Cloud Security

Email and Web Security

Endpoint Security

Identity and Access Management

IOT Security

IT and Security Operations

Network and Infrastructure Security

Security Analytics

Threat Intelligence

Zero Trust

custom_lists_editor-ProductSliderComponent:orderable:d568303a-fe68-4936-bc83-204bbc0fd7ac-productsList-home

For organizations struggling with the ineffectiveness and complexity of legacy antivirus solutions, CrowdStrike Falcon Prevent is here to help. As the most complete AV replacement solution in the industry, Falcon Prevent delivers superior protection with a single lightweight agent that operates without the need for constant signature updates, on-premises management infrastructure, or complex integrations. Even the largest organizations can be up and running with Falcon Prevent in minutes.

Falcon Prevent

Falcon CSPM streamlines cloud security posture management across the application development lifecycle for any cloud, enabling you to securely deploy applications in the cloud with greater speed and efficiency. The cloud-native solution provides visibility into your entire cloud infrastructure, continuous monitoring for misconfigurations, and proactive threat detection allowing DevSecOps teams to fix issues faster and be more productive.

Falcon Horizon: CSPM

Falcon Insight continuously monitors all endpoint activity and analyzes the data in real time to automatically identify threat activity, enabling it to detect advanced threats as they happen. Security teams can rapidly investigate incidents, respond to alerts and proactively hunt for new threats.

Falcon Insight

CrowdStrike Falcon Cloud Workload Protection provides comprehensive breach protection for workloads, and containers, enabling you to build, run, and secure applications with speed and confidence. CrowdStrike’s experience in operating one of the largest security clouds in the world provides unique insights into adversaries, enabling the delivery of purpose-built CrowdStrike solutions that create less work for DevSecOps teams, defend against data breaches and optimize cloud deployments.

Falcon Cloud Workload Protection

CrowdStrike Falcon Spotlight offers organizations continuous and real-time assessment of vulnerability exposure on their endpoints. Falcon Spotlight’s native integration into the Falcon platform enables customers to operationalize vulnerability assessment within a complete endpoint protection framework. Falcon Spotlight adds preparation and readiness to the unparalleled prevention, detection and response provided by the Falcon platform, resulting in a stronger security posture.

Falcon Spotlight

CrowdStrike Falcon X is an automated threat intelligence service built on the CrowdStrike Falcon Platform. It automates incident investigations and streamlines breach response so you can make faster, more confident cyber security decisions. Organizations, regardless of size or sophistication, learn from the attacks in their environment applying that knowledge to proactively prevent future attacks. Falcon X provides insight into global threats, tracked by CrowdStrike’s elite team of intelligence experts.

Falcon X

Falcon Identity Threat Detection (ITD) offers complete visibility for all credentials on premises or in the cloud and monitors authentication traffic in both directions to identify anomalies and attacks without additional agents on the endpoint or internal assets. See identity-based alerts with event notifications or risk score escalation to inform on domain control attacks or ATP proliferation and lateral movement. Detect forms of ransomware, RDP traffic to domain controllers, NTLM, LDAP, and Kerberos abuse, and other identity-centric malware and events, offering the Who of credential identification to improve incident response.

Falcon Identity Threat Detection

Customers can build automated workflows using Falcon Fusion to trigger incident ticket creation in ServiceNow ITSM. Security and DevSecOps teams can leverage detections and incidents from the CrowdStrike Falcon platform to help streamline incident management and accelerate response capabilities. You can also orchestrate remediation of vulnerabilities by creating ServiceNow tickets directly from Spotlight, and easily configure the workflow to attach auto-generated reports, enabling you to track the remediation progress of your security team to improve efficiency and monitoring. 
<ul>
</ul>
This ServiceNow IT Service Management (ITSM) plugin leverages Falcon Fusion, a CrowdStrike Offering Feature, to allow you to receive Falcon-generated alerts via ServiceNow ITSM.

Falcon Fusion for ServiceNow ITSM

Slack is the central hub of communication for many organizations. Slack facilitates cross-team collaboration and enables teams to connect their various tools to avoid context-switching and save time. The Slack integration allows security and DevSecOps teams to centralize alerts, build and deploy customized workflows for consistent notifications, faster response times, and reduced mean time to remediate threat detections. By automating workflows based on threat detections and incidents, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

CrowdStrike for Slack

Falcon FileVantage is CrowdStrike’s file integrity monitoring solution that streamlines your security operations. It simplifies your security stack, provides real-time insight for file, folder and registry changes, while offering valuable contextual data around detections. Your SecOps team can consolidate large solution stacks with one streamlined product - offering summary and detailed dashboard views to quickly identify any changes occurring with valuable files and systems within the organization. With custom and preset policies and group features, alert fatigue is a thing of the past. FileVantage provides your SecOps staff the ability to zero in on real-time changes and connect with other modules via the Falcon platform to stop incidents in their tracks.

Falcon FileVantage

Falcon for Mobile enables security teams to detect malicious, unwanted or accidental access to sensitive corporate data on iOS and Android devices without impacting device performance. Providing EDR on mobile requires an innovative approach to gain deep telemetry needed to identify risky app behavior. On Android, CrowdStrike uses a unique containerization approach, embedding and protecting business apps and their data, while providing in-depth behavioral telemetry. On iOS devices, Falcon for Mobile detects subtle clues in runtime and network activity to identify the most sophisticated nation-state attacks.

Falcon for Mobile

Firewall Management enables creation, management and enforcement of firewall rules and policies across Windows and macOS environments, with enhanced visibility and ease of use, from CrowdStrike Falcon Console. The solution remedies many of the problems that exist with host firewall management, allowing users to have complete visibility and control over the firewall rules present in their environments, and receive feedback on the implications and efficacy of those firewall rules.

Falcon Firewall Management

CrowdStrike Falcon Device Control enables the safe utilization of USB devices across an organization providing extensive visibility and granular control over those devices. It allows admins control over the devices that are used in their environment reducing the risks associated with USB devices. It provides real time and historical visibility into device usage, detailed logging and reporting capabilities through the Falcon management console, for both device usage and also files being written to storage.

Falcon Device Control

Security starts with discovering where you’re not protected, so you can close security gaps and be better prepared to face threats. Falcon Discover has been designed to provide the visibility and context that security and IT teams need. Falcon Discover enables IT hygiene by providing organizations with unprecedented visibility over the assets, applications and accounts being used in their environment allowing them being better prepared to repel attacks and stop a breach.

Falcon Discover

With CrowdStrike Falcon Forensics, responders are able to streamline the collection of point-in-time and historic forensic triage data for robust analysis. The advanced capabilities enable teams to conduct compromise assessments, incident response, enterprise data triage, and even asset assessments for merger and acquisition onboarding.

Falcon Forensics

Falcon X Recon collects data and monitors activity from millions of restricted web pages, criminal forums and encrypted messaging platforms — the hidden recesses of the internet where criminal actors congregate and underground digital economies thrive. By empowering security teams to conduct investigations in real time, they can proactively uncover fraud, data breaches, phishing campaigns and other online threats that target their organization.

Falcon X Recon

Falcon Search Engine dramatically increases the speed of malware research while simultaneously enriching the search results with CrowdStrike’s world-class threat intelligence, yielding the necessary insights to take protective action before the adversary can adapt.

Falcon Search Engine

Webhooks are a simple way to send select near real-time event data from the Falcon platform to third-party applications. Leveraging webhooks, security and DevSecOps teams can centralize alerts, build and deploy customized workflows for consistent notifications, faster response times, and reduced mean time to remediate threat detections. By automating workflows based on threat detections and incidents from the CrowdStrike Falcon platform, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

Webhook

PagerDuty is an incident management platform that provides reliable notifications, automatic escalations, on-call scheduling, and other functionality to help teams detect and resolve issues quickly. The PagerDuty integration allows security and DevSecOps teams to leverage alerts from the CrowdStrike Falcon platform to help streamline incident management and accelerate response capabilities. By automating workflows based on threat detections and incidents, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

PagerDuty

Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses. Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses.

Falcon Sandbox

The CrowdStrike and ServiceNow integration provides joint customers with streamlined security operations and IT workflows and accelerates identification, prioritization and remediation of threats and vulnerabilities. This enables security teams to quickly respond to threats before they impact the business.

ServiceNow

CrowdStrike Falcon Identity Threat Protection enables frictionless security with real-time threat prevention and IT policy enforcement using identity, behavioral and risk analytics. Falcon Identity Threat Protection supports Microsoft Active Directory and Azure Active Directory, and integrates with SSO and federation solutions, like Okta.

Falcon Identity Threat Protection

Made by CrowdStrike

custom_lists_editor-ProductSliderComponent:orderable:d220fb44-b5a9-4cf0-a885-af7b79094701-productsList-home

Proofpoint and CrowdStrike have partnered to transform your security program and protect your organization from the ever-changing threat landscape. Together, we improve your security efficacy and enhance your visibility and context around threats. Our orchestration and response capabilities make your security team more productive.

Proofpoint

Combine best-in-class solutions for identity management and endpoint security to strengthen and simplify secure remote access for trusted users and devices. 

Okta and CrowdStrike have a deeply integrated joint solution that centralizes visibility and supplies critical user and device context to access requests. You get the data-driven insights you need to support reliable, automated access decisions, so your teams can support remote team productivity while keeping the enterprise safe.

Okta

Together, Netskope and CrowdStrike deliver a comprehensive view of threats across both cloud and endpoints and work together to respond more quickly and effectively to those threats. By sharing threat forensics Netskope and CrowdStrike can ensure newly discovered threats are quickly identified, endpoints protected, and the threat neutralized across the organization.

Netskope

Together, CrowdStrike and Zscaler deliver secure access to applications by providing conditional access based on the user’s identity, location and the posture of the device being used while also ensuring that zero-day threats are identified, analyzed and remediated quickly.

Zscaler

CrowdStrike and Splunk's collective insight provides the context and intelligence needed to empower security teams to work smarter, faster and with more accuracy.
The Splunk platform provides a way to make sense of mass quantities of log data. The CrowdStrike App leverages Splunk's ability to provide rich visualizations and drill-downs to enable customers to visualize the data that the CrowdStrike OAuth2 based Technical Add-Ons provide. Insights include details about detections, detection events, incidents, policy and group creations/modifications/deletions and Intelligence Indicator information (for intel customers). CrowdStrike also integrates with Splunk Phantom to implement ingestion of endpoint security data in order to manage indicators of compromise (IOC) as well as enabling the investigation of your endpoints on the Falcon Host API.

Splunk

Strategic Partners

custom_lists_editor-ProductSliderComponent:orderable:6b5aa711-1fd2-4cba-b700-736633ba749b-productsList-home

Mimecast and CrowdStrike protect organizations at both the Secure Email Gateway and on Endpoint devices. Now joint customers can enhance threat protection through the integration of these industry leading platforms. The integration shares intelligence derived from malware detected at the Mimecast Secure Email Gateway with the CrowdStrike Falcon®platform

Mimecast

Cloudflare Zero Trust partners with CrowdStrike to make Zero Trust security seamless for organizations. Cloudflare customers can configure rules to restrict access to business-critical applications based on the device posture signals from the CrowdStrike Falcon platform.

Cloudflare Zero Trust

Developed by cybersecurity practitioners, Airlock addresses the technical and organizational challenges typically associated with allowlisting. Airlock delivers purpose-built workflows that enable rapid and scalable deployment while significantly reducing staffing resources required for day-to-day management. Airlock also provides rich file visibility across the organisation, by collecting and building a centralized database of files seen within the environment. This data can be interrogated at anytime and is further enhanced by Crowdstrike Falcon EDR telemetry.

Airlock Allowlisting

TrueFort Fortress extends your CrowdStrike investment to deliver Zero Trust application protection. Visualize your application flows and dependencies, automatically generate policies based on observed behavior, monitor for anomalies, streamline investigations, enable automated policy enforcement, and deliver robust reports—reducing excessive trust and related risks. Fortress uses application behavior telemetry from the Falcon platform, machine intelligence, and automation to continuously assess and learn each application’s trusted runtime behaviors and create a dynamic application trust graph. With this zero trust baseline for authorized behavior, Fortress continuously analyzes and monitors the entire application environment for risk-related deviations. The platform automatically adapts the application trust graph to maintain risk posture control across all your applications.

TrueFort Fortress

Akamai’s partnership and integration with CrowdStrike enables Akamai Enterprise Application Access to independently verify that the CrowdStrike Falcon sensor is properly installed and fully operational on a device. This risk assessment information enriches existing context and delivers more intelligence for enhanced secure access to corporate applications.

Akamai Enterprise Application Access

Sophisticated attackers are going “beyond malware” to breach organizations, increasingly relying on zero day exploits and hard-to-detect methods such as credential theft, and also tools that are already part of the victim’s environment or operating system. The combination of CrowdStrike Falcon and Aruba ClearPass Policy Manager provides an end-to-end solution that both detects early indicators of potential compromise or infection, along with quick network isolation and zero trust network segmentation to greatly limit any lateral movement.

Aruba ClearPass Policy Manager

The CyberArk PAM as a Service solution leverages leading automation technologies to protect your business as it grows. The Conditional Access integration allows clients to leverage the CrowdStrike ZTA risk score when determining what level of privileged access can be granted to a user. If the ZTA score exceeds a certain threshold, the user can be blocked or their access can be limited until the issues on the endpoint have been resolved.

CyberArk Privileged Access Manager

The AI-powered ForgeRock Identity Platform is both comprehensive and simple-to-use. It is the only platform that: includes full-suite IAM and identity governance and administration (IGA) capabilities, can be implemented across an organization for all identities (workforce, consumers, things), and offers feature parity across all delivery options, including on-premises, any cloud environment, multi-cloud, hybrid, and as a service. Choose the best authentication method for your users and applications based on endpoint intelligence from CrowdStrike.

ForgeRock Identity Platform

Obsidian has built the industry’s first cloud detection and response (CDR) solution to deliver frictionless security for SaaS. Just as endpoint detection and response (EDR) addresses the need for ongoing visibility and protection for endpoints, CDR provides single-pane visibility and protection across SaaS applications. The combination of Obsidian CDR and the CrowdStrike Falcon® platform delivers seamless visibility and end-to-end protection across both cloud applications and endpoint devices.

Obsidian Cloud Detection and Response

The Easy NAC solution provides a Zero Trust solution, where devices are restricted at the point of access, and only compliant devices are allowed network access.
 
 
By Integrating with CrowdStrike, Easy NAC solution can automatically learn what devices should be trusted and quarantine untrusted devices. With integration, a CrowdStrike customer would have 100% confidence all their corporate end-user devices are enrolled and the agents are working properly. Devices not enrolled can be restricted until enrolled. Compliance checks can be done that the sensor is up to date, Firewall enabled, and Device Control is enabled.
 
 
In addition to integrating with CrowdStrike, Easy NAC can also check the AD server to learn what devices are joined to the domain, and integrate with patch servers to learn what devices are being managed by the patch server and getting updates.
 
 
Easy NAC also supports Automated Threat Response, and can automatically take quarantine actions on devices reported by CrowdStrike as suspicious.

InfoExpress Easy NAC

With TruU replace hackable passwords with continuously validated identity that adapts to how people work so they can be protected and productive. 
 
 
TruU-CrowdStrike takes the ZTA score provided by CrowdStrike at the endpoint and combines that into the TruU risk score using the TruU Risk Engine. The TruU risk score is compared against the score indicated by the policy threshold and if the score is within the bounds the user is logged into the computer with TruU presence alone. If the score is higher than the threshold then another factor is required for access.

TruU Passwordless Identity Platform

DTEX InTERCEPT is a first-of-its-kind Workforce Cyber Security solution that focuses on human intent and activity as its core. It brings together the capabilities of Behavioral Data Loss Prevention, Digital Forensics, Insider Risk Management, Remote Worker Security, and User and Entity Behavior Analytics in an easy-to-deploy, extremely lightweight cloud-native platform. DTEX InTERCEPT supercharges the CrowdStrike Falcon platform by delivering the context and intelligence for potential insider threats, compromised account events or data loss scenarios - without invading a user's personal privacy.

DTEX InTERCEPT Workforce Cyber Security

Increase compliance and maximize threat defense by capitalizing on Forescout’s continuous enterprise-wide device visibility and automated workflows integrated with CrowdStrike. 
 
 
The Forescout® eyeExtend for CrowdStrike® module orchestrates information sharing and security workflows between Forescout and CrowdStrike to improve device hygiene, proactively detect threats across the network and automate threat response.
 
 
The integrated solution combines the agentless visibility and control capabilities of the Forescout Platform with the threat intelligence and advanced endpoint protection of the CrowdStrike Falcon® platform.

Forescout eyeExtend

Perception Point’s X-Ray seamlessly plugs into CrowdStrike Falcon® to contain and remediate malicious incidents that successfully breach the enterprise and are subsequently detected on the endpoint. Instant and automated, X-Ray scans all channels (email, CRM, cloud storage and more) to identify where else the content was sent and prevent further transmission. Lightning-fast, unlimited in scale, and covering the range of attack techniques, the X-Ray provides a complete channel audit within minutes, while actively remediating and containing the incident.

Perception Point X-Ray

Secure access is a fundamental business requirement.  The Axis Security Application Access Cloud is a Zero Trust Network Access (ZTNA) SaaS solution purpose-built to be fast, simple, and secure. Organizations use the App Access Cloud to apply zero trust connections for users to any application, anywhere, and integrate with CrowdStrike to ensure only secured devices can access sensitive internal resources. Built with support for any port or protocol, the App Access Cloud enables more access scenarios than any other zero trust access solution.

Axis Security Application Access Cloud

vArmour offers an innovative Application Relationship Management platform that provides enterprise-wide visibility and policy control for applications across any environment. vArmour and Crowdstrike have partnered to help organizations fully understand all their applications and easily create and enforce security controls in any environment. This integration ingests and transforms real-time yet disparate telemetry data into an easy-to-understand view of applications and application relationships. vArmour can then compute security policies for all applications and then orchestrate the policies automatically to Crowdstrike endpoint systems for native enforcement in all environments.

vArmour Application Controller

Zero Trust Solutions

custom_lists_editor-ProductSliderComponent:orderable:5dc4fd74-e743-42be-ab43-1a27cb7d97e8-productsList-home

SecurityAdvisor (SA) provides just in time, automated lessons to end users when a security incident occurs. This approach helps our customers see over 90% dip in malware detections. We achieve these results by integrating our SaaS platform with your existing security products. When the CrowdStrike Falcon platform discovers an incident, our platform intelligently identifies teachable moments and then delivers relevant, real-time lessons over multiple communication channels like email, slack, and more.

SecurityAdvisor Automated Security Awareness

VirusTotal integrates with CrowdStrike Falcon platform to provide all the needed context around any suspicious activity to help accelerate threat detection and response. Get all the actionable data you need for any observable and use it to quickly pivot and find related artifacts and indicators.

VirusTotal

Reveal(x) 360 performs full-stream analysis on network traffic from multi-cloud, on-premises and hybrid environments, and then uses cloud-scale machine learning to detect stealthy advanced attack behaviors across the entire network. Reveal(x) 360 pulls endpoint security event data from Threat Graph and correlates that data with observed network behavior and network threat detections in the Reveal(x) 360 console. Data can also be pushed from Reveal(x) 360 to the Falcon platform to trigger automated containment against active network-based threats.
<ul>
 <li>Respond in real time to auto-contain network-based threats, including ransomware, command & control behavior, unauthorized data movement and remote access patterns, data exfiltration, credential abuse, and many others.</li>
 <li>Correlate Reveal(x) 360 detections with Falcon X threat intelligence for fast, seamless IOC investigation.</li>
 <li>Correlate network and endpoint attack details and forensics for full-coverage detection, investigation, and response.</li>
 <li>Discover and identify all devices on the network, and identify those that are not yet instrumented with the CrowdStrike Falcon Agent.</li>
</ul>

ExtraHop Reveal(x) 360

In today’s threat environment, adversaries focused on industrial control systems (ICS) are commonly known to penetrate industrial organizations via the enterprise IT network and then pivot into the production OT (operational technology) network. By understanding what adversaries are operating in the IT network, you get an early warning about potential threats against your production systems to reduce the risk of disrupted operations. This is accomplished by leveraging Dragos WorldView industrial threat intelligence against your endpoint data collected in your CrowdStrike Falcon platform.

Dragos ICS/OT Threat Detection

As attackers’ techniques evolve and user’s ability to do their job from anywhere, on any device increases, security teams must embrace a new approach to security, enabling them to work smarter, not harder. Gone are the days where SOC teams could afford to spend hours trying to understand the scope and severity of an attack. SOC teams need answers fast so they can keep the organization secure. Exabeam, working with CrowdStrike, takes the guesswork out of identifying and mitigating advanced threats.
 
<ul>
<li>Advanced Threat Detection: UEBA uses machine learning to distinguish normal and abnormal behavior, helping to identify risky activity indicating a potential attack even if it has never been seen before. </li>
<li>Lateral Movement Detection: Patented host-to-IP mapping allows Exabeam to automatically attribute endpoint activity back to a user and identify it as anomalous, regardless of how an attacker moves through the network.</li>
<li>Alert Prioritization: Exabeam UEBA aggregates alerts and activity, prioritizes them by risk score, and focuses analysts in the highest risk threats.</li>
<li>Incident Investigation: Exabeam Smart Timelines enable analysts to dramatically reduce time spent on incident investigations by automatically stitching together events before and after an alert to give the full picture of an attack.</li></ul>

Exabeam

Humio’s flexible, modern architecture improves and enhances the log management experience for organizations by enabling complete observability to answer any question, explore threats and vulnerabilities, and gain valuable insights from all logs in real time. Humio, a CrowdStrike company and Gartner Cool Vendor in Performance Analysis, offers low total cost of ownership and unlimited plans, with easy deployment at any scale.
 
 
With industry-leading unlimited plans, minimal maintenance and training costs, and remarkably low compute and storage requirements, Humio delivers the lowest total cost of ownership with a savings of up to 80% over other solutions.

Humio Modern Log Management Platform

Vulcan Cyber delivers the exact priorities, remedies, insights and automated security that IT teams need to fix vulnerabilities at scale. The Vulcan platform orchestrates and visualizes remediation campaigns from start to finish, helping teams quickly and efficiently fix what matters most.

Vulcan Cyber Endpoint Vulnerability Remediation

With Cybersixgill Darkfeed, CrowdStrike users can proactively protect against threats with automated intelligence in real-time. Darkfeed is the most comprehensive, automated IOC enrichment solution, powered by Cybersixgill’s data lake of underground threat intelligence. It delivers contextual insights to enrich endpoint protection in real-time – straight from the CrowdStrike Falcon dashboard.

Cybersixgill Darkfeed

InsightIDR - Rapid7's leading SaaS SIEM - leverages insights from Rapid7's global services and threat intelligence network, to provide highly reliable out of the box detections across modern, hybrid environments. Leveraging the CrowdStrike Falcon platform’s enriched telemetry, you can unlock immediate endpoint visibility alongside user, network, cloud, and other security data for complete coverage.

Rapid7 InsightIDR

When CrowdStrike and Tines are combined, all aspects of security operations and team culture benefit. Everything from alert enrichment to full-cycle incident response (IR) and compliance is enabled and automated. Tines also provides the CrowdStrike Falcon platform with an immediate channel for integration into any customer‚ existing security investments or platforms without requiring engineering development time. By embracing easy and flexible security automation, defenders regain time to move from a reactive to a proactive stance and can deliver a more resilient security posture across their organizational footprint.

Tines Advanced Security Orchestration and Response

Hunters cloud-native, vendor-agnostic, open XDR is purpose-built to help security operations teams align numerous security tools such as CrowdStrike Falcon into a cohesive security incident detection, investigation and response platform. Autonomous attack analytics identify and present real incidents with context to drive rapid, effective SOC response.

Hunters XDR

DomainTools Iris Threat Intelligence delivers predictive risk assessments and DNS intelligence directly to the analyst inside the Falcon platform and enables rapid in-context profiling of domain observables. The integration brings in DomainTools Risk Score along with the entire Threat Profile dataset to assist Falcon users in making instantaneous decisions on domain indicators. DomainTools Risk Score predicts how likely a domain is to be malicious, often before it is operationalized, reducing the window of vulnerability.

DomainTools Iris

Siemplify Security Orchestrations, Automation & Response is an intuitive, holistic workbench that makes your security operations smarter, more efficient and more effective. By combining security orchestration, automation and response (SOAR) with context-driven case management, investigation, and machine learning, your analysts are more productive, security engineers are more effective, and managers are more informed about SOC performance.

Siemplify Security Orchestrations, Automation & Response

ArcSight Intelligence’s UEBA engine uses unsupervised machine learning and behavioral analytics on your Falcon data to detect insider threats, compromised accounts, lateral movement, internal recon, or data exfiltration to reduce dwell time. Utilize the power of unsupervised machine learning to discover the "unique normal" baseline of every user, machine, and entity in your organization. ArcSight Intelligence automatically leverages your organization's baseline to detect hard to find suspicious activity in your organization’s blind spots that may indicate potential threats.

CyberRes ArcSight Intelligence

Enterprises continue to increase their use of SaaS applications across all corporate functions to scale and pivot quickly without large capital investments. The challenge that arises from increased SaaS utilization is that now critical corporate data is outside your security perimeter, and relies upon the security measures of each SaaS application independently. Since employees use these applications to drive business enablement with vendors, partners, and customers, you are tasked with controlling this unmanageable data access, which poses significant risk and increases the likelihood of a data breach. DoControl and CrowdStrike enable your security and IT teams with complete asset management, continuous monitoring, and no-code automated security workflows configured by you to prevent data breaches in corporate SaaS applications.

DoControl Automated SaaS Security

The IPQS integration with the Falcon platform enhances detection for complex cyber-attacks including malware, phishing, account takeover, credential stuffing, bots, and much more.By accurately identify botnets, residential proxies, and compromised connections, you can get ahead of sophisticated bad actors and cyber criminals committing fraud or abuse.The IPQS threat network features over 10,000 honeypots and traps distributed globally across the public web and dark web. These traps provide you with insight forbad actors online, including thousands of abuse reports per second for hijacked devices, stolen user credentials, botnets, and abusive users.Minimize false-positives with intelligent scoring from machine learning paired with dark web data and abusive behavior reports across the IPQS threat network.

IPQS Fraud, Threat, & Risk Scoring

As businesses rely on multiple SaaS applications, ensuring that each is configured properly becomes unmanageable, especially when less-trained staff that sit outside the security department are expected to manage these dispersed applications. Adaptive Shield's SaaS Security Posture Management Suite (SSPM) removes this burden for your team by providing deep visibility and remediation for potential risks caused by misconfigurations.
<ul></ul>
The Adaptive Shield platform features proactive, continuous and automated monitoring capabilities and a built-in knowledge base of compliance standards and benchmarks. Its SaaS-delivered solution can be live within minutes, and delivers clear visibility into your whole SaaS ecosystem, sending detailed alerts at the first sign of a security misconfiguration and proactively fixing these for all global settings and user privileges. By correlating CrowdStrike’s rich endpoint telemetry and Zero Trust Assessment (ZTA) scoring within the Adaptive Shield’s SaaS security posture technology, your security team will gain unprecedented context and visibility to easily see and manage the risks that stem from SaaS users and their associated devices.

Adaptive Shield SaaS Security Posture Management

SecurityScorecard Cyber Risk Ratings leverage proprietary techniques and a globally distributed network of active and passive scanners to identify the publicly facing digital assets that belong to your organization. Your team can monitor these assets for security issues that are recognized by NIST and other widely adopted cybersecurity frameworks. View SecurityScorecard’s easy-to-understand A-F grade scale within the Falcon console through its context enrichment card to mitigate breach risk, and gain actionable details for every issue surfaced. With CrowdStrike and SecurityScorecard, you can easily monitor your organization, and up to five third parties (vendors, suppliers, peers or competitors) to take control of the cyber risks within your internal and external environments.

SecurityScorecard Cyber Risk Ratings

ShadowPlex uses AI-Driven Advanced Deception Technology to deliver an effective solution to combat even zero-day ransomware. The addition of Deception Technology to CrowdStrike enables precise detection of both known and unknown ransomware. This unique integrated offering enables automated, real-time remediation of advanced zero-day ransomware threats and protects employees and their laptops from ransomware threats even when employees are in a Work-From-Home model. ShadowPlex is anchored on innovations in Distributed Deception, Software Defined Networking (SDN) and Artificial Intelligence (AI) and delivers distributed deception from Cloud across the enterprise network.

Acalvio ShadowPlex Ransomware Solution

Improve security posture with Unified VRM®️ as it continually ingests CrowdStrike Spotlight vulnerabilities, and enriches the data with aggregated threat intelligence and context from over 30 different sources to prioritize and accelerate vulnerability remediation. Unified VRM consolidates and prioritizes risks, putting an end to vulnerability fatigue. Integration with industry standard ticketing and patching systems dramatically reduces the time necessary to fix critical vulnerabilities.

NopSec Unified VRM

Security and IT Partner Solutions

custom_lists_editor-ProductSliderComponent:orderable:96f3ca0a-c5f4-4c87-9c72-d684ef583e2a-productsList-home

CrowdStrike and Google Cloud together deliver defense-in-depth security strategies where joint customers can achieve workload protection and visibility at scale and meet compliance requirements across hybrid environments. These integrations between the two cloud-scale platforms leverage powerful APIs and share enriched telemetry to help deliver powerful security benefits.
 
<ul>
<li>Gain insight into the scope and nature of organizations' Google Cloud resources, so you can secure all virtual machines, uncover and mitigate risks, and reduce the attack surface across your cloud footprint. </li>

<li>Achieve comprehensive visibility into GCP workload events and compute instance metadata to ensure that nothing goes unseen in your cloud environments.</li>

<li>Prioritize violations and investigate alerts, anomalies and threats with improved contextual insight, and proactively stop cyber-attacks.</li>
</ul>

Google Cloud

CrowdStrike and AWS work together to help enterprises transform their business operations with secure web services on scalable cloud technology. By providing secure cloud workloads, security teams can improve visibility, simplify their solutions, and get ahead of sophisticated attacks. The integrations between the two cloud-scale platforms connect organizations with the total security solutions required to stay safe in an increasingly remote work environment.
 
<ul>
<li>Enhanced Visibility: Gain continuous and comprehensive AWS workload monitoring, including container visibility, ensuring nothing is missed and stealthy attacks can be stopped</li>
<li>Breach Protection: Protect against breaches with unparalleled coverage. Defend AWS workloads against threats from malware to the most sophisticated attacks</li>
<li>Reduced Overhead: Reduce the overhead, friction and complexity associated with protecting AWS cloud workloads</li>
<li>Automated Security: Enable cloud security to keep up with the dynamic and flexible nature of AWS workloads</li><ul></ul></ul>

Amazon Web Services (AWS)

This joint solution provides HDOs with an holistic and accurate picture of all of their connected assets and the risk they pose to their environment so that they can focus on taking appropriate mitigation and remediation steps to reduce this risk.

Medigate Device Security Platform (MDSP)

Integrating the endpoint coverage you rely on from CrowdStrike with OT visibility and monitoring from Claroty, the joint solution allows you to easily identify, rapidly detect threats to manage all of your IT and OT assets in one place.

Claroty

Take advantage of CrowdStrike’s Threat Intelligence feed fully integrated into Sumo Logic's cloud-native analytics platform.  Sumo Logic’s Cloud SIEM then automatically analyzes, correlates, and enriches associated alerts to speed triage and surface potentially critical security incidents for your SOC analysts to investigate.

Sumo Logic Cloud SIEM

CrowdStrike Falcon® integrates with IBM Security QRadar and IBM Security Resilient to offer an end-to-end threat management process to transform an organization’s security posture. Together, we deliver simplified solutions to protect against, accurately respond to and mitigate cyber threats with speed.
 
 
 The CrowdStrike Falcon Intelligence Extension is used to integrate CrowdStrike Threat Intelligence with QRadar. Orchestrate defenses with custom indicators of compromise (IOCs) generated by threats from your endpoints, allowing you to proactively defend against future attacks.

IBM Security

When integrated together, Securonix and CrowdStrike provide continuous breach prevention in a single agent and proactively detect virus, malware, ransomware, and other known and unknown threats. Securonix uses Crowdstrike’s Falcon API to gather real-time intelligence from your endpoints. This provides additional context used to assist threat detection and investigation. User behavior information is also used to enrich behavioral analysis.

Securonix Next-Gen SIEM

The Awake Security Platform, the world’s leading advanced network detection and
response platform, integrates fully and easily with CrowdStrike Falcon Insight to
provide the most comprehensive threat detection, rapid and effective response as
well as containment and forensic analysis capabilities. This combination delivers the
visibility and confidence you need to maintain a strong security posture across both
the managed and unmanaged infrastructure within the enterprise.

The Awake Security Platform

Together, Vectra Cognito and Falcon Insight combine cloud and network visibility, with deep endpoint context to create an efficient security operations workflow that reduces response and investigation time, enabling security teams to quickly mitigate high-risk threats from endpoint to cloud.

Vectra Cognito

Today’s enterprise requires a comprehensive defense in depth strategy that considers all critical assets to be a part of the digital estate. In a hybrid and multi-cloud world, where users are distributed and infrastructure is ephemeral, this can be difficult to achieve. Through the integration of CrowdSrike and ThreatWarrior, customers can be assured that they have complete visibility into abnormal behavior relating to anything that is connected to their network, whether public cloud instances or physical devices. The ThreatWarrior platform works seamlessly with CrowdStrike to provide a comprehensive blend of network and endpoint security, visualized through a unique 3D experience.

Made by CrowdStrike

Falcon Prevent

Falcon Horizon: CSPM

Falcon Insight

Falcon Cloud Workload Protection

Falcon Spotlight

Falcon X

Strategic Partners

Proofpoint

ServiceNow

Okta

Netskope

Zscaler

Splunk

Zero Trust Solutions

Proofpoint

Okta

Netskope

Falcon Insight

Mimecast

Zscaler

Security and IT Partner Solutions

SecurityAdvisor Automated Security Awareness

VirusTotal

ExtraHop Reveal(x) 360

Airlock Allowlisting

Dragos ICS/OT Threat Detection

Exabeam

Partner Integrations

Proofpoint

ServiceNow

Okta

Netskope

Mimecast

Zscaler

Learn More

CrowdStrike Developer Portal

Become a Partner