Seamless cloud asset monitoring and improved threat detection have strengthened client security posture
What is our primary use case?
I usually work with CrowdStrike Falcon Cloud Security. I work with all the modules, IDP, and the Falcon EDR. My experience with them has been great. I requested information because a customer was about to switch from CrowdStrike IDP to Microsoft ITDR, so I needed to understand the differences and what makes ITDR special. I work as customer support for the majority of banks in Nigeria, supporting their CrowdStrike Falcon Cloud Security implementation. I needed to understand what was making some of them switch from CrowdStrike to ITDR, and the basic reason was cost. In terms of technicality, CrowdStrike Falcon Cloud Security was obviously better, but it was a bit expensive for them.
The typical use case for cloud security varies. Sometimes, rather than using Rapid7 exposure management, some customers use CrowdStrike Falcon Cloud Security to monitor their assets on the cloud, providing insights into vulnerabilities on machines, exposed assets, and misconfigurations.
How has it helped my organization?
Compared to before, in respect to breaches and downtime, they have seen significant differences.
What is most valuable?
Customers love the UI of CrowdStrike Falcon Cloud Security. They appreciate everything about the dashboard and dashlet. The majority of customers particularly love how seamless the integration is - just copy and paste in your AWS terminal and you're good to go.
The threat detection capability of CrowdStrike Falcon Cloud Security has always been the major seller, and it works effectively. Looking at the detection index for the last two years, CrowdStrike Falcon Cloud Security is consistently ranked number one. Then you have MD and Sentinel alternating positions. In terms of threat detection, CrowdStrike Falcon Cloud Security has always been top-notch in how they explain the workflows.
What needs improvement?
In terms of improvement, CrowdStrike Falcon Cloud Security could expand into the remediation path. While there is the IT security module, looking at competitors such as Vicarious and SCCM, there is room for advanced capabilities. If CrowdStrike Falcon Cloud Security could implement pushing out remediation from the sensor installed on machines, that would be beneficial. This feature is likely in their pipeline, but implementing it faster would help them maintain their competitive edge.
For how long have I used the solution?
I am a partner with CrowdStrike Falcon Cloud Security.
How was the initial setup?
The initial setup and deployment of the solution is straightforward.
What was our ROI?
I have seen a return on investment with CrowdStrike Falcon Cloud Security.
What other advice do I have?
CrowdStrike Falcon Cloud Security is relatively new, approximately a year or two old. I have experience working with both CrowdStrike Falcon Cloud Security and Microsoft Defender for Identity.
I work with CrowdStrike Falcon Cloud Security, Falcon LogScale, Observability, and Sandbox. Different teams manage different parts of CrowdStrike's workload protection features.
I rate CrowdStrike Falcon Cloud Security 9 out of 10 overall.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Has improved threat detection accuracy and helped monitor endpoints across hybrid environments
What is our primary use case?
We mostly use CrowdStrike Falcon Cloud Security for different clients across the globe, and we have installed all the agents on most machines to monitor each and every employee, along with laptops and servers in AWS. We are the core monitoring staff with a SOC where we monitor for viruses, malware, and to remove harmful files. Our primary use cases involve monitoring miscellaneous activities.
I have been using CrowdStrike Falcon Cloud Security's workload protection features because it's a very lightweight agent. Its detection speed is remarkable compared to other tools on the market, including Trend Micro. CrowdStrike Falcon Cloud Security is user-friendly and provides detection transparency, allowing us to present real-time documentation to our executives clearly explaining any detected issues.
Workload protection features influence our security strategy significantly, particularly by blocking any suspicious activities on public-facing servers and generating immediate notifications for us to act upon. It helps in quickly identifying whether potential issues need to be whitelisted or blocked, and assists in troubleshooting when applications trigger false alerts due to bugs.
What is most valuable?
The most valuable capabilities of CrowdStrike Falcon Cloud Security relate to preventing attacks caused by human error, such as when someone plugs in a USB device or downloads something without caution. It automatically blocks duplication and activities that could result in data loss, effectively preventing unintended copying of data to personal devices.
Deduplication prevention is definitely the most valuable feature.
CrowdStrike Falcon Cloud Security excels in threat detection with a vast investigation structure, allowing us to verify suspicious activities to identify root causes. It helps us trace back to the origin and fix issues, making it a user-friendly tool for this kind of detection.
CrowdStrike Falcon Cloud Security is built on AI and ML technology, enabling it to detect various threats and block suspicious activities immediately, which is particularly effective compared to traditional AVs and EDRs.
The analytics provided by CrowdStrike Falcon Cloud Security is key for maintaining a proactive security posture. Its AI and ML foundations offer extensive information on threats and suspicious activities, making it renowned for analysis in the industry.
What needs improvement?
The improvements needed for CrowdStrike Falcon Cloud Security include reducing its high cost, which is currently quite expensive, and enhancing the executive reports that are user-friendly for technical engineers but require improvement for higher management.
More detailed and granular reports would be beneficial for better executive comprehension.
For how long have I used the solution?
I have been using CrowdStrike Falcon Cloud Security for more than eight to nine years, but for the past two years, I have not been using it much because I moved into a different domain.
What do I think about the stability of the solution?
When evaluating the stability of CrowdStrike Falcon Cloud Security, their partnerships with all major cloud service providers ensure their servers are optimally positioned, leading to no latency or stability issues that I have observed.
What do I think about the scalability of the solution?
CrowdStrike Falcon Cloud Security is indeed highly scalable, ideally for enterprises with a minimum of 2,000 servers to ensure cost efficiency and easier setup.
CrowdStrike Falcon Cloud Security is primarily suited for larger enterprises and not for small or medium companies.
How are customer service and support?
I have a very good in-house team of about 20 to 30 people working with CrowdStrike Falcon Cloud Security, and we maintain excellent communication with their technical support, resolving any issues immediately without complaints on technical aspects or delays.
Based on my experience with CrowdStrike Falcon Cloud Security's technical support, I would rate them a solid 10 out of 10.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
With 19 years of experience in the industrial field, I have also used technologies such as BigFix, Ivanti, Qualys, and I am considering reviewing Tenable, Ivanti Endpoint Manager, Ivanti Security Control, Tanium, and others, including HCL BigFix and Qualys Patch Management.
How was the initial setup?
I participated in the initial setup and deployment of CrowdStrike Falcon Cloud Security.
The implementation plan I typically follow involves multiple installation methods, one being agentless via AD to push agents, and the other using patching tools such as Ivanti and BigFix. This process can take around 15 to 20 days for 2,000 to 3,000 servers or endpoints due to its user-friendly cloud-based configuration.
During the initial setup, I faced some false alerts due to older versions of some applications we used, which may exhibit atypical behavior. Normalizing these false alerts generally takes around one to two weeks after the initial installation to resolve and ensure smooth operation.
What about the implementation team?
Our company has a partnership with CrowdStrike, so we are one of their partners, and that is how we acquired CrowdStrike Falcon Cloud Security. I bought it directly from CrowdStrike.
Some of our customers purchase CrowdStrike Falcon Cloud Security directly from CrowdStrike while others purchase it via AWS Marketplace or other marketplaces.
What was our ROI?
More than 12 million vulnerabilities have been identified and resolved while working with CrowdStrike Falcon Cloud Security over the past 10 years, which I have been monitoring diligently. This figure reflects the work done not only by me but also collectively with about four customers in one single console, giving a complete picture of our efforts.
What's my experience with pricing, setup cost, and licensing?
The cost of CrowdStrike Falcon Cloud Security is currently quite high, which is an area that needs improvement, particularly for the executive reports that are user-friendly for technical engineers but require enhancement for higher management.
Which other solutions did I evaluate?
With 19 years of experience in the industrial field, I have used technologies such as BigFix, Ivanti, Qualys, and I am considering reviewing Tenable, Ivanti Endpoint Manager, Ivanti Security Control, Tanium, and others, including HCL BigFix and Qualys Patch Management.
What other advice do I have?
I use CrowdStrike Falcon Cloud Security internally in my company. CrowdStrike Falcon Cloud Security is recognized for its reliability, and I can guarantee they are very reliable. My overall rating for CrowdStrike Falcon Cloud Security is 8 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Machine learning enhances security and detects unauthorized scripts and potential data exfiltration
What is our primary use case?
We are a small company using CrowdStrike Falcon Cloud Security for next-generation endpoint security and antivirus protection. We do not have dedicated threat hunters on the platform and primarily use it for endpoint protection.
How has it helped my organization?
CrowdStrike Falcon Cloud Security helps us ensure that our endpoints are protected, which was essential for achieving the Cyber Essentials Plus certification. It also allows us to demonstrate to partners that we are diligent about protecting both our data and theirs.
What is most valuable?
The most effective feature is the machine learning aspect, which detects unauthorized scripts and potential data exfiltration. It provides alerts on suspicious command executions, helping us safeguard our systems.
What needs improvement?
The user interface needs improvement as it's sometimes difficult to locate specific dashboards or reports. Simplifying the naming of elements in the UI could make it easier and more intuitive for users.
For how long have I used the solution?
We have been using the solution for about six months.
What do I think about the scalability of the solution?
I recommend CrowdStrike Falcon for companies of all sizes, from small businesses like ours to some of the largest companies in the world.
What was our ROI?
We do not expect to get a direct ROI. It is an expense we are willing to pay to conform to Cyber Essentials Plus and demonstrate responsibility in protecting our data and that of our partners. It also helps in mitigating third-party risks.
What's my experience with pricing, setup cost, and licensing?
The pricing for CrowdStrike Falcon Cloud Security is reasonable, especially for small companies with limited budgets. It is essential for achieving Cyber Essentials Plus and is cheaper than solutions like Splunk for Next Gen SEAM.
What other advice do I have?
CrowdStrike Falcon Cloud Security is not recommended for highly sensitive data environments, such as government intelligence services, where cloud products might not be suitable.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Accelerated incident response with real-time threat management
What is our primary use case?
I have been using CrowdStrike Falcon Cloud Security extensively for maintaining endpoint security. It is mainly used to protect systems against malicious binaries. In our cloud environment, we use it by deploying agents on our cloud instances operating in AWS and GCP to protect these instances from malicious binaries.
How has it helped my organization?
The solution has significantly enhanced our incident response times when dealing with malware or possible malicious file activities. It allows me to log into machines and pull copies of suspected files, eliminating the need to physically obtain the machines for analysis.
What is most valuable?
The most valuable features are the real-time response, which allows me to log into a machine to pull files and check signatures for malicious activities, and the ability to restrict USB block storage usage on endpoints by policy.
What needs improvement?
There is room for improvement in the solution's ability to handle Linux systems. It does well for Windows, but it relies on binary scanning for Linux and lacks comprehensive rules for detecting suspicious behavior. I have had to develop my own custom rules in CrowdStrike for Linux.
For how long have I used the solution?
I have been using this product extensively for about the past four years.
What do I think about the stability of the solution?
Apart from the recent media attention for causing some instability worldwide, the solution is quite stable and I haven't had any major concerns.
What do I think about the scalability of the solution?
The solution scales very well, with the only limitation being the licensing purchased.
Which solution did I use previously and why did I switch?
I have used Carbon Black extensively in the past.
How was the initial setup?
The initial setup is mostly straightforward. They provide a simple way to deploy the endpoint, simplifying the installation process for users.
What's my experience with pricing, setup cost, and licensing?
The solution is quite expensive. The pricing fluctuates based on various factors such as company size, and there is room for negotiation, but it is generally expensive enough that most midsize companies find it difficult to afford.
What other advice do I have?
I would advise first-time users to monitor the number of endpoints regularly to ensure they are checking in. Additionally, they should add custom detections for Linux to identify unexpected behaviors, as the default detection for Linux is not very comprehensive.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Streamlined malware detection with hassle-free cloud integration and responsive support
What is our primary use case?
I sell and resell CrowdStrike Falcon Cloud Security as part of my company's cybersecurity portfolio for endpoint detection platforms.
How has it helped my organization?
CrowdStrike Falcon Cloud Security assists in detecting malware and provides effective security solutions without the need for hardware servers, saving resources on infrastructure.
What is most valuable?
I find the easy installation process, quick detection capabilities, and the cloud-based console very useful for this solution.
What needs improvement?
CrowdStrike had a significant issue with Windows integration two months back. The pricing is very high and should be improved.
For how long have I used the solution?
I have been working with and reselling CrowdStrike Falcon Cloud Security for five years.
What do I think about the stability of the solution?
CrowdStrike Falcon Cloud Security is very stable, and I would rate it at ten out of ten for stability.
What do I think about the scalability of the solution?
CrowdStrike Falcon Cloud Security is scalable. I would rate its scalability as seven out of ten.
How are customer service and support?
The technical support is very easy to reach and helpful; I would rate it as ten out of ten.
How would you rate customer service and support?
What about the implementation team?
My company is an integrator, and I handle the deployment and implementation process personally.
What's my experience with pricing, setup cost, and licensing?
The pricing of CrowdStrike Falcon Cloud Security is very high, and I would rate the current pricing as four out of ten.
Which other solutions did I evaluate?
I also work with Microsoft and ESET as part of my company's cybersecurity portfolio for endpoint detection platforms.
What other advice do I have?
I recommend CrowdStrike Falcon Cloud Security because it provides excellent services for endpoint security and is very effective as a security solution.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Reliable threat hunting with advanced auto-detection and advisory capabilities
What is our primary use case?
We primarily use CrowdStrike Falcon Cloud Security as an XDR (Extended Detection and Response) solution, focusing on antivirus and malware protection.
How has it helped my organization?
It has been effective in protecting against common virus alerts, operating as a reliable security measure.
What is most valuable?
The most valuable feature is the auto-detection capability for threat hunting and issuing advisories on remedies.
What needs improvement?
The main area for improvement is pricing, as it is quite expensive. We are also curious about how it will interact with other AI tools, however, we have not encountered any limitations.
For how long have I used the solution?
I use the solution lightly, not extensively.
What do I think about the stability of the solution?
It has been stable, with no observed glitches.
What do I think about the scalability of the solution?
The solution is scalable enough, as we are managing more than 4,000 endpoints.
How are customer service and support?
The customer support is very good, earning a rating of nine out of ten.
How would you rate customer service and support?
How was the initial setup?
The initial setup is straightforward as it is cloud-based and one person is sufficient for installation.
What was our ROI?
We are budget-conscious and look for cost-effective solutions that can do the job efficiently.
What's my experience with pricing, setup cost, and licensing?
Pricing is expensive. That said, if it does the job and is cost-effective, we go for it.
What other advice do I have?
I'd rate the solution eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Enhances cloud security with advanced automation and improved resource allocation
What is our primary use case?
CrowdStrike Falcon is used primarily to enhance cloud security through a lot of automation in the platform. It provides benefits like automation, efficacy, and lower risk, allowing security analysts to focus on high-value tasks.
How has it helped my organization?
By deploying CrowdStrike Falcon, the organization can repurpose security analysts to focus on more high-value tasks due to the automation. It also optimizes on licensing because CrowdStrike covers a significant number of capabilities, which allows for the replacement of several vendors, thus reducing licensing and labor costs.
What is most valuable?
The most valuable features of CrowdStrike Falcon include its automation capabilities, efficacy, and lower risk. It also helps optimize on licensing since it covers a wide range of capabilities.
What needs improvement?
The SIEM needs to be more developed. Additionally, AI features could be enhanced.
For how long have I used the solution?
I have been using the solution for only one year.
What do I think about the stability of the solution?
On a scale of one to ten, the stability of CrowdStrike Falcon Cloud Security is nine.
What do I think about the scalability of the solution?
CrowdStrike Falcon is very scalable. I would rate its scalability as nine out of ten.
How are customer service and support?
As far as I know, the technical support for CrowdStrike is rated as another nine out of ten.
How would you rate customer service and support?
How was the initial setup?
One person from the partner side and two people from the customer side are usually involved in the installation process.
What about the implementation team?
One person from our side and about one or two people from the customer's side are generally involved.
What's my experience with pricing, setup cost, and licensing?
CrowdStrike Falcon is definitely affordable compared to competitors in the market. On a scale of one to ten, I would rate the pricing as eight out of ten, indicating some room for improvement.
What other advice do I have?
I'd rate the solution nine out of ten.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Offers threat detection capabilities to users
What is our primary use case?
I use the solution in my company to collect information about protecting the endpoint, configuration assessment, and vulnerability assessment.
What is most valuable?
The solution's most valuable feature is its threat emulation part, but there are many other important features for cybersecurity security, including endpoint protection. However, vulnerability management is for prevention, and so on.
What needs improvement?
In terms of the improvements, a detailed profile for the users for the administration of the assets will be provided so they can see the events directly on the platform if needed. In order to see events, with our policies, it should be possible from the specific assets; a user should be able to see the events related to the datasets. One of the main concerns about the tool is that the solution provides features without detailed profiles for those who should see what type of information.
The tool should do some more tests before going for updates automatically.
For how long have I used the solution?
I have been using CrowdStrike Falcon Cloud Security for around a year. I am a user of the tool.
What do I think about the stability of the solution?
In terms of stability, a few days ago, there was a huge issue with CrowdStrike Falcon Cloud Security. There are some issues with the tool's stability. Many airports faced issues as airplanes were delayed in July 2024. It was a large event that left a bad impact worldwide.
I rate the tool's stability as a six out of ten.
What do I think about the scalability of the solution?
It is a scalable solution. Scalability-wise, I rate the solution an eight out of ten.
The tool is used in telecommunications.
Around 20 people use the tool with the administration team.
I think there is a plan to increase the number of users, and it is necessary to provide this information for the different operational areas where there are a lot of people.
How are customer service and support?
The support team is not able to resolve our issues in a timely manner. I rate the technical support a seven out of ten.
How would you rate customer service and support?
How was the initial setup?
The product's initial setup phase is easy. If ten is easy, I rate the product's initial setup phase an eight out of ten.
It takes a long time to deploy the product since we have a large pack of devices here. We have a lot of different types of devices, so we need to be careful when implementing the functionalities and the agents.
The solution is deployed on an on-premises model, but we are planning to go to the cloud.
The solution can be deployed in around six months.
Which other solutions did I evaluate?
My company has evaluated tools for vulnerability management.
What other advice do I have?
In terms of the threat detection capabilities, it is a good product. It is a good tool, considering all the information it provides and the automation it delivers.
In terms of the automation part, the tool has some rules that can be applied automatically. I can identify or be aware about a specific event with the help of the tool.
In terms of the improvements I have seen in my company using the tool, I would say that it offers a clear visualization of all the threats that could be on our network. I can see all types of vulnerabilities that could be dangerous or critical for us.
For now, it seems the tool is a good solution for protecting endpoints and mainly for the areas that are using Windows-operated systems.
I recommend the tool to others. It seems that when we installed the agent, it became a solution that could provide a lot of information in a centralized way.
I rate the tool an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Effective for detecting and mitigating threats and good automated response capabilities
What is our primary use case?
We give MDR services to many clients and extend the basic capabilities with these modules.
How has it helped my organization?
The automation capabilities that the tool has in order to automate responses and actions.
It's quite easy to use, as I understand the feedback from the team.
What is most valuable?
It is effective for detecting and mitigating threats.
We are automating a lot. So, it offers good automated response capabilities.
What needs improvement?
There are some issues with certain applications. We have been having some problems with Microsoft Teams and other applications.
So, there were some integration issues with this product.
The main concerns are occasional maintenance issues, less than perfect stability, and complexity compared to SentinelOne.
For how long have I used the solution?
We have been CrowdStrike partners for three years and have been using ASPM for one year.
What do I think about the stability of the solution?
The agent is usually stable, but there have been recent instances of high CPU usage. In general, it works fine.
Overall, I would rate the stability a nine out of ten, one being unstable and ten being very stable. So, there's always room for improvement.
What do I think about the scalability of the solution?
In our experience with clients no larger than 10,000 endpoints, it's scalable.
I am not sure about the large infrastructure for around 20,000 to 50,000 endpoints because it is complex for a large infrastructure.
How are customer service and support?
The customer service and support are satisfactory.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We are CrowdStrike partners and have a client that uses Kaspersky, but we are looking at what kind of analysis and comparisons are available in the market.
How was the initial setup?
It's easy. In general, all of the CrowdStrike modules and deployments are easy.
We provide support to the client, and the IT people install it. There are no problems because some clients have better tools to deploy, but there are many ways to do the deployment. It's easy, and we have a 24/7 support team. Deployment doesn't consume many hours.
It's easy to maintain, but sometimes there are issues with particular applications. Those have to be worked around, but in general, there are no other issues.
What about the implementation team?
One engineer is enough to deploy the solution.
What's my experience with pricing, setup cost, and licensing?
It's not the cheapest, but the price is fair. Some clients find it expensive, but it's scalable and has many modules.
So, the price is not too high, it is okay.
Which other solutions did I evaluate?
We have tried others but ultimately decided to provide MDR service only with CrowdStrike. We tested Microsoft and Palo Alto Cortex.
We do a lot of incident response, and we chose CrowdStrike for its superior features in that field. The alerts are clearer, and the capabilities are much better than the others.
But, it's a complex product. SentinelOne, for example, is much easier to use but lacks the same capabilities. For an EDR, it's better to have experts handling it and utilizing all the features CrowdStrike offers.
So, CrowdStrike is a bit complex compared to SentinelOne. It's more complex because it has more features and configuration options, but not inherently complex. The solution is complex because it's very good and has a lot of customization options.
What other advice do I have?
Overall, I would rate it a nine out of ten.
Helpful to detect anomalies in endpoints but needs to improve its integration capabilities
What is our primary use case?
I use the solution in my company primarily for endpoint detection and response. Our company has multiple endpoints at different levels, and this is basically to detect anomalies. At the back end, we have a Splunk Data Lake, where all the data goes. We use the same for alerting and monitoring purposes, on the basis of which we take action. The tool is basically used in combination with Splunk and other tools that we have in our company.
What needs improvement?
I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information related to the tool based on the feedback and on my experience deploying it four to five years ago.
I would not say the tool's integration capabilities were straightforward because the complexity depends on the volume of the data. I am talking about petabytes of data, so sometimes, the integration part is not so straightforward. I would say we have had our own share of issues. All in all, we were able to manage it in the long run. I tried to integrate the issue with Splunk Enterprise Security and Splunk Data Lake, too. I am not a user of Splunk, but I have just implemented it to support my customers, who are the primary users of the data.
For how long have I used the solution?
I have been using CrowdStrike Falcon Cloud Security for four to five years.
What do I think about the scalability of the solution?
The scalability of the product has been great. My company started off with 1,50,000 endpoints, and now we are at 2,00,000, and I believe that it speaks volumes for itself. The tool's team has been super supportive when it comes to providing support, helping us out with upgrades, and letting us know how things could work. I believe the experience with the tool has been good.
How are customer service and support?
Nothing is perfect in this world. There will always be positive and negative aspects associated with the product. I have heard more positive things about the product than negative statements. As an enterprise, when you are dealing with a vendor, there are chances where, you know, there will be few misses and lots of hits.
Which solution did I use previously and why did I switch?
I have experience with FireEye. In 2019, my company migrated from FireEye to CrowdStrike Falcon Cloud Security.
How was the initial setup?
The product's initial setup phase is not really difficult, especially if you have managed the setup phase before. In our company, we migrated from Mandiant to FireEye and from FireEye to CrowdStrike, so it has been a journey for us over the last ten years. You get to learn as you go and embark on a journey. We were able to deal with challenges in the area of deployment that we were trying to perform, and there were not many from the vendor side. Still, at the enterprise level, you have endpoints that are across different landscapes, like if you have a cloud platform or an on-prem model, and then you have things that the vendors manage. If you are trying to deploy things at different levels with different scales, you may face some challenges, but nothing in particular with the vendor, I would say.
What was our ROI?
I have experienced an ROI from the use of the product, and it is definitely one of the biggest takeaways or the reasons that my company migrated from FireEye to CrowdStrike. The features that CrowdStrike offered our company were far more in-depth than those of FireEye. I am not saying that FireEye does not offer great features, but with the kind of landscape that we operate on, we felt that we would be better off with CrowdStrike than with FireEye. We have FireEye, and we saw that there were certain shortcomings. Getting down to the specifics, I am not part of the monitoring team, so I will not be able to give you very crisp data about it.
What other advice do I have?
CrowdStrike Falcon Cloud Security's features have proven to be the most effective for detecting and responding to threats. While I was involved in the deployment, I was not involved in the product's day-to-day activity, as I was not a part of the monitoring team. I was basically on the deployment team. I do not use it on a day-to-day basis.
Speaking about the integration of CrowdStrike Falcon Cloud Security within our existing infrastructure and with third-party solutions, I feel that everything has been okay, and it is something that we need to figure out as an enterprise. When you are trying to do things at a very large scale, consisting of more than 1,50,000 endpoints, that is the scale within the enterprise that we were dealing with in the past, and it has crossed 2,00,000 right now. When trying to integrate it with other applications, the likes of Splunk or other data lakes, if I have to say, but categorically and specifically Splunk in the current case, you have to see how that is going to work and ensure whether everything will be seamless or not, and it may not be something that is possible at the first instance, but you need to try things and see what works and what does not. You also got to get the vendors along, and that is basically what my company did. In our case, we got people from CrowdStrike speaking to people from Splunk, after which whatever integration issues we had were resolved.
I recommend the product to others who plan to use it.
Everything depends upon your use cases since not one size fits all templates. The use cases vary from organization to organization. In our case, CrowdStrike Falcon Cloud Security suited us the best, which is why we went with it and moved away from FireEye, which may or may not be the case for others. I know organizations that continue to use FireEye, and they are pretty happy with it because it suits their requirements. It just fits all the use cases that they have listed out.
Whether the product needs to increase your marketing strategy or not is something that depends on what the solution wants to achieve. As far as I know, CrowdSrike has a sizable base in the market, but it completely depends on what they want to do. I don't think I am the right person to suggest or tell CrowdStrike what they need to do because the product is managed by a set of stable and sane minds who would decide how they want to strategize things when it comes to sales.
I rate the tool a seven to eight out of ten.
