CrowdStrike Falcon
AI-native endpoint, identity and cloud security platform
Overview
CrowdStrike Falcon is a cloud-delivered endpoint, identity and cloud security platform run from one lightweight sensor. Its Charlotte AI layer triages detections and runs investigations, and since March 2026 AgentWorks lets teams build custom security agents without code, orchestrated through Charlotte Agentic SOAR.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 12 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- Next-gen antivirus
- Device control
- Mobile device protection
- Express support
- Everything in Go
- Firewall management
- Everything in Pro
- Endpoint detection and response
- Threat intelligence and hunting
- 24/7 expert-led, AI-accelerated managed detection and response
- Add-on modules such as identity security and SIEM
- Breach Prevention Warranty
Use cases
What you can produce with CrowdStrike Falcon
- Up to 100 devices protected from $59.99 per device per year on Falcon Go
- EDR plus threat intelligence and hunting on Falcon Enterprise at $184.99 per device per year
- 24/7 detection and response handed to CrowdStrike's analysts with Falcon Complete
- Detection triage by Charlotte AI, with 50 free credits a month for qualifying customers
- Custom security agents built without code in Charlotte AI AgentWorks
- A 15-day free trial of Falcon Prevent with no credit card
CrowdStrike Falcon remains a reference point for endpoint security, with EDR, threat intelligence and hunting, and managed detection (Falcon Complete) on one sensor. Charlotte AI is now an agentic analyst, and the March 2026 AgentWorks launch added no-code custom agents. Pricing is unusually transparent at the low end: Falcon Go $59.99, Pro $99.99 and Enterprise $184.99 per device per year, with monthly billing available, while managed detection, identity, SIEM and extra Charlotte credits are quoted.
The July 2024 update that crashed 8.5 million Windows devices is the reminder that one privileged agent is concentration risk. ASEAN buyers should ask where data is stored: the announced in-country clouds are Saudi Arabia, India and the UAE.
What we found
CrowdStrike's latest annual report still lists 19 July 2024 among the risks to its business. That day a faulty content update for the Falcon sensor crashed Windows systems, which Microsoft put at about 8.5 million devices. Since then the business has kept growing. Revenue reached $4.81 billion in the year to January 2026, and in May CrowdStrike said it had been named a Leader in Gartner's 2026 Magic Quadrant for Endpoint Protection for the seventh time running; that claim comes from CrowdStrike's announcement, and the Gartner report itself is paywalled.
Most of the change in 2026 has been in Charlotte AI. CrowdStrike now describes it as an agentic security analyst that triages detections and runs investigations across endpoint, identity and cloud. In March it launched AgentWorks, which lets teams build custom security agents without code, with launch partners including Accenture, AWS, Anthropic, Deloitte, Kroll, NVIDIA, OpenAI, Salesforce and Telefónica Tech. Charlotte Agentic SOAR has credit-based pricing, and qualifying customers get 50 free Charlotte AI credits a month; an earlier version of this page said the credits came bundled for enterprise customers.
Unusually for this market, endpoint pricing is published. Falcon Go costs $59.99 per device per year, capped at 100 devices. Falcon Pro is $99.99 and adds firewall management. Falcon Enterprise is $184.99 and adds EDR plus threat intelligence and hunting. Monthly billing runs $7.99 to $19.99 per device. Falcon Complete managed detection and response, identity, SIEM and most other modules are sold by quote, so the published prices cover only the entry point.
On Capterra, read on 12 October 2026, Falcon held 4.7 from 56 reviews. For ASEAN buyers, CrowdStrike does business in Singapore and reports Asia Pacific as 10% of revenue, but its announced in-country cloud regions are Saudi Arabia, India and the UAE, none of them in ASEAN, so ask where your telemetry will actually be stored.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
Notable facts
- CrowdStrike is the company that attributed the 2014 Sony Pictures hack to North Korea and the 2016 DNC breach to Russian intelligence — establishing it as the foremost threat attribution company.
- The Falcon platform processes over 2 trillion security events per week from its global sensor network.
- CrowdStrike's stock fell 11% on a single day in July 2024 when a faulty content update caused 8.5 million Windows devices to crash — the largest IT outage in history.
Frequently asked questions
About this listing
This entry was compiled from publicly available data including CrowdStrike Falcon's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with CrowdStrike Falcon unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to CrowdStrike Falcon directly →
Spotted something out of date? Suggest an update →
Related reading
Cybersecurity
Unit 42 Links Fortinet Path-Traversal Bug to Memory-Only FortiGate Implant in Telecom Intr...
AI & ML
A Chinese AI Hacking Tool and Claude Code Were Behind Korea's Bank Breaches, CrowdStrike S...
Cyber Threat Intel
The FBI Seized a Chinese Contractor's Hacking Tools Used Against Taiwan, Japan and the US
Alternatives to CrowdStrike Falcon
More in Security & Safety
