CrowdStrike Adds AI Kill Switch and Expands Falcon Guardian Coverage
Summary
CrowdStrike announced Falcon Guardian updates spanning endpoint, agent, and cloud security, including an available AI kill switch and Falcon AI Gateway, pre-beta Linux and Kubernetes coverage, and general availability of Falcon Complete for Guardian.
Key points
- CrowdStrike says Falcon Guardian combines OS-level runtime visibility, endpoint network inspection, and agent-level hooks to connect agent instructions with execution.
- An AI kill switch is available to Falcon Guardian customers, enabling them to cut off AI model access through centralized gateway enforcement.
- Falcon AI Gateway is generally available, providing centralized policy and enforcement for supported AI traffic.
- Pre-beta expansions include Linux, cloud workloads, Kubernetes, managed AI environments, and runtime protection for Claude Cowork.
- CrowdStrike SafeMind models power available AI-specific detections, including detection of prompt injection and other attacks targeting AI systems.
- Falcon Complete for Guardian is generally available, extending CrowdStrike's 24/7 managed detection and response to AI security.
- Pre-beta agent insider-threat detection in Falcon Next-Gen SIEM uses behavioral baselines to identify deviations.
Article Details
- Event Type
- Product and capability announcement
- Impact
- At Fal.Con Europe 2026, CrowdStrike announced expanded AI security capabilities for Falcon Guardian, including Linux, cloud workload, Kubernetes, and managed AI environment coverage; AI threat detection powered by SafeMind; an AI kill switch through Falcon AI Gateway; and general availability of Falcon Complete for Guardian. The article describes product capabilities and availability stages, not a specific security incident or confirmed customer impact.
Vendors
AnthropicClaude Cowork integration (Pre-beta): CrowdStrike also announced a new Anthropic integration that extends Falcon sensor protection inside the virtual machine where Claude Cowork executes, bringing runtime securityCrowdStrikeAt Fal.Con Europe 2026, CrowdStrike unveiled innovations that advance AI detection and response (AIDR) across three critical dimensions: architecture, coverage, and controls.NvidiaAI security models developed by the CrowdStrike Cyber Superintelligence Lab in partnership with NVIDIA.
Products
CrowdStrike Falcon GuardianFalcon Guardian brings these layers together to connect what agents are instructed to do with what they execute.CrowdStrike SafeMindwith SafeMind (Available now): Falcon Guardian's AI-specific threat detection is now powered by CrowdStrike SafeMind, a family of purpose-built AI security models developed by the CrowdStrike Cyber SuperintelligenceFalcon AI GatewayFalcon AI Gateway (Available now): CrowdStrike announced the general availability of Falcon AI Gateway, which provides centralized policy and enforcement for supported AI traffic to extend protection beyond environmentsFalcon Complete for GuardianExtend 24/7 managed protection with Falcon Complete for Guardian (Available now): CrowdStrike also announced the general availability of Falcon Complete for Guardian, extending managed detection and response (MDR)