CrowdStrike Falcon

CrowdStrike Falcon is a cloud-based cybersecurity platform from CrowdStrike. It combines endpoint protection with capabilities for identity, cloud workloads, data, exposure management, threat intelligence and security operations.

The platform uses a lightweight Falcon sensor and a centralized web console. Organizations can deploy endpoint protection across Windows, macOS and Linux, while Falcon for Mobile extends protection to Android and iOS devices.

Falcon supports both self-managed security operations and managed services. Its product family includes endpoint prevention, endpoint detection and response, next-generation SIEM, cloud security, identity protection, vulnerability management and managed detection and response.

Falcon Prevent provides next-generation antivirus and behavioral prevention. Falcon Insight XDR adds endpoint visibility, detection investigation and response capabilities.

Security teams can use real-time response, threat hunting, incident investigation, vulnerability prioritization and forensic data collection. Additional modules address identity attacks, cloud workloads, data movement, SaaS applications and security logs.

The Falcon API supports automation across endpoint security, threat intelligence, cloud and container security, identity, data pipelines, policy management and workflow automation. CrowdStrike also provides a marketplace for partner applications and integrations.

CrowdStrike publishes self-service pricing for selected Falcon bundles. Falcon Go costs $7.99 per device monthly or $59.99 per device annually. Falcon Pro costs $14.99 monthly or $99.99 annually per device. Falcon Enterprise costs $19.99 monthly or $184.99 annually per device.

Falcon Complete and several specialist modules use custom pricing. Falcon Go purchases are limited to 100 devices. Optional bundle add-ons may cost extra.

CrowdStrike offers a 15-day Falcon trial. The default trial includes Falcon Prevent, Falcon Device Control and Falcon for Mobile. Other modules can be enabled for evaluation through the trial process.

Pros: Falcon covers multiple security domains through one cloud-managed platform. Its API documentation supports extensive automation and integrations. The platform provides broad endpoint operating-system coverage and a lightweight sensor architecture.

Cons: Advanced capabilities are distributed across separately licensed modules. Enterprise pricing is generally quote-based, which makes total-cost comparison harder. The breadth of the console can require dedicated security expertise and implementation planning.

Comparable platforms include Microsoft Defender XDR, SentinelOne Singularity, Palo Alto Networks Cortex XDR, Trend Vision One, Sophos Endpoint and Trellix XDR. The closest choice depends on operating-system coverage, cloud environment, identity controls, managed services and existing security tools.

Is CrowdStrike Falcon cloud-based?
Yes. Falcon uses a cloud-based management platform and a lightweight endpoint sensor.

Does Falcon have an API?
Yes. CrowdStrike provides a Falcon REST API with domains covering endpoint security, threat intelligence, cloud security, identity, data pipelines and automation.

Which operating systems does Falcon support?
Falcon supports Windows, macOS and Linux endpoints. Falcon for Mobile supports Android and iOS devices.

Does Falcon integrate with other security tools?
Yes. CrowdStrike provides marketplace applications, data connectors, SOAR actions and partner integrations for tools such as Microsoft security services, AWS, Google Cloud, Splunk, ServiceNow, Okta, Jira and Slack.

Does CrowdStrike offer a free trial?
Yes. CrowdStrike advertises a 15-day Falcon trial. The included modules are Falcon Prevent, Falcon Device Control and Falcon for Mobile.

Who is Falcon best suited for?
Falcon is best suited to organizations needing enterprise endpoint security with connected identity, cloud, data and security operations capabilities. Smaller businesses can purchase the simplified Falcon Go bundle.