Particle.news

CrowdStrike Moves Security to the AI Agent Runtime With Falcon Guardian

The launches pair CrowdStrike telemetry with NVIDIA Nemotron models, partner integrations, managed services to detect, stop, remediate autonomous AI agents before they act.

Overview

  • CrowdStrike announced Falcon Guardian, SafeMind, Falcon IQ and a Cyber Superintelligence Lab at its Fal.Con conference in Las Vegas on September 1 to add runtime inventory, behavioral monitoring, causal investigations and enforcement for AI agents.
  • Falcon Guardian extends CrowdStrike’s kernel‑level Falcon sensor to trace prompts through runtime actions, maintain a live inventory of agents across endpoints, cloud and SaaS, and enforce policies to block unauthorized agent behavior.
  • SafeMind is a paired red/blue family of agentic models and harnesses built with NVIDIA Nemotron and trained on CrowdStrike telemetry, which the company says speeds investigations and automates remediation in adversarial co‑evolution tests.
  • Falcon IQ packages more than 50 specialized AI agents to automate discovery, prioritization and remediation workflows and lets partners load service catalogs to scale delivery and convert findings into action.
  • The suite ties CrowdStrike’s 15 years of telemetry and managed services to third‑party models and infrastructure (OpenAI GPT‑5.6 Cyber, Google Gemini, CoreWeave) with gateway and managed‑service features currently in pre‑beta or slated for near‑term release, which could shift how enterprises control autonomous agents and how vendors compete for model and enforcement roles.