Kroll Elevates Global MDR Services, Migrating Protection to CrowdStrike Falcon Complete Next-Gen MDR

Rhea-AI Summary

Kroll and CrowdStrike (NASDAQ: CRWD) announced a multi-year strategic partnership to migrate protection for more than 500,000 endpoints to the CrowdStrike Falcon platform via Falcon Complete Next-Gen MDR.

The consolidation aims to replace legacy tools with an AI-native, unified platform to deliver faster detection, investigation, and full-cycle remediation. CrowdStrike cites Falcon Complete performance of a 75% reduction in mean time to respond (MTTR) and resolving more than 13 million detections annually. Kroll says the move pairs its global cyber advisory and incident response expertise with CrowdStrike technology to strengthen customer resilience worldwide.

Positive

• Migration of >500,000 endpoints to Falcon platform
• Multi-year strategic partnership with CrowdStrike
• Falcon Complete claims 75% reduction in MTTR
• Platform resolves >13 million detections annually

Negative

• None.

Insights

Cybersecurity industry analyst

Large multi-year MDR deal migrates 500,000+ endpoints to an AI-native platform, improving response metrics and consolidating tools.

Kroll will migrate protection for more than half a million endpoints onto the CrowdStrike Falcon platform via Falcon Complete Next-Gen MDR, consolidating multiple legacy tools into a unified, AI-native stack. The stated operating result is a 75% reduction in mean time to respond and resolution of more than 13 million detections annually, which frames the business mechanism as a scale-driven efficiency and platform consolidation play.

This arrangement depends on successful large-scale migration, operational integration, and ongoing service delivery at global scale; risks include migration complexity and maintaining advisory-led service quality during tool consolidation. Watch for migration milestones and service-level reporting over the next 12–24 months and any customer retention or onboarding metrics announced around Dec 2, 2025 to confirm execution and realized MTTR improvements.

Partnership unites Kroll's cyber expertise with the CrowdStrike Falcon platform to deliver 24/7 expert- and agent-led, full-cycle protection across its global customer base

NEW YORK, Dec. 2, 2025 /PRNewswire/ -- Kroll, the leading independent provider of global financial and risk advisory solutions, and CrowdStrike (NASDAQ: CRWD) today announced a multi-year strategic partnership to elevate managed detection and response (MDR) services and accelerate customers' cyber resilience worldwide.

As part of the partnership, Kroll anticipates that protection for more than half a million endpoints will be migrated to the CrowdStrike Falcon® platform, powered by Falcon® Complete Next-Gen MDR through the Falcon Complete for Service Providers program. By consolidating multiple legacy tools and point products onto CrowdStrike's unified, AI-native platform, Kroll will deliver faster, more effective detection, investigation, and full-cycle remediation – while continuing to provide its world-class cyber advisory and incident response expertise.

Falcon Complete Next-Gen MDR delivers a 75% reduction in mean time to respond (MTTR) and resolves more than 13 million detections annually – performance that underscores the platform's unmatched ability to unite expert-led operations and AI-driven automation to stop breaches with speed and precision.

"Kroll's migration to Falcon Complete Next-Gen MDR is a defining moment for the MDR market," said Tom Etheridge, chief global services officer at CrowdStrike. "This partnership represents where the industry is headed, combining world-class expertise with AI-native technology to deliver faster, smarter, full-cycle protection. Together, CrowdStrike and Kroll are raising the bar for what organizations should expect from managed detection and response."

"Kroll's mission is to protect, restore, and maximize value for our clients, and we look forward to continuing to fulfill this commitment in partnership with CrowdStrike," said David Burg, Global Group Head of Cyber and Data Resilience at Kroll. "I believe we have the best independent cyber advisory team globally – spanning critical capabilities, global reach, and unmatched credentials – who are on the front lines working with our customers against the ever-growing threat landscape. This partnership will ensure we can fight sophisticated global threat actors with state-of-the-art cyber technology at our disposal – protecting data and identities whilst securing digital, physical, and financial assets. Our customers need the best experts using the best technology in a complex and evolving world."

Together, CrowdStrike and Kroll are redefining the future of managed detection and response – combining AI-powered technology and world-class expertise to deliver faster outcomes, stronger protection, and greater resilience for organizations worldwide.

About CrowdStrike
CrowdStrike (NASDAQ: CRWD), a global cybersecurity leader, has redefined modern security with the world's most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.

CrowdStrike: We stop breaches.

Learn more: https://www.crowdstrike.com/
Follow us: Blog | Twitter | LinkedIn | Instagram
Start a free trial today: https://www.crowdstrike.com/trial

© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

About Kroll
As the leading independent provider of financial and risk advisory solutions, Kroll leverages our unique insights, data and technology to help clients stay ahead of complex demands. Kroll's team of more than 6,500 professionals worldwide continues the firm's nearly 100-year history of trusted expertise spanning risk, governance, transactions and valuation. Our advanced solutions and intelligence provide clients the foresight they need to create an enduring competitive advantage. At Kroll, our values define who we are and how we partner with clients and communities. Learn more at kroll.com. 

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/kroll-elevates-global-mdr-services-migrating-protection-to-crowdstrike-falcon-complete-next-gen-mdr-302630262.html

SOURCE Kroll

FAQ

What did Kroll announce with CrowdStrike (CRWD) on December 2, 2025?

A multi-year partnership to migrate protection for >500,000 endpoints to CrowdStrike Falcon Complete Next-Gen MDR.

How much does Falcon Complete claim to reduce MTTR in the Kroll deal?

CrowdStrike cites a 75% reduction in mean time to respond (MTTR).

How many detections does Falcon Complete resolve annually according to the announcement?

The platform resolves more than 13 million detections annually.

What is the expected operational benefit for Kroll customers from the CRWD migration?

Consolidation onto an AI-native platform aims for faster detection, investigation, and full-cycle remediation.

Will Kroll continue to provide incident response after moving to CrowdStrike Falcon (CRWD)?

Yes; Kroll will continue offering its global cyber advisory and incident response expertise alongside Falcon Complete.