CrowdStrike Holdings, Inc. reports cybersecurity product, platform, partner and financial developments tied to its cloud-native Falcon platform. The company’s updates commonly cover endpoint and cloud workload protection, identity and data security, threat intelligence, adversary research, automated detection and response, managed threat hunting, and AI-driven security capabilities delivered through the CrowdStrike Security Cloud.
Recurring announcements also address Falcon platform integrations, Project QuiltWorks activity around frontier AI risk, partner ecosystem programs, security conferences and research events, corporate recognition, alliance leadership, and scheduled earnings communications. The company’s news flow centers on how its Falcon architecture, threat-hunting services and partner channels support enterprise security operations.
CrowdStrike (CRWD) announced that its Falcon platform will be available through the Anthropic Claude Marketplace, allowing Anthropic customers to use a portion of their existing Anthropic commitments to procure Falcon.
The integration brings CrowdStrike’s Charlotte AI AgentWorks into Claude, enabling security teams to build custom Falcon-powered agents in minutes without coding, execute triage, enrichment, hunting and response workflows conversationally inside Claude, and share reusable agents across the security operations center with scoped permissions, human-in-the-loop approvals and full auditability. Both companies highlight that this puts AI-native cybersecurity tools directly where enterprises are already deploying AI.
CrowdStrike (CRWD) introduced what it calls the next evolution of the agentic security operations center (SOC), enabling coordinated, multi-agent AI investigations across endpoint, identity, SaaS, cloud, and network domains. The announcement was made at Fal.Con 2026 in Austin and Las Vegas.
The platform uses Charlotte AI to dispatch domain-specific agents in parallel on a shared context layer, so all agents work from a single, persistent memory of the environment. Built on a unified data architecture that processes nearly four trillion events daily, this design aims to turn investigations that once took hours into minutes. Key components include coordinated multi-agent investigations, an Enterprise Graph-based shared context layer, certified Falcon Onum data pipelines that can reduce data storage costs by up to 50 percent, and the Charlotte Agentic SOAR workspace that lets customers build and govern no-code agents and workflows with configurable autonomy levels.
CrowdStrike (CRWD) introduced the CrowdStrike Agentic Identity Provider (Agentic IdP), positioning Falcon Next-Gen Identity Security as the identity control plane for AI-driven, “agentic” enterprises. The platform is designed to create trusted identities for AI agents, enabling what the company calls Continuous Identity for authorization and access control.
Agentic IdP discovers AI agents via Falcon Guardian, automatically registers them in a single directory, issues cryptographically verifiable identities, and brokers short-lived, tightly-scoped tokens instead of standing credentials. Every agent action is attributed back to the human or workload it represents, aiming to make AI agent behavior traceable and accountable across the Falcon platform.
CrowdStrike (CRWD) launched Real-Time Supply Chain Attack Protection on its Falcon platform, designed to block malicious open-source software packages at the endpoint before any embedded code executes.
The Falcon sensor now intercepts package manager transactions such as npm install and pip install across npm and PyPI on Windows, macOS, and Linux. Security teams can set granular controls, including minimum package age, to govern what code reaches endpoints. The capability adds automated investigation and remediation via Charlotte Agentic SOAR and a global inventory showing every software package installed across all endpoints, helping enterprises manage AI-driven software supply chain risk.
CrowdStrike (CRWD) announced an expanded partnership with OpenAI to extend its Falcon security platform to OpenAI Codex agents and integrate the GPT-5.6 Cyber model. The collaboration focuses on securing AI agents at runtime and applying advanced cyber reasoning to help customers adopt AI securely.
Falcon Guardian, CrowdStrike’s AI Detection and Response solution, now discovers supported Codex agents across the enterprise, connects their runtime activity to Falcon telemetry, detects compromised or unauthorized behavior, and enforces governance policies as runtime controls. GPT-5.6 Cyber is used within CrowdStrike’s Frontier AI Readiness and Resilience (FAIRR) Service and across the Falcon platform to assess frontier AI risk, analyze attack paths, validate exploits, and inform remediation priorities under expert oversight.
CrowdStrike (NASDAQ: CRWD) announced new Falcon platform capabilities across Google Cloud’s enterprise AI ecosystem, aimed at securing organizations that are building, deploying, and operating enterprise AI on Google Cloud. The company is expanding Falcon Guardian through Google Agent Gateway to provide AI runtime protection for applications, helping detect prompt injection, sensitive data leakage, and malicious AI activity while maintaining visibility across AI agents and applications.
CrowdStrike is also extending Falcon MCP, Charlotte AI, and Falcon Shield to Gemini Enterprise, embedding CrowdStrike intelligence into Gemini-enabled workflows, enabling AI-native security operations, and strengthening AI governance via Google Cloud’s Agent Registry. In addition, CrowdStrike is building the Falcon platform on regional Google Cloud infrastructure to align with customers’ hyperscaler preferences and operational requirements.
CrowdStrike (NASDAQ: CRWD) announced that Ernst & Young LLP (EY US) has selected the CrowdStrike Falcon platform to power the Trust Layer of EY.ai Value Blueprints, forming the security foundation of EY's AI transformation framework. The collaboration, building on the firms' existing QuiltWorks relationship, integrates CrowdStrike's AI-native security with EY's AI transformation and advisory expertise. The combined offering aims to help enterprises identify AI risks, embed security and governance from design through runtime using tools such as Falcon Guardian, and securely scale and operationalize AI across identities, cloud, data, and AI workloads.
CrowdStrike (NASDAQ: CRWD) announced the launch of its Cyber Superintelligence Lab, described as the first frontier AI research organization focused on cyber defense and AI safety. The Lab combines CrowdStrike AI researchers, offensive operators, and incident responders under a single charter and is led by chief AI and autonomous systems officer Dr. Bartley Richardson.
Built on the data, adversary intelligence, and high-fidelity environments behind the CrowdStrike Falcon platform, the Lab uses a large, labeled security data corpus. According to CrowdStrike, Falcon sensors generate trillions of security events daily across endpoints, identity, cloud workloads, data stores, and Falcon Next-Gen SIEM, enriched by 15 years of threat intelligence and incident response.
CrowdStrike (NASDAQ: CRWD) introduced SafeMind, a family of purpose-built cybersecurity models and harnesses built by the CrowdStrike Cyber Superintelligence Lab and operating natively in the Falcon platform. SafeMind is described as an agentic system combining an offensive red-team model (Red Tempest) and a defensive blue-team model (Blue Solano) in a closed loop.
According to CrowdStrike, SafeMind is trained on Falcon sensor telemetry, threat intelligence, MDR annotations, and 15 years of incident response work, and is built using NVIDIA Nemotron open models with CoreWeave AI Cloud for training and inference. Evaluations cited by the company show a 29% higher detection rate, 6x faster end-to-end remediation, and 99% cost savings on detection and remediation versus leading frontier and open-source baselines.
CrowdStrike (NASDAQ: CRWD) announced Falcon Guardian, an AI Detection and Response (AIDR) solution designed to secure AI agents at runtime on the endpoint and across cloud, SaaS, and browser environments. Guardian uses CrowdStrike’s single-sensor Falcon architecture to provide discovery, visibility, access control, and runtime detection for AI agents.
Key capabilities include AI agent discovery and inventory on Windows and macOS, agent runtime visibility through endpoint telemetry, agent access controls, and runtime detection and response. Additional components include an upcoming AI Gateway, Falcon Complete for Guardian, Falcon Adversary OverWatch for Guardian, and native integration with Falcon Next-Gen SIEM.