Skip to main content

Is crowdstrike.com a Scam? Security Check Results - CrowdStrike Reviews

crowdstrike.com favicon

Is crowdstrike.com Safe? Security Analysis for CrowdStrike

Check if crowdstrike.com is a scam or legitimate. Free security scan and reviews.

TechnologyUnited Statesenterprise
Adobe Experience ManagerjQueryOneTrust Consent ManagementAdobe Launch (Tag Manager)Vidyard video player
Analyzed 10/3/2025Completed 8:58:59 PM
84
Security Score
LOW RISK

AI Summary

CrowdStrike is a leading global cybersecurity company specializing in AI-native cloud-based endpoint protection, cloud workload security, and identity protection. The company holds a strong market position as an enterprise-focused cybersecurity provider with a comprehensive suite of advanced security services. Their website reflects a mature digital infrastructure leveraging Adobe Experience Manager, OneTrust for consent management, and Adobe Analytics for data insights. Security posture is robust with HTTPS enforcement, modern security headers, and compliance with major standards such as ISO 27001 and NIST frameworks. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting strong privacy governance. Overall, CrowdStrike's website and business presence demonstrate high professionalism, trustworthiness, and technical maturity.

Detected Technologies

Adobe Experience ManagerjQueryOneTrust Consent ManagementAdobe Launch (Tag Manager)Vidyard video player

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

CrowdStrike operates primarily in the technology sector, targeting enterprise customers requiring advanced cybersecurity solutions. Their business model is B2B SaaS with additional professional services. The company has strategic subsidiaries like Preempt and Humio, enhancing their portfolio in identity protection and observability. Their market leadership is supported by certifications and compliance with federal standards such as FedRAMP. The website content and structure indicate a focus on trust, compliance, and customer engagement, with clear contact channels and incident response information. CrowdStrike's ecosystem includes partnerships and integrations that strengthen their competitive advantage.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (4)

s*****@crowdstrike.com
a*****@crowdstrike.com
d*****@crowdstrike.com
i*****@crowdstrike.com

Phone Numbers (2)

+1888512****
+1650230****

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a mature security posture with enforced HTTPS, comprehensive security headers, and secure form handling. Certifications like ISO 27001 and SOC 2 Type II indicate strong internal security controls. Incident response contacts are clearly provided, and a vulnerability disclosure program is in place. No obvious vulnerabilities or exposed sensitive data were detected in the website content. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Recommendations include maintaining up-to-date third-party libraries and continuous security audits to sustain their strong security posture.

Strategic Recommendations

Priority Actions for Security Improvement

1

Maintain regular updates and patching of all third-party libraries and frameworks.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

CrowdStrike

Description:

CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.

Key Services:
endpoint protectioncloud workload securityidentity protectionthreat intelligence
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
Adobe Experience ManagerjQueryOneTrust Consent ManagementAdobe Launch (Tag Manager)Vidyard video player
Frameworks:
Adobe HelixOneTrust CMP
Platforms:
Cloud-based hostingCDN usage
Performance:

fast

Mobile:

excellent

Accessibility:

good

SEO:

excellent

Security Assessment

Security Score:
90/100
Best Practices:
  • HTTPS enforced
  • Content Security Policy implemented
  • Cookie consent banner with OneTrust
  • Secure forms with proper input handling

Analytics & Tracking

Services:
Adobe Analytics
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Tracking Pixels:
Adobe AnalyticsOneTrust
Marketing Tools:
Adobe LaunchOneTrust CMP
Transparency Level:good

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is professionally designed and maintained

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

80/100
Score

Weak X-Frame-Options configuration

LOW

Current value: "ALLOW-FROM https://crowdstrike.pathfactory.com https://crowdstrike.com https://www.crowdstrike.co.uk https://go.crowdstrike.com https://store.crowdstrike.com"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

88/100
Score

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

72/100
Score

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

95/100
Score

Complex SPF record

LOW

Too many include statements can cause lookup limits

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx include:mktomail.com include:amazonses.com include:spf-00206402.pphosted.com include:_spf.salesforce.com a:spf.servicenowservices.com include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ip4:208.42.226.9/32 ip4:208.42.226.8/32 ip4:50.112.131.18/32 ip4:54.191.184.169/32 ip4:50.112.181.63/32 ip4:148.163.152.21/32 ip4:148.163.148.21/32 ip4:64.79.155.0/24 ip4:207.218.90.0/24 ip4:192.254.118.63 ip4:54.240.34.17 ip4:54.240.34.18 ip4:54.240.34.19 ip4:54.240.34.204 ip4:54.240.34.205 ip4:54.240.34.206 ip4:54.240.34.207 ip4:54.240.59.90 ip4:54.240.59.92 ip4:54.240.59.93 ip4:35.171.200.76 ip4:54.183.25.1 ip4:52.52.102.47 ip4:192.174.90.242 ip4:52.8.44.174 ip4:139.60.152.0/22 ip4:64.69.212.0/24 ip4:162.247.216.0/22 ip4 :52.26.233.205/32 ip4:44.236.4.51/32 ip4:208.42.231.60/32 ip4:54.240.59.91 ip4:98.97.248.0/21 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 ~all
DNS Lookups:9/10
Policy:~all
DKIM Selectors Found
Selector:default(1464-bit rsa)
Selector:google(1416-bit rsa)
DMARC Details
Policy:reject
Aggregate Reports:dmarc_rua@emaildefense.proofpoint.com
Forensic Reports:dmarc_ruf@emaildefense.proofpoint.com
MTA-STS Details
Mode:enforce
Max Age:1 days

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

65/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 72 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Mixed Content Detected

MEDIUM

2 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:crowdstrike.com
Issuer:WE1
Valid Until:12/15/2025 (72 days)
SANs:crowdstrike.com, *.sfmc.crowdstrike.com, *.crowdstrike.com +1 more

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
15 years(mature)
Expiry Risk
low(246 days)
Protection Level
strongDNSSEC OFF

DNS Records

A Records:104.16.180.118, 104.16.181.118
AAAA Records:2606:4700::6810:b476, 2606:4700::6810:b576
Name Servers:
blue.foundationdns.com
blue.foundationdns.net
blue.foundationdns.org
MX Records:
10: mxb-00206402.gslb.pphosted.com
10: mxa-00206402.gslb.pphosted.com
SOA:Serial: 2384910586, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:110ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

CrowdStrike's website is built on Adobe Experience Manager, indicating a robust enterprise CMS platform. The use of OneTrust for cookie consent and Adobe Launch for tag management reflects a modern, compliant marketing technology stack. Performance is optimized with CDN usage and asynchronous script loading. The site is mobile-optimized and SEO-friendly with comprehensive meta tags and Open Graph data. Technical risks are minimal, with no detected outdated or vulnerable libraries. Opportunities exist to further enhance accessibility and streamline consent management for improved user experience.
Analyze Another Website