CrowdStrike has launched Falcon IQ, which uses more than 50 artificial intelligence agents to automate security vulnerability assessment and remediation tasks. It is also expanding the Falcon platform to the Snowflake Marketplace and Google Cloud as it moves to broaden its AI security ecosystem.

SiliconANGLE reported on Aug. 31 (local time) that CrowdStrike announced four key items to coincide with the opening of "Falcon 2026" in Las Vegas in the United States: the Falcon IQ launch, an expansion of data sources, entry into the Snowflake Marketplace and support for Google Cloud.

Falcon IQ is software that automates security assessments and remediation tasks previously handled manually by experts under "Project Quiltworks" by having AI agents perform them. Project Quiltworks began in April to address an environment in which state-of-the-art AI models find software vulnerabilities faster than security teams can patch them. OpenAI and Anthropic AI models handle vulnerability discovery, while Accenture, EY, IBM and Croll handle remediation. Amazon Web Services joined in the July quarter and is responsible for the cloud infrastructure layer.

Falcon IQ runs on CrowdStrike's Falcon Foundry and the no-code AI agent-building tool "Charlotte AI Agentworks" unveiled last year. It uses Nvidia's Nemotron model to validate and prioritise code vulnerabilities, then takes action at runtime. The default AI agents handle time-consuming tasks such as assessment, prioritisation and remediation, and partners can build and tune their own agents to meet customer-specific needs.

The security assessment process also takes place within the Falcon platform. Falcon IQ combines a customer's telemetry, CrowdStrike threat intelligence and detection results from the managed threat hunting service "Falcon OverWatch" and then checks them against a partner-registered service catalogue. Based on that, it presents an attack narrative explaining attack paths and context, security investment priorities and a remediation roadmap. If Falcon platform configuration changes or additional module activation is needed, it recommends related functions and also suggests suitable services from the partner service catalogue.

The customer dashboard is offered as a co-branded product with CrowdStrike and its partners, and the partner's name is displayed in the analysis results. Remediation progress can also be checked on the dashboard in real time.

Daniel Bernard (다니엘 버나드), CrowdStrike's chief business officer, said, "Falcon IQ changes the economics of securing state-of-the-art AI risk." He said, "If Quiltworks proved the model, Falcon IQ advances it from manual work to AI speed across the Falcon platform."

Data integration has also been expanded. Real-time data from 12 security companies, including Abnormal AI, Artemis Security, AttackIQ, ExtraHop, HackerOne, Horizon3, Netskope, Picus Security, Rubrik, SafeBreach, Tera Security and Zscaler, will feed into "Falcon Next-Gen SIEM."

"Falcon Omn," a real-time data pipeline layer, is responsible for data collection. CrowdStrike explained that filtering data in the process can reduce storage costs by up to 50 percent and that analysing data before it is stored on the platform can help identify attack paths and vulnerabilities earlier. Charlotte AI agents also handle connections to new data sources and subsequent exposure-risk prioritisation.

The Falcon platform is also sold on the Snowflake Marketplace. Snowflake customers can use capacity they have already contracted to buy Falcon, meaning they do not have to go through a separate purchasing process. Analysts conducting security investigations in Falcon can query Snowflake tables without moving data, and the data can be used in the next-generation SIEM to combine and analyse CrowdStrike telemetry with external data feeds. It is also possible to send Falcon security telemetry to external destinations such as Snowflake.

Falcon is now available on Google Cloud. The service is initially offered in U.S. regions, and CrowdStrike plans to expand supported regions to help meet data localisation regulations. On Google Cloud as well, AI agents, endpoints, ID, cloud and data can be protected with a single sensor and console and a data layer. Amazon Web Services and Microsoft Azure are already supported.

Separately, CrowdStrike said in its fiscal 2027 second-quarter results announced on Aug. 26 that quarterly net new annual recurring revenue rose 51 percent from a year earlier to $332.8 million (about 460 billion won). Total revenue was $1.47 billion (about 2.01 trillion won), and George Kurtz (조지 커츠), CrowdStrike's founder and chief executive officer, described the quarter as the best in the company's history.