Sold by: CrowdStrike
Deployed on AWS
The industry's most complete cloud-native application protection platform (CNAPP) with unified visibility across your apps, clusters, and clouds.
4.5
Overview
CrowdStrike Falcon Cloud Security provides threat detection and response, container vulnerability management, and pre-deployment checks for Red Hat OpenShift Service on AWS (ROSA). Powered by CrowdStrike's leading threat intelligence and AI-native platform, the Falcon sensor stops known, zero-day, and malware-free attacks on OpenShift workloads and the CoreOS operating system.
Deployed as a Red Hat certified OpenShift operator, the Falcon sensor immediately protects workloads deployed on ROSA from the most advanced adversaries. In addition, application security posture management maps microservice-level security risks; pre-runtime scanning of container images and infrastructure-as-code identifies misconfigurations early; and agentless posture management monitors AWS account usage for indicators of cloud-conscious threat actors.
Highlights
- Detect and prevent breaches in applications deployed to ROSA whether they are commercial-off-the-shelf or home-grown by your developers--using over a decade of adversary research and machine learning expertise.
- Stop misconfigurations from ever being deployed with container image scanning, infrastructure-as-code scanning, and a Kubernetes admission controller.
- Gain visibility and insights at the microservice-level so developers can minimize risk, and extend protection to the entire AWS estate by monitoring for cloud-conscious adversary activity.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. Request a private offer to receive a custom quote. Sign in to view any offers that have been extended to you.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
You can log a support ticket for any issues directly from the Falcon Portal or by emailing the support team at cloudmarketplaceoffers@crowdstrike.com Basic support services such as email communications to the CrowdStrike Support team, access to the support portal and basic troubleshooting and technical assistance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
CrowdStrike Services helps organizations train for, react to and remediate a breach quickly and effectively — getting you back to business faster.
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
Automate CrowdStrike Falcon sensor installation and configuration in your EC2 Image Builder AMI creation pipeline.
falcon-mcp enables seamless communication between AI agents and the CrowdStrike Falcon platform. Deployable directly onto Amazon Bedrock AgentCore, it provides programmatic access to Falcon data for agentic workflows and accelerating AI-native security automation.
CrowdStrike AI Red Team Services emulate adversarial attacks and perform deep security assessments across generative AI systems and their integrations. Designed to uncover AI vulnerabilities that risk unauthorized access and breaches, these services strengthen your AI security posture, expose vulnerabilities that could be exploited, and reduce risk across cloud environments.
Customer reviews
Akansha C.
Unified Detections Dashboard and CrowdScore Make Prioritization Effortless
Reviewed on Jul 19, 2026
Review provided by G2
What do you like best about the product?
What I appreciate most is the unified Detections Dashboard, which centralizes security telemetry across our entire multi-cloud estate. The proprietary CrowdScore metric has been extremely reliable for us; it contextualizes and aggregates huge volumes of raw detection data into a single, actionable priority level, so my team can quickly see what needs immediate mitigation instead of constantly battling alert fatigue. On top of that, the platform delivers seamless runtime protection and deep visibility into complex host events—whether it’s catching malicious credential access or spotting unauthorized execution via PowerShell—without adding any noticeable resource overhead to our active cloud infrastructure.
What do you dislike about the product?
The main challenge I’ve had with Falcon Cloud Security is the steep learning curve involved in fully mastering its advanced search features and deeper tactical modules. The highly granular interface can feel overwhelming at first, especially during initial setup and when onboarding junior analysts. In addition, the pricing and licensing structure can be fairly restrictive when you need to scale host coverage up or down across fluctuating staging environments, which makes budget forecasting more difficult for rapidly evolving infrastructure setups.
What problems is the product solving and how is that benefiting you?
Before adopting CrowdStrike, our team was constantly overwhelmed by scattered log files and slow visibility into indicators across our workloads. As a result, we often didn’t spot vital indicators of compromise until after the fact.
Falcon Cloud Security removed this operational bottleneck by providing immediate threat-hunting intelligence and fully automated detection tracking. For me, the biggest impact has been clear, end-to-end visibility and faster response: runtime detections are instantly correlated to specific attack tactics across our hosts, which gives me real peace of mind. We can now shut down potential lateral movement or defense-evasion attempts in real time, and we’ve shifted our focus away from tedious security log aggregation toward quick, strategic system remediation.
Falcon Cloud Security removed this operational bottleneck by providing immediate threat-hunting intelligence and fully automated detection tracking. For me, the biggest impact has been clear, end-to-end visibility and faster response: runtime detections are instantly correlated to specific attack tactics across our hosts, which gives me real peace of mind. We can now shut down potential lateral movement or defense-evasion attempts in real time, and we’ve shifted our focus away from tedious security log aggregation toward quick, strategic system remediation.
GURJAP K.
Real-Time IOA Tracking
Reviewed on Jul 19, 2026
Review provided by G2
What do you like best about the product?
Tracks Indicators of Attack (IOAs) in real time to stop unauthorized activity as it unfolds.
What do you dislike about the product?
It has a steep learning curve, and the potential for severe system disruptions is a major drawback.
What problems is the product solving and how is that benefiting you?
solves the critical challenges of multi-cloud complexity, fragmented tools, and overwhelming alert noise by consolidating protection into a single, AI-native Cloud-Native Application Protection Platform (CNAPP).
Ram Shankar S.
Strong MDR Foundation, but Heavy Dependence—and a Costly Update Outage
Reviewed on Jul 18, 2026
Review provided by G2
What do you like best about the product?
Falcon Complete is the service-provider offering we use, and our partner program is built on top of it. As described in the CrowdStrike service provider data sheet, it gives us a way to deliver CrowdStrike to clients as 24/7 managed detection and response while still keeping the customer relationship in our hands.
That said, it also creates a meaningful dependency. Because our MDR offering runs on Falcon Complete, CrowdStrike’s analysts are the ones doing the hunting. As a result, CrowdStrike’s pricing effectively sets our floor, and their roadmap ends up guiding how our service evolves over time.
That said, it also creates a meaningful dependency. Because our MDR offering runs on Falcon Complete, CrowdStrike’s analysts are the ones doing the hunting. As a result, CrowdStrike’s pricing effectively sets our floor, and their roadmap ends up guiding how our service evolves over time.
What do you dislike about the product?
Where it gets hard: the pre-endpoint modular pricing can run expensive and feels skewed toward enterprise volume commitments. On top of that, the quoting and packaging complexity makes every client proposal more work than it would be with a simple flat, per-seat tool. There are also vendor dependencies on CrowdStrike’s pricing, roadmap, and SOC when you build your MDR service on Falcon Complete.
What problems is the product solving and how is that benefiting you?
Detection and threat hunting consistently rank at the top, and they’re strongly supported by the Overwatch human team. That’s the single biggest standout for me. Another major plus is the lightweight, single cloud agent: it keeps endpoint overhead low, makes onboarding quick, and overall contributes to stronger security. Third, there’s true multi-tenant management through Flight Control, along with a real service provider program for reselling MDR. For our business, I believe Falcon Go is the best choice because it fits small businesses well and provides the basic NGA we need, at the best price: $60 per device per year.
Aditi N.
Clear Cloud Visibility and Actionable Security Alerts
Reviewed on Jul 18, 2026
Review provided by G2
What do you like best about the product?
What I like most is that it gives a clear view of whats happening across our cloud environment without needing to jump between different tools. It catches security issues and sends usefull alerts that are easy to understand. This has helped me spend less time checking things manually and more time fixing real problem, it also works well with other security tools we already use.
What do you dislike about the product?
One thing I found challenging was the learing curve. Since the platform offers many security features, it can take time to understand everything. The interface could be simpler, espically for new users.
What problems is the product solving and how is that benefiting you?
Before using this, keeping track of cloud security meant checking different tools and spending a lot of time looking for issues. Now everything is in one place, making it much easier to spot risks and respond faster. It has reduces manual work, save several hours each week and gives us better confidence that our cloud environment is secure.
Ankith T.
Real-Time Cloud Visibility with AI-Powered Threat Detection
Reviewed on Jul 18, 2026
Review provided by G2
What do you like best about the product?
What I like the best is the real time visibility it provides across cloud environments. It quickly identifies security risks and misconfigurations, helping us respond before they become serious issues. The dashboard is easy to navigate, alerts are clear and actionable, and the integration with other security tools simplifies investigations. The AI powered threat detection reduces manual monitoring, improves response times and gives the team greater confidence in protecting cloud work loads. Overall it delivers strong performance and good value by saving time and strengthening the security posture.
What do you dislike about the product?
What i dont like is that some advanced features take time to learn, especially for new users. The interface is bit overwhelming at first, and customizing reports is not always straightforward.
What problems is the product solving and how is that benefiting you?
Before using this, monitoring cloud resources and identifying security risks required multiple tools and manual reviews. Now the platform provides centralized visibility, detects threat in real time, and alerts us to misconfigurations before they becomemajor issues. This has reduced investigation time, improved incident response, strengthened compliance, and allowed the team to focus on higher priority security tasks instead of routine monitoring.