CrowdStrike Named Leader in IDC’s 2026 Enterprise Endpoint Security Assessment

Summary
CrowdStrike says IDC named it a Leader in its 2026 enterprise endpoint security assessment. The company highlights Falcon Guardian’s controls for AI-agent activity and endpoint protections against malicious software supply-chain packages.
Key points
- CrowdStrike says IDC named it a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises assessment.
- Falcon Guardian is described as discovering approved and unknown AI agents, enforcing governance policies, and detecting prompt injection and malicious skills.
- CrowdStrike says Falcon Guardian links prompt-layer activity with OS-level telemetry to trace agent actions and runs on its existing Falcon sensor.
- The company says Real-Time Supply Chain Attack Protection blocks malicious npm and PyPI packages at download, before their code executes.
- CrowdStrike reports 100% detection, 100% protection, and zero false positives in the 2025 MITRE ATT&CK Enterprise Evaluations.
Article Details
- Event Type
- Industry analyst recognition: CrowdStrike was named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment.
- Impact
- The recognition highlights CrowdStrike's endpoint security capabilities. The article reports that Falcon achieved 100% detection, 100% protection, and zero false positives in the MITRE ATT&CK Evaluations: Enterprise 2025; it reports no incident or customer impact.
Vendors
Products
CrowdStrike Charlotte AICrowdStrike FalconWe believe this recognition reflects the strength of the CrowdStrike Falcon® platform and the proven endpoint capabilities CrowdStrike brings into the AI era: industry-leading protection at scale, consistent analystCrowdStrike Real-Time Supply Chain Attack ProtectionCrowdStrike Real-Time Supply Chain Attack Protection blocks malicious npm and PyPI packages at download, before embedded code can run, whether downloaded by a human or an AI agent.CrowdStrike Threat GraphCrowdStrike Threat Graph processes trillions of events daily, giving the Falcon platform rich runtime context from the point where activity occurs.Falcon GuardianFalcon Guardian discovers approved and unknown agents, enforces AI governance policy, detects threats like prompt injection and malicious skills, and connects prompt-layer activity with OS-level telemetry so teams canFalcon sensorCrowdStrike is building on our proven endpoint security foundation, which consists of the Falcon sensor and our deep endpoint telemetry powering prevention, detection, and response, to protect the expanding range of