CrowdStrike Falcon bundles are pre-packaged combinations of Falcon platform modules, sold per device. Three of them, Falcon Go, Falcon Pro and Falcon Enterprise, have public prices. They can be bought online with monthly or annual billing.[1] Online purchases are governed by CrowdStrike’s Online Order and Payment Terms, which incorporate the CrowdStrike Terms and Conditions.[5] Falcon Complete Next-Gen MDR, and bundles above Enterprise such as Falcon Elite, are sold through sales.[1] All of these bundles are counted in the Endpoint metric, which the price lists express as “per device”.[1][6] The device-based family of metrics is described in concurrent and device licensing.
Editions
The pricing page groups the bundles by positioning, and the bundle pages list the modules included in each tier.[1] Each higher tier adds modules to the one below it.
| Bundle | Positioning on pricing page | Modules included | Support |
|---|---|---|---|
| Falcon Go | Security Essentials | Falcon Prevent (next-gen antivirus), Falcon Device Control, Falcon for Mobile[2] | Express Support[2] |
| Falcon Pro | Enhanced Protection | Falcon Go modules plus Falcon Firewall Management[3] | Express Support[3] |
| Falcon Enterprise | Advanced Protection | Falcon Pro modules plus Falcon Insight XDR (detection and response) and Falcon Adversary OverWatch (threat hunting)[4] | Express Support[4] |
| Falcon Complete Next-Gen MDR | Fully Managed Protection | 24/7 expert-led managed detection and response; add-ons such as Next-Gen Identity Security and Next-Gen SIEM; CrowdStrike Breach Prevention Warranty[1] | Express Support available as add-on[1] |
The pricing FAQ says that product add-ons can be bought at any time but vary by bundle type. Upgrading to a higher bundle requires contacting CrowdStrike’s subscriptions team.[1] Express Support is included in Falcon Go, Pro and Enterprise. It is an add-on for Falcon Elite and Falcon Complete MDR.[1]
Public list prices
| Catalog SKU | Price (USD) | Billing | Source |
|---|---|---|---|
| Falcon Go - monthly | 7.99 per device | Monthly | [2] |
| Falcon Go - annual | 59.99 per device | Annually | [2] |
| Falcon Pro - monthly | 14.99 per device | Monthly | [3] |
| Falcon Pro - annual | 99.99 per device | Annually | [3] |
| Falcon Enterprise - monthly | 19.99 per device | Monthly | [4] |
| Falcon Enterprise - annual | 184.99 per device | Annually | [4] |
The pages state that all prices are in US dollars.[2] CrowdStrike publishes no part numbers for these offerings. The annual price is billed in full at the start of the subscription period, and there are no other fees beyond the annual subscription cost.[1] Catalog proof: Per-device list prices for Falcon Go, Pro and Enterprise.
Metrics
All three bundles are sold per device, and the contractual unit behind “device” is the Endpoint. The Terms and Conditions define it as any physical or virtual device, such as a computer, server, laptop, desktop computer, mobile, cellular, container or virtual machine image.[6] Falcon for Mobile is part of every bundle, so Android and iOS devices protected by it fall within the same definition.[2][6]
Counting / floors
Quantity cap (as retrieved 2026-09-26). Access and use is limited to the quantity in the applicable Order. Software Components may be installed in multiple copies up to the maximum quantity in the Order.[6] The Falcon Sensor terms say the same: the software may be installed and run up to the validly licensed quantity.[10] Catalog proof: Use limited to the quantity in the Order.
Falcon Go device limit. Purchases of Falcon Go are limited to a maximum of 100 devices.[2][1] No retrieved page gives a minimum quantity for any bundle. Catalog proof: Falcon Go limited to 100 devices.
Overages and true-up. If a customer exceeds the license metric quantities on its online order forms, it agrees to buy additional co-terminous licences for the overage. These are charged at CrowdStrike’s then-standard price, pro-rated for the rest of the Subscription/Order Term, to the stored payment method.[5] This works as a contractual true-up at list price rather than at the price of the original order. Catalog proof: Online orders: overages bought as co-terminous licences at then-standard price.
Renewal baseline. Renewal fees are based on the quantities licensed through the expiring term, including any co-terminous licences bought during it, and on the then-standard price at renewal. That price may differ from the price of the expiring term.[5] An overage bought in month ten is therefore renewed for a full year unless the quantity is reduced before renewal. Catalog proof: Renewal priced on licensed quantity at then-standard price.
Monitoring. By placing an online order, the customer consents to CrowdStrike monitoring its use of the Offerings to detect, prevent and respond to fraud and abuse. If CrowdStrike suspects illegitimate use, it may disable the account.[5] Catalog proof: CrowdStrike may monitor use of online offerings.
Virtualization & partitioning
The bundles carry no separate server, virtual machine or VDI rules. Because the Endpoint definition includes virtual devices, containers and virtual machine images, each virtual instance running the sensor counts as a device in the same way as a laptop.[6] The retrieved documents publish no per-host or per-core alternative and no rule for non-persistent virtual desktops. Catalog proof: Endpoint includes virtual machines, containers and VM images.
Cloud / BYOL
Not applicable. The bundles are subscriptions to CrowdStrike’s cloud-based Products, and the sensor may run on any supported endpoint in the customer’s environment.[6] The pricing FAQ names Windows, macOS and Linux as supported operating systems.[1]
Programs
Online subscription terms
The online subscription program covers the following terms.
- Business use only. CrowdStrike’s offerings are solely for business and commercial use, and never for personal, family or household purposes.[5] Catalog proof: Online offerings for business use only.
- Start and automatic renewal. The initial term begins when CrowdStrike approves the payment. After it ends, the Order renews automatically unless either party terminates or cancels the upcoming renewal.[5] For terms of 12 months or more, CrowdStrike sends a reminder at least 60 days before renewal and a follow-up at least 30 days before.[5] Customers can cancel by email or through the “Manage Subscription” feature in the Falcon platform.[5] Catalog proof: Online orders renew automatically; reminders 60 and 30 days ahead.
- Product substitution at renewal. If a licensed Offering is renamed, upgraded or replaced during the term, CrowdStrike may change the Order at the next renewal to the new Offering, at its then-standard price.[5] Catalog proof: Renamed or replaced offerings substituted at renewal.
- Thirty-day refund. A customer that terminates within 30 days of the start of a term receives a full refund for that term. After 30 days there is no refund. Month-to-month subscriptions are never refunded, but they continue to the end of the term.[5] The bundle pages describe this as a 30-day money-back assurance.[2] Catalog proof: Online orders: full refund if terminated within 30 days (not month-to-month).
Orders placed under the Terms and Conditions rather than online, for example through a reseller, are non-cancellable. Their fees are non-refundable unless the Agreement expressly provides otherwise.[6] Catalog proof: Orders non-cancellable; fees non-refundable; payment in 30 days.
Trial and evaluation
The public 15-day free trial gives access to Falcon Prevent, Falcon Device Control and Express Support.[1] Under the Evaluation Agreement, access is for 15 days and can be extended by written or email authorization from CrowdStrike.[7] The Terms and Conditions provide Evaluation Products as-is and limit their use to Internal Use by Customer employees only.[6] Catalog proof: Evaluations run 15 days, employees only.
Home use for remote workers
Falcon Prevent for Home Use is installed by individuals under separate terms. The individual’s right to use it depends on two conditions: being employed by, or providing services to, the employer, and the employer holding a valid CrowdStrike licence for that use. The licence ends automatically when the relationship ends, and the individual must then uninstall the software.[8] Catalog proof: Falcon Prevent for Home Use depends on employer licence and employment.
Next-Gen SIEM entitlement for Falcon Enterprise
Falcon Enterprise includes Falcon Insight XDR.[4] CrowdStrike’s Next-Gen SIEM FAQ states that all Falcon Insight XDR customers with a dedicated CID may ingest up to 10GB of third-party data per day at no additional cost.[9] Catalog proof: 10GB per day of third-party data for Falcon Insight XDR customers. See CrowdStrike Next-Gen SIEM, identity and cloud security licensing.
Out of scope
- Prices for Falcon Elite, Falcon Complete and add-on modules, which are sold by quote.
- Regional price lists other than the US dollar pages retrieved.
- Discounts, Falcon Flex commitments and reseller pricing. See CrowdStrike Falcon Flex.
- Managed service provider resale of bundles. See CrowdStrike Falcon Complete and service provider licensing.