Cloud Security

Email and Web Security

Extended Detection and Response (XDR)

Identity and Access Management

IOT Security

IT and Security Operations

Network and Infrastructure Security

Security Analytics

Threat Intelligence

Zero Trust

For organizations struggling with the ineffectiveness and complexity of legacy antivirus solutions, CrowdStrike Falcon® Prevent is here to help. As the most complete AV replacement solution in the industry, Falcon Prevent delivers superior protection with a single lightweight agent that operates without the need for constant signature updates, on-premises management infrastructure, or complex integrations. Even the largest organizations can be up and running with Falcon Prevent in minutes.

Falcon Prevent

CrowdStrike Falcon® CSPM streamlines cloud security posture management across the application development lifecycle for any cloud, enabling you to securely deploy applications in the cloud with greater speed and efficiency. The cloud-native solution provides visibility into your entire cloud infrastructure, continuous monitoring for misconfigurations, and proactive threat detection allowing DevSecOps teams to fix issues faster and be more productive.

Falcon Horizon: CSPM

CrowdStrike Falcon® Insight XDR continuously monitors all endpoint activity and analyzes the data in real time to automatically identify threat activity, enabling it to detect advanced threats as they happen. Security teams can rapidly investigate incidents, respond to alerts and proactively hunt for new threats.

Falcon Insight XDR

CrowdStrike Falcon® Cloud Workload Protection provides comprehensive breach protection for workloads, and containers, enabling you to build, run, and secure applications with speed and confidence. CrowdStrike’s experience in operating one of the largest security clouds in the world provides unique insights into adversaries, enabling the delivery of purpose-built CrowdStrike solutions that create less work for DevSecOps teams, defend against data breaches and optimize cloud deployments.

Falcon Cloud Workload Protection

Slack is the central hub of communication for many organizations. Slack facilitates cross-team collaboration and enables teams to connect their various tools to avoid context-switching and save time. The Slack integration allows security and DevSecOps teams to centralize alerts, build and deploy customized workflows for consistent notifications, faster response times, and reduced mean time to remediate threat detections. By automating workflows based on threat detections and incidents, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

CrowdStrike for Slack

CrowdStrike Falcon® FileVantage is CrowdStrike’s file integrity monitoring solution that streamlines your security operations. It simplifies your security stack, provides real-time insight for file, folder and registry changes, while offering valuable contextual data around detections. Your SecOps team can consolidate large solution stacks with one streamlined product - offering summary and detailed dashboard views to quickly identify any changes occurring with valuable files and systems within the organization. With custom and preset policies and group features, alert fatigue is a thing of the past. FileVantage provides your SecOps staff the ability to zero in on real-time changes and connect with other modules via the Falcon platform to stop incidents in their tracks.

Falcon FileVantage

CrowdStrike Falcon® Intelligence is an automated threat intelligence service built on the CrowdStrike Falcon Platform. It automates incident investigations and streamlines breach response so you can make faster, more confident cyber security decisions. Organizations, regardless of size or sophistication, learn from the attacks in their environment applying that knowledge to proactively prevent future attacks. Falcon Intelligence provides insight into global threats, tracked by CrowdStrike’s elite team of intelligence experts.

Falcon Intelligence

CrowdStrike Falcon® Spotlight offers organizations continuous and real-time assessment of vulnerability exposure on their endpoints. Falcon Spotlight’s native integration into the Falcon platform enables customers to operationalize vulnerability assessment within a complete endpoint protection framework. Falcon Spotlight adds preparation and readiness to the unparalleled prevention, detection and response provided by the Falcon platform, resulting in a stronger security posture.

Falcon Spotlight

With CrowdStrike Falcon® Forensics, responders are able to streamline the collection of point-in-time and historic forensic triage data for robust analysis. The advanced capabilities enable teams to conduct compromise assessments, incident response, enterprise data triage, and even asset assessments for merger and acquisition onboarding.

Falcon Forensics

CrowdStrike Falcon® Identity Threat Protection enables frictionless security with real-time threat prevention and IT policy enforcement using identity, behavioral and risk analytics. Falcon Identity Threat Protection supports Microsoft Active Directory and Azure Active Directory, and integrates with SSO and federation solutions, like Okta.

Falcon Identity Threat Protection

PagerDuty is an incident management platform that provides reliable notifications, automatic escalations, on-call scheduling, and other functionality to help teams detect and resolve issues quickly. The PagerDuty integration allows security and DevSecOps teams to leverage alerts from the CrowdStrike Falcon® platform to help streamline incident management and accelerate response capabilities. By automating workflows based on threat detections and incidents, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

PagerDuty

CrowdStrike Falcon® Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses. Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses.

Falcon Sandbox

Customers can build automated workflows using CrowdStrike Falcon® Fusion to trigger incident ticket creation in ServiceNow ITSM. Security and DevSecOps teams can leverage detections and incidents from the CrowdStrike Falcon platform to help streamline incident management and accelerate response capabilities. You can also orchestrate remediation of vulnerabilities by creating ServiceNow tickets directly from Spotlight, and easily configure the workflow to attach auto-generated reports, enabling you to track the remediation progress of your security team to improve efficiency and monitoring.  
<ul>
</ul>
This ServiceNow IT Service Management (ITSM)  plugin leverages Falcon Fusion, a CrowdStrike Offering Feature, to allow you to receive Falcon-generated alerts via ServiceNow ITSM.

Falcon Fusion for ServiceNow ITSM

CrowdStrike Falcon® Firewall Management enables creation, management and enforcement of firewall rules and policies across Windows and macOS environments, with enhanced visibility and ease of use, from CrowdStrike Falcon Console. The solution remedies many of the problems that exist with host firewall management, allowing users to have complete visibility and control over the firewall rules present in their environments, and receive feedback on the implications and efficacy of those firewall rules.

Falcon Firewall Management

CrowdStrike Falcon® Device Control enables the safe utilization of USB devices across an organization providing extensive visibility and granular control over those devices. It allows admins control over the devices that are used in their environment reducing the risks associated with USB devices. It provides real time and historical visibility into device usage, detailed logging and reporting capabilities through the Falcon management console, for both device usage and also files being written to storage.

Falcon Device Control

Security starts with discovering where you’re not protected, so you can close security gaps and be better prepared to face threats. CrowdStrike Falcon® Discover has been designed to provide the visibility and context that security and IT teams need. Falcon Discover enables IT hygiene by providing organizations with unprecedented visibility over the assets, applications and accounts being used in their environment allowing them being better prepared to repel attacks and stop a breach.

Falcon Discover

CrowdStrike Falcon® Intelligence Recon collects data and monitors activity from millions of restricted web pages, criminal forums and encrypted messaging platforms — the hidden recesses of the internet where criminal actors congregate and underground digital economies thrive. By empowering security teams to conduct investigations in real time, they can proactively uncover fraud, data breaches, phishing campaigns and other online threats that target their organization.

Falcon Intelligence Recon

CrowdStrike Falcon® for Mobile enables security teams to detect malicious, unwanted or accidental access to sensitive corporate data on iOS and Android devices without impacting device performance. Providing EDR on mobile requires an innovative approach to gain deep telemetry needed to identify risky app behavior. On Android, CrowdStrike uses a unique containerization approach, embedding and protecting business apps and their data, while providing in-depth behavioral telemetry. On iOS devices, Falcon for Mobile detects subtle clues in runtime and network activity to identify the most sophisticated nation-state attacks.

Falcon for Mobile

CrowdStrike Falcon® Identity Threat Detection (ITD) offers complete visibility for all credentials on premises or in the cloud and monitors authentication traffic in both directions to identify anomalies and attacks without additional agents on the endpoint or internal assets. See identity-based alerts with event notifications or risk score escalation to inform on domain control attacks or ATP proliferation and lateral movement. Detect forms of ransomware, RDP traffic to domain controllers, NTLM, LDAP, and Kerberos abuse, and other identity-centric malware and events, offering the Who of credential identification to improve incident response.

Falcon Identity Threat Detection

CrowdStrike Falcon® Search Engine dramatically increases the speed of malware research while simultaneously enriching the search results with CrowdStrike’s world-class threat intelligence, yielding the necessary insights to take protective action before the adversary can adapt.

Falcon Search Engine

Webhooks are a simple way to send select near real-time event data from the Falcon platform to third-party applications. Leveraging webhooks, security and DevSecOps teams can centralize alerts, build and deploy customized workflows for consistent notifications, faster response times, and reduced mean time to remediate threat detections. By automating workflows based on threat detections and incidents from the CrowdStrike Falcon® platform, analysts can spend time on more important strategic tasks to help improve the security posture of the organization without succumbing to alert fatigue and improve efficiency of their security solutions.

Made by CrowdStrike