{"id":10296,"date":"2026-11-04T08:25:00","date_gmt":"2026-11-04T08:25:00","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=10296"},"modified":"2026-11-04T08:25:00","modified_gmt":"2026-11-04T08:25:00","slug":"crowdstrikes-ai-soc-vision-evolves-as-agentic-uncertainty-adds-new-twist","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=10296","title":{"rendered":"CrowdStrike\u2019s AI SOC vision evolves as agentic uncertainty adds new twist"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

\u201cThe software we use has become an actor,\u201d declared CrowdStrike President Michael Sentonas in his address on the dangers and opportunity of agentic AI at the company\u2019s Fal.Con conference in September. It\u2019s an idea that until recently would have been dismissed as absurd, yet across cybersecurity it\u2019s now taken as a given.<\/p>\n

For decades, the adversary has been nuisance hackers, professional cybercriminals, or well-resourced teams working for nation states. The arrival of rogue agents \u2014 underlined by real-world incidents such as OpenAI\u2019s infamous assault on Hugging Face<\/a> \u2014 has demolished this. Agents still work on behalf of humans, but they don\u2019t always reason or act like them. They are entities with capabilities and an unpredictability unlike any threat businesses have ever faced.<\/p>\n

\u201cI believe we just crossed a line. Agents have escaped evaluation environments and compromised infrastructure they were never supposed to touch,\u201d Sentonas told<\/a> the crowd in Las Vegas in early September. \u201cFor decades, software did what we programmed it to. It has moved from execution to agency.\u201d<\/p>\n

Sentonas\u2019 point wasn\u2019t simply that malicious agents are a threat. The arrival of agentic AI also raises larger questions for security operations centers (SOCs), which will deploy agents on a scale that matches or even exceeds attackers. That makes agents a threat from both the outside and inside the enterprise perimeter. \u201cWhat happens when millions of AI agents act at machine speed on both sides?\u201d Behind the confident marketing pitches from CrowdStrike and a growing cast of rivals, the honest answer right now is that nobody can be sure.<\/p>\n

Coming from a cyber vendor, Sentonas\u2019 reference to \u201cmillions\u201d of agents might sound like a number meant to hype the threat. But it is likely no exaggeration, with Gartner forecasting<\/a> that the number of agents used inside a single Fortune 500 company will expand from 15 in 2025 to 150,000 by 2028.<\/p>\n

\u201cAs CIOs and IT leaders see an explosion of AI agents across their organizations, many are contending with an ungoverned sprawl of agents that expose their organizations to a range of risks, including misinformation, oversharing, and data loss,\u201d says Matt Goss, a senior director analyst at Gartner.<\/p>\n

Taking up the agent challenge<\/h2>\n

For years, Fal.Con was about persuading enterprise SOCs to consolidate capabilities under CrowdStrike\u2019s do-it-all Falcon platform, comprising nearly three dozen modules. In 2023, with its \u201cRaptor\u201d release, Falcon and the company\u2019s flagship event took a hard turn toward AI<\/a>. In this changed world, AI wasn\u2019t simply a Falcon capability; increasingly it was <\/em>Falcon, influencing everything it did.<\/p>\n

The AI theme dominated Falcon\u2019s 2026 Fall release<\/a>, bringing the company\u2019s growing portfolio of AI SOC capabilities under the Falcon umbrella with the launch of the Agentic Security Platform. Most individual components \u2014 Charlotte AI AgentWorks, Model Context Protocol (MCP) Integration, the AI-enabled Enterprise Graph \u2014 were announced in 2025 as part of the company\u2019s Agentic Security Workforce plan but a closer look reveals important new features.<\/p>\n

Currently, agents investigate alerts using pre-built Falcon agents or custom agents built using the no-code AgentWorks solution. Charlotte AI now gives these agents a shared memory layer in Enterprise Graph that enables them to coordinate with one another across multiple endpoints, identities, and cloud services simultaneously (aided by the company\u2019s 2025 acquisition of Onum<\/a>, which accelerated the speed with which agents can ingest data). On paper, the effect is to dramatically speed up alert triage while expanding the scope and capacity of worker agents in a way that relieves human SOC teams of a lot of basic grunt work, including some Level 2 investigation and Level 3 remediation and hunting workflows.<\/p>\n

Also new is SafeMind<\/a>, a frontier red-teaming system based on Nvidia\u2019s Nemotron open-weight LLM, comprising offense (Red Tempest) and defense (Blue Solano). This agentic framework continuously tests an isolated mirror of the live environment for weaknesses, feeding the results back into detection at the agent level. CrowdStrike didn\u2019t invent the concept, but it does appear to be the first to integrate an autonomous testing model into a SOC platform.<\/p>\n

Speed is not enough<\/h2>\n

This might look brand new, but the early incarnations of the agent-powered SOC are as much evolution as revolution. Everything inside a traditional CrowdStrike-powered SOC \u2014 from its Falcon EDR sensor, Enterprise Graph data, and cloud-native management \u2014 remains in place. Humans are still essential to decision-making, albeit at a higher level than before. What agents add to this SOC paradigm is a new abstraction layer separating SOC teams from the mass of telemetry they have increasingly struggled with. This should be good news for defenders because it means they have some hope of matching the speed and scale of agentic attacks.<\/p>\n

But speed is only the beginning, points out James Patrick, CTO for the FIOR Group, which develops an AI policy and security gateway. \u201cAttackers and defenders can both operate at machine speed, so simply making SOCs faster isn\u2019t enough. We need to move beyond reactive detection towards continuous testing of our defenses.\u201d<\/p>\n

SOCs must work out how much they delegate to agents and what constraints are set around this. \u201cEnterprises already struggle with fragmented telemetry, overlapping security products and inconsistent policies. Adding autonomous systems introduces another problem: establishing who or what has authority to act, and how to verify that authority,\u201d says Patrick.<\/p>\n

According to Chris Cochran, field CISO and VP of AI security for the SANS Institute, that\u2019s why \u201cfor most organizations, agentic AI will be augmentative rather than a replacement for analysts, at least for the next few years.\u201d<\/p>\n

Agent platforms, including CrowdStrike\u2019s, still have work to do proving themselves in terms of oversight and governance.<\/p>\n

\u201cThe core problem is that we\u2019re applying a probabilistic technology to a discipline that usually requires determinism,\u201d Cochran adds. \u201cA SOC needs to know that the same input will produce the same action, and that the action can be explained to an auditor or an incident review board.\u201d<\/p>\n

For that reason, Cochran believes that while agentic-powered SOCs will remove a huge amount of alert handling and correlation effort, the workload will shift to processes such as verification.<\/p>\n

\u201cTeams should continuously evaluate agents against known-good and known-bad cases, the same way you\u2019d regression test detection content,\u201d he says. \u201cNone of this is exotic, but it takes engineering time that many SOCs haven\u2019t budgeted for.\u201d<\/p>\n

Enemy within<\/h2>\n

One deeply unfamiliar problem is that agents themselves are an emerging attack surface within the enterprise and must be constantly assessed. Traditionally, security tools defend the environment, and the idea that an agent system doing the same job could itself become a direct threat is new. But what makes agentic AI unsettlingly is its non-deterministic nature, which means that, unlike a traditional security tool, it has the potential to do things you didn\u2019t tell it to and haven\u2019t planned for.<\/p>\n

\u201cOrganizations are deploying autonomous systems that access sensitive data, use privileged identities, interact with applications, and execute actions. Those agents can be compromised, manipulated, or behave unexpectedly,\u201d says Tom Findling, CEO and cofounder at AI SOC startup Conifers.ai. \u201cSecurity operations will need visibility into agent identities, permissions, actions, and decision-making processes, and the ability to detect and contain dangerous behavior.\u201d<\/p>\n

CrowdStrike\u2019s answer, relaunched at this year\u2019s Fal.Con, is Falcon Guardian, an AI detection and response (AIDR) solution featuring runtime enforcement, agent discovery, execution graph mapping prompts, and quarantining for misbehaving agents. Similar capabilities will be needed for any agent platform but the mere fact that security systems now need their own security systems underscores what CrowdStrike\u2019s Sentonas was referring to with his software-as-actor remark at Fal.Con. Human SOCs need to protect their enterprises from their AI SOC helpers.<\/p>\n

To that end, CrowdStrike yesterday announced the roughly $400 million acquisition of Fiddler AI<\/a>, an AI agent monitoring and governance vendor<\/a> from the emerging, burgeoning, and somewhat confusing agentic AI tools ecosystem<\/a>.<\/p>\n

Fiddler\u2019s platform tracks AI models\u2019 behavior, attempting to provide explanations for their actions as a means for establishing a control plane for governing and securing them. Its 100-plus metrics track hallucinations, toxicity, personally identifiable information (PII) leakage, and drift, enforcing policies to protect against jailbreaks, prompt injections, and bias. Enterprises deploy tools like Fiddler to make model drift visible and actionable before it becomes systemic risk<\/a>.<\/p>\n

CrowdStrike intends to bundle Fiddler into its flagship platform as Falcon Observe in Q4 FY2027, approximately six months from now, as a means for \u201cproving businesses can safely use AI agents every day,\u201d according to Sentonas\u2019 post announcing the acquisition<\/a>.<\/p>\n

CrowdStrike has invested heavily in agentic AI, building an impressive stack of capabilities that extend the Enterprise Graph that made it a dominant player capable of surviving the occasional embarrassing global hiccup<\/a>. It has even embraced a degree of openness, allowing data ingestion, API connectors, and partnership gateways to enrich the data going into its Falcon AIDR. However, there\u2019s no getting away from Falcon as the single control plane.<\/p>\n

\u201cCrowdStrike starts with endpoint security and an established enterprise security platform. Other vendors approach the problem through identity, networks, cloud, or security analytics. They all have an incentive to bring customers further into their own platforms,\u201d observes FIOR Group\u2019s Patrick.<\/p>\n

\u201cThe challenge for CrowdStrike, and for every vendor, is that a platform can\u2019t independently verify itself,\u201d he adds. \u201cWhat\u2019s needed is control that is genuinely independent of any single platform and works across those boundaries.\u201d<\/p>\n

According to Patrick, a critical feature will be the ability not simply to deploy a security layer but to continuously assess its security and performance. As the traditional detection and remediation stack of cybersecurity is pushed out of shape, the growth in new layers and processes could make this task almost as demanding as the main job of cyber defense that agents were supposed to simplify.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

\u201cThe software we use has become an actor,\u201d declared CrowdStrike President Michael Sentonas in his address on the dangers and opportunity of agentic AI at the company\u2019s Fal.Con conference in September. It\u2019s an idea that until recently would have been dismissed as absurd, yet across cybersecurity it\u2019s now taken as a given. For decades, the […]<\/p>\n","protected":false},"author":0,"featured_media":10297,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-10296","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10296"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10296"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10296\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/10297"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}