CrowdStrike Falcon® Identity Protection

Stop lateral movement with Continuous Access Evaluation

Get real-time protection with Falcon Identity Protection’s CAEP capabilities.

Get real-time protection for Entra ID based on user behavior and risk level

Adversaries like Cozy Bear and Scattered Spider are increasingly targeting Entra ID. Stop these attacks in real time leveraging Falcon risk scores , device trust data and threat intel inline for EntraID flows.


Learn more

    Protect every access point, 24/7

    Continuous evaluation and dynamic response to secure your digital landscape

    • Continuous access evaluation

      Falcon Identity Protection continuously analyzes access and risk for real-time threat detection.

    • Automatically boost security with risk-based conditional access

      Implement real-time risk-based access control, enforcing MFA to prevent unauthorized access.

    • Stop lateral movement

      Instantly detect identity attacks, revoke tokens, and block suspicious access in real time.

      AI-powered anomaly detection

      Falcon Identity Protection quickly establishes baselines for user behavior and detects suspicious activity in real time. It enhances threat detection accuracy and reduces the time to identify and respond to identity threats.

      Dynamically extend conditional access based on risk

      Continuously monitor user behavior and revoke session tokens to instantly stop malicious activity. Dynamically enforce multi-factor authentication (MFA) based on real-time risk assessments. Seamlessly extend MFA coverage across your hybrid technology ecosystem, including legacy systems and protocols that are likely to be exploited.

      Continuous access evaluation powered by elite threat intelligence

      Supported by CrowdStrike’s extensive threat intelligence network, Falcon Identity Protection offers superior identity security. By providing continuous contextual awareness and real-time evaluation, we strengthen protection and help you stay ahead of emerging identity-based threats.

      Real-time dark web monitoring

      CrowdStrike continuously monitors the dark web for compromised credentials to take proactive action reducing the identity attack surface.

      Integration with Microsoft Extended Authentication Method (EAM)

      Falcon Identity Protection integrates with Microsoft Extending Authentication Method (EAM) to prevent identity-based threats before they arise. Leverage dynamic, risk-based access decisions with seamless integration, empowering secure, adaptive protection for Entra identities.

      See Falcon Identity Protection in action

      Pella Corporation augments in-house security team with Falcon Identity Protection

      Secure your identities with Falcon Identity Protection

      Experience the power of continuous access evaluation and real-time threat response.

      Schedule free review