Simplify Zero Trust. Consolidate tools. Secure identities.
Protect critical data on NIPRNet with a single platform that’s IL5-authorized.
Enforce identity-driven access
Get real-time visibility and unified protection to stop identity-based attacks. The CrowdStrike Falcon® platform serves as the policy decision and enforcement point in your ICAM stack — backed by unmatched adversary coverage and intelligence.
×
![]()
×
![]()
See and control all devices
CrowdStrike integrates with Comply to Connect (C2C) solutions and enables compliance readiness through the lightweight, CrowdStrike Falcon® sensor. Once installed, the agent gathers data from managed and unmanaged endpoints for complete visibility and control.
Secure multi- and hybrid-cloud environments
CrowdStrike Falcon® Cloud Security unifies cloud infrastructure (CSPM), applications (ASPM), data (DSPM), and AI models (AI-SPM) into one console — for complete visibility into your security posture.
×
![]()
×
![]()
Get logging capacity to meet OMB requirements
OMB Memo M-21-31 requires thorough logging. CrowdStrike Falcon® Next-Gen SIEM’s index-free architecture and petabyte scalability helps keep your data at your fingertips for as long as you need, without the hefty price tag of most legacy systems.
Featured Resources
FAQs
The CrowdStrike Falcon® platform is a 100% cloud-native solution, offering unprecedented endpoint capabilities that scale and deliver on endpoint requirements like never before. It requires no on-premises servers, databases or controllers to be installed, freeing you from the cost and hassle of managing, maintaining and updating on-premises software and hardware.
Yes, CrowdStrike has received DoD cloud services provider Provisional Authorization (PA), meeting the requirements of Impact Level 5 (IL5). This certifies that the additional controls and certifications have been met to help agencies cover Controlled Unclassified Information (CUI) and National Security Systems (NSS) data.
Yes and yes. CrowdStrike has two GovCloud environments: one for Federal Agencies and one for the Department of Defense. Since September 2018, the CrowdStrike Falcon platform for Government on Gov-1 has been recognized as “FedRAMP Authorized” on the FedRAMP Marketplace. As of March 2025, CrowdStrike's Gov-1 environment is listed on the FedRAMP Marketplace as authorized at the FedRAMP High baseline. In May 2023 CrowdStrike's Gov-2 environment was granted a Provisional Authorization (PA) at Impact Level 5 (IL-5) from the United States Department of Defense (DoD).
Falcon on GovCloud-1, also referred to as GOV-1, is authorized to operate at the FedRAMP High baseline. This level of authorization is sufficient for a broad range of Department of Defense (DoD) and Defense Industrial Base (DIB) customers.
With the launch of GovCloud-2, CrowdStrike is proud to share that it has been granted DoD Impact Level 5 (IL-5) P-ATO and is committed to helping secure National Security Systems (NSS) and agencies and supporting organizations with controlled unclassified information (CUI) that requires this higher level of protection.
For customers who are subject to FedRAMP or DoD Cloud SRG requirements, it greatly simplifies procurement of Falcon platform solutions and helps agencies improve services by migrating to the cloud. The FedRAMP and DoD cloud authorizations that CrowdStrike maintains and is pursuing are in alignment with the protection of controlled unclassified data as laid out in a variety of compliance programs including FedRAMP, DoD Cloud SRG, and NIST SP 800-171. Meeting these stringent requirements reinforces CrowdStrike’s commitment and ability to serve customers of all types by safeguarding their enterprises with the most effective endpoint protection platform and ultimately stopping breaches. Customers who are not subject to these requirements gain assurance, knowing that the Falcon platform has been audited and validated against some of the strictest security requirements in the world — they can move their endpoint security to the cloud with complete confidence.
CrowdStrike has now been granted authorization to help the Department of Defense and Intelligence Community in protecting National Security Systems (NSS) through our Impact Level 5 P-ATO. CrowdStrike is proud to bring its best-of-breed cybersecurity products and services to these critical customers. For more information on future enhancements, product availability and timelines, please reach out to your local sales representative.
CMMC is a vehicle the U.S. government is using to implement a tiered approach to audit contractor compliance with NIST SP 800-171, based on five different levels of maturity expectations. DOD contractors have been required to comply with NIST 800-171 since January 1, 2018. In the past few years, the DOD grappled with the low rate of NIST 800-171 compliance across the Defense Industrial Base (DIB), and CMMC was created to remedy that systemic issue of non-compliance by both primes and their subs. CMMC is intended to act as a procurement gate that a contractor must pass to be eligible to bid on, win or participate on a contract. Without a valid CMMC certification (Level 1 through 5), the prime and/or sub will be barred from applicable contracts.
The CrowdStrike Falcon Platform for Government platform addresses many of the CMMC 2.0 control requirements based on NIST SP 800-171, and CrowdStrike has an excellent understanding of the model and how to support your unique organizational needs. For additional detail on specific alignment and implementation, please contact your CrowdStrike representative for assistance or review the CrowdStrike Falcon® Platform for CMMC 2.0 product applicability guide published by Coalfire, available from CrowdStrike's Trust Center via self-service registration at trust.crowdstrike.com or from https://www.crowdstrike.com/en-us/resources/white-papers/falcon-platform-for-cmmc/
