CrowdStrike Falcon Certification Program

The CrowdStrike Falcon Certification Program offers job-role based exams to validate knowledge and skills using the Falcon platform. Individuals who hold a certification can be trusted to efficiently and proficiently use CrowdStrike products and workflows in their day-to-day activities. 

It is strongly recommended that candidates complete the training courses offered in CrowdStrike University that align to each certification. Additionally, candidates should have at least 6 months' experience working in the Falcon platform, as the exam questions measure knowledge and skills gained through hands-on experience.

Questions? Review the information below and contact certification@crowdstrike.com for additional support. FAQs about CrowdStrike training and exams.

Now Available - CrowdStrike Certified Falcon Practitioner Exam

Highlight your knowledge of the CrowdStrike Falcon® platform by earning the CrowdStrike Certified Falcon Practitioner (CCCP) credential! This brand-new certification exam evaluates your foundational knowledge of core cybersecurity concepts and entry-level proficiency with the CrowdStrike Falcon® platform, with a focus on Security Operations Center (SOC) environments. The exam tests your knowledge and skills in these key areas:

  • Cybersecurity Fundamentals
  • Falcon Platform Overview
  • Core Operational Workflows
  • AI and Automation in Falcon

For more information, review the CCFP Exam Guide. It is recommended that you complete the roadmap of CCFP training courses in CrowdStrike University and have three (3) to six (6) months experience working in the CrowdStrike Falcon® platform. Access to CrowdStrike University is required to complete the training courses.

EARN YOUR WINGS

CrowdStrike Certified Falcon Practitioner (CCFP)

The CCFP certification is directed at entry-level SOC analysts and cybersecurity professionals who are new to the CrowdStrike Falcon platform.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED FALCON ADMINISTRATOR (CCFA)

The CCFA certification is directed at the administrator or any analyst with access to the administrative side of the Falcon platform.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED FALCON RESPONDER (CCFR)

The CCFR certification is directed at the front-line analyst responding to detections or anyone performing those duties.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED FALCON HUNTER (CCFH)

The CCFH certification is directed at the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED SIEM Analyst (CCSA)

The CCSA certification is directed at security professionals responsible for investigating detections and analyzing data within the CrowdStrike Falcon® Next-Gen SIEM environment.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED SIEM Engineer (CCSE)

The CCSE certification is directed at security engineers and other professionals implementing and managing CrowdStrike Next-Gen SIEM to support security operations within an organization. 

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED IDENTITY SPECIALIST (CCIS)

The CCIS certification is directed at those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED CLOUD SPECIALIST (CCCS)

The CCCS certification is directed at the cloud security engineer who manages the security of the organization’s cloud infrastructure.

VIEW EXAM GUIDE

Take CSU Training Classes

Before getting CrowdStrike Certified, we recommend you take the learning path training courses listed in the Certification Exam Guides.

Preparing for the Certification Exam

Preparing for the Exam

Before taking your CrowdStrike certification exam, we strongly suggest you take the recommended training courses associated with the exam. To take the training courses, you will need access to CrowdStrike University

Review the Exam Guides

The exam guide is the framework for the exam. The exam guide is valuable to the test taker because it breaks down the sections of the test. Please download and review the certification exam guides to prepare yourself before taking an exam.

Scheduling the Exam

When you are ready to take your exam, schedule your exam by creating or logging in to your Pearson account at the top of this page. Please ensure the name you use for your Pearson account matches your government-issued ID. For verification purposes, you will be required to present your ID prior to taking your exam. During the exam scheduling process, you will have the option to pay for your exam by credit card or redeem an exam voucher. If you would like to purchase CrowdStrike University exam vouchers by purchase order, send an email with your request to a CrowdStrike training representative.

Accept the CSU Certification Agreement

Before you schedule your certification exam, please be sure to review the CrowdStrike University Certification Agreement (PDF).

Choose Your Delivery Option

Earn your wings on your schedule! Our certification programs are delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC), allowing you to avoid travel and additional costs.

Check Your System Requirements

OnVUE online proctoring allows you to take your certification exam securely from your home or office. Run a system check to test the compatibility of the OnVUE application.

Contact us

Need assistance? Chat with a live agent now.*

*Can't find the chat feature? Enable support features by turning on functional cookies in your preferences:

Last updated 2026-08-04