I am working for an MSSP. We use CrowdStrike on a daily basis for different clients across the globe for security purposes and for monitoring and remediating threats.

We have installed agents on the machines of employees in different organizations. We monitor their activities and block several applications. For example, if an organization does not want its employees to use WhatsApp on company-provided laptops, we block such applications. We also monitor malicious activities. If an employee downloads a file from the internet that is not legitimate, such as a virus or malware, we connect to the machine, remove all the files, and run different scans to ensure nothing is harmed.

Additionally, we use it for inventory purposes. At the end of the year, for audit and compliance, I gather information about how many devices, servers, and workstations we have and what their types are.

It helps us by automatically blocking certain applications or activities. We can prevent employees from copying data or attaching any personal USB devices to company machines, thus avoiding malware transfer or data theft. We can block USBs and unwanted applications. It automatically blocks and remediates malicious activities, so we do not have to do regular checks.

For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower. There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results.

Another issue is the lack of proper documentation. During investigations, there is no proper documentation available. This is a problem because many people are saying there should be proper documentation explaining what CrowdStrike captures from the machine and the meaning of it.

I have been using it for more than three years.

It is stable, but sometimes it shows instability. Occasionally, when the workload increases, it slows down considerably and sometimes becomes unresponsive. I would rate it a seven out of ten for stability.

It is quite scalable. I would rate it an eight out of ten for scalability.

It is deployed across multiple departments and multiple locations. Some people are in one country, and some are in another country.

I have contacted customer service, and they are fast. I have had a good experience with them.

Positive

We have some clients not using CrowdStrike due to cost or other factors. In our opinion, CrowdStrike is the best solution, which is why we recommend it to our clients. Almost 90% of our clients who receive our services use CrowdStrike. Its users include various organizations such as banking, financial, and other organizations.

Over the past three years, more than ten clients have purchased it. Some are using all of its features, and some are using fewer features depending on the budgets and requirements.

It is straightforward, but sometimes, we have difficulties with installing the agents on some machines. It happens quickly, but sometimes it takes a few minutes. It depends on the infrastructure and the machine.

The deployment duration depends on the organization. If the organization is big, it takes a large amount of time. If it is a small one, it is real quick.

The implementation strategy is to use automated scripts that run on the cloud. This automatically reflects changes across thousands of machines.

It does not require any maintenance.

We implement it ourselves.

Compared to other EDRs, CrowdStrike is expensive. However, the main point is that even though it is expensive, it provides a huge capability to the organization. It is expensive, but it adds value.

I would recommend it because it is the best one I have ever used. It has greatly helped me improve my investigative skills in my job. I have gained a lot of skills by using this product. 

Overall, I would rate it a seven out of ten.

We use CrowdStrike Falcon Cloud Security to manage our clients' cloud environments. It provides us with a unified view of all their cloud configurations, across different cloud providers. This allows us to identify security weaknesses, improve their overall security posture, and ultimately limit potential attacks on their systems.

Our CrowdStrike Falcon Cloud Security deployments vary, with some clients utilizing hybrid models, but the majority leverage private clouds hosted on AWS and Azure.

The most valuable features of CrowdStrike Falcon Cloud Security are Cloud Security Posture Management and Cloud Workload Protection, offering more visibility and protection across our cloud environment.

CrowdStrike Falcon Cloud Security should function as a standalone solution, offering Cloud Security Posture Management, Cloud Infrastructure Entitlement Management, and Cloud Workload Protection capabilities without requiring integration with additional Assurance, Detection, and Response solutions. This would allow clients to implement Falcon Cloud Security independently within their systems, eliminating the need for integrations.

The CrowdStrike partner portal documentation could be improved to provide proper instructions for integrating their products. Currently, the documentation lacks step-by-step details, forcing users to seek assistance from OEM partners. Fortunately, the integration process itself is straightforward.

I have been using CrowdStrike Falcon Cloud Security for two months.

In the short time I have been using CrowdStrike Falcon Cloud Security it has been stable.

I would rate the scalability of CrowdStrike Falcon Cloud Security eight out of ten.

The technical support is good. We access through our OEM partner whenever support is required.

Positive

After finding that Palo Alto Prisma Cloud's market value seemed to be declining and customer interest in its features waned, we transitioned to CrowdStrike, because it holds a strong market presence in India.

As a CrowdStrike partner, we're currently conducting a review of the Falcon Cloud platform. Following this internal evaluation, we plan to deploy it for one of our largest clients in India, and we're actively preparing for a successful implementation.

The initial deployment is straightforward.

I would rate CrowdStrike Falcon Cloud Security seven out of ten.

CrowdStrike Falcon Cloud Security is deployed in multiple locations in multiple regions and offices in India. Each office has its own cloud systems that reside in its region.

I recommend CrowdStrike Falcon Cloud Security to others.

CrowdStrike Falcon Cloud Security offers a robust and secure solution, backed by a reliable support system to ensure your cloud environment is well-protected.

We took this solution just for security purposes. We do not want someone to attack us, get into our environment, and get sensitive customer data.

It is good for security. We have a Palo Alto firewall, and we implemented CrowdStrike as an add-on feature. 

Cloud security is one valuable feature. Spotlight is the other one. There is also vulnerability management and a couple of more features.

The console and the customer service are quite bad. We paid a big amount of dollars to them to implement it. We paid them for premium support. 

It gets the work done, but the main problem with the solution is that if you remediate anything, it takes 45 days for you to get any of the features displayed on the dashboard. This is the real weakness of CrowdStrike. Their customer support is also not ready to help with it. If you remediate any cloud vulnerability that they are giving you, such as removing a host from your organization, it takes around 45 days for them to remove it from their console.

It has been around a year since I onboarded it in my company and have been using it.

It is stable.

It is scalable, but it depends on the organization's structure and how vast the environment is. Our environment is not that big, so scalability is okay. It is just that you need to deploy the sensors on the hosts.

I would rate their support a five out of ten because they do not respond. We have taken premium support with them. If we raise a case with them, it takes around two to three days to get a call scheduled with them. Even the TAM that we have got from them cannot help. If you go for any service from Google, Microsoft, or Amazon AWS, their TAM is always ready to help you with your queries, but in the case of CrowdStrike, the TAM says that you need to raise a support case, and they will help you out.

Neutral

I was not there in the organization at the time, so I do not know about it.

I lead a team of 18 people. I get it deployed on all of the EC2 instances through them.

Its initial setup was straightforward. It is very easy to use. 

For the whole organization, it took two weeks because we needed the downtime as well to deploy it in the production environment. 

In terms of maintenance, it does not require any maintenance from our side. 

There was some consulting from the CrowdStrike team. They did help us to implement it.

Overall, five or six people were assigned to deploy the solution. They were infra-support engineers. It was deployed across multiple locations.

I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive.

We did our research and after that, we implemented CrowdStrike. Secureworks was there. There were some different players that gave us the quotation, but in terms of the features and the price, CrowdStrike was good. 

CrowdStrike offered us Spotlight, vulnerability management, and cloud solution management. There are different blades to it. We implemented it, and now it supports our environment. It is good.

To those evaluating this solution, I would say that it depends on their needs. If they need this product, they can go ahead and take it. It is straightforward, and it gets the job done.

I would rate it a seven out of ten.