Stop cloud breaches with apps built to detect, prevent and respond to threats targeting your workloads, hosts, and containers. 

Discover cloud security apps, integrations, and plugins to upgrade your security stack. Try cloud security solutions from CrowdStrike and our partners here!

Cloud Security Apps, Integrations & Plugins - CrowdStrike Store

Cloud Security

Protect data and users across email and web from unauthorized access, modification, or compromise.

Discover email & web security apps, integrations, and plugins to upgrade your security stack. Try web security solutions from CrowdStrike and our partners here!

Email & Web Security Apps & Integrations - CrowdStrike Store

Email and Web Security

Defend and harden your endpoints including laptops, desktops, servers, and virtual machines, from malicious activity

Discover endpoint security apps, integrations, and plugins to upgrade your security stack. Try endpoint security solutions from CrowdStrike and our partners.

Endpoint Security Apps, Integrations & Plugins - CrowdStrike Store

Endpoint Security

Stop breaches faster by protecting workforce identities and managing their access to applications

Discover identity & access management apps, integrations, & plugins to upgrade your security stack. Try identity & access management solutions here!

Identity & Access Management Apps & Integrations - CrowdStrike Store

Identity and Access Management

Protect your IoT devices from threats by identifying and monitoring risks to ensure consistent availability, integrity, and confidentiality

Discover IOT security apps, integrations, and plugins to upgrade your security stack. Try IOT security solutions from CrowdStrike and our partners here!

IOT Security Apps, Integrations & Plugins - CrowdStrike Store

IOT Security

Improve the efficiency and efficacy of your IT and Security operations with apps that supercharge detection, investigation, and response

Discover IT & SecOps apps, integrations, and plugins to upgrade your security stack. Try IT & SecOps solutions from CrowdStrike and our partners here!

IT & Security Operations Apps & Integrations - CrowdStrike Store

IT and Security Operations

Stop network and infrastructure compromise with apps that protect against unauthorized access, modification, deletion and theft of resources and data

Discover network & infrastructure security apps, integrations, and plugins to upgrade your security stack. Try network & infrastructure security solutions here!

Network & Infrastructure Security Apps & Integrations - CrowdStrike Store

Network and Infrastructure Security

Detect and investigate modern threats with intelligent apps that collect, normalize, and analyze threat behavior for actionable security insights

Discover security analytics apps, integrations, and plugins to upgrade your security stack. Try security analytics solutions from CrowdStrike and our partners.

Security Analytics Apps, Integrations & Plugins - CrowdStrike Store

Security Analytics

Understand a threat actor’s motives, targets and attack behaviors with threat intelligence apps for faster, more informed, data-backed security decisions

Discover threat intelligence apps, integrations, and plugins to upgrade your security stack. Try threat intelligence solutions from CrowdStrike and our partners.

Threat Intelligence Apps, Integrations & Plugins - CrowdStrike Store

Threat Intelligence

80% of all breaches use compromised identities. Protect against identity-based attacks with apps that extend your zero trust strategy. 

Discover zero trust apps, integrations, and plugins to upgrade your security stack. Try zero trust solutions from CrowdStrike and our partners here!

Zero Trust Apps, Integrations & Plugins  - CrowdStrike Store 

Zero Trust

CrowdStrike and AWS work together to help enterprises transform their business operations with secure web services on scalable cloud technology. By providing secure cloud workloads, security teams can improve visibility, simplify their solutions, and get ahead of sophisticated attacks. The integrations between the two cloud-scale platforms connect organizations with the total security solutions required to stay safe in an increasingly remote work environment.
 
<ul>
<li>Enhanced Visibility: Gain continuous and comprehensive AWS workload monitoring, including container visibility, ensuring nothing is missed and stealthy attacks can be stopped</li>
<li>Breach Protection: Protect against breaches with unparalleled coverage. Defend AWS workloads against threats from malware to the most sophisticated attacks</li>
<li>Reduced Overhead: Reduce the overhead, friction and complexity associated with protecting AWS cloud workloads</li>
<li>Automated Security: Enable cloud security to keep up with the dynamic and flexible nature of AWS workloads</li><ul></ul></ul>

Amazon Web Services (AWS)

SecurityAdvisor (SA) provides just in time, automated lessons to end users when a security incident occurs. This approach helps our customers see over 90% dip in malware detections. We achieve these results by integrating our SaaS platform with your existing security products. When the CrowdStrike Falcon platform discovers an incident, our platform intelligently identifies teachable moments and then delivers relevant, real-time lessons over multiple communication channels like email, slack, and more.

SecurityAdvisor Automated Security Awareness

VirusTotal integrates with CrowdStrike Falcon platform to provide all the needed context around any suspicious activity to help accelerate threat detection and response. Get all the actionable data you need for any observable and use it to quickly pivot and find related artifacts and indicators.

VirusTotal

CrowdStrike and Google Cloud together deliver defense-in-depth security strategies where joint customers can achieve workload protection and visibility at scale and meet compliance requirements across hybrid environments. These integrations between the two cloud-scale platforms leverage powerful APIs and share enriched telemetry to help deliver powerful security benefits.
 
<ul>
<li>Gain insight into the scope and nature of organizations' Google Cloud resources, so you can secure all virtual machines, uncover and mitigate risks, and reduce the attack surface across your cloud footprint. </li>

<li>Achieve comprehensive visibility into GCP workload events and compute instance metadata to ensure that nothing goes unseen in your cloud environments.</li>

<li>Prioritize violations and investigate alerts, anomalies and threats with improved contextual insight, and proactively stop cyber-attacks.</li>
</ul>

Google Cloud

The CrowdStrike and ServiceNow integration provides joint customers with streamlined security operations and IT workflows and accelerates identification, prioritization and remediation of threats and vulnerabilities. This enables security teams to quickly respond to threats before they impact the business.

ServiceNow

CrowdStrike and Splunk's collective insight provides the context and intelligence needed to empower security teams to work smarter, faster and with more accuracy.
The Splunk platform provides a way to make sense of mass quantities of log data. The CrowdStrike App leverages Splunk's ability to provide rich visualizations and drill-downs to enable customers to visualize the data that the CrowdStrike OAuth2 based Technical Add-Ons provide. Insights include details about detections, detection events, incidents, policy and group creations/modifications/deletions and Intelligence Indicator information (for intel customers). CrowdStrike also integrates with Splunk Phantom to implement ingestion of endpoint security data in order to manage indicators of compromise (IOC) as well as enabling the investigation of your endpoints on the Falcon Host API.

Splunk

Humio’s flexible, modern architecture improves and enhances the log management experience for organizations by enabling complete observability to answer any question, explore threats and vulnerabilities, and gain valuable insights from all logs in real time. Humio, a CrowdStrike company and Gartner Cool Vendor in Performance Analysis, offers low total cost of ownership and unlimited plans, with easy deployment at any scale.
 
 
With industry-leading unlimited plans, minimal maintenance and training costs, and remarkably low compute and storage requirements, Humio delivers the lowest total cost of ownership with a savings of up to 80% over other solutions.

Humio Modern Log Management Platform

As attackers’ techniques evolve and user’s ability to do their job from anywhere, on any device increases, security teams must embrace a new approach to security, enabling them to work smarter, not harder. Gone are the days where SOC teams could afford to spend hours trying to understand the scope and severity of an attack. SOC teams need answers fast so they can keep the organization secure. Exabeam, working with CrowdStrike, takes the guesswork out of identifying and mitigating advanced threats.
 
<ul>
<li>Advanced Threat Detection: UEBA uses machine learning to distinguish normal and abnormal behavior, helping to identify risky activity indicating a potential attack even if it has never been seen before. </li>
<li>Lateral Movement Detection: Patented host-to-IP mapping allows Exabeam to automatically attribute endpoint activity back to a user and identify it as anomalous, regardless of how an attacker moves through the network.</li>
<li>Alert Prioritization: Exabeam UEBA aggregates alerts and activity, prioritizes them by risk score, and focuses analysts in the highest risk threats.</li>
<li>Incident Investigation: Exabeam Smart Timelines enable analysts to dramatically reduce time spent on incident investigations by automatically stitching together events before and after an alert to give the full picture of an attack.</li></ul>

Exabeam

The CrowdStrike Falcon platform’s single lightweight agent leverages its cloud-scale to extend CrowdStrike’s world class security capabilities into the Nutanix Cloud Platform, preventing attacks on endpoints and workloads on or off the network. 
<ul></ul>
Validated to run on Nutanix AHV, the cloud-native Falcon sensor enhances Nutanix’s native security posture to secure workloads, without compromising performance. Extending CrowdStrike protection to workloads like virtual machines, and Virtual Desktop Infrastructure (VDI) on Nutanix, enables your organization to gain holistic security with scale and speed. Allow your teams to build, run, and secure applications with confidence throughout the entire development cycle.

Nutanix Cloud Platform

Enterprises continue to increase their use of SaaS applications across all corporate functions to scale and pivot quickly without large capital investments. The challenge that arises from increased SaaS utilization is that now critical corporate data is outside your security perimeter, and relies upon the security measures of each SaaS application independently. Since employees use these applications to drive business enablement with vendors, partners, and customers, you are tasked with controlling this unmanageable data access, which poses significant risk and increases the likelihood of a data breach. DoControl and CrowdStrike enable your security and IT teams with complete asset management, continuous monitoring, and no-code automated security workflows configured by you to prevent data breaches in corporate SaaS applications.

DoControl Automated SaaS Security

Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses. Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses.

Falcon Sandbox

Security analysts are faced with a variety of security alerts from different tools in their environment and are concerned about uninvestigated security incidents. Instead of spending hours wading through oceans of false positives, DTonomy’s AIR platform (AI-based analysis and response) enables your security team with tools that:
<ul></ul>
<li>Reduce false positives through adaptive learning.</li>
<li>Reduce false negatives via continuous alerts correlation and context building.</li>
<li>Speed analysis with intuitive visualizations of automatically cross-correlated groups of alerts.</li>
<li>Automate repetitive analysis and response processes.</li>

DTonomy AIR

When integrated together, Securonix and CrowdStrike provide continuous breach prevention in a single agent and proactively detect virus, malware, ransomware, and other known and unknown threats. Securonix uses Crowdstrike’s Falcon API to gather real-time intelligence from your endpoints. This provides additional context used to assist threat detection and investigation. User behavior information is also used to enrich behavioral analysis.

Securonix Next-Gen SIEM

Take advantage of CrowdStrike’s Threat Intelligence feed fully integrated into Sumo Logic's cloud-native analytics platform.  Sumo Logic’s Cloud SIEM then automatically analyzes, correlates, and enriches associated alerts to speed triage and surface potentially critical security incidents for your SOC analysts to investigate.

Sumo Logic Cloud SIEM

When CrowdStrike and Tines are combined, all aspects of security operations and team culture benefit. Everything from alert enrichment to full-cycle incident response (IR) and compliance is enabled and automated. Tines also provides the CrowdStrike Falcon platform with an immediate channel for integration into any customer‚ existing security investments or platforms without requiring engineering development time. By embracing easy and flexible security automation, defenders regain time to move from a reactive to a proactive stance and can deliver a more resilient security posture across their organizational footprint.

Tines Advanced Security Orchestration and Response

Hunters cloud-native, vendor-agnostic, open XDR is purpose-built to help security operations teams align numerous security tools such as CrowdStrike Falcon into a cohesive security incident detection, investigation and response platform. Autonomous attack analytics identify and present real incidents with context to drive rapid, effective SOC response.

Hunters XDR

CrowdStrike Falcon® integrates with IBM Security QRadar and IBM Security Resilient to offer an end-to-end threat management process to transform an organization’s security posture. Together, we deliver simplified solutions to protect against, accurately respond to and mitigate cyber threats with speed.
 
 
 The CrowdStrike Falcon Intelligence Extension is used to integrate CrowdStrike Threat Intelligence with QRadar. Orchestrate defenses with custom indicators of compromise (IOCs) generated by threats from your endpoints, allowing you to proactively defend against future attacks.

IBM Security

Siemplify Security Orchestrations, Automation & Response is an intuitive, holistic workbench that makes your security operations smarter, more efficient and more effective. By combining security orchestration, automation and response (SOAR) with context-driven case management, investigation, and machine learning, your analysts are more productive, security engineers are more effective, and managers are more informed about SOC performance.

Siemplify Security Orchestrations, Automation & Response

ArcSight Intelligence’s UEBA engine uses unsupervised machine learning and expanded behavioral analytics models on your Falcon data to detect insider threats, critical vulnerabilities, compromised accounts, lateral movement, internal recon, or data exfiltration to reduce dwell time. Utilize the power of unsupervised machine learning to discover the "unique normal" baseline of every user, machine, and entity in your organization. ArcSight Intelligence automatically leverages your organization's baseline to detect hard to find suspicious activity in your organization’s blind spots that may indicate potential threats.

CyberRes ArcSight Intelligence

The Darktrace Immune System harnesses scalable, self-learning AI to understand the digital DNA of an organization and illuminate unpredictable cyber-threats at an early stage. By learning the normal ‘patterns of life’ of every person and device in a business, the technology discovers novel attacks and insider threats that other tools miss, while delivering complete visibility. Darktrace integrates seamlessly with CrowdStrike to extend its self-learning AI to the endpoint. By ingesting alerts from CrowdStrike Falcon, Darktrace brings rich, host-level context to bear on AI detections and Cyber AI Analyst investigations across the business.

Darktrace Immune System

Swimlane’s SOAR platform integrates with CrowdStrike to enrich data, orchestrate your security tools and automate incident response processes. This delivers better threat response capabilities with significantly faster mean time to resolution without adding overhead. Swimlane was founded to deliver scalable innovative and flexible security solutions to organizations struggling with alert fatigue, vendor proliferation and chronic staffing shortages.

Swimlane Platform

Many Devo customers love their CrowdStrike endpoint products. As a cloud-native security analytics platform, Devo enables customers to get deeper analytics from their CrowdStrike data by providing longer retention of all data - 400 days hot - with the ability to correlate that data for added context to more effectively defend their entire attack surface.

The Devo Platform

With Panther and CrowdStrike, teams can write custom real-time detections, perform high-scale security analytics and correlation, as well as store Falcon telemetry for long-term storage. Monitor CrowdStrike logs to gain complete visibility into your network activity, DNS requests, and other security events with Panther’s CrowdStrike integration. Panther can collect, normalize, and monitor CrowdStrike logs to help you identify suspicious activity in real-time. Your normalized data is then retained to power future security investigations.