In short: CrowdStrike Falcon Discover is an IT hygiene add-on that uses the Falcon sensor to inventory devices, installed applications and user account activity in real time, and to spot unmanaged devices on your network. It adds no new agent, is licensed per endpoint on top of a Falcon bundle, and is included in Falcon Complete Defend.
What Falcon Discover is
Falcon Discover is CrowdStrike's IT hygiene module. It uses the data the Falcon sensor already collects to give you an up-to-date picture of what is in your estate and how it is being used, without deploying another agent or running network scans.
Typical questions it answers:
- Which devices are on our network, and which of them do not have the Falcon sensor?
- What applications are installed where, and which are out of date or unapproved?
- Which accounts are logging in where, and are any admin accounts being used unexpectedly?
- Which laptops do not have drive encryption switched on?
- Which assets have been added to or removed from the estate, and how are systems being used over time?
What Falcon Discover includes
| Capability | What it gives you |
|---|---|
| Asset discovery | Managed devices plus unmanaged devices seen by your sensors on the network |
| Application inventory | Installed software and versions across Windows, macOS and Linux devices |
| Account monitoring | Which accounts are in use, whether domain or local credentials are accessed, and password changes |
| Drive encryption status | Which devices are and are not encrypted |
| Custom alerts | Notifications on conditions you set, such as a new unmanaged device |
| Reports | Exportable reports for audits and compliance evidence |
Unmanaged device discovery is often the most valuable part: any device your sensors can see but that is not itself protected is a gap an attacker could use, and Discover lists them so you can bring them under management.
How Falcon Discover is licensed
Falcon Discover is an add-on licensed per endpoint, on top of a Falcon Defend or Advanced Defend bundle. It is already included in Falcon Complete Defend, so you do not need to buy it separately there.
It is billed monthly and is normally licensed for the same number of endpoints as your bundle. Ask us for a quote.
Requirements and deployment
There is nothing extra to install: once the licence is applied, Discover data starts appearing in the Falcon console from your existing sensors. The quality of unmanaged device discovery depends on how widely the sensor is deployed, so we usually pair Discover with a check that every managed device has the sensor running.
We then set up the views and alerts that matter to you, for example unapproved applications, admin logons outside working hours or unencrypted laptops, and schedule the reports your auditors or insurer ask for.
Who Falcon Discover suits and how we help
Discover suits organisations that want a reliable asset and software inventory without a separate tool, and those preparing for audits where you need to show what you own and how it is configured, such as Cyber Essentials, which asks for an accurate scope of devices and software.
We license Discover alongside your Falcon bundle on one Forever Systems account, configure the alerts and reports, and help you act on what it finds. Pair it with Falcon Spotlight to see vulnerabilities in the software Discover finds. See also device visibility and recovery.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Falcon Discover need another agent?
No. It uses the existing Falcon sensor, so once the licence is applied the inventory appears in the Falcon console without a new install or reboot.
Can Falcon Discover find devices without the CrowdStrike sensor?
Yes. Discover lists unmanaged devices that your sensors can see on the network, so you can identify gaps in coverage and bring them under management.
Is Falcon Discover included in any bundle?
It is included in Falcon Complete Defend. With Falcon Defend or Advanced Defend it is an add-on licensed per endpoint.
What is the difference between Falcon Discover and Falcon Spotlight?
Discover tells you what devices, applications and accounts you have. Spotlight tells you which vulnerabilities affect them and which patches to prioritise.