CrowdStrike Falcon® Identity Protection

Stop modern identity-based attacks in real-time

The industry’s only unified platform for identity threat detection and response (ITDR) and endpoint security.

From siloed point products that miss modern attacks to unified, real-time prevention

The Falcon Identity Protection difference

Customer assessment


savings over three years by consolidating endpoint and identity protection1

Customer assessment


faster detection of identity attacks, offsetting ~5,000 investigation hours1

Commercial Bank of California


reduction in cyber insurance premiums2

Mercedes-AMG Petronas F1 Team outpaces modern attacks with Falcon Identity Protection

The standard for unified identity protection

75% of all detections are malware-free activity, involving identity techniques. Eliminate point products and stop modern threats in real-time with the world’s only unified platform for ITDR and endpoint security.

One platform. One console. One agent.

Falcon Identity Protection unifies endpoint and identity security with a single agent and console for immediate time-to-value. Extend your protection further and close the skills gap with industry-leading 24/7 MDR services when you need it.

Unified identity protection for hybrid environments

Stop attacks from endpoint to cloud with complete visibility across traditional Active Directory (AD) and cloud identity providers such as Entra ID and Okta, empowered with industry-leading threat intelligence.

Find stealthy attacks with AI-powered detection

Get an automatic AI-driven baseline of normal user behavior to quickly find anomalies that reveal sophisticated threats as they attempt to move across endpoints and identities.

Stop lateral movement in real-time

Block threats in real time as soon as lateral movement is detected across both the authentication layer or endpoints. Improve your response times dramatically and eliminate the need to hunt through logs.

Enforce risk-based conditional access

Continuously monitor user behavior and risk context with dynamic enforcement of multi-factor authentication (MFA) when risk changes. Seamlessly extend MFA coverage to legacy systems and protocols that are likely to be exploited.

CrowdStrike named an Overall Leader—positioned highest in Innovation—in ITDR Leadership Compass by KuppingerCole.

“CrowdStrike is a cyber industry force, and its Falcon Identity Protection demonstrates real attention to detail where threats are related.”

See the power of Falcon Identity Protection in under three minutes

Get an Identity Security Risk Review

Evaluate your current Microsoft Entra ID and Active Directory security posture with a detailed report and a 1:1 session with a CrowdStrike identity expert.

Schedule free review

Featured resources

White Paper

Top Reasons to Add Falcon Identity Protection to Your Cyber Defense Portfolio Now

Learn more

White Paper

How to Build a Business Case for Unifying Endpoint and Identity Security

Learn more

White Paper

Adversaries Aren’t Breaking In, They’re Logging In

Learn more

Gartner Report

5 Initiatives to Move Toward Security Operations Excellence

Learn more

Data Sheet

Identity Threat Detection and Response (ITDR) Solution Brief

Learn more

Data Sheet

Identity Threat Detection

Learn more

Data Sheet

Identity Threat Protection

Learn more
Falcon in cloud


CrowdStrike Falcon Identity Protection


Detect Identity Threats in Real-Time


Active Directory Risk Review Video


Demo Drill Down: Stopping Lateral Movement


Demo Drill Down: Falcon Identity Protection Honeytokens

1 These numbers are projected estimates of average benefit based on recorded metrics provided by customers during pre-sale motions that compare the value of CrowdStrike with the customer’s incumbent solution. Actual realized value will depend on individual customer’s module deployment and environment.
2 Results are from Commercial Bank of California Individual results may vary by customer.