Sold by: CrowdStrike
Deployed on AWS
The industry's most complete cloud-native application protection platform (CNAPP) with unified visibility across your apps, clusters, and clouds.
4.5
Overview
CrowdStrike Falcon Cloud Security provides threat detection and response, container vulnerability management, and pre-deployment checks for Red Hat OpenShift Service on AWS (ROSA). Powered by CrowdStrike's leading threat intelligence and AI-native platform, the Falcon sensor stops known, zero-day, and malware-free attacks on OpenShift workloads and the CoreOS operating system.
Deployed as a Red Hat certified OpenShift operator, the Falcon sensor immediately protects workloads deployed on ROSA from the most advanced adversaries. In addition, application security posture management maps microservice-level security risks; pre-runtime scanning of container images and infrastructure-as-code identifies misconfigurations early; and agentless posture management monitors AWS account usage for indicators of cloud-conscious threat actors.
Highlights
- Detect and prevent breaches in applications deployed to ROSA whether they are commercial-off-the-shelf or home-grown by your developers--using over a decade of adversary research and machine learning expertise.
- Stop misconfigurations from ever being deployed with container image scanning, infrastructure-as-code scanning, and a Kubernetes admission controller.
- Gain visibility and insights at the microservice-level so developers can minimize risk, and extend protection to the entire AWS estate by monitoring for cloud-conscious adversary activity.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. Request a private offer to receive a custom quote. Sign in to view any offers that have been extended to you.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
You can log a support ticket for any issues directly from the Falcon Portal or by emailing the support team at cloudmarketplaceoffers@crowdstrike.com Basic support services such as email communications to the CrowdStrike Support team, access to the support portal and basic troubleshooting and technical assistance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
CrowdStrike Services helps organizations train for, react to and remediate a breach quickly and effectively — getting you back to business faster.
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
Automate CrowdStrike Falcon sensor installation and configuration in your EC2 Image Builder AMI creation pipeline.
falcon-mcp enables seamless communication between AI agents and the CrowdStrike Falcon platform. Deployable directly onto Amazon Bedrock AgentCore, it provides programmatic access to Falcon data for agentic workflows and accelerating AI-native security automation.
CrowdStrike AI Red Team Services emulate adversarial attacks and perform deep security assessments across generative AI systems and their integrations. Designed to uncover AI vulnerabilities that risk unauthorized access and breaches, these services strengthen your AI security posture, expose vulnerabilities that could be exploited, and reduce risk across cloud environments.
Customer reviews
Viral S.
Streamlined Cloud Security with Robust Threat Management
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
I really like having runtime protection, container security, and cloud security posture management unified under a single console. It's a game changer for us. I appreciate how CrowdStrike Falcon Cloud Security gives us real-time visibility across our cloud assets without needing separate tools for containers and infrastructure. The unified Falcon agent and context-rich alerts make triage fast and efficient. Overall, it delivers strong visibility, reliable threat detection, and drastically simplified cloud security management, putting endpoints and cloud protection under one pane of glass. It gives me high confidence in securing our cloud-connected manufacturing and operations.
What do you dislike about the product?
It's all about the policy tuning which requires a dedicated effort initially. Since the platform offers granular controls, calibrating exclusion rules, and conducting cloud portion checks for specialized operational and factory-connected workloads takes time. Additionally, the advanced cloud modules can increase the total licensing cost, so it's important to scope your module needs carefully beforehand.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon Cloud Security solved our cloud misconfiguration and visibility challenges, safeguarding our critical IP and data pipelines. It reduces false positives, speeds up incident response, and provides real-time visibility across cloud assets with a unified console.
Shubham R.
Strong Security and User-Friendly Use Cases, Though Services Can Be Abrupt
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
Everything about Security and use cases and ways of user friendly
What do you dislike about the product?
Its create various service abrupt while overall its good
What problems is the product solving and how is that benefiting you?
Its monitoring service and network security which is way better then other security tool
Bibhuti Bhusan S.
Powerful risk prioritization and unified console, but a steep learning curve and cost
Reviewed on Jul 21, 2026
Review provided by G2
What do you like best about the product?
Honestly, what stands out most to me is the code-to-runtime visibility and the way it handles risk prioritization. Rather than dumping a massive, overwhelming list of random misconfigurations on you, it uses threat intelligence to highlight what’s actually exploitable right now. And if you’re already using the Falcon agent elsewhere, having everything in one unified console makes day-to-day work a lot easier for the team.
What do you dislike about the product?
To be honest, the biggest pain points usually come down to cost and learning curve. It’s definitely a premium enterprise tool, so the pricing can be pretty steep—especially if you're trying to scale it across a massive multi-cloud environment. Also, because it's so feature-rich, the initial setup and tuning can take some time, and it can throw a lot of noise your way until you get the policies dialed in just right for your specific workloads
What problems is the product solving and how is that benefiting you?
It mainly solves the massive headache of fragmented visibility and alert fatigue across multi-cloud environments. Rather than treating misconfigurations, identity flaws, and runtime threats as completely separate silos, it connects everything end to end, from code to cloud.
For us, the biggest benefit is that it cuts through the noise. By correlating raw alerts with real threat intelligence and attack paths, it makes clear what’s actually an exploitable risk right now. The result is less time spent chasing false positives, and a lot more confidence that the team is focusing on the vulnerabilities that truly matter.
For us, the biggest benefit is that it cuts through the noise. By correlating raw alerts with real threat intelligence and attack paths, it makes clear what’s actually an exploitable risk right now. The result is less time spent chasing false positives, and a lot more confidence that the team is focusing on the vulnerabilities that truly matter.
Sai G.
Cuts Through the Noise with Actionable, Context-Rich Findings
Reviewed on Jul 20, 2026
Review provided by G2
What do you like best about the product?
What I like most is that it cuts through the noise. Instead of a giant list of findings, I get things that are actually worth acting on, with enough context to know what to fix first. And since it's part of the Falcon platform, our cloud posture sits right next to everything else instead of being a separate tool I have to check.
What do you dislike about the product?
Not a huge complaint, but the UI can feel crowded when you're first getting into it. There's a lot of capability in there, which is good, but it means you're clicking around more than you'd like until you build your own muscle memory. Once you're used to it, it's fine — the first couple weeks were the rough part for me.
What problems is the product solving and how is that benefiting you?
It solves the problem of not really knowing where our cloud risk is. Instead of piecing things together manually, we get a clearer view of misconfigurations and workload issues in one place. For me, that means less time digging and more time fixing the stuff that actually matters.
Akansha C.
Unified Detections Dashboard and CrowdScore Make Prioritization Effortless
Reviewed on Jul 19, 2026
Review provided by G2
What do you like best about the product?
What I appreciate most is the unified Detections Dashboard, which centralizes security telemetry across our entire multi-cloud estate. The proprietary CrowdScore metric has been extremely reliable for us; it contextualizes and aggregates huge volumes of raw detection data into a single, actionable priority level, so my team can quickly see what needs immediate mitigation instead of constantly battling alert fatigue. On top of that, the platform delivers seamless runtime protection and deep visibility into complex host events—whether it’s catching malicious credential access or spotting unauthorized execution via PowerShell—without adding any noticeable resource overhead to our active cloud infrastructure.
What do you dislike about the product?
The main challenge I’ve had with Falcon Cloud Security is the steep learning curve involved in fully mastering its advanced search features and deeper tactical modules. The highly granular interface can feel overwhelming at first, especially during initial setup and when onboarding junior analysts. In addition, the pricing and licensing structure can be fairly restrictive when you need to scale host coverage up or down across fluctuating staging environments, which makes budget forecasting more difficult for rapidly evolving infrastructure setups.
What problems is the product solving and how is that benefiting you?
Before adopting CrowdStrike, our team was constantly overwhelmed by scattered log files and slow visibility into indicators across our workloads. As a result, we often didn’t spot vital indicators of compromise until after the fact.
Falcon Cloud Security removed this operational bottleneck by providing immediate threat-hunting intelligence and fully automated detection tracking. For me, the biggest impact has been clear, end-to-end visibility and faster response: runtime detections are instantly correlated to specific attack tactics across our hosts, which gives me real peace of mind. We can now shut down potential lateral movement or defense-evasion attempts in real time, and we’ve shifted our focus away from tedious security log aggregation toward quick, strategic system remediation.
Falcon Cloud Security removed this operational bottleneck by providing immediate threat-hunting intelligence and fully automated detection tracking. For me, the biggest impact has been clear, end-to-end visibility and faster response: runtime detections are instantly correlated to specific attack tactics across our hosts, which gives me real peace of mind. We can now shut down potential lateral movement or defense-evasion attempts in real time, and we’ve shifted our focus away from tedious security log aggregation toward quick, strategic system remediation.