CrowdStrike Falcon® Platform Innovations
Introducing the CrowdStrike Falcon Platform Spring ‘26 Release
Discover the latest innovations transforming the future of protection — powered by AI, unified data, and the Falcon platform.
Secure AI Platform Innovations
Platform Innovation Highlights
Securing AI starts on the endpoint
New Falcon platform innovations uncover shadow AI, secure AI agents, and detect attacks on AI across endpoints, browser SaaS, and cloud environments. From detecting data leaks in desktop AI apps to unified agent visibility across SaaS platforms, organizations can now securely accelerate AI adoption and innovation.
Build secure agents with the Charlotte AI AgentWorks ecosystem
CrowdStrike® Charlotte AI™ AgentWorks is defining security’s only purpose-built agentic ecosystem — bringing together frontier AI models, technology innovators, and global system integrators to build secure agents on the Falcon platform. Every agent built in AgentWorks inherits the Falcon platform’s unmatched data foundation, intelligence, and security guardrails.
Transform your SOC with open next-gen SIEM for third-party EDR
CrowdStrike Falcon® Next-Gen SIEM expands to third-party EDRs, starting with Microsoft Defender, delivering unified visibility and AI-powered detection across environments. Built on an open, extensible platform, it sets the foundation for broader integrations across the security stack.
Secure AI and data – wherever it lives and moves
CrowdStrike connects adversary intelligence with cloud risk and data security to stop what attackers actually exploit. With unified visibility across applications, cloud, and data in motion, teams prioritize critical exposures, prevent data theft, and respond faster across the agentic enterprise.
Flex for Services: The right expertise — right when you need it
CrowdStrike extends Falcon Flex to services, enabling flexible, outcome-driven consumption across its full services portfolio — from AI advisory to incident response. With the Zero Dollar Flex Fund, organizations can engage instantly while partners scale delivery in the agentic era.
More from our latest releases
Secure AI Everywhere
Shadow SaaS and AI agent discovery
Discover shadow SaaS and risky AI agents with unified Falcon platform telemetry. Find them. Know them. Control them.
Secure AI Everywhere
Shadow AI discovery across endpoints
Uncover unsanctioned AI tools and local LLM runtimes to eliminate hidden exposure risk.
Secure AI Everywhere
Browser extension control across endpoints
New policy-based browser extension control, enables you to identify, assess, and block malicious or risky extensions across endpoints.
Secure AI Everywhere
AIDR now covers desktop AI apps and prompts
Monitor desktop AI apps like ChatGPT and GitHub Copilot with prompt-level visibility and detect attacks, data leaks and policy violations.
Secure AI Everywhere
AI visibility and detection for containerized workloads
Gain visibility into AI prompts and responses for containerized apps communicating with OpenAI and detect attacks, leaks and policy violations.
Secure AI Everywhere
Kubernetes threat detection
Protect AI workloads running on Kubernetes by detecting threats in the API server, extending visibility beyond the runtime sensor.
Agentic SOC Transformation
Transform your SOC with Falcon Next-Gen SIEM for third-party EDR
Extend AI-native operations to third-party EDR, starting with Microsoft Defender, and your stack — driving speed, clarity, and control without rip-and-replace.
Agentic SOC Transformation
Turn third-party threat intel into action
Ingest, enrich, and operationalize external indicators with third-party indicator management. Reduce noise and drive high-confidence action.
Agentic SOC Transformation
Real-time data control with native Falcon Onum
Falcon Onum is now integrated in the Falcon platform, delivering real-time telemetry control across detection, AI, and analytics workflows.
Agentic SOC Transformation
Query smarter, store less with federated search
Route data to external stores and access later with federated search. Get smarter, more efficient data management.
Agentic SOC Transformation
Migrate faster with Query Translator Agent
Automatically convert Splunk searches into Falcon CQL with the Query Translation Agent, preserving workflows and accelerating value.
Agentic SOC Transformation
Stop breaches at machine speed with Agentic MDR
CrowdStrike Falcon® Complete delivers Agentic MDR, uniting automation, adaptive AI, and human oversight to stop breaches.
Agentic SOC Transformation
SOC Transformation Services: Build agentic-ready foundations
CrowdStrike experts accelerate time-to-value with streamlined workflows to establish the foundation of future agentic operations.
Agentic SOC Transformation
Introducing Flex for Services
CrowdStrike delivers flexible elite expertise — on your terms.
Stop AI-Accelerted Adversaries
Introducing Falcon Data Security
Discover sensitive data, see how it moves in real time, and stop data theft across endpoints, browsers, GenAI, SaaS, and cloud.
Stop AI-Accelerted Adversaries
Unify application and cloud risk
Automatically correlate insights across application runtime and cloud infrastructure layers for a comprehensive risk analysis.
Stop AI-Accelerated Adversaries
AI data flow discovery for cloud
Monitor sensitive data across internal AI orchestration and model training for end-to-end runtime visibility into how data moves through AI workflows.
Stop AI-Accelerated Adversaries
AI-driven Exposure Prioritization Agent
New environment-aware AI risk score enables agentic prioritization and analysis of live telemetry, exploitability conditions, and asset criticality.
Stop AI-Accelerated Adversaries
Discover shadow AI in cloud-native applications
Unify application, infrastructure, and AI context to identify hidden AI usage, detect ungoverned interactions, and assess agent behavior.
Stop AI-Accelerted Adversaries
Prevent RMM tool abuse
Block unapproved remote access tools, stopping attackers before they can use legitimate software against you.
Stop AI-Accelerted Adversaries
Prioritize cloud risks with adversary intelligence
Reveal the adversaries targeting your open risks — and the tactics they use — with world-class intelligence.
Stop AI-Accelerted Adversaries
Cut triage times with timeline explorer
Uncover root causes fast with timeline explorer, linking cloud changes over time to show how exposure emerged and to speed remediation.
Stop AI-Accelerated Adversaries
Falcon for XIoT extends asset protection in healthcare environments
CrowdStrike expands protection across IoT, OT, and now IoMT devices to eliminate data silos.
Falcon for Government
FedRAMP High authorization for Falcon for XIoT
CrowdStrike Falcon® for XIoT delivers FedRAMP High–authorized asset visibility and protection across critical government infrastructure.
Falcon for Government
Charlotte AI: New agents coming to GovCloud
Charlotte AI’s natural language conversations and Response Agent will soon be available for the public sector through GovCloud.
Falcon for Government
Malware Sandbox for GovCloud
FedRAMP High customers can safely run suspicious files in an isolated sandbox environment to identify malicious activity.
Falcon for Government
EASM now available in GovCloud
Already FedRAMP-authorized, Falcon Exposure Management now includes native EASM, bringing outside-in visibility to external assets.
Falcon for Government
Manage operational risk on GovCloud
Real-time insight into quantum-vulnerable cryptography and Windows Secure Boot changes to protect mission-critical operations.
Additional resources and news
The industry’s most anticipated threat intelligence report of the year exposes the critical themes, trends, and events from the 2025 cyber threat landscape. Defend against the unprecedented speed and sophistication of today’s AI-enabled adversaries with the latest threat intelligence. Read the report.
CrowdStrike customers can get additional details on these and all of our releases with our platform release notes. You must have an active customer login to view release notes and documentation. Review release notes.
Many organizations think they’re prepared to face today’s ransomware, but the numbers tell a different story. CrowdStrike surveyed 1,100 global security leaders about the AI-powered tradecraft they’re seeing in the wild. Read the report.
Fal.Con brought together thousands of defenders to learn how to supercharge their SOCs and harness the power of AI. Get the latest headlines from the event in our news center.
CrowdStrike recognized as a Leader
Gartner® Magic Quadrant
CrowdStrike Named a Leader by Gartner for Endpoint Protection Platforms
KuppingerCole
CrowdStrike Named Overall Leader in 2025 KuppingerCole ITDR Leadership Compass
1These numbers are projected estimates of average benefit based on company’s own internal analysis and recorded metrics provided by customers during pre-sale motions that compare the value of CrowdStrike with the customer’s incumbent solution. Actual realized value will depend on the customer's module deployment and environment.
