CrowdStrike Falcon® Complete Next-Gen MDR
Your defense. Our mission.
Stop breaches faster with the industry leader in MDR.
Gaps in speed, visibility, and expertise give adversaries the upper hand
Lateral movement in
under an hour
under an hour
Attacks span multiple
domains
domains
Detection alone isn’t
enough
enough
Real outcomes - validated by customer results
Falcon Complete Next-Gen MDR delivers outcomes you can measure, backed by your peers.
Stay ahead of attacks with full-cycle protection
24/7 expert-led, AI-powered defense that detects, investigates, and remediates threats before they disrupt your organization
4min
Mean time to detect.2
75%
Reduction in mean-time-to-respond (MTTR).3
13+million
Detections resolved annually.4
Harness the power of the Crowd
Gain protection from ransomware, phishing, and emerging threats with the world’s-best analysts powering your defense. The Falcon Complete team owns the fight, delivering end-to-end detection, disruption, and remediation against advanced adversaries — giving your team measurable outcomes, not noise.
×
![]()
Stop cross-domain attacks
Stop attacks earlier in the kill chain with protection across endpoints, identities, cloud, and third-party data via CrowdStrike Falcon® Next-Gen SIEM. With visibility across the network perimeter, email, SSO, and more, our experts detect and respond across the attack surface.
Expert-led, AI accelerated MDR
Gain faster threat detection and response. Our experts work 24/7 with CrowdStrike Charlotte AI, using generative AI and agentic workflows to detect, investigate, and respond in real time. We operate with human expertise at the speed of AI to protect your business from the adversary.
×
![]()
×
![]()
All-domain threat hunting
Stop the breach with MDR, enhanced by CrowdStrike Falcon® Adversary OverWatch. Our AI-driven, intelligence-led threat hunting offers 24/7 coverage across endpoints, identity, cloud workloads and third-party Next-Gen SIEM data.
Expert threat remediation
Eliminate threats across endpoints, cloud, identities, and third-party domains with expert-led, full-cycle remediation. From detection to response, our team takes swift, decisive action so you stay protected without adding to your workload.
×
![]()
See Next-Gen MDR in action
Recognized as the MDR leader — year after year
Analyst recognition confirms what our customers experience every day — unmatched speed, outcomes, and innovation.
Customers measure MDR in outcomes, not alerts
See how leaders across industries rely on Falcon Complete Next-Gen MDR to stop breaches fast.
Falcon Complete was exactly what we wanted … both human eyes and AI eyes watching over our security … For less money, we have an entire team that’s chasing the sun and protecting our systems 24/7. It was a no-brainer for us.”
Nich Durst, Global IT Infrastructure Manager, The Third Floor
Switching over to CrowdStrike was a win-win situation, they have a better product and complete management behind it”
Stamatis Tsintsaris, Global IT Infrastructure Architect, CordenPharma
CrowdStrike took a major weight off our shoulders, bringing world-class expertise and execution to aid our response. They had the playbooks, the people, and the process ready to go."
David Black, Security Officer, SiteOne Landscape Supply
What's New
Breach Prevention Warranty FAQs
CrowdStrike is offering a warranty to Falcon Complete™ customers that will cover up to $1 million in breach response expenses if there is a security incident within the environment protected by CrowdStrike Falcon® Complete.
The coverage is included with the purchase of Falcon Complete at no additional charge to the customer.
CrowdStrike Falcon® Complete, is a turnkey solution, combining the Falcon Endpoint Protection (EPP) technology with the skills and experience of the Falcon Complete Team. The team takes over the administration and monitoring of the Falcon platform and responds to threats 24 hours a day.
A customer’s coverage tier for each annual warranty period corresponds to the number of licenses on its Falcon Complete subscription for that period. The tier determines the total amount of warranty protection based on the table below:
Licensed Endpoint Quantity | Warranty Cap* |
Up to 4,999 | $100,000 |
5,000-10,000 | $500,000 |
10,001 and above | $1,000,000 |
*Subject to sublimit of $100,000 for cyber extortion payments
To be eligible for warranty coverage, the security incident must constitute unauthorized access by a third party to the operating system of an endpoint protected by Falcon Complete that results in the malicious exfiltration, destruction and/or irreversible encryption of customer data that customer reasonably believes has value in excess of $5,000.
The warranty covers certain breach response fees and expenses incurred by the customer, including legal consultation, forensic services, notification expenses, identity theft and credit monitoring, public relations and cyber extortion payments.
The warranty is included with the purchase of a Falcon Complete subscription. There is no additional charge to the customer. The warranty is purely a value-added benefit for the customer.
The customer must subscribe to Falcon Complete and agree to the warranty terms and conditions.
The warranty is offered for 12 months from the date the customer signs the warranty agreement. Customer must also maintain an active Falcon Complete subscription.
Only reseller partners. Since the CrowdStrike Breach Prevention Warranty is included as part of the standard Falcon Complete bundle, reseller partners offer the warranty to their customers by default, in available regions. Other CrowdStrike partners are ineligible and must provide their own warranties, should they so choose, since they provide additional third-party products and services outside of the CrowdStrike ecosystem.
No. The warranty agreement is tailored to CrowdStrike’s insurance coverage and is therefore only offered on a “take it or leave it” basis.
No. The warranty only applies to Falcon Complete.
Any new Falcon Complete customer is eligible for the warranty; however, pre-existing security incidents are not covered.
No, the security incident must first occur and be discovered during a warranty period.
Yes, the protected endpoints must be supported Windows, MacOS, or Linux operating systems configured with CrowdStrike Falcon Complete’s recommended Measured Security Posture (or higher) at all times. The customer will initially receive read-only access to the Falcon Platform.
Yes, security incidents resulting from a customer allowlisting an endpoint, altering configurations to fall below the measured security posture, failing to follow CrowdStrike’s prevention or remediation instructions, and altering the Falcon Complete product are excluded. Other exclusions include customer’s fraudulent, criminal or malicious acts, violations of the law and other physical and force majeure events.
The Falcon Complete Breach Prevention Warranty is currently not available in Italy or Japan and may be restricted in other regions. Customers should contact their CrowdStrike representative for full details on eligibility.
1CrowdStrike 2025 Global Threat Report
2MITRE Engenuity ATT&CK® Evaluations for Managed Services, Round 2
3CrowdStrike Business Value Assessments (BVAs) conducted in partnership with individual Falcon Complete customers
4Falcon Complete Team Operational Metric
2MITRE Engenuity ATT&CK® Evaluations for Managed Services, Round 2
3CrowdStrike Business Value Assessments (BVAs) conducted in partnership with individual Falcon Complete customers
4Falcon Complete Team Operational Metric
