Quick Answer
CrowdStrike Falcon pricing in 2026 lists at $59.99 per device per year for Falcon Go, $99.99 for Falcon Pro, and $184.99 for Falcon Enterprise, all purchased self-serve from the CrowdStrike website. Falcon Complete (managed detection and response) and Falcon Flex (portfolio licensing for 2,000+ endpoint enterprises) are quote-based only. Add-on modules and the Falcon Complete MDR layer lift the realistic fully-loaded cost for most mid-market buyers to roughly $200 to $400 per endpoint per year (CrowdStrike pricing page, September 2026).
CrowdStrike is the only major endpoint platform that publishes all three entry tier prices openly, which makes procurement-side cost comparisons straightforward against competitors that hide list pricing behind sales quotes.
Last verified: Sep 15, 2026.
At a glance
- Falcon Go $59.99 per device per year (100-device cap, NGAV only)
- Falcon Pro $99.99 per device per year (host firewall and device control)
- Falcon Enterprise $184.99 per device per year (full EDR + threat hunting)
- Falcon Complete (MDR) quote-based, all-in $200 to $400 per endpoint per year
- Falcon Flex portfolio licensing, quote-only for 2,000+ endpoint organizations
CrowdStrike Falcon bundles and what each includes
CrowdStrike sells Falcon as four ascending bundles plus a portfolio-level licensing program. The first three tiers (Go, Pro, Enterprise) are publicly listed per device per year and can be added to a cart without sales engagement. The top tier (Falcon Complete) and Falcon Flex are sold through account executives and channel partners because their pricing depends on module selection and contract terms (CrowdStrike pricing page, September 2026).
| Tier | What is included | List price per device per year | Best fit |
|---|---|---|---|
| Falcon Go | Next-gen antivirus, device control, mobile protection, Express Support | $59.99 | Small business replacing legacy AV |
| Falcon Pro | Everything in Go plus firewall management and host-based controls | $99.99 | SMBs wanting prevention with control |
| Falcon Enterprise | Everything in Pro plus Falcon Insight EDR, threat intelligence, threat hunting | $184.99 | Mid-market and enterprise with full EDR need |
| Falcon Complete (MDR) | Enterprise capabilities delivered as 24/7 managed service plus Breach Prevention Warranty | Quote-based | Teams without a 24/7 SOC |
| Falcon Flex | Pooled budget across endpoint, identity, cloud, SIEM modules | Quote-based (portfolio deal) | 2,000+ endpoint enterprises consolidating tools |
The jump from Falcon Pro to Falcon Enterprise is the financial decision most procurement teams stress over. Pro adds firewall and device controls on top of Go but stays in the prevention layer. Enterprise is the first tier that activates Falcon Insight, which is CrowdStrike's endpoint detection and response engine. EDR records every process, network, and file event on the endpoint, which is the data SOC analysts need to investigate alerts and roll back ransomware (CrowdStrike, September 2026).
Worked cost examples for Falcon at common seat counts
The realistic planning figure is per seat, but the contract value depends on seat count. The table below shows what a list-price deployment looks like at three common scales before any volume discount or add-on module. Falcon Complete and Falcon Flex are intentionally omitted because they are quote-based (CrowdStrike, September 2026).
| Tier | 100 seats per year | 500 seats per year | 1,000 seats per year |
|---|---|---|---|
| Falcon Go | $5,999 | Not eligible (100-device cap) | Not eligible (100-device cap) |
| Falcon Pro | $9,999 | $49,995 | $99,990 |
| Falcon Enterprise | $18,499 | $92,495 | $184,990 |
For most mid-market security teams the realistic starting line is Falcon Enterprise at $184.99 per device per year, because Enterprise is the first tier that includes EDR. At 500 seats, that is roughly $92,500 list before any discount. Volume discounts and multi-year terms typically pull Enterprise contracts to $150 to $160 per endpoint per year at 1,000+ seats, in line with the published rates competitors benchmark against (cipherssecurity.com, July 2026).
Falcon Complete MDR and Falcon Flex at a glance
Falcon Complete is the MDR service tier; Falcon Flex is the enterprise portfolio tier. Both require a sales conversation, but the boundary is useful for budgeting before that call. Complete folds a 24/7 Falcon security operations team into the contract, with analysts triaging detections, validating true positives, and escalating confirmed incidents with evidence packages. Complete contracts also include the Breach Prevention Warranty, which CrowdStrike offers up to $1 million per occurrence for customers meeting qualifying conditions (CrowdStrike, September 2026).
Falcon Flex is unrelated to the bundle stack and instead addresses a different problem: organizations running multiple CrowdStrike modules (endpoint, identity protection, cloud workload protection, Falcon LogScale SIEM) used to manage each as a separate purchase. Flex gives enterprise customers a single pooled budget they can reallocate across modules annually, which simplifies multi-year negotiations and lets teams add or remove modules without renegotiating volume terms (CrowdStrike, September 2026).
Add-on modules that move the per-endpoint number
Falcon list prices cover the base bundle only. Once a security team activates Identity Threat Detection, Falcon Cloud Workload Protection, Falcon LogScale SIEM, or CrowdStrike Falcon Intelligence (the premium threat intelligence feed), the per-endpoint cost climbs because each module is licensed separately. Reseller aggregates place the typical all-in mid-market cost at $200 to $400 per endpoint per year once managed services and add-on modules are layered onto Falcon Enterprise (cipherssecurity.com, July 2026).
The single biggest budgeting mistake is anchoring on the $184.99 Enterprise number. Itemize every module and managed service line on the quote, negotiate volume discounts at 500+ endpoints into a multi-year term, and only buy the modules tied to a control the audit, the board, or the cyber insurer actually requires. CrowdStrike does not publish list pricing for modules because they are quoted with the base bundle, which is why line-item transparency at the quote stage matters more than the advertised per-device price (cipherssecurity.com, July 2026).









