This blog includes descriptions of products, features, or functionality that may not be currently generally available. Any such references are provided for information purposes only. The development, release, and timing of all features or functionality remain at our sole discretion and may change without notice. These statements are subject to risks, uncertainties, and assumptions that may cause actual results to differ materially from those expressed or implied. Customers should make purchasing decisions based only on services and features that are currently generally available. For more information on our existing offerings, please talk to your CrowdStrike representative.
Charlotte Agentic SOAR will provide intelligence, context, and machine-speed automation through these foundational CrowdStrike Falcon platform capabilities:
- Agentic Security Workforce: Charlotte AI powers CrowdStrike’s agentic security workforce, equipping security teams with the tools to build and deploy curated fleets of AI agents. This includes:
- Agent Builder: Charlotte AI AgentWorks is the industry’s first no-code security agent development platform, enabling security teams to build AI agents tailored to their unique needs. Using plain language, teams define their agent’s mission, data, and authorized actions — no coding or agent building expertise required.
CrowdStrike AI Agents: CrowdStrike’s agentic security workforce is a growing library of purpose-built AI agents, powered by Charlotte AI and delivered natively through Falcon modules. These agents automate some of the SOC’s most exhaustive tasks — each requiring uncompromising consistency, precision, and speed — from malware analysis to exposure prioritization to correlation rule building.
Agent Orchestration: Charlotte Agentic SOAR builds on Falcon Fusion SOAR to provide the orchestration backbone, with a visual workflow builder that orchestrates agents, connects tools, and sets guardrails to automate with confidence and control. It powers both static and agentic workflows that adapt in real time to evolving threats. With hundreds of pre-built connectors, triggers, and actions, security teams have the ultimate command plane for designing agentic workflows.
Unified Case Management: Falcon Next-Gen SIEM’s native case management serves as the SOC’s central command center, unifying investigations, automation, and context in one workspace. It tracks ownership, resolution times, and performance metrics while streamlining collaboration to help analysts close cases faster and with confidence.
Empowering the SOC to Think and Act at Machine Speed
With these technologies working together, security teams can create a system that is both structured and adaptive. Analysts stay in control while intelligent agents manage repetitive work, reason through complex scenarios, and coordinate across tools and systems to accelerate response. This seamless orchestration forms the foundation of Charlotte Agentic SOAR — delivering intelligence that moves at machine speed and operates with expert judgment.
Forward-Looking Statements
Additional Resources
Charlotte Agentic SOAR marks a defining moment for security operations, empowering defenders to move from analysts to orchestrators of security outcomes. It’s where automation and intelligence come together, where systems can understand, decide, and act alongside human analysts to deliver faster, more effective outcomes. With Falcon Fusion SOAR, Charlotte AI, and AgentWorks all unified within the Falcon platform, CrowdStrike is redefining how the SOC operates, shifting from repetitive response to adaptive, agentic defense.
CrowdStrike brings this vision to life through powerful orchestration, adaptive reasoning, and a connected ecosystem of agents and integrations. Together, these capabilities enable security teams to move with speed and precision, anticipate change, and operate with the confidence to stay ahead of every threat.
