Kroll Elevates Global MDR Services, Migrating Protection to CrowdStrike Falcon Complete Next-Gen MDR
Rhea-AI Summary
Kroll and CrowdStrike (NASDAQ: CRWD) announced a multi-year strategic partnership to migrate protection for more than 500,000 endpoints to the CrowdStrike Falcon platform via Falcon Complete Next-Gen MDR.
The consolidation aims to replace legacy tools with an AI-native, unified platform to deliver faster detection, investigation, and full-cycle remediation. CrowdStrike cites Falcon Complete performance of a 75% reduction in mean time to respond (MTTR) and resolving more than 13 million detections annually. Kroll says the move pairs its global cyber advisory and incident response expertise with CrowdStrike technology to strengthen customer resilience worldwide.
Positive
- Migration of >500,000 endpoints to Falcon platform
- Multi-year strategic partnership with CrowdStrike
- Falcon Complete claims 75% reduction in MTTR
- Platform resolves >13 million detections annually
Negative
- None.
News Market Reaction
On the day this news was published, CRWD gained 2.46%, reflecting a moderate positive market reaction. This price movement added approximately $2.95B to the company's valuation, bringing the market cap to $122.90B at that time.
Data tracked by StockTitan Argus on the day of publication.
Key Figures
Market Reality Check
Peers on Argus
CRWD showed a small gain of 0.3% while peers were mixed: PANW -0.53%, NET -1.45%, FTNT +1.07%, SNPS +0.14%, ZS +0.36%, suggesting a stock-specific response to the partnership news.
Historical Context
| Date | Event | Sentiment | Move | Catalyst |
|---|---|---|---|---|
| Dec 10 | Security evaluation result | Positive | +0.3% | MITRE ATT&CK evaluation showed 100% detection and protection with no false positives. |
| Dec 02 | Earnings results | Positive | +2.5% | Q3 FY26 results with ARR growth, record cash flow, and raised full-year guidance. |
| Dec 02 | Strategic partnership | Positive | +2.5% | Kroll partnership to migrate protection for 500,000+ endpoints to Falcon platform. |
| Dec 02 | Leadership appointment | Positive | +2.5% | Appointment of Andy Nowinski as VP of Investor Relations and Strategic Finance. |
| Dec 02 | Partner awards | Positive | +2.5% | Multiple AWS 2025 awards and surpassing $1B in single-year AWS Marketplace sales. |
Recent news has been predominantly positive (technical validation, awards, partnerships, strong Q3 results) with consistently positive 24h price reactions, indicating aligned market responses to favorable developments.
Over recent months, CrowdStrike reported strong Q3 FY26 metrics, including $4.92B ending ARR and $1.23B revenue, alongside record cash flow and raised guidance. The company highlighted AWS accolades, surpassing $1B in AWS Marketplace sales in a single year, and recognition in MITRE ATT&CK evaluations. Strategic moves included appointing a new VP of Investor Relations and the Kroll MDR partnership migrating over 500,000 endpoints. Each event saw positive single-day price reactions, framing today’s partnership update within a series of constructive catalysts.
Market Pulse Summary
This announcement highlights a multi-year MDR partnership in which Kroll plans to migrate protection for more than 500,000 endpoints onto CrowdStrike’s Falcon Complete Next-Gen MDR platform. The release emphasizes a 75% reduction in MTTR and over 13 million detections resolved annually, reinforcing prior themes of scale and effectiveness seen in AWS awards and MITRE ATT&CK results. Investors may watch how this partnership translates into platform adoption metrics and longer-term revenue performance.
Key Terms
managed detection and response (MDR) technical
mean time to respond (MTTR) technical
endpoints technical
AI-generated analysis. Not financial advice.
Partnership unites Kroll's cyber expertise with the CrowdStrike Falcon platform to deliver 24/7 expert- and agent-led, full-cycle protection across its global customer base
As part of the partnership, Kroll anticipates that protection for more than half a million endpoints will be migrated to the CrowdStrike Falcon® platform, powered by Falcon® Complete Next-Gen MDR through the Falcon Complete for Service Providers program. By consolidating multiple legacy tools and point products onto CrowdStrike's unified, AI-native platform, Kroll will deliver faster, more effective detection, investigation, and full-cycle remediation – while continuing to provide its world-class cyber advisory and incident response expertise.
Falcon Complete Next-Gen MDR delivers a
"Kroll's migration to Falcon Complete Next-Gen MDR is a defining moment for the MDR market," said Tom Etheridge, chief global services officer at CrowdStrike. "This partnership represents where the industry is headed, combining world-class expertise with AI-native technology to deliver faster, smarter, full-cycle protection. Together, CrowdStrike and Kroll are raising the bar for what organizations should expect from managed detection and response."
"Kroll's mission is to protect, restore, and maximize value for our clients, and we look forward to continuing to fulfill this commitment in partnership with CrowdStrike," said David Burg, Global Group Head of Cyber and Data Resilience at Kroll. "I believe we have the best independent cyber advisory team globally – spanning critical capabilities, global reach, and unmatched credentials – who are on the front lines working with our customers against the ever-growing threat landscape. This partnership will ensure we can fight sophisticated global threat actors with state-of-the-art cyber technology at our disposal – protecting data and identities whilst securing digital, physical, and financial assets. Our customers need the best experts using the best technology in a complex and evolving world."
Together, CrowdStrike and Kroll are redefining the future of managed detection and response – combining AI-powered technology and world-class expertise to deliver faster outcomes, stronger protection, and greater resilience for organizations worldwide.
About CrowdStrike
CrowdStrike (NASDAQ: CRWD), a global cybersecurity leader, has redefined modern security with the world's most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.
Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.
Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.
CrowdStrike: We stop breaches.
Learn more: https://www.crowdstrike.com/
Follow us: Blog | Twitter | LinkedIn | Instagram
Start a free trial today: https://www.crowdstrike.com/trial
© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in
About Kroll
As the leading independent provider of financial and risk advisory solutions, Kroll leverages our unique insights, data and technology to help clients stay ahead of complex demands. Kroll's team of more than 6,500 professionals worldwide continues the firm's nearly 100-year history of trusted expertise spanning risk, governance, transactions and valuation. Our advanced solutions and intelligence provide clients the foresight they need to create an enduring competitive advantage. At Kroll, our values define who we are and how we partner with clients and communities. Learn more at kroll.com.
View original content to download multimedia:https://www.prnewswire.com/news-releases/kroll-elevates-global-mdr-services-migrating-protection-to-crowdstrike-falcon-complete-next-gen-mdr-302630262.html
SOURCE Kroll
FAQ
What did Kroll announce with CrowdStrike (CRWD) on December 2, 2025?
How much does Falcon Complete claim to reduce MTTR in the Kroll deal?
How many detections does Falcon Complete resolve annually according to the announcement?
What is the expected operational benefit for Kroll customers from the CRWD migration?
Will Kroll continue to provide incident response after moving to CrowdStrike Falcon (CRWD)?
