CrowdStrike has announced new developments to its Falcon platform, unveiling a suite of innovations aimed at strengthening cyber defence and operational visibility across IT, cloud, and operational technology environments.
The company has introduced Charlotte Agentic SOAR as a core orchestration layer within the Falcon Agentic Security Platform. This system is designed to connect and manage AI-powered agents throughout the security lifecycle, allowing them to operate collaboratively and respond to threats in real time, under the direction of analysts.
Charlotte Agentic SOAR allows analysts to use natural language and drag-and-drop controls to connect tools, define operational guardrails, and execute both structured and adaptive workflows without the need for coding. By coordinating native, custom-built, and third-party agents, the system aims to deliver intelligent and coordinated threat prevention, detection, and response.
Evolution of the agentic SOC
CrowdStrike's announcement detailed an enhanced approach to security operations, shifting the role of defenders from manual task execution to orchestrating an ecosystem of intelligent agents. The platform's AI-ready data layer provides context to both human analysts and automated agents, powering what the company terms an "Agentic Security Workforce." New modules also enable organisations to build custom agents without code, managed through the Charlotte Agentic SOAR orchestration system.
Expansion of Agentic Security Workforce
The company has expanded its Agentic Security Workforce with new mission-ready agents tailored to accelerate common security operations tasks. These include the Foundry App Creation Agent, which allows teams to build security applications using natural language instructions; the Data Onboarding Agent, which streamlines data integration for Falcon -Gen SIEM; and an updated Exposure Prioritization Agent for continuous vulnerability management.
This perspective was offered by George Kurtz, Chief Executive Officer and Founder of CrowdStrike, underscoring the company's approach of embedding human judgement into its autonomous agents.
The new mission-ready agents supplement existing modules, aiming to relieve analysts from routine or complex manual tasks and allowing greater focus on strategic security decisions. Charlotte AI AgentWorks enables organisations to develop no-code, custom agents, while Charlotte Agentic SOAR provides a control plane for unified agent management across the platform.
XIoT and operational technology focus
Further enhancements to the Falcon platform include Falcon for XIoT, a development targeted at providing zero-touch asset discovery and unified operational visibility within Extended Internet of Things (XIoT) and operational technology (OT) environments. The offering eliminates the requirement for additional hardware or intrusive network scans, helping organisations monitor device communications and segmentation in real time without disrupting critical operations.
Falcon for XIoT's main features include automatic identification and inventory of industrial assets across segmented networks, real-time segmentation visibility to detect policy violations, and a dynamic interface that aggregates industrial asset and vulnerability data.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
