CrowdStrike Falcon is priced per device per year on its public store: Falcon Go costs $59.99/device/year ($7.99/mo, capped at 100 devices), Falcon Pro costs $99.99/device/year ($14.99/mo) and is the standard EDR tier, and Falcon Enterprise costs $184.99/device/year ($19.99/mo) adding XDR and managed threat hunting. Volume and multi-year deals typically take 20 to 50 percent off these list figures.
CrowdStrike Falcon pricing tiers
| Tier | Price | Real EDR? | Notes |
|---|---|---|---|
| Falcon Go | $59.99/device/yr$7.99/mo | No | NGAV + basic visibility. Capped at 100 devices. Not full EDR. |
| Falcon Pro | $99.99/device/yr$14.99/mo | Yes | Falcon Insight EDR + Prevent NGAV. The standard EDR tier. |
| Falcon Enterprise | $184.99/device/yr$19.99/mo | Yes | Adds XDR correlation + OverWatch managed hunting. |
| Falcon Complete (MDR) | Custom quote | Yes | Fully-managed 24/7 detection and response. Typically 2-3x the platform cost. |
The entry tier that delivers genuine EDR (continuous telemetry, behavioural detection, threat hunting, and response actions) is Falcon Pro ($99.99/device/year). Cheaper tiers in the table are NGAV or prevention-only and do not give you the post-incident investigation trail that defines EDR.
What it costs at your size
Worked annual figures at the entry EDR tier, before negotiation. Use these to size the budget line, then run your own numbers in the budget calculator, which layers deployment, tuning, and internal operating cost on top of the licence.
| Organisation | Endpoints | Tier | Annual licence | Per endpoint / mo |
|---|---|---|---|---|
| Micro / SMB | 50 | Falcon Pro | $5,000 | $8.33 |
| Small business | 200 | Falcon Pro | $20,000 | $8.33 |
| Mid-market | 1,000 | Falcon Pro | ~$85,000 | ~$7.08 |
| Upper mid-market | 5,000 | Falcon Enterprise | ~$740,000 | ~$12.33 |
| Enterprise | 25,000 | Falcon Enterprise | ~$3.0M | ~$10.00 |
Licence only. Deployment, tuning, IR retainer, and internal operating cost sit on top: see the five TCO categories. At SMB scale the licence is roughly half of true all-in cost.
Four ways to bring the CrowdStrike Falcon number down
Use a competing quote as leverage
CrowdStrike discounts aggressively against a genuine SentinelOne or Microsoft Defender quote. A real competing number in writing is worth more than any volume threshold; reported movement is 20 to 40 percent.
Hit the volume tiers
Public buyer reports put discount breakpoints around 500, 1,000, and 5,000 devices (roughly 5-10%, 10-15%, then 15-25% off list). Consolidate purchasing across entities to cross a threshold.
Commit multi-year
Two and three-year terms add a further 10 to 20 percent off the annual rate. Trade the flexibility only if you are confident in the platform after a proof-of-value.
Right-size the tier
Most SMBs do not need Enterprise. Falcon Pro is genuine EDR; the Enterprise premium buys XDR and OverWatch. If you are not consolidating tools or buying managed hunting, Pro is the honest fit.
When CrowdStrike Falcon is the right pick, and when it is not
- + You need top-tier detection: Falcon consistently scores at or near the top in MITRE ATT&CK Evaluations with low false-positive rates.
- + You want a lightweight sensor (under 10MB) with minimal endpoint performance impact.
- + You have, or want to add, the Falcon Complete managed tier as a single-vendor path to MDR.
- + You can use a competing quote to negotiate the list down.
- − You are already on Microsoft 365 E5: Defender for Endpoint P2 is included at zero incremental licence cost and covers most of the same ground.
- − You are under 100 devices with no compliance pressure: Falcon Go is NGAV-only, and full Pro may be more platform than you need.
- − Budget is the hard constraint: SentinelOne and Bitdefender list lower at the entry EDR tier.
- − You will not negotiate: paying straight list on CrowdStrike is the most expensive way to buy it.