Introducing G2.ai, the future of software buying.Try now
- Home
- ...
- Endpoint Protection Platforms
- CrowdStrike Falcon Endpoint Protection Platform
- ThreatLocker
- CrowdStrike Falcon Endpoint Protection Platform-vs-ThreatLocker
Compare CrowdStrike Falcon Endpoint Protection Platform and ThreatLocker 
At a Glance
Market Segments
Enterprise (53.1% of reviews)
Small-Business (61.1% of reviews)
Entry-Level Pricing
Free Trial
Free Trial
CrowdStrike Falcon Endpoint Protection Platform
Star Rating
(297)4.7 out of 5
Market Segments
Enterprise (53.1% of reviews)
Entry-Level Pricing
Free Trial
Browse all 4 pricing plansThreatLocker
Star Rating
(284)4.8 out of 5
Market Segments
Small-Business (61.1% of reviews)
Entry-Level Pricing
Free Trial
Free Trial is available
Browse all 2 pricing plansSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- Users report that CrowdStrike Falcon excels in real-time detection with a score of 9.6, which reviewers mention significantly enhances their ability to respond to threats as they occur. In contrast, ThreatLocker, while strong in application control with a score of 9.7, does not match the same level of real-time threat response.
- Reviewers mention that ThreatLocker offers superior application control features, scoring 9.7, which allows for more granular control over applications and processes. Users on G2 highlight this as a key differentiator for organizations needing strict application management.
- G2 users indicate that CrowdStrike Falcon's quality of support is rated at 8.9, which is lower than ThreatLocker's impressive score of 9.8. Reviewers say that the responsiveness and expertise of ThreatLocker's support team have been crucial for their operational needs.
- Users say that CrowdStrike Falcon's ease of use is rated at 9.1, making it more user-friendly for teams with varying levels of technical expertise. In contrast, ThreatLocker’s ease of use score of 8.5 suggests that some users find it less intuitive, which can impact onboarding and daily operations.
- Reviewers mention that CrowdStrike Falcon's proactive threat hunting capabilities, rated at 8.9, provide valuable insights into potential vulnerabilities. However, ThreatLocker’s proactive report alerts score of 9.8 is noted by users as a standout feature that keeps them informed about potential threats before they escalate.
- Users report that both platforms offer free trials, but CrowdStrike Falcon's trial is often highlighted for its comprehensive features, allowing users to experience its full capabilities. In contrast, ThreatLocker’s trial is noted for its focus on application control, which may not appeal to all users looking for broader endpoint protection.
Featured Products
Sponsored
EventSentry
(40)
Threat Intelligence
Visit Website
Sponsored
Tenable Vulnerability Management
(100)
Threat Intelligence
Visit Website
Pricing
Entry-Level Pricing
CrowdStrike Falcon Endpoint Protection Platform
Falcon Pro
Free Trial
Provides superior protection from cyber attacks, detects malicious activity, and offers immediate response capabilities for your business.
- Next-Generation Antivirus
- Threat Intelligence
- USB Device Control
ThreatLocker
Enterprise
Free Trial
ThreatLocker enables IT teams to control the applications that run on their machines, and stop these applications from being exploited and weaponized. We give IT teams total control to manage and define what is, and what is not allowed, to run on their machines.
- Ringfencing™
- Allowlisting
- Storage Control
Free Trial
CrowdStrike Falcon Endpoint Protection Platform
Free Trial is available
ThreatLocker
Free Trial is available
Ratings
Meets Requirements
9.3
209
9.6
130
Ease of Use
9.0
211
8.4
236
Ease of Setup
9.2
171
8.5
224
Ease of Admin
9.0
162
8.6
124
Quality of Support
8.9
205
9.8
129
Has the product been a good partner in doing business?
9.2
163
9.7
123
Product Direction (% positive)
9.6
189
9.7
123
Features by Category
Network Management
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity Management
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Generative AI
Not enough data
Not enough data
Not enough data
Not enough data
Administration
9.1
43
9.2
47
8.6
39
8.3
42
8.8
42
9.6
47
8.8
45
8.1
45
8.9
45
8.5
48
Functionality
9.5
53
9.1
45
8.5
42
8.9
44
9.4
49
8.8
18
9.6
54
8.8
42
Analysis
9.0
51
Feature Not Available
9.2
48
7.7
19
9.2
50
8.4
46
ServiceNow Apps
8.8
13
Not enough data
9.0
12
Not enough data
Agentic AI - ServiceNow Store Apps
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Detection & Response
9.2
45
Not enough data
9.2
46
Not enough data
9.4
46
Not enough data
9.7
47
Not enough data
Management
8.9
46
Not enough data
8.8
43
Not enough data
9.0
43
Not enough data
Analytics
9.3
47
Not enough data
9.1
46
Not enough data
9.2
47
Not enough data
Agentic AI - Extended Detection and Response (XDR) Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Monitoring
9.4
17
Not enough data
9.7
17
Not enough data
8.5
16
Not enough data
9.0
17
Not enough data
9.2
16
Not enough data
Remediation
9.3
17
Not enough data
9.5
17
Not enough data
Platform Features
9.3
14
9.4
13
8.7
15
8.8
13
8.9
15
9.5
13
9.0
14
8.7
13
9.3
15
9.0
13
7.6
14
7.6
13
Automation Capabilities
9.0
14
8.2
13
9.0
15
8.1
13
Generative AI
7.7
17
Not enough data
7.4
17
Not enough data
Generative AI
7.9
11
Not enough data
Identity and Access Management - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Data Security - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Application Visibility - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Policies - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Zero Trust Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - User and Entity Behavior Analytics (UEBA)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Analysis
8.6
7
Not enough data
8.6
7
Not enough data
8.1
7
Not enough data
8.1
7
Not enough data
Detection
8.6
7
Not enough data
8.6
7
Not enough data
9.0
7
Not enough data
Agentic AI - AWS Marketplace
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Orchestration
8.8
58
9.0
14
8.8
58
9.0
14
9.2
63
9.0
14
8.8
58
9.5
14
Information
9.2
66
9.4
14
9.5
69
9.0
14
9.3
67
9.5
14
Personalization
9.4
67
9.3
14
9.4
67
9.0
14
8.7
58
8.5
14
Generative AI
6.8
14
7.7
8
Agentic AI - Threat Intelligence
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security Information and Event Management (SIEM)Hide 14 FeaturesShow 14 Features
Not enough data
Not enough data
Network Management
10.0
5
Not enough data
8.0
5
Not enough data
8.3
5
Not enough data
Incident Management
10.0
5
Not enough data
10.0
5
Not enough data
10.0
5
Not enough data
Security Intelligence
10.0
5
Not enough data
9.7
5
Not enough data
9.7
5
Not enough data
9.7
5
Not enough data
Agentic AI - Security Information and Event Management (SIEM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
System Control
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Vulnerability Prevention
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security Management
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Categories
Categories
Shared Categories
CrowdStrike Falcon Endpoint Protection Platform and ThreatLocker are categorized as Managed Detection and Response (MDR), Endpoint Protection Platforms, Endpoint Detection & Response (EDR), and Threat Intelligence
Unique Categories
CrowdStrike Falcon Endpoint Protection Platform is categorized as Identity Threat Detection and Response (ITDR), AWS Marketplace, Extended Detection and Response (XDR) Platforms, User and Entity Behavior Analytics (UEBA), ServiceNow Store Apps, Endpoint Management, Antivirus, and Security Information and Event Management (SIEM)
ThreatLocker is categorized as Zero Trust Networking and Zero Trust Platforms
Reviews
Reviewers' Company Size
CrowdStrike Falcon Endpoint Protection Platform
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
ThreatLocker
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Information Technology and Services
16.7%
Computer & Network Security
9.8%
Financial Services
8.7%
Hospital & Health Care
5.5%
Computer Software
4.7%
Other
54.5%
Information Technology and Services
36.7%
Computer & Network Security
19.1%
Hospital & Health Care
4.2%
Accounting
3.2%
Government Administration
2.8%
Other
33.9%
Most Helpful Reviews
CrowdStrike Falcon Endpoint Protection Platform
Most Helpful Favorable Review
Verified User in Financial Services
CrowdStrike Falcon Endpoint Protection Platform has great user interface and easily understandable for layer 1 analyst or a new user
Most Helpful Critical Review
Ernesto T.
Verified User in Retail
When looking at an incident, it only shows a process tree related to the incident. In order to view the whole panorama of what was going on you need to navigate to Investigate host, which consumes more time and is slow to load. Compare that to Cisco AMP4E...
ThreatLocker
Most Helpful Favorable Review
Roy R.
Verified User in Computer & Network Security
We've been partnering with ThreatLocker for over five years now. They are a key partner and a critical component of our Managed IT Security services as well as our security stack. We are strong advocates of Zero Trust, and we make sure ThreatLocker is...
Most Helpful Critical Review
Teng V.
Verified User in Government Administration
The thing about ThreatLocker is the admin has to know what they're doing. If they don't it can be a major pain in the thorn for your team. So ask yourself, does my admin know what they're doing? If they don't, I would look for a more admin friendly platform.
Verified User in Financial Services
CrowdStrike Falcon Endpoint Protection Platform has great user interface and easily understandable for layer 1 analyst or a new user
Roy R.
Verified User in Computer & Network Security
We've been partnering with ThreatLocker for over five years now. They are a key partner and a critical component of our Managed IT Security services as well as our security stack. We are strong advocates of Zero Trust, and we make sure ThreatLocker is...
Ernesto T.
Verified User in Retail
When looking at an incident, it only shows a process tree related to the incident. In order to view the whole panorama of what was going on you need to navigate to Investigate host, which consumes more time and is slow to load. Compare that to Cisco AMP4E...
Teng V.
Verified User in Government Administration
The thing about ThreatLocker is the admin has to know what they're doing. If they don't it can be a major pain in the thorn for your team. So ask yourself, does my admin know what they're doing? If they don't, I would look for a more admin friendly platform.
Alternatives
Discussions
How to uninstall the CS sensor remotely from any host?
2 comments
BB
This can be done via RTR if enabled or via deploying CS's uninstall tool through GPO, or whatever other deployment package manager you are using.Read more
How do people see Firewall logs in Crowdstrike . Is it Possible to view Firewall logs or requires a separated application to pull those into CS console.
1 comment
BB
You can see firewall changes and rule modifications under the event_SimpleNames "FirewallChangeOption" and "FirewallSetRule". CrowdStrike's Firewall license...Read more
What does ThreatLocker do?
1 comment
MF
Threatlocker does application whitelisting & application ringfencing. Application Whitelisting only allows known & tested applications to run on your...Read more
What is the function of application whitelisting?
1 comment
DR
Application Whitelisting is the primary method you will use within ThreatLocker in order to allow approved applications to run on a system. ThreatLocker's...Read more
Hunting for software insights?
With over 2.5 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
