CrowdStrike Spotlight

CrowdStrike Spotlight is a vulnerability management module within the CrowdStrike Falcon platform that leverages the existing Falcon agent to assess vulnerabilities in real time — without requiring separate scans, additional agents, or dedicated scanning infrastructure.

Spotlight uses CrowdStrike's threat intelligence and ExPRT.AI model to prioritize vulnerabilities based on real-world exploitability and threat actor activity, enabling security teams to focus on what adversaries are actually targeting. Because it runs on the same lightweight Falcon sensor already deployed for endpoint detection and response, it provides instant visibility with zero performance overhead.

The module covers OS and application vulnerabilities across Windows, macOS, and Linux endpoints, making it especially effective for organizations already invested in the CrowdStrike ecosystem.