CrowdStrike launches enhanced Falcon SIEM with AWS integrations

CrowdStrike has launched an enhanced version of SaaS Quick Launch in the AWS Marketplace, offering a fully integrated Falcon Next-Gen SIEM solution with new consumption options and streamlined onboarding for organisations deploying on Amazon Web Services (AWS).

Simplified deployment

The updated offering introduces a single location and guided setup for Falcon Next-Gen SIEM, directly linking to core AWS security services such as AWS CloudTrail, AWS Security Hub, and Amazon GuardDuty. This approach automatically detects data sources and begins ingesting telemetry within minutes, reducing manual configuration requirements. The aim is to unify organisational data from endpoints, cloud workloads, and identities with AWS telemetry for broader threat detection and response functions.

"CrowdStrike and AWS are transforming how security is delivered in the cloud. Together, we're removing friction so customers can innovate fearlessly, accelerate outcomes, and stop breaches faster," said Daniel Bernard, chief business officer, CrowdStrike.

Flexible pricing

CrowdStrike's Falcon Next-Gen SIEM and Falcon Cloud Security are now available on a pay-as-you-go basis via the AWS Marketplace. With this model, organisations can begin protection in minutes, pay only for usage, and scale with their requirements through AWS's billing and procurement systems. The offering is aimed at companies of any size and may serve as a starting point for users considering broader adoption of CrowdStrike's Falcon Flex subscription model.

Matt Yanchyshyn, Vice President of Marketplace at AWS, said: "AWS Marketplace is the fastest, most efficient way for customers to procure cloud solutions with unified billing, streamlined purchasing, and simplified configuration. With CrowdStrike's enhanced onboarding experience in AWS Marketplace, we're making it seamless for customers to connect Falcon Next-Gen SIEM to critical AWS services like AWS CloudTrail, AWS Security Hub, and Amazon GuardDuty - all through a guided setup experience. Combined with pay-as-you-go pricing, customers can discover, configure, and deploy protection faster than ever, ensuring a seamless experience from purchase to protection."

Expanded integrations

The expanded Falcon Next-Gen SIEM offering now incorporates real-time response powered by Amazon EventBridge, moving detections from AWS Security Hub and Amazon GuardDuty directly into the Falcon platform. This enables organisations to begin incident investigation and response immediately, avoiding the delays often associated with batch data processing.

CrowdStrike is also providing federated search features through Amazon Athena, allowing customers to query data held in Amazon S3 storage without the need for re-ingestion or duplication. This supports incident investigations, audits, and operational insights while attempting to contain costs and improve scalability for enterprise customers.

Implementation support

Accenture has joined as the launch partner, tasked with assisting organisations in accelerating their Falcon Next-Gen SIEM implementations on AWS. The consultancy will also support customers in fine-tuning data integrations across hybrid and multi-cloud deployments.

Rex Thexton, Chief Technology Officer for Accenture's cybersecurity practice, said: "Clients are looking to modernize their security operations with cloud-scale visibility, rapid speed, and streamlined simplicity. By partnering with CrowdStrike and AWS, we're enabling organizations to unify security data, leverage AI-driven insights, and transform how they detect, investigate, and respond to cyber threats across their entire digital estate."