Description
CrowdStrike Falcon is a cloud-native endpoint security platform sold through self-serve, publicly priced bundles: Falcon Go, Falcon Pro, and Falcon Enterprise, plus a custom-quoted Falcon Complete tier for fully managed detection and response. Every tier includes next-gen antivirus, USB and removable media device control, and mobile device protection for Android and iOS, deploying through a single lightweight sensor. Falcon Pro adds centralized firewall management, while Falcon Enterprise introduces Falcon Insight XDR for endpoint detection and response and Falcon Adversary OverWatch, a team of analysts continuously threat hunting inside the platform. Falcon Complete goes further, handing 24/7 monitoring, investigation, and response entirely to CrowdStrike’s own MDR team, backed by a published Breach Prevention Warranty. Falcon Flex, a separate licensing model, lets larger customers draw down a pre-committed balance across CrowdStrike’s broader portfolio instead of buying fixed bundles. It suits organizations ranging from small teams needing straightforward antivirus up through enterprises that want a fully outsourced security operations function.
Key Features
- Next-Gen Antivirus (Falcon Prevent) — AI-driven malware and ransomware protection deploying in minutes.
- Device Control — manages and secures USB, SD card, and Thunderbolt device usage across the organization.
- Mobile Device Protection — detects malicious activity and blocks unauthorized access on Android and iOS.
- Falcon Insight XDR — continuous endpoint detection and response, from Falcon Enterprise upward.
- Falcon Adversary OverWatch — dedicated threat hunters searching the platform for signs of sophisticated intrusions.
- Falcon Complete MDR — fully managed 24/7 detection and response run by CrowdStrike’s own analyst team.
- Falcon Flex — drawdown licensing model for accessing CrowdStrike’s broader security portfolio as needed.
How It Works
CrowdStrike Falcon deploys through a single lightweight sensor installed on each endpoint, covering Windows, macOS, and Linux. Falcon Go provides baseline antivirus, device control, and mobile protection for smaller organizations, capped at 100 devices. Moving to Falcon Pro adds centralized firewall policy management from the same console. Falcon Enterprise introduces Falcon Insight XDR, which continuously monitors endpoint activity and automatically prioritizes suspicious behavior, plus Falcon Adversary OverWatch, where CrowdStrike’s own threat hunters actively search for signs of intrusion an automated system might miss. Organizations that want CrowdStrike to run detection and response entirely can move to Falcon Complete, a fully managed MDR service backed by a published breach prevention warranty. All self-serve tiers can be purchased and configured directly online, with monthly or annual billing, while Falcon Complete and larger custom deployments go through direct sales.
Technical Architecture & Overview
- Core Engine: Cloud-native Falcon platform using AI-driven threat detection, correlating telemetry from a single lightweight sensor across endpoints, identity, and cloud workloads.
- Deployment: Single agent deployment on Windows, macOS, and Linux; fully cloud-delivered with no on-premises management server required.
- API Surface: Public Developer Portal (developer.crowdstrike.com) for API access and integrations; Falcon Next-Gen SIEM available as a separate module for log ingestion and correlation.
- Known Limits: Falcon Go purchases are capped at a maximum of 100 devices; EDR (Falcon Insight XDR) and managed threat hunting (Falcon Adversary OverWatch) are not available below the Enterprise tier.
Pros & Cons
| Pros | Cons |
|---|---|
| Falcon Go, Pro, and Enterprise are self-serve with published per-device pricing, not exclusively a sales-led enterprise product | EDR and managed threat hunting are not included below the Enterprise tier; Go and Pro cover antivirus and device control only |
| 15-day free trial with no credit card required, including next-gen antivirus and device control | Falcon Go is capped at 100 devices, limiting it to smaller organizations |
| Falcon Complete adds a published Breach Prevention Warranty for organizations wanting fully managed MDR | Falcon Complete (MDR) pricing is entirely custom and requires contacting sales, with no published rate |
| Single lightweight sensor covers antivirus, device control, and mobile protection across Windows, macOS, and Linux | Optional add-on modules and professional services can add meaningfully to total contract cost beyond the listed per-device price |
| Falcon Flex lets larger organizations draw down a pre-committed balance across CrowdStrike’s broader portfolio instead of rebuying fixed bundles | Annual subscriptions are billed in full upfront, with a 30-day refund window rather than ongoing monthly flexibility at the annual rate |
Pricing
| Plan | Price |
|---|---|
| Falcon Go | $7.99/device/month or $59.99/device/year (max 100 devices) |
| Falcon Pro | $14.99/device/month or $99.99/device/year |
| Falcon Enterprise | $19.99/device/month or $184.99/device/year |
Platform Availability
Windows | macOS | Linux | Android | iOS
Best For
Small businesses (Falcon Go) | Mid-market IT teams (Falcon Pro) | Enterprises needing EDR (Falcon Enterprise) | Organizations wanting fully managed MDR (Falcon Complete)
Frequently Asked Questions
Can I buy CrowdStrike Falcon without going through a sales team?
Yes. Falcon Go, Pro, and Enterprise are self-serve, with published per-device pricing and an online checkout, per CrowdStrike’s official pricing page. Only Falcon Complete MDR and custom enterprise deals go through direct sales.
Is there a free trial for CrowdStrike Falcon?
Yes. CrowdStrike offers a 15-day free trial with no credit card required, including next-gen antivirus, device control, and Express Support, according to the company’s official FAQ.
What is the difference between Falcon Enterprise and Falcon Complete?
Falcon Enterprise gives an organization EDR and threat hunting tools to use themselves, while Falcon Complete hands 24/7 detection, investigation, and response entirely to CrowdStrike’s own analyst team, backed by a published Breach Prevention Warranty.
Is there a device limit on any CrowdStrike Falcon plan?
Yes. Falcon Go purchases are limited to a maximum of 100 devices, per CrowdStrike’s official pricing page; Pro and Enterprise do not have this cap.
How does CrowdStrike Falcon differ from ThreatDown?
Both offer a tiered path from self-managed antivirus up through fully managed MDR, but CrowdStrike publishes per-device pricing for its self-serve Go, Pro, and Enterprise tiers, while ThreatDown’s exact per-device rates depend on a device-count and contract-length calculator rather than a static list price.
Similar Tools in This Directory
Also in AI Cybersecurity Tools: Guardio, browser-based scam and phishing protection | Microsoft Defender for Business, Microsoft 365-integrated endpoint protection | ThreatDown by Malwarebytes, tiered endpoint protection through MDR | Norton Small Business, bundled AI scam detection and VPN | SentinelOne, AI-native enterprise endpoint protection
