Overview
AWS Security Reimagined
AWS Security Reimagined
AWS Security Seamless Integration
Get Started Today: Step-by-Step Guide to Deploy CrowdStrike Falcon Next-Gen SIEM for AWS through AWS Marketplace (https://aws.amazon.com/blogs/awsmarketplace/deploy-crowdstrike-falcon-next-gen-siem-aws-through-aws-marketplace/ )
CrowdStrike Falcon for AWS in AWS Marketplace is a pay-as-you-go offering AWS customers can use to help protect their cloud workloads using the CrowdStrike Falcon platform and only pay for what they use. By streamlining how customers connect their AWS environments to CrowdStrike, organizations can unify data from endpoints, cloud workloads, and identities with AWS telemetry for comprehensive, cross-domain threat detection and response. This offering includes security information event management (SIEM) and cloud security modules, CrowdStrike Falcon Next-Gen SIEM and CrowdStrike Falcon Cloud Security.
Solution overview
CrowdStrike and AWS have created an enhanced version of SaaS Quick Launch for Falcon Next-Gen SIEM in AWS Marketplace, delivering a streamlined deployment experience so customers can quickly deploy and access Falcon Next-Gen SIEM for AWS in minutes (). CrowdStrike Falcon Next-Gen SIEM for AWS architecture
Take Action Now -> Step-by-Step Guide to Deploy CrowdStrike Falcon Next-Gen SIEM for AWS through AWS Marketplace ().
Falcon Cloud Security Runtime host protection:
Stop breaches in their tracks with AI-powered protection, detection, and response backed by world-class adversary intelligence. Falcon Cloud Security Runtime delivers agent-based workload protection for your cloud instances, container clusters, and managed containers to automatically detect, investigate, and respond to threats in real-time. .
See our CrowdStrike Falcon Platform listing () to learn more about our integrated portfolio of security tools.
Contact your CrowdStrike sales rep (provided in your welcome email and subsequent email communications) for details or to purchase additional modules.
NOTE: The pay-as-you-go offer is only available on new qualifying purchases. Existing customers are eligible, but your pay-as-you-go tenant will be separate from your annual subscription tenant.
Highlights
- Unmatched visibility and protection: The Falcon platform provides a comprehensive modern defense across the entire enterprise environment, including endpoint, identity, cloud, AI workloads, third-party data, and more through a single platform. Its cloud-native architecture enables real-time threat detection and response, keeping organizations one step ahead of adversaries.
- Simplified security operations: The Falcon platform consolidates previously siloed security capabilities into a single, easy-to-use console, and acts as the central hub by integrating with existing tools. This streamlined approach reduces complexity, improves efficiency, and lowers overall security costs.
- AI and threat intel-driven security: Powered by real-time threat intelligence from millions of endpoints worldwide, the Falcon platform continuously evolves to counter the latest threats. This global perspective, combined with insights from world-class threat hunters and industry-leading AI, helps ensure organizations are protected against the most sophisticated attacks.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/unit |
|---|---|---|
Falcon Next-Gen SIEM (13-month retention) | Per MB of non Falcon data ingested (flat fee) | $0.00595 |
Falcon Cloud Security Runtime - host protection (e.g., EC2 and Workspaces) | Per hour for each running host | $0.023 |
Falcon Cloud Security Runtime - container cluster and node protection | Per hour for each running worker node | $0.054 |
Falcon Cloud Security Runtime - Fargate container protection | Per hour for each Fargate instance | $0.01 |
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
All purchases include CrowdStrike Express Support (https://assets.crowdstrike.com/is/content/crowdstrikeinc/crowdstrike-falcon-premium-supportpdf ).
For support inquiries, please email awsmp@crowdstrike.com . For questions regarding licensing, please refer to our Licensing FAQ at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

Customer reviews
Cloud threat visibility has improved and now supports flexible, low-overhead protection for startups
What is our primary use case?
I use it for cloud workload protection and threat detection in AWS environments.
How has it helped my organization?
The pay-as-you-go model enabled me to deploy quickly from the AWS Marketplace management account.
It scaled protection for workloads without upfront commitments and reduced the initial operational overhead.
It provides real-time visibility into cloud threats, helping stop breaches faster in dynamic AWS setups.
What is most valuable?
I find the seamless AWS integration and single lightweight agent to have minimal performance impact.
The cloud-native SIEM and runtime security leverages threat intelligence for proactive detection.
Flexible billing through AWS is ideal for startups testing security without long-term locks.
What needs improvement?
I believe that AI-powered SOAR workflow suggestions could streamline incident response.
For how long have I used the solution?
I have been using it for 1 month.
Which solution did I use previously and why did I switch?
We are a new startup, so we did not use any previous solutions.
What's my experience with pricing, setup cost, and licensing?
The pay-as-you-go model excels for startups with variable AWS workloads, avoiding large upfront costs and scaling with usage.
Which other solutions did I evaluate?
I evaluated Prisma Cloud, Wiz , and Orca Security alongside native AWS options.
What other advice do I have?
CrowdStrike Falcon for AWS (pay-as-you-go) delivers strong cloud-native protection via AWS Marketplace , which is ideal for startups scaling workloads.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Proactive threat hunting has improved breach prevention and now provides deeper endpoint visibility
What is our primary use case?
I deal with endpoint security, firewall, and XDR solutions. I use Sangfor and work with Trend Micro and CrowdStrike. I use CrowdStrike Falcon for enterprise companies, which is what I typically recommend.
How has it helped my organization?
CrowdStrike Falcon has helped my customers predict and prevent potential breaches because of its proactive approach.
What is most valuable?
The most valuable features in CrowdStrike Falcon are its AI capabilities. The lightweight agent has a positive impact on system performance and visibility through ease of use. I utilize its Threat Graph for threat hunting.
What needs improvement?
To improve my recommendation to a perfect score, I would focus on better selling skills and improved integration with different vendors.
For how long have I used the solution?
I have been working with CrowdStrike Falcon for approximately five years.
Which solution did I use previously and why did I switch?
I have previously worked with a Total Information Management Corporation solution.
Which other solutions did I evaluate?
I work with competitors as well, and there is good competition to Sangfor at the moment.
What other advice do I have?
I have experience with these products from prior use. I work with security vendors and some of my customers use Trend Micro and CrowdStrike as well. My experience has been positive and I have been satisfied. The pricing might be a little expensive, but I find it cost-effective. I do not find CrowdStrike Falcon to be the most expensive when comparing pricing with competitors. I would rate this solution an 8 out of 10.
Efficient threat detection and seamless deployment improve overall security
What is our primary use case?
We are using CrowdStrike Falcon because it has very low surface impact and minimal consumption of our resources, and we mainly use it for our endpoint protection.
CrowdStrike Falcon helps with endpoint protection by having very low memory utilization and processor usage, so it doesn't impact the computer system performance, and the computer system works very fast compared to all other endpoint protection solutions.
We find it very unique that CrowdStrike Falcon, which we deployed in many countries wherever our offices are, can be installed very quickly, maintained on a single console, single panel of console, and it's really easy to use and deploy. We primarily use it for endpoint protection.
What is most valuable?
The single panel console of CrowdStrike Falcon is very user-friendly, which is what we are looking for. Having multiple administrators between various offices with this single console gives us the ability to see all offices, branch offices, and partners, making it very useful to detect machines, identify machines, and check security risks. Everything in the single console is very useful.
CrowdStrike Falcon has positively impacted our organization in terms of efficiency because it's very lightweight, easy to deploy, easy to manage, and works very efficiently. It quickly detects issues and doesn't have a signature-based system, so it works fast and takes immediate action.
What needs improvement?
I don't think anything is missing in CrowdStrike Falcon, but if they can manage their SOC solution instead of users or the end users or customers doing that, it will be very useful, just as Sophos does.
For how long have I used the solution?
We have been using CrowdStrike Falcon for the past seven years.
What do I think about the stability of the solution?
CrowdStrike Falcon is stable; I have not had any issues with reliability or downtime.
What do I think about the scalability of the solution?
For scalability, CrowdStrike Falcon deserves a perfect score of ten out of ten.
How are customer service and support?
Regarding customer support, our experience has been really positive as they are very quick to assist us.
The customer support deserves a rating of ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We were previously using Symantec Endpoint because we were not getting proper quotations, pricing, or support, particularly in India, which is why we wanted to switch.
What was our ROI?
In terms of return on investment, we find that CrowdStrike Falcon has ROI covered because less manpower is required. It's very easy to deploy without many IT admins, saving time, and while I cannot specify the money saved, the time saved is money in terms of manpower. This makes it very useful, quick to run, quick to install, easy to manage, and easy to deploy.
What's my experience with pricing, setup cost, and licensing?
We do not find any price challenges or setup costs with CrowdStrike Falcon; everything is smooth.
Which other solutions did I evaluate?
We evaluated three products, which were Sophos, CrowdStrike Falcon, and Trend Micro, before choosing CrowdStrike Falcon.
What other advice do I have?
In some cases, we have Excel files with VBA code inside, and CrowdStrike Falcon detects that it's a bit risky for us. When people download EXE files that are threats to our organization, it detects them very quickly. It also detects threats under ZIP files and can show us the path from where it came and where it goes, allowing us to easily see where the infection is and where it has spread.
My advice for others looking into using CrowdStrike Falcon is that as an endpoint protection solution, Falcon is always reliable, and I can recommend that this is the product you can deploy and forget all the worries.
We are an end user customer of CrowdStrike Falcon; we are not a partner or reseller, and we are not receiving any gift card or incentive for this review. We are just sharing our experience as an end user and as an IT Manager.
I rate CrowdStrike Falcon 9 out of 10.
Provides comprehensive threat protection and seamless integration with third-party tools
What is our primary use case?
I am a customer of CrowdStrike Falcon through a consultant, and our company is headquartered in India, while our consultant is a sister company also located in India.
We use CrowdStrike Falcon internally in our company.
I am using CrowdStrike Falcon for its purpose, which is to save the company from any attacks, viruses, or whatever threats are available.
What is most valuable?
The most useful feature of CrowdStrike Falcon is protection, though it cannot be described in one word.
Protection is the main purpose of CrowdStrike Falcon.
CrowdStrike Falcon has positively impacted my organization by providing good protection, logs, and reports, which I find very good.
What needs improvement?
One area for improvement in CrowdStrike Falcon could be the user interface and reports; it requires some improvements to be easily handled.
For the reporting in CrowdStrike Falcon, I need specific data because in most reports, some of the data is not with that importance for the collector, so the reports need to be more specific for each purpose.
For how long have I used the solution?
I have been working with CrowdStrike Falcon for around three years.
What do I think about the stability of the solution?
Regarding stability and reliability, I find CrowdStrike Falcon to be stable; nothing has happened since we installed it, and there are no bugs or issues from the software.
What do I think about the scalability of the solution?
I can say that CrowdStrike Falcon is sufficient in terms of scalability from my point of view; it is capable of working with our current infrastructure or setup, and I believe it's sufficient.
How are customer service and support?
My interaction with technical support for CrowdStrike Falcon was fine; they supported me and provided a solution for my issue.
Based on my experience, I would rate the technical support for CrowdStrike Falcon an eight.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Before CrowdStrike Falcon, I used an application called Kaspersky, but not for the same purposes.
Which other solutions did I evaluate?
I did not evaluate other options before choosing CrowdStrike Falcon because it was a forced decision from our headquarters, from the mother company.
What other advice do I have?
Currently, I do not remember exactly what version of CrowdStrike Falcon we are using because I'm managing the team, but I can check the right version later.
We are using the latest version of CrowdStrike Falcon.
CrowdStrike Falcon has not helped me predict and prevent potential breaches by itself, but with support from other applications such as Splunk and Windows Defender, it has contributed.
I integrate CrowdStrike Falcon with third-party tools.
I have to integrate CrowdStrike Falcon with other applications to get the most protection, and the integration is smooth and everything works well.
I am using the lightweight agent.
For the system performance, the lightweight agent is fine; it has not affected performance too much, and generally it's acceptable.
I rate CrowdStrike Falcon eight out of ten.
Single-agent architecture enhances security while minimizing complexity and costs
What is our primary use case?
The main use cases for CrowdStrike Falcon from my customers are the lightweight agent, which is very easy to use, and it will protect the complete environment in a single dashboard.
A specific use case from my customers for CrowdStrike Falcon is that the SaaS-based single agent can protect all the platforms.
What is most valuable?
The best features of CrowdStrike Falcon are the single agent and the fact that there is no daily signature update.
There is no daily signature update because it operates as a signatureless solution.
Regarding the lightweight agent, all other solutions have multiple agents, which degrade system performance; however, this single agent has multiple features that increase system performance.
The elimination of on-prem infrastructure through CrowdStrike Falcon's cloud-native architecture has impacted my customers by reducing both cost and complexity, as they are now using the cloud-native solution.
What needs improvement?
For how long have I used the solution?
How are customer service and support?
For technical support, I would rate it as a nine out of ten.
There are no complaints about the support.
How would you rate customer service and support?
Positive
How was the initial setup?
What was our ROI?
My customers have seen a return on investment with CrowdStrike Falcon.
While I do not have specific details currently available, those who purchased are very happy with the solution.
What's my experience with pricing, setup cost, and licensing?
The price is reasonable when comparing it to other tools.
The license cost is typically per device.
Based on the modules customers purchase, the cost will increase, as they have more than 28 to 32 modules.
What other advice do I have?
The feature called Threat Graph for threat hunting helps in terms of security to predict and prevent breaches by showing how threats are evolving and how we can protect the customer environment, which helps us build better security.
I have integrated CrowdStrike Falcon with existing SIEM solutions and security frameworks.
It helps to streamline incident response processes because it is very easy to integrate with SIEM solutions like IBM QRadar and HPE ArcSight ; for the incident response, it helps us correlate with other solutions.
My customers using CrowdStrike Falcon are mainly from all industries, including ITES, finance, marketing, manufacturing, and health.
I recommend that those planning to use CrowdStrike Falcon should migrate from their old traditional antivirus to next-gen antivirus, which will help them protect their environment.
The biggest advantage of this solution for my customers is that it is a single solution that fulfills most of their security concerns while being easy to manage.
I rate CrowdStrike Falcon ten out of ten.