CrowdStrike has unveiled what it describes as the next evolution of the agentic security operations centre, with AI agents able to investigate threats simultaneously across a range of environments.
The company said its coordinated multi-agent architecture is designed to match the speed and complexity of AI-enabled attacks, which can exploit credentials, manipulate multiple services, and move across enterprise environments in parallel.
“We're already seeing AI agents execute attacks across multiple systems at the same time,” Michael Sentonas, president of CrowdStrike, said in a statement.
“AI agents in the SOC are table stakes. Agents working together across every domain, on the same investigation, that's the new standard.”
The platform uses CrowdStrike’s purpose-built Charlotte AI to dispatch specialised domain agents in parallel, with each agent operating against a shared context layer that provides persistent memory across agents and investigations.
According to CrowdStrike, this eliminates the need for analysts or individual AI agents to manually stitch together findings from separate security domains. Instead, agents can share evidence, assess competing hypotheses, and converge on a single verdict.
“CrowdStrike's architecture and expert validation make this possible, and confidently answer the question every CISO is asking: how do I trust what my agents found, and how do I know it's right?” Sentonas said.
The investigations can also cover threats targeting enterprise AI systems, including model abuse, prompt injection, and data exfiltration through AI assistants.
CrowdStrike said its architecture generates nearly four trillion events a day across endpoint, identity, SaaS, cloud, and network environments through its single-sensor, single-console platform. Its AI agents are also trained and reinforced using decisions from managed detection and response and incident response engagements.
The company is extending the architecture through certified data pipelines built on Falcon Onum, which filter noise at ingestion so agents can focus on security-relevant data.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
