Who are the main CrowdStrike competitors besides Palo Alto?
Can CrowdStrike and Palo Alto integrate with third-party security tools?
Which offers better EDR capabilities: CrowdStrike or Palo Alto?
Videos
Hey guys, we are an MSP with 1000 endpoints currently using webroot. We understand it isn't good enough and nearing the end of our POC evaluation for both sentinelone and crowdstrike. I can say I've had pretty good experiences with both so far but I have seen Crowdstrike be able to detect more things (fileless attacks), seen less false positives and also be a lighter agent on the machines we've tested. Also Crowdstrike's sales engineer went above and beyond with helping setup best practices etc.
I've done my research and it appears Crowdstrike much more often than not test better in independent evaluations like MITRE and be rated better (gartner). Sentinelone seems still to be mentioned 5/6 times more in these threads. I'd like to do my due diligence in questioning CS to make sure I make a good decision. Are most people's decision to not go Crowdstrike due to:
barrier to entry (minimums)
Slightly higher pricing?
Easy consumption model (pax8)?
I'd love to understand anyone else's viewpoint for other reasons!
Anyone worked at one of these big cyber companies. On the surface it looks like big money can be made in the cyber security space they operate in.
What’s it like working there, how are people performing, what’s the outlook?
I am looking to do a POC on all 3. I can't be the first one to do so around here, so curious to see what others have experienced with the product, did it meet their expectations, why did they look at it in the first place, etc.
kid_miracleman I'd be happy to help you out on the CrowdStrike product. At a high level, it deploys in seconds, provides insight into bad guy activity on the endpoint, and uses a graph powered database on the backend to let you ask questions of your endpoints to proactively hunt down anomalies and find badness. The product comes with threat intelligence baked in, which can provide attribution on the fly. There are a rich set of features including prevention, forensics, and other capabilities to quickly resolve and prevent bad guy activity.
Crowdstrike is competing with Dell SecureWorks as a managed SIEM. Agent pulling endpoint behavioral data to Splunk + Virus Total Signatures (Yawn). Not a true prevention strategy and will miss things on the indicators of compromise side, just as any solution will.
SentinelOne combines Virus Total API with some light forensics. Big on marketing but POC is another story (especially if you test offline / packed malware)
TRAPS has turned into the forgotten child at PAN. Not their speciality and anti-exploit focused solution won't protect against malware that is delivered via USB, spearfishing, etc....plus messing around in the memory space is risky from a blue screen perspective.
Bit9/CB has decent forensics and plays in the EDR space with Tanium + 20 other solutions.
Cylance - I saw their demo at RSA and it was the cool kid vendor. They demo'd against signature-based AV live and blocked most malware where the other AV solutions block < 50%. I asked about forensics and saw their beta version. I'll be POCing.
We all hear about Crowdstrike being the number #1 choice for large enterprises for MDR/XDR protection. However, I also keep hearing about SentinelOne being a strong contender and being widely adopted in SMBs. I believe Crowdstrike has had a longer runway than SentinelOne and so they are more popular but does anyone here truly believe if SentinelOne will ever be able to give Crowdstike a run for their money?
Based on your experience, do you see SentinelOne taking over Crowdstrike's marketshare in the next few years? I am seeing a lot of momentum on SentinelOne at the moment and want to check if other' share similar observation.
Hey all, we're currently in the process of considering different XDR solutions for my clients and I've got PaloAlto Network's XDR Cortex and SentinelOne's Singularity on my radar.
I figured this is the best place to tap into some real-world experience and feedback about these platforms. If you've got experience with either (or both) of these, I'd love to hear from you.
Specifically, I'm curious about:
Ease of use: Are they intuitive? How's the learning curve?
Performance: Are they effective in threat detection and response?
Integration: How well do they play with the rest of your tech stack?
Cost-effectiveness: While I understand pricing varies, any insight into value for money would be great.
Overall experience:Would you pick one over the other? Why?
Every bit of insight helps 🙏🏼
Cheers!