Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Cyber security firm achieves 100 per cent detection and protection with no false positives in first cloud-spanning evaluation.
CrowdStrike has achieved a perfect score in the 2025 MITRE ATT&CK Enterprise Evaluations, detecting and protecting 100 per cent of threats with zero false positives, in what MITRE described as the most technically challenging assessment the program has ever conducted.
MITRE is a US-based, not-for-profit that operates federally funded research and development centres and works closely with government, industry, and academia on national security, cyber security, aviation, healthcare, and other public-interest missions.
The latest round of testing marked the first time MITRE evaluated a vendor’s ability to defend against attacks moving across identity, endpoint, and cloud environments, reflecting the cross-domain nature of current threat activity.
CrowdStrike said the results underscore the architectural advantage of its unified Falcon platform, which was exercised against a full attack chain rather than isolated endpoint techniques.
“These were the most challenging MITRE evaluations yet, and we participated to give the industry a transparent view into which platforms have the architecture to stop real-world threats,” Michael Sentonas, CrowdStrike’s president, said.
“Delivering 100 per cent detection, 100 per cent protection, and no false positives across these highly sophisticated, cross-domain attacks is a major achievement. The results show the power of the unified Falcon platform – complete protection with a first-class analyst experience that eliminates noise and complexity while accelerating response.”
This year’s evaluation expanded MITRE’s scope significantly, testing whether participating platforms could withstand full-spectrum tradecraft, including early-stage techniques designed to assess if a system can detect and contain intrusions before adversaries establish persistence or move laterally. The assessment emulated advanced real-world operations attributed to the Chinese state-sponsored espionage group Mustang Panda and the e-crime group Scattered Spider, both known for exploiting cloud environments and conducting stealthy, multi-vector attacks.
CrowdStrike said the Falcon platform delivered complete detection and protection throughout the entire attack sequence. According to the company, the system successfully stopped credential abuse, lateral movement and cloud exploitation exactly as executed in MITRE’s scenarios, demonstrating the benefits of a unified data model and consolidated security architecture.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
Be the first to hear the latest developments in the cyber industry.