CrowdStrike Marketplace

Zscaler Secure Internet Access (ZIA) Data Connector

Enhance Falcon Insight XDR detections with Zscaler Security Service Edge data

Abnormal Cloud Email Security

Stop the full spectrum of email attacks with advanced behavioral data science

Netskope Cloud Access Security Broker for Falcon LogScale

Valuable cloud application insights to improve threat detection and response

Netskope Data Connector

Enhance XDR detections with Security Service Edge data

Netskope Response Actions for Falcon Insight XDR

Extend CrowdStrike Falcon® Insight XDR response actions with Netskope SSE

NinjaOne Endpoint Management

Deploy CrowdStrike to your environment and respond to detected threats quickly, right from the NinjaOne console

NVIDIA AI Enterprise

Leverage LLM-powered applications with rich Falcon data and accelerated computing by the NVIDIA AI Enterprise platform

Okta Data Connector & Response Actions

Extend detection and response with Falcon Insight XDR and identity protection from Okta

Okta Identity-centric Zero Trust

Keep your workforce productive and assets secure with CrowdStrike and Okta

Proofpoint Data Connector

Enhance XDR detections with email security data

Proofpoint Targeted Attack Protection (TAP) for Falcon LogScale

Improve threat detection and response with data logged, analyzed, and visualized

ServiceNow CMDB Ingest for Falcon Discover

Enriched context around your devices, assets and their attributes within a single console

ServiceNow Records for Falcon LogScale

Easily ingest data and quickly find the answers you need

Zscaler Internet Access™ (ZIA) for Falcon

ZIA defines safe, fast internet and SaaS access

Zscaler Internet Access™ for Falcon LogScale

Ingest and visualize ZIA logs in Falcon LogScale

Zscaler Internet Access™ Response Actions for Falcon Insight XDR

Enable XDR response actions with Zscaler Internet Access

Zscaler Private Access™ (ZPA) for Falcon

ZPA provides fast, secure, and reliable private app access for all users from any device or location

Zscaler Private Access™ for Falcon LogScale

Enhance threat detection with ZPA logs in Falcon LogScale

Buy on CrowdStrike Marketplace

Airlock Allowlisting

Safeguard your organization with Application Allowlisting - effective endpoint protection

ArcSight Intelligence

Detect insider threats with UEBA

Buy on CrowdStrike Marketplace

Beyond Identity Zero Trust Authentication

Enable Zero Trust Authentication for secure identity and device access

Cybersixgill Darkfeed

Gain comprehensive and automated IOC enrichment powered by Cybersixgill’s data lake from the deep and dark web

Buy on CrowdStrike Marketplace

DoControl SaaS Security Platform

Find and remediate malicious files in SaaS applications

Buy on CrowdStrike Marketplace

DomainTools Iris

Predictive risk scores and DNS intelligence for rapid in-context profiling of domain observables

Dragos ICS/OT Threat Detection

Detect industrial threats on your CrowdStrike Falcon endpoints

Elevate Platform

Best-in-class employee risk analytics, automation, and protection

Exabeam

Detect and investigate advanced attacks and insider threats with endpoint telemetry and behavior analytics

ExtraHop Reveal(x) 360

Get full-coverage security for when seconds matter

Hunters SOC Platform

Attain greater attack insight

IPQS Fraud, Threat, & Risk Scoring

Elevate protection with enriched threat intelligence for domains, URLs, and IP addresses

Buy on CrowdStrike Marketplace

ITsMine File Protection and Data Security

Track and protect your data, anywhere

JumpCloud Full Disk Encryption

Seamlessly enable full disk encryption across multiple operating systems

JumpCloud Patch Management

Seamlessly enable cross-OS and browser patching across multiple operating systems

Buy on CrowdStrike Marketplace

NopSec Unified VRM

Centralize risk prioritization, remediation workflow automation, and vulnerability reporting

Obsidian SaaS Security Platform

Centralize risk prioritization, remediation workflow automation, and vulnerability reporting

Obsidian Security Data Connector

Extend threat detection across your SaaS real estate in the Falcon platform

Perception Point X-Ray

Preventing any malicious content identified in the endpoint from spreading across the organization

SafeGuard Cyber Business Communication Security

Protecting the way humans work, share, and collaborate

SecurityScorecard Cyber Risk Ratings

Take control of cyber risks

Siemplify Security Orchestrations, Automation & Response

Automate data collection to speed up investigation and orchestrate response across all endpoints – within one interface

Buy on CrowdStrike Marketplace

Tines No-code Automation

Advanced security orchestration and response to respond faster and more effectively to incidents

Buy on CrowdStrike Marketplace

TrueFort Fortress

Zero Trust application protection that secures your applications and cloud workloads

Vanta

Your security and compliance verified.

VirusTotal Threat Context Enrichment

Enriched and actionable context for any indicator

Buy on CrowdStrike Marketplace

Vulcan Cyber Endpoint Vulnerability and Risk Management

Manage the vulnerability and cyber risk lifecycle

Claroty for Falcon LogScale

Seamlessly ingest Claroty Continuous Threat Detection (CTD) logs in Falcon LogScale

1Password Business Data Connector

Easily ingest 1Password data into the Falcon platform to protect your business

1Password Device Trust Data Connector

Unify visibility and ensure only secure devices can access resources

1Password Device Trust for Falcon Insight XDR

Ensure only secure devices can access sensitive company resources

1Password Kolide SOAR Actions

Enable automated, user-driven remediation of device issues.

Abnormal Security Data Connector

Enhance threat detection with Abnormal Security attack detections in Falcon Insight XDR

Abnormal Security SOAR Actions

Streamline email security workflows for enhanced operational security

Absolute Resilience

Make your endpoints and mission-critical applications cyber resilient

AbuseIPDB SOAR Actions

Identify and mitigate threats with real-time abuse data.

Buy on CrowdStrike Marketplace

Acalvio Advanced Threat Defense

AI-Powered Cyber Deception to protect IT, OT, and Cloud

Buy on CrowdStrike Marketplace

Acalvio Honeytokens for Falcon Identity Protection

Prevent identity-driven attacks with Acalvio and CrowdStrike

Buy on CrowdStrike Marketplace

Adaptiva OneSite Patch

Zero-touch, always-on enterprise patching for CrowdStrike vulnerability insights

Aembit Workload IAM Platform

Secure access among workloads, APIs, and SaaS applications

AI SOC Analyst

Purpose-built for autonomous Tier 1 alert triage and investigations.

Akamai Enterprise Application Access

Application access redefined: secure, simple, fast

Akamai Prolexic Analytics SOAR Actions

Monitor and analyze DDoS protection data for actionable insights.

Akamai Secure Internet Access Enterprise (SIA) Data Connector

Easily ingest Akamai SIA logs and events into the Falcon platform

Akamai WAF SOAR Actions

Enhance web security by automating key protective measures to secure apps

Akamai Zero Trust Security Data Connector

Easily ingest Akamai Enterprise Application Access (EAA), Enterprise Threat Protector​ (ETP), ​Akamai​ Multi Factor Authenticator (MFA) and Guardicore Segmentation logs into the Falcon platform

AlienVault OTX SOAR Actions

Ensure fast detection and response with community-powered threat intelligence

Amazon CloudTrail for Falcon LogScale

Seamlessly ingest Amazon CloudTrail JSON logs from S3 in Falcon LogScale

Amazon CloudWatch Data Connector

Easily ingest Amazon CloudWatch logs into the Falcon platform

Amazon CloudWatch for Falcon LogScale

Log and analyze Amazon CloudWatch data in Falcon LogScale

Amazon GuardDuty Data Connector

Easily ingest findings from Amazon GuardDuty into the Falcon platform

Amazon S3 Access Log Data Connector

Easily ingest Amazon S3 access log data into the Falcon platform

Amazon S3 Data Connector

Easily ingest any security logs or events from Amazon S3 into the CrowdStrike Falcon platform

Amazon Security Lake Data Connector

Easily ingest Security Lake data into the CrowdStrike Falcon® platform

Amazon Virtual Private Cloud Data Connector

Easily ingest Amazon Virtual Private Cloud Flow logs into the Falcon platform

Amazon VPC Flow Logs for Falcon LogScale

Ingest and analyze Amazon network traffic flows in Falcon LogScale

Ansible for Falcon LogScale

Log and analyze Ansible playbook data in Falcon LogScale

Apache HTTP Server logs for Falcon LogScale

Ingest and explore server logs in Falcon LogScale

ApexaiQ Asset Intelligence and Security Assurance

Enhanced asset intelligence for improved security decisions with reduced risk

APIVoid SOAR Actions

Leverage real-time insights to detect, investigate, and respond to threats with enhanced threat intelligence.

Appgate SDP

Universal Zero Trust Network Access for unmatched security, control, flexibility and performance

Apple Device Security

Enhance Apple device security with the CrowdStrike Falcon platform

appNovi SOC Security Data and Visualization

Identify security control gaps with cybersecurity mesh for enterprises

AppOmni SaaS Security

Secure the SaaS applications that power your business

AppOmni SaaS Security Platform Data Connector

Achieve secure productivity with your SaaS applications

Arista NDR for Crowdstrike Next-Gen SIEM

Bring deep network security visibility from Arista NDR into CrowdStrike Next-Gen SIEM

Arista NDR for Falcon Insight XDR

Streamline workflows between endpoint and network visibility with CrowdStrike EDR + Arista NDR

Armis Data Connector

Easily ingest OT and IoT data from Armis into the Falcon platform

Armis Intelligence Center SOAR Actions

Build reports with actionable insights powered by aggregated asset intelligence.

Buy on CrowdStrike Marketplace

Armis IoT/OT Asset Intelligence

Unmatched visibility and security for managed and unmanaged assets

ArmorCode ASPM Platform

AI-Powered Application Security Posture Management (ASPM)

Aruba ClearPass Policy Manager

Network access control for wired, wireless, and WAN

Asimily Insight Holistic IoMT Security

Healing the devices that heal

Atlassian Jira Data Center SOAR Actions

Enhance project management and issue tracking by creating, updating, and managing tasks in real-time

Atlassian Jira SOAR Actions

Streamline issue management by automating ticket creation for security incidents. Ensure rapid tracking and resolution of threats, keeping teams aligned on top-priority issues.

Atlassian OpsGenie SOAR Actions

Automate notifications and escalations to ensure critical issues reach the right responders quickly

AWS CloudTrail Data Connector

Seamlessly connect AWS CloudTrail data into the Falcon platform

AWS Config Data Connector

Easily ingest AWS Config data into the Falcon platform

AWS Control Tower

Protect your multi-account AWS environment with CrowdStrike Falcon® Cloud Security

AWS Network Firewall Data Connector

Easily ingest AWS Network Firewall data into the Falcon platform

AWS Security Hub

Send detections generated by the CrowdStrike Falcon® platform to AWS Security Hub

AWS Security Hub Data Connector

Easily ingest Security Hub data into the Falcon platform

AWS Systems Manager Distributor

Automate Falcon agent deployment across your AWS Systems Manager managed nodes

AWS Verified Access

Enable a micro-security perimeter around private applications

AWS Web Application Firewall Data Connector

Easily ingest AWS Web Application Firewall (WAF) logs into the Falcon platform

Axiomatics Risk-Based Access Control

Zero Trust authorization policies

Axis Security Application Access Cloud

Zero trust access made simple

Barracuda Email Gateway Defense Data Connector

Easily ingest events from Barracuda Email Security Gateway into the Falcon platform

Berkley Cyber Risk Solutions

Cyber coverage for emerging exposures, enhanced by pre and post-breach services.

Bitglass Total Cloud Security Platform

Total cloud security

CardinalOps Detection Posture Management Platform for CrowdStrike Falcon® LogScale

Optimize the detection posture of Falcon LogScale

CardinalOps for Falcon® Adversary Intelligence Premium

Turn adversary intelligence into actionable detection with AI and automation

Centripetal CleanINTERNET

Intelligence led network protection

Chubb Cyber Enterprise Risk Management

Our core cyber insurance products can be customized to fit your unique needs to minimize gaps and offer exceptional protections

Cisco Adaptive Security Appliance Data Connector

Connect Cisco Adaptive Security Appliance firewall data to the Falcon platform

Cisco Duo MFA Data Connector

Easily ingest Cisco Duo MFA logs into the Falcon platform

Cisco Duo SOAR Actions

Strengthens identity security by automating multi-factor authentication (MFA) and session management.

Cisco ESA SOAR Actions

Enhance email security by automating spam filtering, phishing detection, and malware protection.

Cisco Firepower Data Connector

Easily ingest Cisco Firepower firewall logs into the Falcon platform

Cisco IOS Data Connector

Easily ingest Cisco IOS logs into the Falcon platform

Cisco Meraki Data Connector

Easily ingest Cisco Meraki logs into the Falcon platform

Cisco Meraki SOAR Actions

Optimize network management with streamlined cloud-based control.

Cisco Secure Email Gateway Data Connector

Seamlessly ingest Cisco Secure Email Gateway data into the Falcon platform

Cisco Umbrella Data Connector

Extend Falcon Insight XDR detections with Cisco Umbrella Security Service Edge data

Cisco Umbrella SOAR Actions

Improve visibility, accelerate responses, and reduce operational complexity.

Claroty

Unmatched visibility and protection for OT, IoT, IoMT, and IT assets

Claroty xDome Data for Falcon Discover for IoT

Ingest Claroty xDome and Medigate data for a deeper XIoT asset inventory

Claroty XIoT Asset Data Connector for Falcon Discover for IoT

Connector for ingesting asset inventory from Claroty Continuous Threat Detection (CTD)

Cloudflare Data Connector

Enhance Falcon Insight XDR detections with Cloudflare Security Service Edge Data

Cloudflare Email Security for Falcon LogScale

Log cloud email security data across phishing and Business Email Compromise (BEC) protection

Cloudflare Zero Trust

Unified internet-native Zero Trust

Coalition Active Cyber Insurance

Cyber coverage tailored to your organization’s cyber risk needs

Cohesity DataHawk for Falcon LogScale

Intelligent threat protection with cyber vaulting and data classification

Commvault Cloud

Deeper threat intelligence for accelerated cyber response and recovery

ConcealBrowse

AI-Powered secure browser extension

Buy on CrowdStrike Marketplace

Concentric Semantic Intelligence

AI-powered DSPM solution

Buy on CrowdStrike Marketplace

Corelight Data Connector

Enhance Falcon Insight XDR detections with Corelight NDR data

Buy on CrowdStrike Marketplace

Corelight Network Security for Falcon LogScale

Ingest, analyze, and visualize Corelight data in Falcon LogScale

Buy on CrowdStrike Marketplace

Corelight Open NDR

Correlate network, endpoint, and threat insights to stop breaches fast

Buy on CrowdStrike Marketplace

Corelight Sample Data for Falcon LogScale

Sample data snapshot of Corelight network detection information in Falcon LogScale

Buy on CrowdStrike Marketplace

Corelight Sensor for Falcon LogScale

Gain insights from Corelight NDR sensors

Buy on CrowdStrike Marketplace

Corelight Threat Hunting Guide for Falcon LogScale

Enhance threat hunting with alerts and saved searches from Corelight

Cortex XSOAR for Falcon Logscale

Leverage Falcon LogScale data automatically with XSOAR

Cribl Data Connector

Easily ingest your security logs, events and alerts from any 3rd party into the Falcon platform from Cribl

Cribl Stream for Falcon Data Replicator

Get the right data to the right destinations in the right formats

Crum & Forster Better Cyber Outcomes with CrowdStrike

Improve your detection and response capabilities with custom discounts and products

CyberArk Privileged Access Manager

Preventing the malicious use of privileged accounts and credentials

CyberArk Privileged Access Manager for Falcon LogScale

Discover, manage, and remediate privileged accounts and credentials

CyberArk Remote Access SOAR Actions

Enhance secure remote access by automating session initiation and privileged access workflows.

CyberArk Secure Web Sessions SOAR Actions

Improve security by capturing user actions within sensitive applications and swift automated response.

Cynerio Healthcare NDR Data Connector

Enrich healthcare IoT security with real-time threat intelligence

Cyware Intel Exchange

Seamlessly ingest CrowdStrike IOCs, threat actors, and reports into Intel Exchange

D3 Security Smart SOAR

Powerful security automation and incident response

Darktrace

Self-learning Cyber AI to discover unpredictable cyber-threats

Data Connector built for Azure Virtual Machines

Ingest Windows and Linux events from Azure Virtual Machines for further threat detection and investigation

Data Connector built for Generic Microsoft Azure Event Hubs

Easily ingest security logs and events from Microsoft Azure Event Hubs into the Falcon platform

Data Connector built for Microsoft Azure Activity Logs

Easily ingest Microsoft Azure activity logs for further analysis, threat detection and investigation

Data Connector built for Microsoft Azure Firewall

Easily ingest Microsoft Azure Firewall logs for further analysis, threat detection and investigation

Data Connector built for Microsoft Azure Key Vault

Easily ingest Microsoft Azure Key Vault logs for further analysis, threat detection, and investigation

Data Connector built for Microsoft Azure Network Security Groups

Easily ingest and analyze Microsoft Azure Network Security Groups diagnostic logs

Data Connector built for Microsoft Azure NSG Flow Logs

Easily ingest Microsoft Azure network security groups (NSG) flow and diagnostic logs

Data Connector built for Microsoft Azure VPN Gateway

Easily ingest Microsoft Azure VPN alerts for further analysis, threat detection and investigation

Data Connector built for Microsoft Defender for Cloud

Easily ingest Microsoft Defender for Cloud alerts for further analysis, threat detection and investigation

Data Connector built for Microsoft Defender for Cloud Apps

Easily ingest Microsoft Defender for Cloud Apps data for further analysis, threat detection and investigation

Data Connector built for Microsoft Defender for Identity

Easily ingest Microsoft Defender for Identity data for enhanced threat detection and investigation

Data Connector built for Microsoft Defender XDR Alerts & Incidents

Easily ingest Microsoft Defender XDR alerts and incidents for improved threat detection and investigation

Data Connector built for Microsoft Defender XDR Events

Easily ingest Microsoft Defender XDR events for further analysis, threat detection and investigation

Data Connector built for Microsoft DLP

Ingest Microsoft DLP and general activity logs for enhanced investigations

Data Connector built for Microsoft Entra ID

Ingest Microsoft Exchange Entra ID data for further analysis, threat detection and investigation

Data Connector built for Microsoft Event Hubs

Enhance detection with Microsoft email and identity data in Falcon Insight XDR

Data Connector built for Microsoft Exchange Online

Ingest Microsoft Exchange Online activity logs for further analysis, threat detection and investigation

Data Connector built for Microsoft Graph API

Enhance XDR detections with Microsoft Defender for Office 365 email and Azure Active Directory identity data

Data Connector built for Microsoft IIS

Ingest Microsoft IIS logs for enhanced investigations

Data Connector built for Microsoft OneDrive

Ingest Microsoft OneDrive activity logs for further analysis, threat detection and investigation

Data Connector built for Microsoft SharePoint

Ingest Microsoft SharePoint activity logs for further analysis, threat detection and investigation

Data Connector built for Microsoft Teams

Ingest Microsoft Teams activity logs for further analysis, threat detection and investigation

Data Connector built for Microsoft Web Application Firewall

Easily ingest Microsoft Web Application Firewall (WAF) logs for further analysis, threat detection and investigation

Dazz Unified Remediation Platform

Unify remediation across code, apps, cloud, and infrastructure

DeepSurface RiskAnalyzer

Cutting-edge vulnerability prediction and attack path analysis for tailored protection

Buy on CrowdStrike Marketplace

Discern Security AI Policy Management

AI based policy assessment and management

Docker Containers for Falcon LogScale

Gain operational insight into your Docker containers

Dragos Endpoint Asset Enrichment for Operational Technology (OT)

Improve OT asset visibility and threat detection

Dragos Platform Data Connector

Easily ingest asset inventory from the Dragos Platform into Falcon Discover for IoT

DTEX InTERCEPT Workforce Cyber Security

Supercharge the CrowdStrike Falcon platform with human behavioral intelligence & forensics

DTonomy AIR

AI-based analysis

EasyVista SOAR Actions

Improve IT service management operations with automation.

Egress Intelligent Email Security

Adaptive cloud email security to detect and prevent inbound and outbound threats

Elisity Identity Based Microsegmentation

Enhance security posture with context-aware policies for users, devices, and applications

EmailRep.io SOAR Actions

Automate email threat detection by scoring email senders and domains in real-time.

Entrust Identity as a Service (IDaaS)

Passwordless, risk-based adaptive MFA and secure access management

Epic Systems EHR Data Connector

Easily ingest Epic Systems electronic health record (EHR) logs for comprehensive visibility

ExtraHop Data Connector

Enhance Falcon Insight XDR detections with ExtraHop NDR data

ExtraHop Reveal(x) for Falcon LogScale

Gain visibility over ExtraHop Reveal(x) flow data for unmanaged systems in Falcon LogScale

Falcon Insight for ChromeOS

Unified EDR and XDR for ChromeOS

Falcon LogScale for Microsoft 365 Email Security

Ingest and parse Microsoft 365 email security events in Falcon LogScale

Falcon LogScale for Microsoft Internet Information Services

Ingest and visualize Microsoft IIS logs in Falcon LogScale

Forcepoint ONE SOAR Actions

Enforce zero-trust policies and protect sensitive data efficiently within your cloud environments.

Forescout eyeExtend

Actively defending the enterprise of things

ForgeRock Data Connector

Enhance Falcon Insight XDR detections with ForgeRock Identity Cloud Data

ForgeRock Identity Platform

Device posture & risk policy

Fortinet FortiGate Cloud SOAR Actions

Automate policy updates to keep infrastructure secure and compliant.

Fortinet FortiGate Data Connector

Seamlessly connect Fortinet firewall data to the Falcon platform

Fortinet FortiGate On-Prem SOAR Actions

Enhance on-premise network security by automating firewall management across on-prem infrastructure

Fortinet FortiWeb VM SOAR Actions

Automate web application firewall management through policy enforcement and threat detection.

Freshworks SOAR Actions

Improve sales and support processes with enhanced customer relationship management

GCP IAM SOAR Actions

Automate identity and access management across Google Cloud resources.

Gigamon Deep Observability App Data Connector

Easily ingest rich data from Gigamon AMI/AMX into the Falcon platform

Gmail SOAR Actions

Automate email actions and streamline delivery to ensure smooth communication.

Google Chat SOAR Actions

Automate notifications and streamline communications with chat-based alerts.

Google Chrome Enterprise Logs for Falcon LogScale

Parse and visualize Google Chrome logs in Falcon LogScale

Google Chronicle Alerts for Falcon LogScale

Parse and visualize Chronicle alert data in Falcon LogScale

Google Chronicle Indicators of Compromise for Falcon LogScale

Parse and visualize IOCs from Chronicle in Falcon LogScale

Google Cloud

Defense in depth with cloud-scale cybersecurity strategies

Google Cloud Audit Logs Data Connector

Easily ingest audit logs that record administrative activities and accesses within your Google Cloud resources

Google Cloud Audit Logs for Falcon LogScale

Parse and visualize Google Cloud Audit Logs in Falcon LogScale

Google Cloud Pub/Sub Data Connector

Easily ingest security GCP Pub/Sub logs and events into the CrowdStrike Falcon® platform

Google Workspace Data Connector

Easily ingest alerts and logs from Google Workspace into the Falcon platform

Google Workspace SOAR Actions

Automate workflows across Gmail, Drive, and Calendar.

Grafana for Falcon LogScale

Visualize Falcon LogScale data in Grafana

Buy on CrowdStrike Marketplace

Grip SaaS-Identity Security

See and secure identities, whenever and wherever SaaS is used

GYTPOL Data Connector

GYTPOL automatically detects insecure misconfigurations and enables push-button, risk-free remediation

HPE OpsRamp

Seamlessly unify IT and security operations with CrowdStrike and HPE OpsRamp

HYPR Identity Assurance Platform for Falcon

Stop identity fraud and improve productivity with passwordless identity assurance

IBM Security

End-to-end threat management to transform your security posture

iboss Zero Trust SSE

Automatically cut, isolate, or adapt access to critical resources based on real-time threats

Illusive Active Defense Suite

Deterministic threat identification and containment

Imperva WAF SOAR Actions

Monitor and block malicious traffic with the real-time protection of workflow automation.

Infoblox BloxOne SOAR Actions

Automate endpoint security management with Infoblox BloxOne.

Infoblox Threat Defense SOAR Actions

Enhance threat detection with automation of key firewall operations.

InfoExpress Easy NAC

Simple & secure Network Access Control (NAC)

InfoSec Global AgileSec™ Analytics

Comprehensive cryptographic asset discovery and management

Instana APM for Falcon Logscale

Route Instana Application Performance Management (APM) events to Falcon LogScale

IntSights External Threat Protection Suite

Democratizing threat intelligence

IPinfo-io SOAR Actions

Accelerate incident response and streamline investigations with real-time IP data.

IPQualityScore (IPQS) SOAR Actions

Make informed decisions with real-time threat intelligence.

IronNet Collective Defense Platform

Advanced cybersecurity through collective defense

IRONSCALES Cloud Email Security Platform Data Connector

Cloud email security with advanced adaptive AI threat protection

Island Enterprise Browser Data Connector

Island, the Enterprise Browser, is an optimal enterprise workspace.

Island Enterprise Browser for Falcon

Make work fluid, frictionless, and fundamentally secure.

Ivanti ITSM SOAR Actions

Automate IT service management by streamlining ticketing, incident response, and change management workflows.

Ivanti MDM SOAR Actions

Enhance operational efficiency through centralized control of mobile assets.

Jamf Apple Device Management SOAR Actions

Enhance Apple device security by simplifying management with automated actions

JumpCloud Platform

A unified identity, device, and access management platform.

Kandji SOAR Actions

Enhance security by automating device management, compliance monitoring, and real-time remediation.

Kenna.VM

Predictive, data-driven vulnerability management

Leen Unified API

A single API for all your security data

Legit Security Platform

Secure applications with code to cloud application security posture management

Linux System Logs for Falcon LogScale

Parse, query and visualize Linux logs in Falcon LogScale

Buy on CrowdStrike Marketplace

Lookout Mobile Endpoint Security

Endpoint Detection and Response (EDR) for Mobile devices

Lumu Defender

Automated network detection and response for real-time action against pervasive threats

Medigate Device Security Platform (MDSP)

Connect with confidence

Men&Mice Micetro SOAR Actions

Automate DDI workflows to optimize IP resource allocation and ensure seamless network operations.

Menlo Security Data Connector

Menlo Security browser insight enhances Falcon Insight XDR detections

Microsoft Edge for Business Data Connector

Easily ingest browser security events from Edge for Business into Falcon Next-Gen SIEM

Mimecast

Integrated email and endpoint security

Mimecast Data Connector

Enhance Falcon platform detections with Mimecast email security data

Mimecast Email Security for Falcon LogScale

Ingest and visualize Mimecast email security logs in Falcon LogScale

Mimecast Response Actions for Falcon Insight XDR

Extend Falcon Insight XDR response actions with Mimecast Email Security Gateway

Mimecast SOAR Actions

Enhance email security by automating actions like blocking senders and managing quarantined messages. Speed up investigations, streamline threat responses, and protect against email-borne threats.

MixMode Attack Detection Platform

Third Wave AI for real-time, precision threat detection at scale

Monad Data Ingestion & Modeling

Enterprise-grade security data ingestion and modeling

Nagomi Proactive Defense Platform

Proactive Threat Exposure Management

Nasuni Edge Data Connector

Best-in-class file data protection

Netskope SOAR Actions

Simplify cloud security with automated access control and activity monitoring. Strengthen governance, enable rapid incident response, and reduce operational complexity.

Netskope Transaction Logs Data Connector

Easily ingest transaction logs tracking user activities and policy enforcement in Netskope

NGINX for Falcon LogScale

Seamlessly ingest and analyze server logs in Falcon LogScale

Nucleus Security Platform

CrowdStrike Falcon® Exposure Management data ingest into Nucleus Security platform

Nutanix Cloud Platform

Intelligent solutions for the cloud era

Okta SOAR Actions

Automate identity actions such as password resets and session revocations. Strengthen security posture with quick responses to identity threats and simplified user management.

Ollama SOAR Actions

Enhance AI-powered automation by leveraging conversational models to deliver faster responses.

Omnissa Horizon

Real-time threat detection and automated remediation for Virtual Desktop Infrastructure and physical desktop environments

OPSWAT MetaDefender Cloud SOAR Actions

Streamline threat prevention with automated malware detection and file scanning workflows.

Opus Security

Unified remediation across your code, application, and infrastructure

Ordr Asset Management and Security

See Every Asset & Exposure. Reduce Your Attack Surface

PagerDuty

Speed up threat response with custom Falcon notifications automatically sent to PagerDuty

PagerDuty SOAR Actions

Manage incident notifications, escalations, and on-call schedules seamlessly. Ensure timely alerts, minimise downtime, and accelerate response to maintain operational continuity.

Palo Alto Networks Data Connector

Enhance Falcon Insight XDR detections with firewall data

Panther

Empower security teams to detect breaches, anywhere

Picus Security Validation Platform

Enhanced Endpoint Security with Proactive Threat Validation

Ping Identity Data Connector

Enhance Falcon Insight XDR detections with Identity and SSO data

Ping Identity PingOne for Falcon LogScale

Ingest and analyze PingOne logs in Falcon LogScale

PingOne Identity SOAR Actions

Mitigate identity threats efficiently to improve security operations.

Prelude Detect

Production-scale continuous security testing platform

Proofpoint Email Protection SOAR Actions

Streamline email security by automating threat detection and policy enforcement.

Proofpoint TAP SOAR Actions

Mitigate risks proactively by identifying high-risk users before they escalate.

Qualys FIM SOAR Actions

Gain real-time insights for timely responses and efficient operations.

QWERX Enterprise Secure Perimeter (QESP)

A leading dynamic Machine Identity Management Solution

Rapid7 InsightAppSec SOAR Actions

Identify, prioritize, and remediate security risks efficiently with workflow automation.

Rapid7 InsightVM SOAR Actions

Streamline security processes with proactive risk mitigation.

Raynet One Data Connector

True IT Asset Visibility – : Protect, streamline, and manage complex IT environments

Buy on CrowdStrike Marketplace

Reach Security Platform

Unlock the full power of your security tools.

Recorded Future Identity SOAR Actions

Integrate actionable threat intelligence into identity workflows.

Recorded Future Intelligence SOAR Actions

Detect emerging threats quickly with automated risk analysis and enriched alerts.

Recorded Future Playbook Alerts SOAR Actions

Automate threat intelligence ingestion into workflows for faster response.

Recorded Future Sandbox SOAR Actions

Enhance threat investigations with automated analysis of suspicious files and URLs

Red Hat Falcon Ansible Collection

Streamline operations with CrowdStrike certified for Red Hat Ansible Automation Platform

Red Hat Falcon OpenShift Operator

Mitigate breaches with certified protection for Red Hat OpenShift Container Platform

Resilience Essential Solution for Cyber Insurance

One place to track, translate, and transfer your cyber risk

Buy on CrowdStrike Marketplace

Resilience the Edge Solution

Financially prioritize your cyber risk with real loss data

Reveald Epiphany Intelligence Platform

Leverage AI to discover, prioritize, and resolve cybersecurity risks, vulnerabilities, and misconfigurations

Revelstoke Security Automation Platform

Low-code, high-speed security automation

Revelstoke SOAR

Next-level SOAR for best-in-class protection

Rezonate Identity Security Platform

Monitor, detect, and mitigate identity risks and threats with integrated identity protection

Right-Hand Cybersecurity Human Risk Management Platform

Manage cybersecurity human risk and reduce behavior-based SOC alerts

Rubrik Security Cloud

Market leader in Data Security

Rubrik Security Cloud Data Connector

Market leader in Data Security

Rubrik Security Cloud for Falcon LogScale

Safeguard your data against critical attacks with unified visibility

Buy on CrowdStrike Marketplace

Safe Security SAFE One

Manage cyber risk in a unified platform to go safely faster

SailPoint IdentityNow SOAR Actions

Streamline identity governance with automated user lifecycle management and access controls

Salt API Security Data Connector

API visibility for Falcon Next-Gen SIEM

Buy on CrowdStrike Marketplace

Salt Security API Protection Platform

Advanced API discovery, posture governance and threat prevention for modern applications

Salt Security Falcon Foundry Application

Easily find all of your APIs in 10 minutes or less

SandboxAQ AQtive Guard for Falcon

Cryptographic discovery and management

ScienceLogic SL1

Unify visibility with IT infrastructure monitoring and AIOps

SecurityCoach, a KnowBe4 Product

Deliver real-time coaching in response to risky user behavior

Buy on CrowdStrike Marketplace

SecurityScorecard MAX Supply Chain Detection and Response

Identify critical issues, improve vendor responsiveness, and accelerate incident resolution

Securonix Next-Gen SIEM

Detect and respond to advanced threats

Seemplicity RemOps for Falcon

Continuous Exposure Management Starts with AI-Powered Remediation Operations

Sekoia SOC Platform

An all-in-one SOC platform to manage your security operations, from detection to response

Seraphic Protect Data Connector

Easily ingest alerts and events from Seraphic Security into CrowdStrike Falcon Next-Gen SIEM

Seraphic Security

Protect and manage devices and users based on trust scores

ServiceNow ITSM SOAR Actions

Streamline incident management by automating ticket creation, updates, and tracking for security events. Improve operational efficiency with consistent processes and faster remediation.

Buy on CrowdStrike Marketplace

Sevco Security Asset Intelligence Platform

Automate security gap discovery to drive full deployment of your security tools

SGNL

Eliminate standing access with high performance, context-aware policies

Shodan SOAR Actions

Discover connected devices and identify vulnerabilities across your network.

Silk Platform

Holistically bridge the gap between detecting security findings and fixing them

Skyhigh Private Access

Data-centric security for private apps managed from one single console

Skyhigh Security Data Connector

Connect Skyhigh Security Service Edge data to the Falcon platform

SkyHigh Security SSE SOAR Actions

Strengthen cloud security by automating access management and monitoring cloud activity.

Slack SOAR Actions

Accelerate incident response with automated alerts and notifications. Facilitate cross-team collaboration, resolve security events efficiently, and stay aligned with real-time updates.

SnapAttack Enterprise

Threat Intelligence, Purple Teaming, Detection Engineering, Adversary Emulation (BAS), and Threat Hunting

SOAR Actions built for Microsoft 365 Exchange Web Services

Streamline email workflows to improve business and security operations

SOAR Actions built for Microsoft Azure Firewall

Streamline network security by automating firewall policy management and threat protection.

SOAR Actions built for Microsoft Azure Key Vault

Simplify identity management and ensure secure data handling

SOAR Actions built for Microsoft Azure WAF

Automate web application firewall management and policy enforcement across Azure environments.

SOAR Actions built for Microsoft Defender for Endpoints

Detect and respond to endpoint threats with real-time insights.

SOAR Actions built for Microsoft Entra

Accelerate identity management by automating actions like session revocations and password resets. Improve security by addressing threats swiftly and simplifying access control.

SOAR Actions built for Microsoft Teams

Automate notifications to streamline communication and accelerate responses to security events

Sonicwall SOAR Actions

Streamline enforcement of security rules and threat mitigation actions.

Splunk

Insight to empower security teams

Stamus Security Platform

A leader in open and transparent network threat detection and response solution.

StrongDM Dynamic Access Management

Grant access to critical infrastructure only from trusted devices

Sumo Logic Cloud SIEM

Modernize your security operations with a cloud SIEM

Superna Data Security Edition Data Connector

Quickly detect and contain cyber threats with real-time alerts and seamless data visibility

Superna Data Security Edition for Falcon

Security at the storage layer, protects data from zero day attacks.

Swimlane Platform

CrowdStrike® and Swimlane automated EDR

Synapse Enterprise

A central intelligence system built for analytical teams

Synqly Integration Platform

Simple, secure, and sustainable product integrations for a coordinated cyber defense and cohesive compliance

Tailscale Secure Remote Access VPN

Secure remote access across any infrastructure

Tamnoon

Managed Cloud Security Remediation

Tausight for Falcon LogScale

Powerful healthcare AI data classification platform

Technopath’s TechnoSuite Automated Real-Time Response

Automate CrowdStrike Real-Time Response commands across endpoints

Technopath’s TechnoSuite Web Filtering

Securely manage URLs for enhanced security and optimized productivity

Tenable Vulnerability Management SOAR Actions

Track assets, assess vulnerabilities, and manage remediation tasks.

The Cado Platform

Next generation forensics and incident response

The Devo Platform

Cloud-native logging & security analytics

ThreatConnect Threat Intelligence Operations Platform

Evolve to threat intel operations

ThreatQuotient ThreatQ

Platform for data-driven security operations

ThreatWarrior

Network and supply chain threat detection

ticura CTI Analytics Service for Falcon

Objective CTI analytics – providing neutral comparisons and measuring effectiveness

Buy on CrowdStrike Marketplace

Tidal Capability Insights for Falcon LogScale

Operationalize threat-informed defense

Buy on CrowdStrike Marketplace

Tidal Product Registry for Falcon

Easily understand CrowdStrike defenses mapped to MITRE ATT&CK coverage

Buy on CrowdStrike Marketplace

Tines for Falcon Logscale

Send alert events to Tines via Falcon LogScale to boost operations

Torq Hyperautomation

Automate security processes at scale, with ease and efficiency

Trellix Email Security SOAR Actions

Automate protection and enhance email security through integrated incident response.

Trellix Endpoint Security SOAR Actions

Automate malware detection, threat response, and policy enforcement with workflow automation

Trend Micro Cloud One SOAR Actions

Manage cloud security configurations and integrate workload protection into CI/CD pipelines.

Trend Micro Deep Security SOAR Actions

Streamline protection workflows to ensure efficient security operations.

Trend Micro Vision One SOAR Actions

Automate attack surface discovery and risk assessments.

TruU Passwordless Identity Platform

Continuous identity authentication and identification, powered by Presence™

Twilio SOAR Actions

Streamline communication workflows for enhanced collaboration and rapid response

URLScan.io SOAR Actions

Automatically analyze URLs to detect security threats and speed up response

Valence SaaS Security Platform

Improve SaaS security with a SSPM platform and built-in remediation

vArmour Application Controller

Relationships matter

Buy on CrowdStrike Marketplace

Vectra AI Data Connector

Fast cross-domain threat detection and unified security

Buy on CrowdStrike Marketplace

Vectra AI for Falcon LogScale

Log and analyze threat detections across network, SaaS and cloud

Vectra Respond UX Data Connector

Easily ingest Vectra Respond UX data into the Falcon platform for comprehensive threat visibility

Buy on CrowdStrike Marketplace

Vectra Threat Detection and Response Platform

Erase unknown threats in your hybrid cloud

Veeam App for CrowdStrike Falcon LogScale

Ingest, parse and leverage Veeam Data Platform events in Falcon LogScale

Veeam Data Platform Data Connector

Easily ingest Veeam Data Platform events into the Falcon platform

Veriti Insight Data Connector

Proactively monitor and safely remediate exposures across the entire security stack

Veza Identity Security Platform

Secure your identity access in every SaaS application and database

VirusTotal SOAR Actions

Enhance threat detection with automated enrichment of files, URLs, and IPs. Gain actionable insights to detect, investigate, and mitigate potential threats efficiently.

VMware ESXi Data Connector

Seamlessly connect VMware ESXi infrastructure data into the Falcon platform

vRx

The most advanced vulnerability remediation platform

Webhook

Easily send real-time and customized Falcon notifications to your applications

Buy on CrowdStrike Marketplace

WitnessAI Secure AI Enablement Platform

Enable safe, effective AI

Buy on CrowdStrike Marketplace

X-Analytics Cyber Risk Analysis and Reporting

Continuous cyber-risk analysis connecting security strategy with optimized business outcomes

Zafran Threat Exposure Management for Falcon Prevent

Reveal, remediate, and mitigate exposure risk across your infrastructure

Zeek for Falcon LogScale

Ingest and visualize Zeek data in Falcon LogScale

Zendesk SOAR Actions

Create, manage, and resolve tickets with real-time updates.

Zimperium Mobile Threat Defense (MTD) Data Connector

Best-in-class on-device mobile security

Zscaler Falcon Foundry Application

Enhance perimeter security with automated threat intelligence sharing, coordinated policy actions and rapid threat response

Zscaler SOAR Actions

Ensure secure and seamless internet access by automating web security, threat detection, and access controls.