CrowdStrike Falcon vs. Sophos Intercept X

CrowdStrike Falcon

Sophos Intercept X

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
CrowdStrike Falcon	Score 9.0 out of 10	N/A	CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.	$59.99 per endpoint/month (minimum number of endpoints applies)
Sophos Intercept X	Score 8.9 out of 10	N/A	Sophos Endpoint Protection (Sophos EPP) with Intercept X is an endpoint security product providing an antivirus / antimalware solution that when upgraded with Intercept X or Intercept X Advanced provides advanced threat detection and EDR capabilities.	$28 per year per user

Pricing

CrowdStrike Falcon

Sophos Intercept X

Editions & Modules

Falcon Go (Small Business): $59.99
per endpoint/month (minimum number of endpoints applies)
Falcon Go (Small Business): $59.99
Falcon Pro: $99.99
per endpoint/month (for 5-250 endpoints, billed annually)
Falcon Enterprise: $184.99
per endpoint/month (minimum number of endpoints applies)

Intercept X Advanced: $28
per year per user
Intercept X Advanced with XDR: $48
per year per user
Sophos Managed Threat Response: $79
per year per user

Offerings

Pricing Offerings
CrowdStrike Falcon	Sophos Intercept X
Free Trial
Yes	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

Pricing is for a 3-year commitment. Government and Education pricing available.

More Pricing Information

Community Pulse
	CrowdStrike Falcon	Sophos Intercept X
Considered Both Products	CrowdStrike Falcon Verified User Anonymous Chose CrowdStrike Falcon Sentinelone is bit complicated language use in there console in compare to CrowdStrike Falcon. CrowdStrike Falcon have much big modules and features but sentinelone don't. CrowdStrike Falcon have one single unified agent and in sentinelone bit confused in selection of agent … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike is by far the superior product as we have had zero problems since installing compared to Trend where is positively failed us. We switched and again have had zero issues with the product and it protects our environment as it should without much interaction. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is way ahead of Symantec, and covers features that defender XDR doesn't, even if you purchase all the addons. I think the only real competitors are Sentinel One, maybe Palo Alto or Huntress, or Carbon Black. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon In my opinion, CrowdStrike Falcon provides superior detection and prevention capabilities over Jamf Protect. At the time we purchased (2017) CrowdStrike Falcon was more advanced than SentinelOne and Microsoft Defender for Endpoint. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is far superior in all aspects. I love the features and support they provide. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is an industry leader in this sector and is superior in its low overhead agent, having minimal impact on end-users. We plan to migrate our macOS fleet when our existing contract expires. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon We felt that CrowdStrike had a more comprehensive security tool set and the overall cost for CrowdStrike was less than those other solutions. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Advance detection capability.Overwatch threat hunt team which proactively hunts your environment Interactive sandbox. Reduced false positives & ease of whitelisting to granular level.AI and ML can analyze events to identify subtle patterns that might indicate malicious … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon In my opinion, CrowdStrike Falcon does a better job of detection than Carbon black in all forms. Compared to SentinelOne XDR, CrowdStrike Falcon does a better job of finding potential threats even though the machine learning based detection cause more False Positives than the … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon It is superior on the following two: Advanced threat detection because AI and ML can analyze vast amounts of data to identify subtle patterns that might indicate malicious activity, even zero-day attacks (previously unknown threats).Reduced false positives because it can help … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon It’s provides all of what the other solutions offered individually and at a better price. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon At the time of purchase CrowdStrike provided the best featureset and value proposition for the organisation. The cloud first nature of the product and the mix of heuristic and behaviour based detection technologies was better than anything else that we looked at. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon we felt that this was a new refresh as what we had prior was best at the time and there are new and modern approaches to keep the end points secure Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is the market leader so is head and shoulders above these products. These products work of old school methodologies of detecting malware which are no longer fit for purpose. Incentivized Helpful? Chris Stutzman IT Manager Chose CrowdStrike Falcon Although the other products were good, CrowdStrike Falcon Complete had more to offer and had a much cleaner, more intuitive interface. Incentivized Helpful? Humayoon Khan Team Lead Cyber Security Chose CrowdStrike Falcon It was the easiest to deploy and manage, while the dashboard was also very clear and precise in terms of useful information. Another major reason in selection CrowdStrike Falcon was its AI and ML detection capabilities which really impressed us during evaluation. Other tools … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Better tool and it was used by our Incident response team on a real incident. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Managed service for EDR operation Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon We moved on from Symantec and compared with Sophos - the impact (performance) to the endpoint is very minimal - our engineers always fight new security tools. During testing, they were running CrowdStrike for 2 weeks when they asked when we would install the new EDR tool to … Incentivized Helpful? James Dilley System Administrator Chose CrowdStrike Falcon Before choosing CrowdStrike Falcon, we evaluated alternative solutions such as Symantec and McAfee. However, CrowdStrike Falcon's cloud-native approach, advanced threat hunting capabilities, and real-time visibility into endpoint activities set it apart as the optimal choice … Incentivized Helpful? JA Javier Aguado Security Consultant Chose CrowdStrike Falcon High ENS compliance and client requirements. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Next Gen antivirus solution. You don't need your own infrastructure for the service. Deployment is very easy and fast. Only one sensor on the clients with very low CPU impact. Easy multi factor deployment. Good overview in the console over your entire envirement. Very good and … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon At the time we evaluated the products, CrowdStrike was clearly leading in this space. It's possible since that time so other products have added additional features and may be equivalent. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon's cloud-native architecture gives it an edge in terms of scalability, ease of deployment, and real-time threat intelligence updates. The user interface of Falcon is intuitive and offers clear visibility into our organization's threat landscape. Our team felt … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon When we looked, we narrowed to two choices Sentinel One and CrowdStrike. We chose CrowdStrike due to the use of AI backed up with Human Security experts to investigate detections and issues. Incentivized Helpful?	Sophos Intercept X Verified User Anonymous Chose Sophos Intercept X Bitdefender was garbage, and it did not work well for non-persistent VDI desktops. Even though we bought it we dumped it after a month and bought Sophos instead. The difference was like night and day. Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X Sophos Intercept X is one of the industry leaders for a reason. Apart from integration issues, Sophos Intercept X stands above the rest when it comes to protection and usability. I have used at least 30 different antiviruses, antimalware, and antiransomeware programs and none … Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X They have almost the same features but we ended up with a better offer for Sophos. Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X Sophos Intercept X offers a far more comprehensive and stable product when pitted up against Comodo Advanced Endpoint Protection and Watchguard Endpoint Security - both of which we offer as low cost alternatives for customers who are adamant about not paying for Sophos … Incentivized Helpful? IR Ian Reger IT Specialist Chose Sophos Intercept X Sophos Intercept X is easy to manage and deploy under your business. I think it is comparable to BitDefend with the ability to send out deployment via email or directly add it to the computer. I have noticed that Bitdefender seems to eat a lot of resources during its scans … Incentivized Helpful? William Scott Coates IT Support Specialist Chose Sophos Intercept X Webroot endpoint protection is not even in the same league as Sophos Intercept-X. I have tested and compared both sides by side, run simulations and it's not even close. Plus the Sophos central management is so much better. Easier to view user activities and apply policies and … Incentivized Helpful? AP Ash Patel Director of IT and Facilities Chose Sophos Intercept X I personally found Sophos Intercept X GUI to be easy to use. The agent is easy to deploy on client machines and runs in the background silently. It has a very good virus, malware scan engine that picks out a high percentage of malicious software. The price was also very … Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X Sophos is much more user friendly and scalable for partners who wish to [centralize] all security across the IT industry, from email security, server security, phish threat management and more. Incentivized Helpful? Beau Sorensen COO Chose Sophos Intercept X We have used Avast, AVG, Panda, Sophos' original antivirus product, and Symantec before and it is better than each of them. The cloud console is the star of the show and it dramatically reduces the cost and effort needed to install the product. Other products were only … Incentivized Helpful? Reginald Johnson Managing Consultant - DevOps Chose Sophos Intercept X It is one of the only products that will scan all code in memory and arbitrary data for malicious behaviors. Incentivized Helpful? Shawn Umansky Network Engineer Chose Sophos Intercept X We have been using this product for a number of years, which shows that it has worked well for us. I don't recall the other products we reviewed. Incentivized Helpful? Ramon Vazquez IT Director Chose Sophos Intercept X It provides more features for the same price. These added features differentiate Sophos from the rest of the pack, making it a better solution. Also, the ability to integrate with your Sophos firewall if you have one adds another level of integration and protection. This … Incentivized Helpful? Sarah Urbani IT Chose Sophos Intercept X Sophos Intercept X is just easier to implement and manage. Incentivized Helpful? Steven Hiersche, Jr. Director Of Information Technology Chose Sophos Intercept X We didn’t evaluate any other products. I used Sophos at a previous company and when I started here, they were using the on-prem version. We immediately migrated to central and haven’t looked back. I am aware of the competitors, but once you are comfortable with a quality … Incentivized Helpful? BC Ben Coppard IT Manager Chose Sophos Intercept X Sophos offered better value for money whilst beating the above products on detection and prevention. The GUI is fantastic and easy to use and works seamlessly on top of other features like DLP, application control and web monitoring. I would recommend getting the XG firewall as … Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X Sophos Intercept-X gave us a more well-rounded solution. Incentivized Helpful? Jane Updegraff Senior Systems Administrator Chose Sophos Intercept X Sophos Intercept X is a little less expensive than the comparable package from Trend Micro and a little more expensive than a comparable package from Symantec, but in my opinion, it's easier to operate and it's got better centralized controls than both of the others. But the … Incentivized Helpful? Verified User Anonymous Chose Sophos Intercept X Trend Micro offered similar protection, however at the time did not offer EDR as a solution. The big benefit to Trend Micro was the capability to push out the installation of the agent to assets within the Trend Micro console, eliminating the need for a GPO or deployment … Incentivized Helpful? Thayer Ramahi Director, IMIT Chose Sophos Intercept X We found Sophos is a full suit in one, easy to deploy, manage and very effective. Incentivized Helpful? Neil Taylor Trade Floor Infrastructure Manager Chose Sophos Intercept X Sophos is by far the simplest of the products to setup and going in a very short period of time at a very similar price point. Trend is overly complex and relied on an appliance for each ESX node meaning you lose one appliance and then you lose protection across multiple … Incentivized Helpful? Eric V. Zarghami Deputy CIO Chose Sophos Intercept X Besides legacy malware protection, Sophos is doing a good job in protecting against ransomware, thanks to their Intercept X and its behavioral analytics that would stop ransomware that was never seen in wild. Incentivized Helpful? Alex Farling Managing Partner Chose Sophos Intercept X Best in class... PERIOD... Bit Defender is a good AV product by itself, but it lacks in Next Gen Heuristic detection. It has allowed malware to get past it in our client environments, even with Admin permissions restricted. Sophos is hands down a superior product when paired … Incentivized Helpful? Ryhlen Schoeberl Server Administrator Chose Sophos Intercept X Sophos I feel is a better product upon installation we had a few systems that reported threats that ESET did not catch. Sophos also has multiple other products that we were able to bundle together and still have one interface to do. Intercept X, Endpoint Protection, and … Incentivized Helpful? Jon Shurtliff Vice President of Information Technology Chose Sophos Intercept X In our analysis we discovered that for the price and feature set, Sophos was able to rise above the rest. Pricing is always a large consideration, however it isn't the only consideration - the feature set that Sophos Endpoint Protection provided over its competitors made the … Incentivized Helpful? Matt Rogers Information Technology and Web Support Specialist Chose Sophos Intercept X We used to use Symantec Endpoint Protection. At the time we were using it (it may very well be different by now), it required a bit more maintenance and we were constantly having issues with definitions not being downloaded as well as issues updating the software itself. We … Incentivized Helpful?

Features

CrowdStrike Falcon

Sophos Intercept X

Endpoint Security

Comparison of Endpoint Security features of Product A and Product B
	CrowdStrike Falcon 9.1 Ratings 6% above category average	Sophos Intercept X 8.9 Ratings 4% above category average
Anti-Exploit Technology	9.50 Ratings	7.10 Ratings
Endpoint Detection and Response (EDR)	9.70 Ratings	9.00 Ratings
Centralized Management	9.70 Ratings	10.00 Ratings
Hybrid Deployment Support	8.20 Ratings	8.00 Ratings
Infection Remediation	9.30 Ratings	10.00 Ratings
Vulnerability Management	7.70 Ratings	8.40 Ratings
Malware Detection	9.40 Ratings	10.00 Ratings

Best Alternatives
	CrowdStrike Falcon	Sophos Intercept X
Small Businesses	ThreatLocker Score 9.5 out of 10	ThreatLocker Score 9.5 out of 10
Medium-sized Companies	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10
Enterprises	BeyondTrust Endpoint Privilege Management Score 9.8 out of 10	BeyondTrust Endpoint Privilege Management Score 9.8 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	CrowdStrike Falcon	Sophos Intercept X
Likelihood to Recommend	9.6 (0 ratings)	9.0 (0 ratings)
Likelihood to Renew	10.0 (0 ratings)	10.0 (0 ratings)
Usability	10.0 (0 ratings)	9.0 (0 ratings)
Support Rating	10.0 (0 ratings)	8.1 (0 ratings)
In-Person Training	9.0 (0 ratings)	- (0 ratings)
Implementation Rating	10.0 (0 ratings)	9.0 (0 ratings)

User Testimonials
	CrowdStrike Falcon	Sophos Intercept X
Likelihood to Recommend	CrowdStrike Falcon is well suited for any size of environment. Large to small, CrowdStrike Falcon does an amazing job. The ability to have the same security as a fortune 500 company and have a solution that sees the same threats that they are seeing is amazing. I do not think that there is a company or environment that wouldn't benefit from the CrowdStrike Falcon solution. Incentivized Verified User Anonymous Read full review	Sophos Intercept-X is well suited for any environment big or small. There is even a home version that is free that I highly recommend for anyone at home. If you are looking for endpoint protection that is centrally managed, catches everything, and has many features this is the product for you. Incentivized William Scott Coates IT Support Specialist Read full review
Pros	The Log analysis is very detailed and easy to use. Prevent and block all type of malwares. Great threat intelligence which is very up-to-date with the recent cyber attacks very user friendly in access and management Automated feature of detecting, taking action and closing incidents using fusion workflow. Incentivized Verified User Anonymous Read full review	Sophos is a little too good at DLP. But it is indeed very good at not allowing our data to leave our endpoints without strict adherence to policy. Sophos is very good at protecting endpoints against viruses and other malware. Sopho is really good at informing us of what is happening on our endpoints. OOTB reporting is way better than expected. Incentivized Jane Updegraff Senior Systems Administrator Read full review
Cons	The Dashboard can become overwhelming at times, too much information to absorb Computers that may have made it out into the field without the endpoint sensor are very difficult to find As with all systems that rely on machine learning false positives occurr Incentivized Verified User Anonymous Read full review	The migration from on-prem sophos to cloud sophos, could have been a little more seamless Would love to get more insight on what was blocked or flagged and what it was trying to do Better and more granular feature management from group policies Incentivized Verified User Anonymous Read full review
Likelihood to Renew	Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI. Incentivized Verified User Anonymous Read full review	We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand. Incentivized Ryhlen Schoeberl Server Administrator Read full review
Usability	I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers. Incentivized FM Fotis Mastakas Fotis Mastakas Read full review	The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons. Verified User Anonymous Read full review
Support Rating	Support is generally pretty fast and gets right to the issue. We haven't had to use them much, fortunately, but the issues and questions we've had are usually answered quickly. The customer success manager/account manager you're assigned will also follow up with you on a regular cadence to ensure you're getting the most out of the subscription. There's not a whole lot of room to improve, other than the general confusion about what is/what is not covered in custom packages you're subscribed to. The initial purchase took much longer because of a package name changes and realignments of different modules into those packages. Incentivized Randy Munroe Information Security Analyst Read full review	Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC. Incentivized Verified User Anonymous Read full review
In-Person Training	There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any. Incentivized Verified User Anonymous Read full review	No answers on this topic
Online Training	The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user. Incentivized Verified User Anonymous Read full review	No answers on this topic
Implementation Rating	Read the documentation Incentivized Verified User Anonymous Read full review	Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site Incentivized Ryhlen Schoeberl Server Administrator Read full review
Alternatives Considered	We were a former Arctic Wolf customer and feel like they worked more as a team with us. Cylance is what we're looking at possibly migrating to. Incentivized Verified User Anonymous Read full review	I don't feel it's fair to compare Sophos Intercept X with the versions of Symantec and AVG that I have used in the past - as that was such a long time ago. I'm sure those other companies have released far more features than I used all those years ago Incentivized Verified User Anonymous Read full review
Return on Investment	CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises. The cloud-native architecture and automated features have improved operational efficiency. The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times. Incentivized James Dilley System Administrator Read full review	Before we had Intercept X, we had several infections of ransomware. Since that time it has stopped at least 10 attempts, saving us thousands of man-hours and hundreds of thousands of dollars. By decreasing the time needed for malware remediation, it has saved us the cost of .25 FTE in the IT department. Initial setup was cumbersome and cost us .1 FTE in additional costs the first year. Incentivized Beau Sorensen COO Read full review
ScreenShots		Sophos Intercept X Screenshots