Operation managed by UPX
Onboarding, policy tuning and detection calibration run by our in-house SOC, 24/7/365.
CrowdStrike Falcon · CrowdStrike Global Partner
CrowdStrike Falcon licensing and operation
UPX licenses Falcon at the size of your environment, with local invoicing, and the UPX in-house SOC deploys, tunes and operates the platform 24/7. From the first license to renewal.
Global Partner
Companies that trust UPX
Overview
An active license is not a protected environment. To deliver what it promises, Falcon has to be deployed in the right environment, with policies tuned to your risk and detections calibrated to your traffic.
Without deployment and operation, a company pays for one of the most advanced platforms on the market and uses it below its capacity. That is why UPX delivers the license together with the work that makes it effective: deployment, continuous tuning and monitoring by our in-house SOC.
| Compared aspect | License only | License with UPX |
|---|---|---|
| Official CrowdStrike license | Yes | Yes, via Global Partner |
| Deployment | Up to your team | Run by UPX |
| Policies and calibration | Up to your team | Tuned to your risk and reviewed continuously |
| Monitoring and response | Up to your team | UPX in-house SOC, 24/7/365 |
| Invoicing | Depends on the supplier | Local invoice, in Brazilian reais |
The CrowdStrike Falcon platform
Falcon is CrowdStrike's cloud-native security platform. A single lightweight agent, installed on the endpoints, sends telemetry to the cloud, where detection combines artificial intelligence, behavioral analysis and threat intelligence.
Prevention, detection, investigation and response are managed in a single console, with no local servers to maintain. The same architecture receives the add-on modules, which are activated without installing another agent.
Next-generation antivirus
Blocks known and unknown malware with machine learning and behavioral analysis, without relying on signatures.
Detection and response (EDR/XDR)
Records endpoint activity to detect, investigate and contain attacks, including those that use no malware.
Threat intelligence
Context on adversaries and campaigns, fed by the Threat Graph, CrowdStrike's telemetry base.
Single agent, single console
One agent for Windows, macOS and Linux and one cloud console for all management.
Market recognition
- 7x
- Consecutive Leader in the Gartner Magic Quadrant for Endpoint Protection Platforms (2025)
- No. 1
- Positioned furthest in Completeness of Vision for the 6th time in a row
- +1 trillion
- security events processed per day by the Threat Graph
- 97%
- of customers recommend CrowdStrike (Gartner Peer Insights, Voice of the Customer 2025)
Sources: Gartner and CrowdStrike. [Insert source links.]
Tailored
Start complete. Expand as needed.
Beyond Falcon's complete structure, it offers add-ons that tailor the platform to your operation's risk. The base already protects endpoint, identity, cloud and SaaS end to end. The modules go beyond the standard: they reinforce where your exposure is greatest and cover what is specific to your business.
Identity security
Identity Threat Protection
Prevents the use of stolen credentials and attacks through Active Directory and Entra.
Vulnerability management
Falcon Spotlight
Shows the flaws that matter and what to fix first, with no extra scanner to install.
Attack surface
Exposure Management
Sees what is exposed on the internet and prioritizes by real risk.
SaaS protection
Falcon Shield
Protects Microsoft 365, Google, Salesforce and other cloud apps against misconfiguration and improper access.
Data protection
Data Protection (DLP)
Prevents sensitive data from leaving the company through the endpoint.
File monitoring
Falcon FileVantage
Alerts when critical files and settings change. Supports PCI, ISO and LGPD.
24/7 threat hunting
Adversary OverWatch
Specialists actively looking for hidden attacks, alongside the UPX SOC.
Log and investigation hub
Next-Gen SIEM
Brings the logs of the whole operation into one place for fast investigation.
Mobile security
Falcon for Mobile
Extends protection to iOS and Android phones and tablets.
Threat intelligence
Adversary Intelligence
Attacker profiles and early warnings about risks to your industry.
Deployment and operation
The license arrives configured and under operation. The UPX in-house SOC follows the platform throughout the contract.
Assessment
Environment size, industry and level of exposure define the package and the modules.
Licensing
Official CrowdStrike contract, with a local invoice in Brazilian reais.
Deployment
Onboarding and agent rollout across the endpoints, run by UPX.
Tuning and calibration
Policies tuned to your risk and detections calibrated to your traffic.
24/7 operation
Monitoring, investigation and response to detections by the UPX in-house SOC.
Renewal
Review of endpoints and modules before expiry, with no interruption to protection.
AI-Driven SOC 24/7
Falcon detects. The UPX SOC investigates and responds.
Falcon detections enter the operation of the UPX in-house SOC, active 24 hours a day, 365 days a year. AI agents handle triage and gather context, and analysts carry each case through to the response, without depending on your team outside business hours.
Immediate triage
Every Falcon detection is triaged the moment it arrives, with context gathered by AI agents.
Investigation with context
N1, N2 and N3 analysts cross Falcon telemetry with SIEM, identity and cloud to understand what happened.
Authorized containment
Once the threat is confirmed, specialists carry out containment, with evidence recorded in the case.
Indicators and reporting
MTTD, MTTA and MTTR tracked per case, with weekly and monthly technical and executive reports.
- 24/7/365
- Continuous operation
- N1 · N2 · N3
- In the same flow
- SOC 2 · ISO
- SOC 2 Type 2 and ISO 27001
Why license with UPX
CrowdStrike Global Partner
Authentic licensing, with official contract and support from the vendor.
Local invoicing
Invoice in Brazilian reais, with no currency hassle.
Over 20 years in cybersecurity
In-house operation, with SOC 2 Type 2 and ISO 27001 certifications.
FAQ
Frequently asked questions
How much does CrowdStrike Falcon cost? How does per-endpoint pricing work?
Falcon is licensed by subscription, per endpoint. The amount depends on the number of devices, the chosen package and the add-on modules. UPX sends the proposal after understanding your environment, within 1 business day.How does CrowdStrike license renewal work?
UPX tracks the contract expiry, reviews the number of endpoints and the contracted modules with you and runs the renewal with no interruption to protection.What is the difference between Falcon Go, Pro and Enterprise?
They are packages with increasing levels of capability. Go covers essential prevention, Pro extends controls and intelligence, and Enterprise adds full detection and response (EDR/XDR). A UPX specialist indicates the package that fits your environment.What is EDR and why do I need more than an antivirus?
Antivirus blocks malicious files. EDR (Endpoint Detection and Response) records what happens on the endpoints and makes it possible to detect, investigate and contain attacks that use no malware, such as stolen credentials and legitimate system tools.What does UPX operate through its in-house SOC after licensing?
The UPX SOC monitors Falcon detections 24/7/365, investigates the cases, carries out authorized containment and keeps policies and detections tuned to your environment throughout the contract.How does local invoicing in Brazilian reais work?
UPX issues an invoice in Brazil, in Brazilian reais. You do not have to deal with currency exchange or payments abroad.Why license with UPX instead of directly with the vendor?
As a CrowdStrike Global Partner, UPX offers the same official license, with the vendor's contract and support, and adds deployment, tuning and operation by our in-house SOC, plus local invoicing.
Request a proposal
Before talking about licenses, we understand your operation: environment size, industry and level of exposure. With that, a UPX specialist defines the protection that fits your case.