CrowdStrike Certification Program
The CrowdStrike Falcon® Certification Program trains professionals to become Falcon Administrators, Incident Responders, Threat Hunters and Specialists on the Falcon platform so they can better defend their organization against today’s sophisticated cyberattacks.
Earn your wings
Well-trained, certified security professionals understand how to gain the most value from the CrowdStrike Falcon® platform.
The CrowdStrike Falcon® Certification Program covers job roles of Falcon users, from the administrators to the front-line responders (analysts), the investigators / hunters, and the specialist roles for cloud security and identity protection.
Learn more about our certification program by downloading the CrowdStrike Certification Guide and the individual Exam Guides for each role. The exam guides describe the exam design, what the assessment will look like, recommended training, knowledge domain areas covered and detailed exam objectives.
Falcon platform certifications
Get your certification as a Falcon Administrator, Incident Responder, Threat Hunter, Next-Gen SIEM Analyst, or Next-Gen SIEM Engineer.
CrowdStrike Certified Falcon Administrator (CCFA)
The CCFA certification is ideal for the administrator or any analyst with access to the administrative side of the Falcon platform.
CrowdStrike Certified Falcon Responder (CCFR)
The CCFR certification is ideal for the front-line analyst responding to detections or anyone performing those duties.
CrowdStrike Certified Falcon Hunter (CCFH)
The CCFH certification is ideal for the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).
CrowdStrike Certified SIEM Analyst (CCSA)
The CCSA certification is ideal for the security professionals who analyze data and investigate detections using CrowdStrike Falcon® Next-Gen SIEM.
CrowdStrike Certified SIEM Engineer (CCSE)
The CCSE certification is ideal for the security engineer who implements and manages CrowdStrike Falcon® Next-Gen SIEM.
Falcon specialist certifications
Get certified as a Falcon Identity Specialist or Falcon Cloud Specialist.
CrowdStrike Certified Identity Specialist (CCIS)
The CCIS certification is ideal for those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.
CrowdStrike Certified Cloud Specialist (CCCS)
The CCCS certification is ideal for the cloud security engineer who manages the security of the organization’s cloud infrastructure.
Get certified
The CrowdStrike® Falcon Certification Program offers CrowdStrike-trained professionals a way to validate their expertise with the CrowdStrike Falcon® platform. Maximize the likelihood of passing a CrowdStrike certification exam with a great score on your first try by following these steps:
Step 1
Learn the Falcon platform
- Access CrowdStrike University to view the most up-to-date training courses
- Build your technical skills with recommended learning
- Broaden your technical understanding with recommended documentation written by CrowdStrike
Step 2
Prepare for your exam
- Review the Pearson Identification (ID) Requirements
- Review the Pearson Video: What to expect when taking your exam
- Download Exam Guides
Step 3
Schedule your exam
- Buy/redeem an exam voucher
- Select an online exam or take an exam at a Pearson Test Center
- Visit the Pearson site to schedule your exam
