limited dashboard sharing options – Currently, dashboards cannot be shared outside of the CrowdStrike environment, which makes collaboration with external stakeholders or reporting to non-platform users more challenging.

Lack of built-in conditional access features – The platform does not provide native functionality for location-based access control or alerting. This would be a valuable addition for organizations looking to enforce granular security policies based on geolocation.

User interface complexity – Although feature-rich, the interface can sometimes feel cluttered and unintuitive, especially for new users. Streamlining navigation and improving UI consistency would enhance the overall user experience. Review collected by and hosted on G2.com.

My favorite part of the EDR platform is the platform itself. The portal is very well organized. The navigation of the dashboard is easy to follow to locate the components you are actually looking for. I also like the detection page because of the great breakdown of detailed information it provides in one window. Review collected by and hosted on G2.com.

It's a bit of a double-edged sword. I like the dashboard layout and the separation of each function, but there can be information overload sometimes. The portal itself is well organized, the data being presented can be overwhelming and hard to follow though. For this reason, the home page of the dashboard can be so valuable as you can see the most significant information cleanly instead of in the mix with so much other information. This could be more of the result of me not personally being as versed in cyber-security. Review collected by and hosted on G2.com.

CrowdStrike Falcon is a simple yet powerful, cloud-based cybersecurity solution that protects computers and devices without slowing them down. It uses smart AI and behavior tracking to stop hackers and malware in real time. It also brings together next-generation antivirus, endpoint detection and response (EDR), and threat hunting in one easy-to-use platform. Deployment is quick, with no on-site servers needed, and it provides excellent protection and visibility—making it one of the most effective and hassle-free security tools available today. Review collected by and hosted on G2.com.

The least helpful aspects of CrowdStrike Falcon are its high cost, which can be difficult for smaller businesses, and its complex licensing, since advanced features often require additional add-ons. Because it’s cloud-based, it may not work as well without a reliable internet connection, and some companies can struggle to integrate it with older systems. There’s also a learning curve to fully use all of its features, and depending on the cloud can raise data compliance concerns for organizations in regulated industries. Review collected by and hosted on G2.com.

This platform delivers strong endpoint security through a cloud-based architecture that helps minimize the impact on system performance. It leverages advanced methods such as behavioral analysis, artificial intelligence, and real-time threat intelligence to detect and stop attacks, including zero-day threats and fileless malware. The centralized management console offers clear visibility into endpoint activity, which makes day-to-day monitoring and incident investigation more efficient. With its scalability and quick deployment, it’s a good fit for organizations supporting a large or distributed workforce. Review collected by and hosted on G2.com.

Although this tool has many advantages, it isn’t positioned as a comprehensive website or content-filtering solution, since its web-blocking features mainly target malicious or explicitly defined domains. It’s also an expensive platform, especially for smaller organizations or for teams that need capabilities available only in higher-tier licenses. In addition, getting full value from the depth of alerts and investigation data depends heavily on experienced security personnel. Finally, because it relies on cloud connectivity, it can be less effective in environments with unstable internet access. Review collected by and hosted on G2.com.