DBT Bureau
Pune, 18 Jan 2025
CrowdStrike announced the findings of a commissioned Total Economic Impact™ (TEI) study conducted by Forrester Consulting on behalf of CrowdStrike. It found that a composite organization representative of interviewed customers with experience using CrowdStrike Falcon® Identity Protection achieved a 310% return on investment (ROI) by significantly reducing breach risks and replacing legacy point solutions, with a payback period of under six months and $1.26 million in total benefits over three years.
Today’s adversaries are more sophisticated than ever, leveraging advanced tactics to infiltrate environments and remain undetected. Seventy-five percent of attacks to gain initial access are now malware-free, as attackers exploit identity and cloud as trusted entry points to move laterally across systems. Disjointed tools often create gaps in visibility and protection and address only fragments of the identity attack surface. Falcon Identity Protection stops identity-based attacks across the entire attack surface as an integrated module of the CrowdStrike Falcon® cybersecurity platform, delivering unified visibility and protection across identities, cloud and endpoints. The Forrester study revealed that of organizations interviewed, “none said their organization has experienced a breach since acquiring Falcon Identity Protection.”
“Sophisticated adversaries are logging on with compromised credentials instead of breaking in – leveraging identity as a foothold to move laterally and remain undetected,” said Raj Rajamani, head of products at CrowdStrike. “While robust identity protection is essential to modern cybersecurity, identity protection alone is not enough. For us, Forrester’s study validates what customers tell us every day: The power of Falcon Identity Protection and additional best-in-class modules lie in the power of the platform, delivering unified visibility and protection across every attack path.”
Key findings from the Forrester TEI study include:
- Significant ROI with Advanced Identity Security: Falcon Identity Protection provided benefits of $1.26 million over three years by stopping identity-based attacks with advanced capabilities, including misconfiguration detection, overprivileged account analysis and lateral attack path prevention. Customers also reported lower cyber insurance premiums due to robust identity controls, such as extending MFA coverage across all environments.
- Reduced Operational Costs with Unified Protection: SOC teams consolidate cybersecurity with Falcon Identity Protection, unifying identity, cloud and endpoint security on the Falcon platform, resulting in $167,000 in cost savings over three years by eliminating legacy point tools and reducing labor costs.
- Real-Time Detection and Response: Falcon Identity Protection was the first to detect simulated attacks during penetration tests.
- Enhanced SOC Efficiency: According to the study, interviewees described incident volume declining significantly, sometimes more than 90%. They said some of this is related to the prevention actions taken and some is related to a dramatic reduction in false positives. Falcon Identity Protection enables SOC teams to focus on strategic tasks. Customers reported faster incident resolution, reduced overtime hours and improved work-life balance, driving better retention and operational stability.
Customer testimonials:
- “The alerts are near real-time, more actionable, and don’t have a lot of false positives. Previously, it sometimes took four hours when now, we know in less than 10 minutes.” – VP of Information Security, Pharmaceutical
- We run an organization that’s highly distributed. We have over 1,000 locations around the globe, both franchises and managed. [Falcon Identity Protection] protects all of it.” – Director of Cyber Security Risk and Compliance, Hospitality
- “Falcon Identity Protection is the icing on the cake…if a bad guy ends up on an endpoint, the machine is automatically isolated.” – Director of Cyber Security Risk and Compliance, Hospitality
Why Customers Trust Falcon Identity Protection
The study highlights that “Falcon Identity Protection’s threat analysis includes both direct identity-related threats as well as threats across attack paths to identify lateral movement that impacts security areas beyond identity to focus on protecting critical assets.”
Falcon Identity Protection integrates seamlessly into the CrowdStrike Falcon platform, unifying identity, endpoint and cloud security to stop breaches in real-time. It provides unmatched visibility into Active Directory activity, account configurations and privileged account protections, reducing complexity and lowering costs. Organizations trust CrowdStrike as their “primary strategic vendor,” delivering the unified protection needed to stay ahead of modern adversaries.
