Security
CrowdStrike Falcon, scoped, deployed and supported by people you can call
CrowdStrike Falcon is a cloud-native security platform that uses a single lightweight agent to deliver antivirus, endpoint detection and response, threat hunting, identity protection and more as add-on modules. Storcom is a CrowdStrike partner that helps you choose modules, handles registration and procurement, deploys and tunes Falcon, and supports it afterward.
Last updated
Practice: Managed cybersecurity
- Built for
- For teams replacing legacy antivirus or adding managed detection without adding staff.
- What you get
- Migration off legacy antivirus and EDR
- CrowdStrike partner: resell, deploy, support
- One agent, modules added as needed
- Falcon Flex licensing guidance
- Delivered from
- Geneva, Illinois, for Chicagoland and customers across the U.S.
What is CrowdStrike Falcon?
Falcon is CrowdStrike’s security platform. A single lightweight agent, the Falcon sensor, runs on each laptop, server or cloud workload and streams activity to CrowdStrike’s cloud, where detection and analysis happen. There is no on-premises management server to maintain, and new capabilities are switched on from the console rather than installed as another agent.
Because every module uses the same agent and the same data, you can start with antivirus replacement and add detection and response, threat hunting, identity protection or exposure management later without redeploying.
Which Falcon modules does your team need?
Most organizations start with prevention and detection, then add modules as gaps or staffing change.
| Module | What it does | Consider it when |
|---|---|---|
| Falcon Insight XDR | Endpoint detection and response, extended with data from other security tools | You need to see and investigate what happens on each endpoint |
| Falcon Adversary OverWatch | Around-the-clock threat hunting by CrowdStrike analysts looking for hands-on-keyboard attacks | You have EDR but nobody hunting through it |
| Falcon Complete MDR | Fully managed detection and response, with CrowdStrike experts monitoring, investigating and remediating 24×7 | You want the platform run for you around the clock |
| Falcon Prevent | Antivirus replacement (NGAV) that blocks malware and ransomware using machine learning and behavior, not just signatures | You are replacing legacy antivirus |
| Falcon Identity Protection | Detects and stops identity-based attacks against Active Directory and cloud identity providers, such as credential misuse and risky logins | Stolen credentials and lateral movement are a concern |
| Falcon Exposure Management | Asset inventory, vulnerability assessment and external attack surface visibility from the same agent and console | You need continuous vulnerability management without separate scanners |
| Falcon Next-Gen SIEM | Log collection, search and detection across Falcon and third-party data sources | You need a SIEM or want to replace an existing one |
| Falcon Cloud Security | Posture management and workload protection for AWS, Azure and Google Cloud | You run production workloads in public cloud |
CrowdStrike updates module names and bundles from time to time. We confirm current packaging when we scope your environment.
What is Falcon Flex?
Falcon Flex is a CrowdStrike licensing model in which you commit to an amount of spend and draw on it for the modules you need, instead of buying each module as a separate, fixed subscription. Within the terms of the agreement, you can try a module, roll it out more widely, or shift spend to a different module as priorities change.
Flex tends to suit organizations that expect their needs to grow, for example starting with endpoint protection and adding identity protection or SIEM during the term. We model Flex against module-by-module licensing so you can compare before you sign.
How does Storcom help with CrowdStrike?
Scope and select modules
We review your endpoints, identity setup, cloud footprint and staffing, and recommend the modules that close your gaps without paying for what you will not use.
Deal registration and procurement
We register the opportunity with CrowdStrike, build the quote, and handle the order and licensing, including Falcon Flex agreements.
Deploy and tune
We roll out the Falcon sensor in phases, set prevention and response policies, and tune exclusions so business applications keep running.
Migrate off legacy antivirus or EDR
We plan the cutover so Falcon is protecting and reporting on each machine before the old agent is removed, with no gap in coverage.
Support it
Ongoing help with policy changes, sensor updates, console questions and renewals, backed by Storcom 24×7×365 support.
Technology we deploy for this
CrowdStrike
CrowdStrike Falcon for endpoint detection and response and vulnerability management, resold, deployed and tuned by Storcom, including Falcon Flex bundles.
Sources
- The CrowdStrike Falcon platform CrowdStrike. Accessed .
- CrowdStrike Falcon Flex CrowdStrike. Accessed .
- CrowdStrike Falcon Complete MDR CrowdStrike. Accessed .
Frequently asked questions
What is the difference between Falcon Insight XDR and Falcon Complete MDR?
Falcon Insight XDR is the detection and response technology, and your team or a partner works the alerts. Falcon Complete MDR is CrowdStrike’s fully managed service, in which CrowdStrike experts monitor, investigate and remediate threats around the clock on your behalf. Teams without security staff often choose Complete.
Is Storcom a CrowdStrike reseller?
Yes. Storcom is a CrowdStrike partner that resells, deploys and supports the CrowdStrike Falcon platform. We handle scoping, deal registration, quoting and procurement, then the deployment and ongoing support.
How does Falcon Flex licensing work?
With Falcon Flex you commit to a level of spend with CrowdStrike and use it across the Falcon modules you need, rather than buying each as a fixed subscription. You can add or change modules within the agreement as your needs change. We model Flex against standard licensing so you can compare the two.
Can we switch to CrowdStrike from our current antivirus without a gap in protection?
Yes. We deploy the Falcon sensor in phases and confirm each device is protected and reporting before the legacy agent is removed. Exclusions are tuned during the rollout so business applications are not disrupted.
Does CrowdStrike Falcon slow down endpoints?
Falcon uses a single lightweight sensor and does most of its analysis in CrowdStrike’s cloud, so it does not rely on the heavy scheduled scans legacy antivirus uses. We tune policies during deployment to keep the impact on business applications low.
Can Storcom manage Falcon for us?
Yes. For 24×7 managed detection and response, we pair Falcon with Falcon Complete MDR, CrowdStrike’s managed service, and stay your point of contact for licensing, deployment and support. Our managed EDR service explains how alerts are triaged and contained.
Related services
- Managed EDRManaged EDR from Storcom: 24×7 endpoint detection and response on CrowdStrike Falcon or Arctic Wolf, with…
- Security OverviewManaged security services from Storcom: managed EDR, continuous risk scanning, managed firewall and…
- Continuous Risk ScanningContinuous risk scanning, delivered by Storcom on CrowdStrike Falcon, finds and ranks vulnerabilities across…
- Cloud securityCloud security and compliance for Azure, AWS and hosted workloads: identity, network, data and logging…
- Managed FirewallManaged firewall services from Storcom: policy management, firmware updates, monitoring and change control for…
Start with a discovery call.
Tell us what you run today, what is changing and what worries you. We listen, ask questions and tell you plainly whether and how we can help. No cost, no commitment.