“The legacy SOC as we all know it will probably’t compete. It’s was a modern-day firefighter,” warned CrowdStrike CEO George Kurtz throughout his keynote at Fal.Con 2025, underscoring the urgency enterprises face in adopting autonomous safety to outlive an escalating cyber arms race.
The onslaught of adversarial AI tradecraft is forcing the cybersecurity business to reinvent itself at machine pace. The intensifying strain to fulfill these challenges is creating an unprecedented turning level similar to the arrival of firewalls or the launch of the iPhone. At Fal.Con 2025, CrowdStrike seized the second by unveiling its Agentic Safety Platform, designed round autonomous AI brokers.
“The shopper response has been overwhelming,” Kurtz famous in a post-event interview with VentureBeat. “From my perspective, the takeaway is how excited clients are, and simply to listen to the suggestions on how essential we’re in their very own organizations, how clients wish to do extra, and the way they wish to consolidate with CrowdStrike. The final consensus was the innovation, the tempo of innovation, they had been very impressed with.”
Strategic partnerships with business giants Nvidia, Salesforce and Meta amplify this pivot, positioning CrowdStrike squarely on the middle of an info safety market projected to soar to $293.9 billion by 2028.
Regardless of predicted double-digit compound annual progress charges for cybersecurity spending on the whole and SOC investments particularly, SOCs are going through an existential problem transferring quicker and with extra lethality than predicted.
Kurtz’s keynote included examples of how conventional Safety Operations Facilities (SOCs) have gotten out of date within the face of AI-driven threats. Generative AI (gen AI) is already well-weaponized and compressing the time SOCs have to reply. Mike Sentonas, CrowdStrike president, started his keynote with compelling information that underscored how cybersecurity defenses are being challenged in new ways in which defy straightforward identification and containment.
Each Kurtz’s and Sentonas’ keynotes supplied compelling information exhibiting how organizations clinging to legacy defenses face extreme publicity except they urgently embrace agent-driven defenses that function at AI pace.
The occasion itself generated constructive business suggestions, with Kurtz noting buyer feedback that “this was the very best safety convention they went to for the complete 12 months.” The corporate cited practitioner-focused attendance as a differentiator from bigger business occasions.
Agentic AI ushers in a brand new safety working mannequin
CrowdStrike’s introduction of the Agentic Safety Platform represents a major leap ahead within the firm’s platform technique. Their capability to innovate at scale is among the many quickest within the business, particularly within the areas of integrating AI and gen AI into their platform by way of new modules, providers, and enhancements. Central to this evolution is CrowdStrike’s current strategic acquisition of Pangea for roughly $260 million, enabling the business’s first absolutely built-in AI Detection and Response (AIDR) answer.
CrowdStrike’s Agentic Safety Platform introduces 4 distinct improvements that basically change enterprise safety operations:
-
Enterprise Graph
Integrates telemetry from endpoints, identities, cloud, and SaaS environments right into a unified, AI-ready information mannequin optimized for real-time risk detection and response.
-
Charlotte AI AgentWorks
Empowers safety groups with the business’s first no-code platform for creating, testing, and orchestrating trusted autonomous safety brokers.
-
Agent Collaboration Framework
Constructed upon the Mannequin Context Protocol (MCP), this functionality positions Falcon because the core operational hub of an autonomous agent-driven ecosystem.
-
AI-Powered Console
Gives analysts with a natural-language interface, immediately remodeling complicated information streams into actionable intelligence.
“After I began the corporate, it was to be a platform firm. You possibly can’t be a platform by yourself. Clearly, you want a various ecosystem,” Kurtz defined through the interview. “We imagine our philosophy is you need to be open and never shut, and that is a lot totally different than what our opponents have.”
When requested about their improvement velocity, Sentonas defined the architectural benefit: “You’ve got one sensor, you have got one platform. That sensor collects information and places it into one graph. Each different group will get profit from that.” Kurtz added: “After we come out with a brand new module, for probably the most half, it is a workflow. So we have constructed assortment capabilities. So 75% to 80% of the work is already completed. All we’re now doing is constructing the expertise and the workflow, and that is why we will transfer so rapidly.”
In the course of the keynote, Kurtz emphasised the shift represented by autonomous AI brokers: “AI brokers, to me, look quite a bit like a human. They’ve an identification, workflow, sources, information entry; some firms even assign them worker IDs.”
Quite than promising dramatic AI transformation, the corporate emphasizes cumulative advantages. “I take a look at AI as the power to compound,” Kurtz defined. “It’s important to take a look at it as a compounder. Are you able to save 20 minutes right here? Are you able to save quarter-hour there? Are you able to save prices there? And once you begin to add all of it up, typically folks need a huge bang, and it is like, you do not want an enormous bang, you simply want so as to add all these items up after which it compounds over time.”
The shift isn’t theoretical. Canalys analysis confirms that CrowdStrike companions generate as much as $7 in extra service income for each $1 invested by clients into the Falcon platform, establishing the best cybersecurity ecosystem multiplier ever documented. Falcon Subsequent-Gen SIEM is central to this progress, enabling companions to broaden their managed providers portfolios quickly.
Strategic partnerships amplify CrowdStrike’s AI safety dominance
CrowdStrike’s ecosystem-driven strategy is particularly evident by means of transformative partnerships. “You possibly can’t be a platform by yourself,” Kurtz emphasised in yesterday’s VentureBeat interview. “Our philosophy is open, not closed, and that’s why companions inform us that is the most efficient occasion they attend. We wish them to achieve success, as a result of in the event that they’re profitable, we’re too.”
-
Nvidia. Charlotte AI AgentWorks seamlessly integrates with Nvidia Nemotron fashions, permitting safety analysts to quickly create custom-made no-code safety brokers, establishing the foundations of a very autonomous SOC.
-
Salesforce. Embedding Falcon Defend into Salesforce Safety Heart and integrating Charlotte AI with Salesforce’s Agentforce platform empowers companies to hint AI agent conduct to human creators straight, quickly determine threats, and automate containment actions.
-
Amazon Enterprise Prime. Maybe most notably, CrowdStrike now democratizes enterprise-grade cybersecurity for SMBs. Amazon Enterprise Prime members acquire complimentary entry to Falcon Go, a major financial savings of $59.99 yearly per system, addressing the stark actuality that 89% of SMBs stay susceptible to superior ransomware assaults because of restricted AI-driven safety adoption.
“Make companions profitable. In the event that they’re profitable, we’re profitable,” Kurtz emphasised. The strategy has confirmed efficient, with companions saying “it is the most efficient occasion they go to, as a result of our buyer base, they’re all right here, and a whole lot of our companions need our clients to be their clients.”
Pangea acquisition completes the AI safety stack
CrowdStrike’s acquisition of Pangea displays how the corporate continues to prioritize securing the complete AI lifecycle. Kurtz defined the need clearly: “AI is quickly reshaping the enterprise assault floor, each immediate is a possible entry level”.
Pangea offers safety towards prompt-injection assaults with efficacy that scales as much as what enterprises want, together with as much as 99% accuracy and sub-30ms latency. Kurtz and Sentonas, all through their keynotes, doubled down on how their platform imaginative and prescient facilities on providing visibility, governance, and management over AI interactions for each buyer.
Sentonas bolstered that readability on value is central throughout an interview with VentureBeat this week. “The nice information is a whole lot of the issues we’ve proven should not issues it is advisable go and purchase. Innovation is constructed into the platform, a part of the subscription mannequin. We’re all the time clear what’s included, what’s new, and the place Flex applies.”
Addressing enterprise value issues about agentic AI adoption, the executives emphasised transparency. “Prospects wish to know the place they’re of their journey, what they’ve left,” Kurtz acknowledged. Sentonas added that “a whole lot of the issues that we have proven should not issues that it is advisable go and purchase. Some will likely be, in fact, however I’d argue that [the products’] capability to avoid wasting you cash goes to far outweigh the outlay to purchase the product.”
A key driver behind CrowdStrike’s platform success is Falcon Flex, which addresses buyer procurement fatigue and consolidation needs. This strategy highlights CrowdStrike’s give attention to platform consolidation moderately than level options, supported by a gentle tempo of innovation by means of each inner improvement and strategic acquisitions.
Regardless of technological capabilities for quicker releases, CrowdStrike has adopted a measured strategy. “We have gone again to a fall and a spring launch, as a result of clients cannot cope with greater than two a 12 months. They simply cannot,” Kurtz famous. “There must be a cadence.”
Oliver Friedrichs, CEO and founding father of Pangea, emphasised the strategic alignment: “Becoming a member of CrowdStrike allows us to meet our imaginative and prescient at a world scale, unifying AI safety with Falcon to ship the business’s first actually complete AI Detection and Response answer.”
Meta collaboration defines AI safety benchmarks
CrowdStrike’s collaboration with Meta introduces CyberSOCEval, the primary open-source benchmark framework designed to judge AI efficiency in reasonable safety situations. Constructed on Meta’s open-source CyberSecEval basis and enriched by CrowdStrike’s risk intelligence and cybersecurity AI information experience, CyberSOCEval rigorously checks giant language fashions (LLMs) throughout vital SOC workflows, together with incident response, malware evaluation, and risk comprehension. The benchmarks are constructed on real-world adversarial methods mixed with expert-designed safety reasoning situations to gauge AI mannequin efficiency below operational strain precisely.
“When two leaders like CrowdStrike and Meta come collectively, it’s bigger than collaboration, it’s about setting the route of cybersecurity for the AI period,” mentioned Daniel Bernard, Chief Enterprise Officer at CrowdStrike. Vincent Gonguet, Director of Product, GenAI at Meta added, “At Meta, we’re dedicated to advancing and maximizing the advantages of open-source AI, particularly as giant language fashions change into highly effective instruments for organizations of all sizes. Our collaboration with CrowdStrike introduces a brand new open-source benchmark suite to judge the capabilities of LLMs in real-world safety situations.”
Going all-in on creating an information moat unmatched by opponents
CrowdStrike’s aggressive differentiation is anchored in its unmatched information basis created by processing trillions of safety occasions each day, enriched by a decade’s value of annotated risk intelligence. Kurtz referred to this benefit because the “Reddit of safety information.”
CrowdStrike emphasizes its information benefit as a key differentiator, although opponents with their very own giant risk intelligence datasets are additionally investing closely.
With seven pre-built autonomous safety brokers obtainable instantly, CrowdStrike continues to search for new areas to embed that experience into agentic workflows, enabling machine-speed risk response and decision-making. As CrowdStrike president Michael Sentonas acknowledged clearly through the keynote, “Each analyst will command an agentic workforce, liberating people from repetitive duties higher executed by machines.”
Autonomous safety is changing into desk stakes for SOCs to remain safe
CrowdStrike’s Fal.Con 2025 bulletins signify a basic shift moderately than incremental change. The mixing of autonomous AI brokers throughout the Falcon platform, amplified by strategic partnerships, positions itself to reset the aggressive baseline, although rivals are additionally pursuing autonomous AI capabilities. Taken collectively their many bulletins this week are straight difficult rivals together with Palo Alto Networks, Microsoft, SentinelOne and others, every of that are additionally investing closely in autonomous cybersecurity capabilities.
This transformation addresses an accelerating hole between adversary capabilities and conventional defenses. Mike Sentonas, CrowdStrike’s President, highlighted the stakes clearly: “The actual query isn’t whether or not AI will rework cybersecurity, that is already occurring. The pressing query is whether or not defenders can adapt quicker than adversaries.”
CrowdStrike’s imaginative and prescient positions safety analysts not merely as responders, however as orchestrators commanding a military of AI-powered brokers able to working autonomously and decisively at machine pace.
The strategic crucial for enterprises is obvious: embrace autonomous safety now or threat falling irreversibly behind. With adversaries leveraging generative AI to automate assaults and speed up exploitation from months to minutes, autonomous, agent-driven defenses have change into desk stakes. As Kurtz emphasised at Fal.Con 2025, “We’re transferring from the analyst’s arms on the steering wheel to autonomous actions which might be efficient, secure, and dependable. We’d like full autonomy; it is not non-obligatory, it is foundational.”