CrowdStrike launches Falcon Guardian to police AI agents at the endpoint

CrowdStrike's release of Falcon Guardian at Fal.Con 2026 marks a shift in how the company approaches AI security. The launch follows the December general availability of Falcon AI Detection and Response, which added endpoint runtime protection and shadow AI discovery in March. With Guardian, the company is adding enforcement, which is new this time around.

The company's position is that the endpoint is the key vantage point for controlling AI agents. As founder and CEO George Kurtz put it, CrowdStrike pioneered EDR by making the endpoint the control point for stopping attacks, and AI demands the same approach. He noted that AI hasn't changed the attack, it has changed its speed, adding that governance alone can't stop an agent already in motion.

Guardian also builds on Falcon IQ, the second major product released at this year's conference. Falcon IQ hands assessment and remediation work to a fleet of more than 50 agents and launched on the conference's opening day. Agent telemetry from Guardian lands in Falcon Next-Gen SIEM as first-party data with retention included, which CrowdStrike contrasts with competing AI security tools that ship no SIEM of their own.