CrowdStrike unveils AI-powered agents to automate security tasks

CrowdStrike has announced the launch of its new Agentic Security Platform and a series of mission-ready artificial intelligence agents designed to automate security operations.

The company introduced a combination of out-of-the-box AI agents and Charlotte AI AgentWorks, a no-code platform that allows security teams to develop and deploy custom agents. These offerings are integrated into the CrowdStrike Falcon platform and are aimed at helping organisations automate repetitive security tasks and direct analysts towards strategic decision making.

Agentic security workforce

CrowdStrike's president, Michael Sentonas, said the initiative reflects the company's aim to put AI at the centre of security team operations, freeing up experts for higher-value tasks.

"Our vision is that every security analyst will be in command of an agentic security workforce that eliminates the time-consuming and repetitive tasks better suited for machines," said Michael Sentonas, president of CrowdStrike. "We started with seven of the most common and high-impact workflows, embedding the expertise of Falcon Complete analysts into agents that reason, decide, and act with the judgment of an elite analyst at machine-speed. And with Charlotte AI AgentWorks, customers can go further, building and customizing their own agents to extend these capabilities into the unique workflows of their environment."

The agentic workforce leverages extensive security event data and is designed to function under human oversight, with AI agents supplementing, rather than replacing, the work of analysts. Falcon's intelligence underpins both the standard agent fleet and bespoke solutions created by customers with Charlotte AI AgentWorks.

Automating security tasks

The fleet of mission-ready agents introduced by CrowdStrike aims to address common security operations centre (SOC) workflows. The company detailed the first seven agents, each focusing on distinct tasks. These include an Exposure Prioritization Agent for vulnerability triage, a Malware Analysis Agent that provides in-depth malware analysis and YARA rule creation, and a Hunt Agent dedicated to proactive threat hunting.

Other agents in the initial release are the Search Analysis Agent, designed to interpret and summarise query results; a Correlation Rule Generation Agent, which recommends and optimises detection rules; a Data Transformation Agent for normalising and translating data across tools; and a Workflow Generation Agent that automates the creation of workflows without needing code.

These tools operate in the Falcon platform's various modules, drawing on real-world decisions, particularly insights from Falcon Complete Next-Gen Managed Detection and Response (MDR), and are part of a broader effort to make AI-driven security defences accessible to more enterprises.

No-code customisation with Charlotte AI AgentWorks

CrowdStrike stated that with Charlotte AI AgentWorks, organisations can build, test, and deploy custom AI agents within their Falcon environments without requiring development skills. The platform operates through natural language prompts and promises integration of enterprise security standards and governance.

The company said the approach democratises access to advanced security automation and allows teams to address unique organisational requirements through custom automated workflows.

Collaboration and third-party integration

CrowdStrike also highlighted the Agentic Security Platform's collaboration features, with Charlotte AI able to connect to and work alongside trusted AI agents from third-party partners. Companies listed include Abnormal AI, Corelight, ExtraHop, Google, GreyNoise, Proofpoint, Rubrik, Salesforce, ServiceNow, and Zscaler.

This interoperability extends the agentic defence model across broader enterprise environments, with Charlotte AI acting as a central command interface for coordination between human staff and multiple agents, whether built by CrowdStrike or external partners.

Customer access and platform expansion

According to CrowdStrike, Charlotte AI and its mission-ready agents will be accessible to all Falcon platform customers, subject to monthly service credits. The company also announced extended partnerships with NVIDIA and Salesforce, as well as plans to acquire Pangea, a firm specialising in AI security, reinforcing its intentions to deepen integration across the enterprise AI ecosystem and unify data, intelligence, and governance for large-scale AI security operations.

The announcements form part of CrowdStrike's efforts to offer an end-to-end security ecosystem that incorporates automation, custom AI development, and collaborative security intelligence across hybrid environments.