While these agents can expedite individual tasks, their ultimate potential is realized when they operate in synchronized execution. Charlotte Agentic SOAR, the orchestration layer of the agentic SOC, makes this happen. Powered by CrowdStrike Falcon® Fusion SOAR, our workflow automation engine, Charlotte Agentic SOAR lets security teams coordinate agents, apps, and analyst actions into complex end-to-end workflows — unlocking speed, consistency, and scale across the SOC.
Earlier this year, we charted a path toward the agentic SOC — where security teams command fleets of intelligent agents that reason, decide, and act at machine speed while under defender control. At a time when AI-enabled adversaries are accelerating and SOCs are hindered by legacy tools and manual response, the agentic SOC enables security teams to shift toward a proactive defense, accelerate response, and redirect analyst focus toward more strategic initiatives.
We are announcing additions to CrowdStrike’s agentic security workforce that accelerate data pipeline creation, simplify the creation of custom apps tailored to each team’s needs, and enable continuous, authenticated exposure scanning for faster, smarter remediation.
New and Updated Agents Automate Time-Intensive Work
Data onboarding can be one of the most complex and error-prone tasks in the SOC, often slowing time-to-value and leaving teams reliant on specialized expertise.
CrowdStrike is accelerating our vision for the SOC with the launch of new, specialized agents built to tackle some of the toughest modern challenges in security operations: faster data pipeline creation, simpler custom app creation, and continuous, authenticated exposure scanning.
Data Onboarding Agent: Intelligent Data Ingestion and Pipeline Creation
The Data Onboarding Agent changes that. It enables security teams to use natural language to build end-to-end data pipelines, from configuring ingestion to real-time validation to resolving errors as they occur. The result is faster and more efficient data onboarding into Falcon Next-Gen SIEM, simpler integration across data sources, and consistent visibility across the environment.
This agent works alongside other CrowdStrike agents from Falcon Next-Gen SIEM, including the Data Transformation Agent and Search Analysis Agent, to streamline workflows, share context, and accelerate time-to-value across the SOC.
Powered by CrowdStrike® Charlotte AI™ and delivered natively across CrowdStrike Falcon® modules, each new agent strengthens the agentic SOC and moves security teams closer to operating at machine speed, accelerating outcomes and raising the floor of what every analyst can achieve.
