Stop cloud breaches with apps built to detect, prevent and respond to threats targeting your workloads, hosts, and containers. 

Discover cloud security apps, integrations, and plugins to upgrade your security stack. Try cloud security solutions from CrowdStrike and our partners here!

Cloud Security Apps, Integrations & Plugins - CrowdStrike Store

Cloud Security

Protect data and users across email and web from unauthorized access, modification, or compromise.

Discover email & web security apps, integrations, and plugins to upgrade your security stack. Try web security solutions from CrowdStrike and our partners here!

Email & Web Security Apps & Integrations - CrowdStrike Store

Email and Web Security

Defend and harden your endpoints including laptops, desktops, servers, and virtual machines, from malicious activity

Discover endpoint security apps, integrations, and plugins to upgrade your security stack. Try endpoint security solutions from CrowdStrike and our partners.

Endpoint Security Apps, Integrations & Plugins - CrowdStrike Store

Endpoint Security

Stop breaches faster by protecting workforce identities and managing their access to applications

Discover identity & access management apps, integrations, & plugins to upgrade your security stack. Try identity & access management solutions here!

Identity & Access Management Apps & Integrations - CrowdStrike Store

Identity and Access Management

Protect your IoT devices from threats by identifying and monitoring risks to ensure consistent availability, integrity, and confidentiality

Discover IOT security apps, integrations, and plugins to upgrade your security stack. Try IOT security solutions from CrowdStrike and our partners here!

IOT Security Apps, Integrations & Plugins - CrowdStrike Store

IOT Security

Improve the efficiency and efficacy of your IT and Security operations with apps that supercharge detection, investigation, and response

Discover IT & SecOps apps, integrations, and plugins to upgrade your security stack. Try IT & SecOps solutions from CrowdStrike and our partners here!

IT & Security Operations Apps & Integrations - CrowdStrike Store

IT and Security Operations

Stop network and infrastructure compromise with apps that protect against unauthorized access, modification, deletion and theft of resources and data

Discover network & infrastructure security apps, integrations, and plugins to upgrade your security stack. Try network & infrastructure security solutions here!

Network & Infrastructure Security Apps & Integrations - CrowdStrike Store

Network and Infrastructure Security

Detect and investigate modern threats with intelligent apps that collect, normalize, and analyze threat behavior for actionable security insights

Discover security analytics apps, integrations, and plugins to upgrade your security stack. Try security analytics solutions from CrowdStrike and our partners.

Security Analytics Apps, Integrations & Plugins - CrowdStrike Store

Security Analytics

Understand a threat actor’s motives, targets and attack behaviors with threat intelligence apps for faster, more informed, data-backed security decisions

Discover threat intelligence apps, integrations, and plugins to upgrade your security stack. Try threat intelligence solutions from CrowdStrike and our partners.

Threat Intelligence Apps, Integrations & Plugins - CrowdStrike Store

Threat Intelligence

80% of all breaches use compromised identities. Protect against identity-based attacks with apps that extend your zero trust strategy. 

Discover zero trust apps, integrations, and plugins to upgrade your security stack. Try zero trust solutions from CrowdStrike and our partners here!

Zero Trust Apps, Integrations & Plugins  - CrowdStrike Store 

Zero Trust

Mimecast and CrowdStrike protect organizations at both the Secure Email Gateway and on Endpoint devices. Now joint customers can enhance threat protection through the integration of these industry leading platforms. The integration shares intelligence derived from malware detected at the Mimecast Secure Email Gateway with the CrowdStrike Falcon®platform

Mimecast

VirusTotal integrates with CrowdStrike Falcon platform to provide all the needed context around any suspicious activity to help accelerate threat detection and response. Get all the actionable data you need for any observable and use it to quickly pivot and find related artifacts and indicators.

VirusTotal

Together, CrowdStrike and Zscaler deliver secure access to applications by providing conditional access based on the user’s identity, location and the posture of the device being used while also ensuring that zero-day threats are identified, analyzed and remediated quickly.

Zscaler

Proofpoint and CrowdStrike have partnered to transform your security program and protect your organization from the ever-changing threat landscape. Together, we improve your security efficacy and enhance your visibility and context around threats. Our orchestration and response capabilities make your security team more productive.

Proofpoint

Falcon FileVantage is CrowdStrike’s file integrity monitoring solution that streamlines your security operations. It simplifies your security stack, provides real-time insight for file, folder and registry changes, while offering valuable contextual data around detections. Your SecOps team can consolidate large solution stacks with one streamlined product - offering summary and detailed dashboard views to quickly identify any changes occurring with valuable files and systems within the organization. With custom and preset policies and group features, alert fatigue is a thing of the past. FileVantage provides your SecOps staff the ability to zero in on real-time changes and connect with other modules via the Falcon platform to stop incidents in their tracks.

Falcon FileVantage

CrowdStrike Falcon X is an automated threat intelligence service built on the CrowdStrike Falcon Platform. It automates incident investigations and streamlines breach response so you can make faster, more confident cyber security decisions. Organizations, regardless of size or sophistication, learn from the attacks in their environment applying that knowledge to proactively prevent future attacks. Falcon X provides insight into global threats, tracked by CrowdStrike’s elite team of intelligence experts.

Falcon X

In today’s threat environment, adversaries focused on industrial control systems (ICS) are commonly known to penetrate industrial organizations via the enterprise IT network and then pivot into the production OT (operational technology) network. By understanding what adversaries are operating in the IT network, you get an early warning about potential threats against your production systems to reduce the risk of disrupted operations. This is accomplished by leveraging Dragos WorldView industrial threat intelligence against your endpoint data collected in your CrowdStrike Falcon platform.

Dragos ICS/OT Threat Detection

Reveal(x) 360 performs full-stream analysis on network traffic from multi-cloud, on-premises and hybrid environments, and then uses cloud-scale machine learning to detect stealthy advanced attack behaviors across the entire network. Reveal(x) 360 pulls endpoint security event data from Threat Graph and correlates that data with observed network behavior and network threat detections in the Reveal(x) 360 console. Data can also be pushed from Reveal(x) 360 to the Falcon platform to trigger automated containment against active network-based threats.
<ul>
  <li>Respond in real time to auto-contain network-based threats, including ransomware, command & control behavior, unauthorized data movement and remote access patterns, data exfiltration, credential abuse, and many others.</li>
  <li>Correlate Reveal(x) 360 detections with Falcon X threat intelligence for fast, seamless IOC investigation.</li>
  <li>Correlate network and endpoint attack details and forensics for full-coverage detection, investigation, and response.</li>
  <li>Discover and identify all devices on the network, and identify those that are not yet instrumented with the CrowdStrike Falcon Agent.</li>
</ul>
<br />

ExtraHop Reveal(x) 360

DTEX InTERCEPT is a first-of-its-kind Workforce Cyber Security solution that focuses on human intent and activity as its core. It brings together the capabilities of Behavioral Data Loss Prevention, Digital Forensics, Insider Risk Management, Remote Worker Security, and User and Entity Behavior Analytics in an easy-to-deploy, extremely lightweight cloud-native platform. DTEX InTERCEPT supercharges the CrowdStrike Falcon platform by delivering the context and intelligence for potential insider threats, compromised account events or data loss scenarios - without invading a user's personal privacy.

DTEX InTERCEPT Workforce Cyber Security

SOCs seeking to address blindspots and increase effectiveness have turned to NDR and EDR solutions to acquire the telemetry and detection capabilities necessary to combat adversaries. Gigamon has partnered with CrowdStrike to provide users with a fully unified detection and response solution for active threats. The seamless cloud-to-cloud integration between Gigamon ThreatINSIGHT and the Falcon platform ensures the right data is available at the right time to the right people from within the ThreatINSIGHT console: 
<br /> 
<ul>
<li>Falcon X Threat Intelligence is applied against real-time network traffic for immediate detections.</li>
<li>Falcon Insight detections appear alongside ThreatINSIGHT ML and threat intelligence detections for fast adversary identification.</li> 
<li>Falcon Insight endpoint telemetry appears alongside ThreatINSIGHT’s L2 –L7 network telemetry to speed triage, hunting, and investigations. </li></ul>

Gigamon ThreatINSIGHT

The IPQS integration with the Falcon platform enhances detection for complex cyber-attacks including malware, phishing, account takeover, credential stuffing, bots, and much more.By accurately identify botnets, residential proxies, and compromised connections, you can get ahead of sophisticated bad actors and cyber criminals committing fraud or abuse.The IPQS threat network features over 10,000 honeypots and traps distributed globally across the public web and dark web. These traps provide you with insight forbad actors online, including thousands of abuse reports per second for hijacked devices, stolen user credentials, botnets, and abusive users.Minimize false-positives with intelligent scoring from machine learning paired with dark web data and abusive behavior reports across the IPQS threat network.

IPQS Fraud, Threat, & Risk Scoring

Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses. Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses.

Falcon Sandbox

Corelight Open Network Detection and Response combines rich network telemetry with world-class endpoint and threat intelligence to eliminate blind spots and detect intrusions across on-premises, multi-cloud, and hybrid environments. Our comprehensive evidence reduces alert fatigue and speeds up investigations.
<ul>
</ul>
Corelight pulls detection rules and indicators of compromise from Falcon X, correlating them with observed network behavior. The resulting Zeek evidence, Suricata alerts, selective packet captures and extracted files can be pushed to SIEMs and log management systems like Humio, as well as analysis tools like Wireshark and Falcon Sandbox.

Corelight Open NDR

Falcon X Recon collects data and monitors activity from millions of restricted web pages, criminal forums and encrypted messaging platforms — the hidden recesses of the internet where criminal actors congregate and underground digital economies thrive. By empowering security teams to conduct investigations in real time, they can proactively uncover fraud, data breaches, phishing campaigns and other online threats that target their organization.

Falcon X Recon

DomainTools Iris Threat Intelligence delivers predictive risk assessments and DNS intelligence directly to the analyst inside the Falcon platform and enables rapid in-context profiling of domain observables. The integration brings in DomainTools Risk Score along with the entire Threat Profile dataset to assist Falcon users in making instantaneous decisions on domain indicators. DomainTools Risk Score predicts how likely a domain is to be malicious, often before it is operationalized, reducing the window of vulnerability.

DomainTools Iris

Falcon Search Engine dramatically increases the speed of malware research while simultaneously enriching the search results with CrowdStrike’s world-class threat intelligence, yielding the necessary insights to take protective action before the adversary can adapt.

Falcon Search Engine

Hunters cloud-native, vendor-agnostic, open XDR is purpose-built to help security operations teams align numerous security tools such as CrowdStrike Falcon into a cohesive security incident detection, investigation and response platform. Autonomous attack analytics identify and present real incidents with context to drive rapid, effective SOC response.

Hunters XDR

Today’s enterprise requires a comprehensive defense in depth strategy that considers all critical assets to be a part of the digital estate. In a hybrid and multi-cloud world, where users are distributed and infrastructure is ephemeral, this can be difficult to achieve. Through the integration of CrowdSrike and ThreatWarrior, customers can be assured that they have complete visibility into abnormal behavior relating to anything that is connected to their network, whether public cloud instances or physical devices. The ThreatWarrior platform works seamlessly with CrowdStrike to provide a comprehensive blend of network and endpoint security, visualized through a unique 3D experience.

ThreatWarrior

With Cybersixgill Darkfeed, CrowdStrike users can proactively protect against threats with automated intelligence in real-time. Darkfeed is the most comprehensive, automated IOC enrichment solution, powered by Cybersixgill’s data lake of underground threat intelligence. It delivers contextual insights to enrich endpoint protection in real-time – straight from the CrowdStrike Falcon dashboard.

Cybersixgill Darkfeed

The solution integrates ITsMine's remediation of Data Breaches with CrowdStrike's endpoint protection solutions to prevent external and internally-caused data breaches: by blocking the rogue party’s access to targeted host.
<br />
<br />
ITsMine detects internal and external data breaches and abnormal uses of company data by virtual data tagging of sensitive files (FileGPS™) in order to track their location; and by deploying advanced virtual decoys (SoftwareMines™) in critical folders. Enabling you to: 
<ul>
<li>Prevent data breaches by deploying SoftwareMines™ in sensitive locations adjacent to files that need protection</li>
<li>Detect external attackers by detecting SoftwareMine™ “detonations” (unexpected access or opening of files) in critical areas</li>
<li>Contain and block access to hosts by integration with the CrowdStrike Falcon API.</li></ul>

ITsMine

SecurityScorecard Cyber Risk Ratings leverage proprietary techniques and a globally distributed network of active and passive scanners to identify the publicly facing digital assets that belong to your organization. Your team can monitor these assets for security issues that are recognized by NIST and other widely adopted cybersecurity frameworks. View SecurityScorecard’s easy-to-understand A-F grade scale within the Falcon console through its context enrichment card to mitigate breach risk, and gain actionable details for every issue surfaced. With CrowdStrike and SecurityScorecard, you can easily monitor your organization, and up to five third parties (vendors, suppliers, peers or competitors) to take control of the cyber risks within your internal and external environments.

SecurityScorecard Cyber Risk Ratings

IronNet’s network detection and response (NDR) platform, IronDefense, integrates with CrowdStrike’s Falcon Endpoint Protection capabilities and enables customers to: 
<ul>
<li>Easily view network and endpoint telemetry data on a single pane of glass: IronDefense works natively with CrowdStrike to provide relevant host details through IronDefense’s IronVue User Interface, delivering the necessary contextual information that speeds up time to detection by reducing investigative workflow complexity.</li>
<li>Instantly contain threats: Analysts using IronDefense can contain endpoints with one click through IronNet’s IronVue interface. This enables security teams to instantly stop threats during an investigation.</li>
<li>Pivot seamlessly from network to endpoint during an investigation: IronDefense users with CrowdStrike permissions can pivot to the CrowdStrike Falcon interface for deeper investigation, allowing security teams to seamlessly trace suspicious behaviors on the network to the source endpoint.</li></ul>

IronNet Collective Defense Platform

Reveal(x) 360 performs full-stream analysis on network traffic from multi-cloud, on-premises and hybrid environments, and then uses cloud-scale machine learning to detect stealthy advanced attack behaviors across the entire network. The Reveal(x) 360 integration with Falcon X is a free trial app that correlates IPs and domains listed as IOCs in Falcon X with network behavior data about those IPs and domains, providing rapid investigation of potential attacks in progress.

Reveal(x) 360 + Falcon X

The SafeGuard Cyber platform provides threat detection and automatically removes/quarantines risks to stop attacks before they start. Enhancing the threat intelligence in the CrowdStrike platform, SafeGuard Cyber's digital account protection capabilities are greatly expanded -and allows your Falcon environment to be made aware of threats occurring in your protected digital platforms. The SafeGuardCyber SaaS platform empowers enterprises to adopt the social and digital channels they need to reach customers, while reducing digital risk and staying secure and compliant.

SafeGuard Cyber Social and Digital Risk Protection

OPSWAT MetaDefender Cloud provides real-time hash, IP and domain analysis and reports using advanced threat prevention, detection and binary reputation technologies. This cloud-based cybersecurity threat detection and prevention solution uses 20+ anti-malware engines, easily integrates with the CrowdStrike Falcon® platform.

OPSWAT MetaDefender Cloud

The IntSights + CrowdStrike integration enables mutual customers to gain critical threat knowledge and stop breaches. Security teams can easily discover, view, validate, and investigate IntSights Indicators of Compromise (IOCs) from within a CrowdStrike device in the IntSights platform, streamlining the processes required for effective threat mitigation. Together, CrowdStrike and IntSights offer contextual threat intelligence and continuous endpoint protection.

IntSights External Threat Protection Suite

The threat landscape evolves constantly. Identify and understand adversaries and indicators with an advanced, scalable joint solution that enables customers to increase protection of their networks and endpoints. Integrate CrowdStrike Threat Intelligence into ThreatQ to provide security teams with a single threat library for all intelligence, both external and internal.

ThreatQuotient ThreatQ

CleanINTERNET is a cost-effective, industry agnostic solution for Shielding & Advanced Threat Detection that uses dynamic intelligence on a mass-scale. It leverages over 100 sources of CTI with over 3,500 feeds and alleviates the burden of implementing complex CTI systems. Gain visibility by leveraging endpoint data from CrowdStrike Intel to enable security teams to detect and attribute, prioritize and gain rich context about attacks to drive active cyber defense without impacting network performance.