Particle.news
Download on the App Store

CrowdStrike Launches Charlotte Agentic SOAR and New AI Agents for Machine-Speed SOCs

The company frames the move as a shift from static playbooks to reasoning automation that coordinates work across its Falcon platform.

Overview

  • CrowdStrike introduced Charlotte Agentic SOAR as the orchestration layer that synchronizes AI-driven agents under analyst oversight across the security lifecycle.
  • Charlotte Agentic SOAR is positioned to integrate Falcon Next-Gen SIEM, Falcon Fusion SOAR, Charlotte AI AgentWorks, and the Enterprise Graph while coordinating native, custom, and third-party agents.
  • New Data Onboarding Agent lets teams build end-to-end pipelines into Falcon Next-Gen SIEM using natural language, handling ingestion setup, real-time validation, and error resolution.
  • The Foundry App Creation Agent enables natural-language creation and deployment of Falcon Foundry applications to speed custom app development on the platform.
  • The updated Exposure Prioritization Agent, powered by ExPRT.AI and integrated with Falcon Exposure Management, uses authenticated, continuous scanning to validate exploitability and focus remediation, with CrowdStrike cautioning that some capabilities are not yet generally available.