C

Falcon Guardian

Application

by CrowdStrike

AI detection and response (AIDR) product, the evolution of Falcon AIDR, that discovers shadow AI agents on endpoints and across cloud and SaaS, links agent prompts to the endpoint actions they trigger, controls which agents may run, protects sensitive data in AI interactions and stops prompt injection and compromised agents at runtime.

Find alternatives to Falcon Guardian

What it does

• Threat detection and response
• Guardrails and safety
• Data security

Features 5

• Shadow AI discoveryUncovers workforce AI use and endpoint agents, who uses them and token consumption.
• Agent activity tracingConnects agent activity with endpoint telemetry to trace how prompts lead to downstream system actions.
• AI usage governanceTurns AI governance policy into enforceable controls over AI tools and permitted agents.
• Prompt and data protectionDetects and stops malicious AI interactions and protects sensitive data in transit.
• Runtime threat detectionDetects compromised AI agents, reconstructs events, determines blast radius and deploys containment.

Sources

Pricing

Not found · 9 Oct 2026

The pricing page's per-device Falcon bundles have no Guardian line; the product page offers "Schedule a demo" and CrowdStrike's general 15-day trial.

Description

Official documentation · 9 Oct 2026

"Falcon Guardian brings AI Detection and Response (AIDR) to the point of execution, connecting AI activity with endpoint telemetry to understand and secure autonomous AI behavior at runtime." The page lists discovering shadow AI agents, governing agent access and stopping threats at runtime. CrowdStrike's launch blog (https://www.crowdstrike.com/en-us/blog/falcon-guardian-defines-next-generation-of-ai-security/) says "CrowdStrike is introducing CrowdStrike Falcon® Guardian, the evolution of Falcon AI Detection and Response (AIDR)".

What it does

Official documentation · 9 Oct 2026

Detecting and containing compromised agents; prompt-injection defence and agent access control; redacting or blocking sensitive data.

Sold within

Not found · 9 Oct 2026

"Customers must have both Falcon Adversary OverWatch Cross-Domain and Falcon Guardian." shows Guardian is held as its own entitlement on the Falcon platform, but no page says whether it is an add-on, a bundle or bought alone. Read: the product page, the launch release, the data sheet, the blog and crowdstrike.com/en-us/pricing/.

Name

Official documentation · 9 Oct 2026

Page heading "CrowdStrike Falcon Guardian" (the browser title still reads "CrowdStrike Falcon AIDR: AI Detection & Response"). CrowdStrike's blog calls it the evolution of Falcon AI Detection and Response, and the old AIDR page redirects here.

URL

Official documentation · 9 Oct 2026

CrowdStrike's own Falcon Guardian page.

Deployment

Press release · 9 Oct 2026

The Falcon sensor on Windows, macOS and Linux endpoints discovers AI agents while detection runs in CrowdStrike's cloud console: a customer-installed sensor under a vendor-hosted console.

Interfaces

Official documentation · 9 Oct 2026

"Integrate Falcon Guardian through application SDKs, cloud integrations, AI gateway integrations, or an MCP proxy to protect AI across development and production environments."

Intended for

Official documentation · 9 Oct 2026

Enterprise security teams.

Also from CrowdStrike

• Charlotte Agentic SOAR Agent platform

  Orchestrates fleets of prebuilt and custom AI security agents alongside human analysts to automate SOC investigation, triage and incident response.

• Charlotte AI Application

  Assistant inside Falcon that answers questions about an environment and triages detections.

• CrowdStrike Falcon platform Platform

  Endpoint and cloud security platform that uses machine learning to detect and stop attacks.

• Charlotte AI AgentWorks Agent platform

  No-code workspace in the Falcon platform where security teams define an agent's mission, model, data and authorised actions and deploy custom AI security agents, with role-based access, audit logs, credit caps and version controls.

• Falcon Insight XDR Application

  Provides AI-powered endpoint detection and response.

• Falcon Prevent Application

  Provides AI-powered next-generation antivirus protection.

• Falcon Next-Gen SIEM Platform

  Unifies security data with AI-powered detection and automated response.

• Falcon Exposure Management Application

  Uses an AI agent to predict exploitable vulnerabilities and connects exposure insights to remediation workflows.

• Falcon Data Security Application

  Uses AI to classify sensitive data and blocks risky data movement.

• Falcon Cloud Security Platform

  Combines cloud threat detection, AI-driven insights, and automated response.

• Falcon Next-Gen Identity Security Application

  Provides AI-powered detection, triage, and response for identity threats.

• Falcon for IT Application

  Runs generative AI workflows through Charlotte AI and automates IT response with scripts.

• Falcon Complete Platform

  Provides AI-powered managed detection, investigation, and remediation with security experts.

• Falcon Adversary OverWatch Data service

  Combines threat intelligence, AI, and human threat hunters to uncover cross-domain threats.

• Falcon Adversary Intelligence Data service

  Provides personalized threat intelligence and AI-powered workflows for investigating threats.

• Falcon Adversary Intelligence Premium Data service

  Provides AI-assisted malware analysis for threat intelligence customers.

Open CrowdStrike in the directory

Something wrong here? Send a correction — quote this product id: crowdstrike-falcon-guardian.