CrowdStrike Falcon® Insight XDR: Extended Detection and Response (XDR)
The world’s leading AI-powered platform for unified EDR and XDR
The world’s leading AI-powered platform for unified EDR and XDR
Stop breaches with pioneering detection and response across all key attack surfaces
See Falcon Insight XDR in action
Stealthy adversaries are moving even faster with breakout time down to just 79 minutes. See how Falcon Insight XDR delivers enterprise-wide visibility, detects advanced threats, and responds automatically across your environment.
Survival of the fastest
Survival of the fastest
71%
of detections in 2022 were malware-free
79 min
is all it takes for an attacker to start moving laterally
70%
of organizations struggle to keep up with alerts
Why choose Falcon Insight XDR?
Full-spectrum visibility. Unparalleled insight.
Outpace the adversary with comprehensive visibility into what’s happening on your endpoints, extended across all key data sources through integrated XDR. See the details of even the most sophisticated threats, with complete cross-domain context at your fingertips to rapidly investigate threats and inform quick, confident action.
Superior protection.
Proven time and time again.
Falcon Insight XDR enriches and prioritizes comprehensive data with world-class, embedded threat intelligence and full MITRE ATT&CK mappings, saving analysts significant time. AI-powered protections instantly surface and prevent sophisticated threats, stopping breaches without any prior knowledge of the threat.
Rapid, automated response.
Zero compromise.
Powerful Real Time Response (RTR) and third-party actions enable swift containment and investigation of threats, with on-the-fly remote access to rapidly respond from anywhere in the world. Harness the power of integrated Falcon® Fusion SOAR to orchestrate and automate complex and repetitive tasks, improving accuracy and efficiency at scale.
Falcon Insight XDR use cases
EDR
Supercharge your SOC with the pioneer and industry leader in EDR. Analysts are empowered to detect, investigate, and respond to threats enterprise-wide at the speed of today’s sophisticated adversaries.
Native XDR
Falcon Insight XDR correlates native data from across the entire Falcon platform at no additional cost* to truly unify security operations and paint the complete picture of advanced attacks beyond the endpoint.
Open XDR
Falcon Insight XDR unifies third-party data sources across all key attack surfaces, giving you comprehensive detection and response across third-party tools from one unified XDR command console.
Falcon Insight XDR key capabilities
Just announced:
New Falcon Insight XDR capabilities*
Charlotte AI Investigator
Radically transform the speed and efficiency of investigations with Charlotte AI Investigator. Focus on incidents instead of alerts and engage AI to accelerate incident triage. Starting with a seed of information, Charlotte AI Investigator automatically correlates related context into a single incident and generates an LLM-powered incident summary for understanding by security analysts of all skill levels.
XDR Incident Workbench
The new XDR Incident Workbench delivers a lightning fast user experience designed around incidents, not standalone alerts, to greatly accelerate response times. Analysts can optimize workflows with intelligent entity linking, added cross-domain context, annotations, incident history tracking, and more.
Collaborative Command Center
Work incidents in real-time with security analysts from any location, at any time, from a unified source of truth. Teams can collaborate remotely to triage, investigate, and respond as one unit, instead of attempting to stitch together multiple fragmented tools and sources of context, which slows down response.
XDR for All
All Insight XDR customers can now leverage the power of native XDR as a fundamental Falcon platform capability included at no additional cost. Accelerate investigations with comprehensive endpoint, identity, cloud, and data protection telemetry from across the CrowdStrike platform.
Falcon Insight XDR by the numbers
Falcon Insight XDR by the numbers
CrowdStrike Falcon® Insight XDR delivers better outcomes for customers, maximizing security, operational, and economic value.
99%
Detection coverage in the MITRE ATT&CK® Evaluations for Security Service Providers
70%
Reduction in mean time to response**
6x
Reduction in security consoles by consolidating four AV agents with six consoles into one unified platform**
"CrowdStrike dominates in EDR..."
"CrowdStrike dominates in EDR..."
Customer case studies
A Leader for the third consecutive time
A Leader for the third consecutive time
Tested and proven leader
100% coverage in the MITRE Engenuity ATT&CK® Evaluations: Enterprise
CrowdStrike Falcon® platform achieves 100% in protection, visibility and detection.
View results >
Named a Leader
Forrester has named CrowdStrike a “Leader” in The Forrester Wave: Endpoint Detection and Response Providers, Q2 2022.
Read the report >
Named a Leader
Forrester has named CrowdStrike a Leader in the 2023 Forrester Wave for External Threat Intelligence Services Providers (ETISP).
Read the report >
End-to-end MDR & MXDR
End-to-end MDR & MXDR
*The above section includes forward-looking statements including, but not limited to, statements concerning the expected timing of product and feature availability, the benefits and capabilities of our current and future products and services, and our strategic plans and objectives. Such statements are subject to numerous risks and uncertainties and actual results could differ from those statements. Any future products, functionality and services may be abandoned or delayed, and customers should make decisions to purchase products and services based on features that are currently available.
**Outcomes based on real Business Value Assessments for individual customers.
1 Gartner, Magic Quadrant for Endpoint Protection Platforms, Peter Firstbrook, Chris Silva, 31 December 2022.
Gartner is a registered trademark and service mark and Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved. The Gartner document is available upon request from CrowdStrike. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.