What happened
CrowdStrike Holdings Inc. unveiled Falcon Guardian at its Fal.Con 2026 conference in Las Vegas. The software finds artificial intelligence agents running inside a company and shuts down the ones security teams have not approved.
Why it matters
Guardian is the expanded successor to Falcon AI Detection and Response, which went generally available in December and picked up endpoint runtime protection and shadow AI discovery at the RSAC Conference in March. CrowdStrike's argument is that the device is where an agent reasons, plans and runs code, making it the one place with a complete view of what that agent actually did.
What to watch
Two parts are not shipping yet: AI Gateway is in pre-beta and will be generally available next quarter, and the managed detection and response tier Falcon Complete for Guardian is due later this quarter. Managed threat hunting through Falcon Adversary OverWatch Cross-Domain runs today.
Ask the AI about this article →
Summaries like this, in your inbox every morning.
CrowdStrike's release of Falcon Guardian at Fal.Con 2026 marks a shift in how the company approaches AI security. The launch follows the December general availability of Falcon AI Detection and Response, which added endpoint runtime protection and shadow AI discovery in March. With Guardian, the company is adding enforcement, which is new this time around.
The company's position is that the endpoint is the key vantage point for controlling AI agents. As founder and CEO George Kurtz put it, CrowdStrike pioneered EDR by making the endpoint the control point for stopping attacks, and AI demands the same approach. He noted that AI hasn't changed the attack, it has changed its speed, adding that governance alone can't stop an agent already in motion.
Guardian also builds on Falcon IQ, the second major product released at this year's conference. Falcon IQ hands assessment and remediation work to a fleet of more than 50 agents and launched on the conference's opening day. Agent telemetry from Guardian lands in Falcon Next-Gen SIEM as first-party data with retention included, which CrowdStrike contrasts with competing AI security tools that ship no SIEM of their own.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
Realtek chairman Sun-Chien Chiu said in a public interview that the company is already earning revenue from AS…
SpaceX facilities in Tennessee and Mississippi ran without backup cooling and power for months, interrupting A…
RBC Capital Markets raised its price target on Qualcomm to $180 from $160 after the chipmaker's agreement with…
Meta launched Muse, an AI assistant that can connect to and control your email, calendar, or health informatio…
Calif, a US security firm, disclosed a worm that hijacks WeChat accounts and spreads via contacts with no user…
Alibaba Cloud announced a glasses edition of its AI coding platform last week, while Tencent is bringing its o…
