What operating systems does the Falcon sensor support?

It supports a wide range including Windows (from XP SP3 to Windows 11), macOS, and numerous Linux distributions (RHEL, Ubuntu, SUSE, etc.). Specific versions and sensor versions are listed in the deployment documentation.

What is the difference between Falcon Go, Pro, and Enterprise?

They are tiered bundles. Go includes basic next-gen antivirus and device control. Pro adds centralized firewall management. Enterprise includes full EDR, threat intelligence, and identity protection. Managed MDR (Falcon Complete) is a separate premium service.

Does CrowdStrike offer a free trial?

Yes, a 15-day free trial is available for the Falcon platform with no credit card required, allowing you to test the core next-gen antivirus and EDR features.

How does the agent-based vs. agentless approach work for cloud security?

Falcon uses a unified agent for deep runtime protection on workloads. It complements this with agentless monitoring for quick visibility and configuration assessment across cloud accounts, providing a complete CNAPP solution.

What is the CrowdStrike Cyber Superintelligence Lab?

It's an internal R&D group combining AI researchers, offensive operators, and incident responders. Its first product, SafeMind, uses a continuous learning loop (Red Tempest/Blue Solano) to create defenses that evolve faster than adversaries.

Is there on-premises equipment required?

No. The Falcon platform is fully cloud-native. There are no controllers to install, configure, update, or maintain on your premises.

Directory/Automation/Endpoint Security/CrowdStrike Falcon

CrowdStrike Falcon

CrowdStrike Falcon is a unified cybersecurity platform that combines AI-powered endpoint protection, cloud security, identity protection, and threat intelligence. Its core capabilities include next-gen antivirus (NGAV), endpoint detection and response (EDR), managed detection and response (MDR), and a next-gen SIEM, all delivered from a single lightweight cloud-native agent. The platform is built on a proprietary threat graph that processes trillions of events weekly to provide real-time protection and intelligence. Target users include security operations centers (SOCs), IT administrators, and CISOs at organizations of all sizes, from small businesses to large enterprises and government agencies. The platform is designed for rapid deployment and simplified management, eliminating the need for on-premises infrastructure. It offers tiered products (Falcon Go, Pro, Enterprise) and fully managed services like Falcon Complete MDR to provide comprehensive security coverage.

Automation

Visit website

Added on

Sep 17, 2026

Cloud-native SaaSLightweight sensorAI-native platformEndpoint SecurityCloud SecurityIdentity ProtectionManaged MDRThreat Intelligence

Product information

Everything worth knowing about CrowdStrike Falcon

The complete picture — from everyday features to the technical detail builders and IT folks dig for.

Core features

What it actually does

Next-Gen Antivirus (NGAV)

Protects against malware, ransomware, and sophisticated attacks using AI and adversary intelligence. Deploys in minutes.

Endpoint Detection and Response (EDR)

Continuous endpoint visibility to detect, investigate, and respond to threats automatically, stopping breaches.

Managed Detection and Response (MDR)

24/7 expert-led, AI-accelerated managed security service for comprehensive threat detection and response.

Identity Protection

Continuous security for human, non-human, and AI identities to prevent unauthorized access and misuse.

Unified Cloud Security (CNAPP)

Agent and agentless protection for cloud environments, providing visibility from code to cloud.

Technical capabilities

AI Detection & Response

Secures AI adoption and development, protecting agents, models, and prompts across endpoints, cloud, and SaaS.

Threat Intelligence & Elite Hunting

Backed by world-class research and elite experts who continuously hunt for signs of sophisticated intrusions within the Falcon platform.

Must watch videos

4:20

Tutorial4:20

AI Security 101: Enterprise AI

Enterprise AI is changing how organizations work, build, and innovate. To unlock its full value, teams need to understand how AI connects to employee productivity, proprietary data, and security risk. In this video, Sourabh, VP of Engineering, from CrowdStrike explains what enterprise AI means, including employee use of AI tools and the AI-powered applications and features organizations are building. Learn why large language models do not automatically understand enterprise data, how organizations can add enterprise context, and why shadow AI creates new visibility and governance challenges. Sourabh also covers common approaches for making AI applications more relevant to the business, as well as fine-tuning models for enterprise-specific use cases. As organizations accelerate AI adoption, security teams need visibility and control across employee GenAI use, homegrown AI applications, agents, prompts, and enterprise data flows. Understanding how generative AI works is an important first step toward securing it. CrowdStrike Falcon® AI Detection and Response helps organizations gain visibility into AI use and protect AI applications, agents, prompts, and enterprise data as adoption expands. 🛡️ CrowdStrike AI Security Hub Explore CrowdStrike resources for understanding & securing generative AI adoption across the enterprise: https://cs.link/urLra 📣 Connect With Us: ► X: https://twitter.com/CrowdStrike ► Instagram: https://www.instagram.com/crowdstrike ► LinkedIn: https://www.linkedin.com/company/crowdstrike 🔔 Subscribe to stay updated! #CrowdStrike #Cybersecurity #AISecurity101

Defeat Frontier AI Attacks: Charlotte AI AgentWorks Meets Falcon for IT Demo

0:53

Tutorial0:53

Defeat Frontier AI Attacks: Charlotte AI AgentWorks Meets Falcon for IT Demo

Frontier AI has armed adversaries with unprecedented speed, finding and exploiting vulnerabilities faster than humans can respond. To keep pace, defenders need agentic AI operating on defense. In this demo, see how a Frontier AI Exploitation Defense Agent in Charlotte AI AgentWorks identifies and prioritizes critical risk, then hands off to Falcon for IT Risk-Based Patch Management for controlled remediation, all within the CrowdStrike Falcon® platform. Watch how CrowdStrike helps security teams: 🔹 Identify Frontier AI risk with Charlotte AI AgentWorks 🔹 Prioritize by exploitability to surface critical active risk and affected systems 🔹 Remediate with Falcon for IT Risk-Based Patch Management 🔹 Reduce exposure in minutes, not days or weeks By connecting agentic risk identification to governed remediation, CrowdStrike keeps teams in control, with built-in guardrails, role-based access, and transparent operations across the Falcon platform. Ready to defend at the speed of AI? Watch now to see it in action. 🛡️ CrowdStrike Charlotte AI: Explore intelligent automation, agentic workflows, and full control across the Falcon platform: https://cs.link/urP9X 🛡️ CrowdStrike Falcon for IT: See how Falcon for IT unifies IT and security with real-time visibility, remediation, and risk-based patch management: https://cs.link/urP9Z 📣 Connect With Us: ► X: https://twitter.com/CrowdStrike ► Instagram: https://www.instagram.com/crowdstrike ► LinkedIn: https://www.linkedin.com/company/crowdstrike 🔔 Subscribe to stay updated! #CrowdStrike #Cybersecurity

Fal.Con 2026: Securing AI | George Kurtz, Jensen Huang, Lip-Bu Tan & Greg Brockman

1:26:48

Tutorial1:26:48

Fal.Con 2026: Securing AI | George Kurtz, Jensen Huang, Lip-Bu Tan & Greg Brockman

AI is moving faster than ever, but so are AI-accelerated threats. Are you ready to defend against them? Watch the full Day 1 opening keynote from Fal.Con 2026 featuring: • CrowdStrike Founder & CEO: George Kurtz • NVIDIA Founder & CEO: Jensen Huang • Intel CEO: Lip-Bu Tan • Open AI Co-Founder & President: Greg Brockman. Explore this year's theme: "Securing the AI Revolution," and hear crucial strategies for securing AI adoption and stopping next-generation adversaries using the CrowdStrike Falcon platform. 📣 Connect With Us: ► X: https://twitter.com/CrowdStrike ► Instagram: https://www.instagram.com/crowdstrike ► LinkedIn: https://www.linkedin.com/company/crowdstrike 🔔 Subscribe to stay updated! #CrowdStrike #FalCon2026 #Cybersecurity

Who uses it

Real use cases, no hype

Endpoint Protection

Deploy AI-powered next-gen antivirus and EDR across all Windows, Mac, Linux, and mobile endpoints to stop malware and ransomware.

Managed Detection & Response (MDR)

Outsource 24/7 monitoring and incident response to CrowdStrike experts with Falcon Complete for continuous breach prevention.

Cloud Workload Protection (CNAPP)

Secure multi-cloud environments (AWS, Azure, GCP) with unified visibility and runtime protection for workloads, containers, and serverless.

Identity Security

Protect human and non-human identities with continuous monitoring and threat detection for Active Directory and cloud identity providers.

AI System Security

Secure the development and runtime of AI models, agents, and prompts with Falcon Guardian and dedicated AI security services.

IT Hygiene & Compliance

Maintain asset inventory, patch status, and compliance reporting with integrated IT hygiene modules and automated workflows.

Threat Intelligence Integration

Leverage adversary intelligence and elite threat hunting to proactively hunt for signs of compromise within your environment.

What's great

Single lightweight agent with zero on-prem hardware
Extensive OS support including legacy Windows and diverse Linux distros
Unified platform for endpoint, cloud, identity, and AI security
15-day free trial with no credit card required

Technical strengths

AI-native architecture with Charlotte AI for agentic SOC workflows
Cloud-native Falcon OverWatch for elite threat hunting integration
Agent-based and agentless CNAPP for complete cloud workload protection

Where it falls short

Pricing is high and opaque, requiring sales contact for quotes
Complex, tiered product bundles (Go, Pro, Enterprise) can be confusing
Significant price jump for advanced features like managed MDR
Full feature set (like advanced threat hunting) only in higher tiers

Technical limitations

Requires internet connectivity for cloud-native management and updates
Sensor version compatibility is strict for specific Linux kernel versions

For technical folks

The deep-dive specs

FAQ

Includes technical Q&A

Literally minutes. A single lightweight sensor is deployed to endpoints, and you manage everything via a web console. No on-premises controllers are needed.