Falcon Prevent
Next-gen antivirus that stops malware, ransomware, and fileless attacks with on-sensor AI.
Powered by CrowdStrike Falcon
The full Falconmodule portfolio
Every module below is part of the unified Falcon platform — one console and one data layer. SoarseIT licenses, deploys, tunes, and operates the ones you need.
Endpoint Security & XDR
7 modules
Falcon Insight XDR
Industry-leading EDR/XDR: detection, investigation, and response across endpoint, identity, cloud, and more.
Falcon Device Control
Granular control and visibility over USB and peripheral device usage.
Falcon Firewall Management
Centralized host-based firewall policy management from the Falcon console.
Falcon Forensics
At-scale forensic data collection for incident response and threat hunting.
Falcon for Mobile
EDR for iOS and Android that detects threats without draining devices.
Falcon for XIoT
Protection and visibility for IoT, OT, and connected medical/industrial devices.
Identity Protection
3 modules
Falcon Identity Threat Detection
Real-time visibility into identity risk across AD and Entra ID, surfacing attack paths and exposures.
Falcon Identity Threat Protection
Blocks credential theft, lateral movement, and privilege escalation with risk-based conditional access and MFA enforcement.
Falcon Privileged Access
Just-in-time, least-privilege access controls for high-risk accounts and sessions.
Cloud Security
5 modules
Cloud Security Posture Management (CSPM)
Continuous detection and remediation of cloud misconfigurations across AWS, Azure, and GCP.
Cloud Workload Protection (CWP)
Runtime protection for hosts, containers, and Kubernetes wherever they run.
Cloud Infrastructure Entitlement Management (CIEM)
Enforces least privilege across cloud identities and entitlements.
Application Security Posture Management (ASPM)
Traces risk from code to cloud to prioritize what actually matters.
Data Security Posture Management (DSPM)
Discovers and protects sensitive data across cloud and SaaS.
Next-Gen SIEM & SOC
3 modules
Falcon Next-Gen SIEM
Petabyte-scale, AI-native SIEM that unifies all data and correlates it into single incidents in seconds.
Falcon LogScale
Blazing-fast, cost-efficient log management and observability at any scale.
Falcon Fusion SOAR
Built-in orchestration and automation to codify and accelerate response workflows.
Threat Intelligence
3 modules
Falcon Adversary Intelligence
Automated, actionable intel on the adversaries targeting your industry and stack.
Falcon Adversary OverWatch
Elite, intel-led managed threat hunting across endpoint, identity, and cloud, 24/7.
Falcon Intelligence Recon
Monitors the deep and dark web for exposed credentials, brand abuse, and emerging threats.
Exposure Management
4 modules
Falcon Exposure Management
Unifies asset, vulnerability, and attack-surface risk into one prioritized view.
Falcon Spotlight
Scanless, real-time vulnerability management built into the Falcon sensor.
Falcon Surface
External attack surface management that finds and prioritizes internet-exposed risk.
Falcon Discover
Continuous IT hygiene: discover unmanaged assets, accounts, and applications.
AI & Data Protection
3 modules
Charlotte AI
Agentic AI SOC analyst that triages detections, investigates, and drafts response in seconds.
AI Detection & Response (AIDR)
Secures models, agents, and GenAI apps; discovers shadow AI and blocks prompt injection and data exfiltration.
Falcon Data Protection
Modern DLP on the Falcon agent that stops data theft across web, endpoint, and GenAI.
Managed Services
3 modules
Falcon Complete MDR
Fully managed 24/7 detection, hunting, and response run by CrowdStrike experts as an extension of your team.
Falcon Complete Next-Gen SIEM
Managed operation and tuning of Next-Gen SIEM, run for you around the clock.
CrowdStrike Services
Incident response and proactive services to prepare for, respond to, and recover from breaches.
SaaS Security
1 module
Falcon Shield
SaaS security posture management (SSPM) that secures identities, configs, and data across your SaaS estate.