CrowdStrike launches Falcon Guardian to find and police AI agents on company endpoints

What CrowdStrike announced

CrowdStrike introduced Falcon Guardian on 1 September 2026, the first day of its Fal.Con 2026 conference in Las Vegas, according to the company's press release. CrowdStrike describes Guardian as a new AI Detection and Response (AIDR) solution. It runs on the Falcon sensor that CrowdStrike already installs on customer endpoints, and the company argues that the endpoint is where AI agents reason, plan and act.

The launch list has four parts available with this release. AI Agent Discovery and Inventory finds known and shadow AI agents on Windows and macOS and records who deployed each one and its security status. Agent Runtime Visibility links agent behaviour to endpoint telemetry, from the user prompt and identity through tool calls and skill use to each downstream system action. Agent Access Controls decide which agents may run on managed devices and block the rest. Runtime Detection and Response flags attacks on agents and malicious agent behaviour, rebuilds the execution chain and estimates the blast radius.

What arrives later

Several parts are described in the future tense. An AI Gateway will provide a central control point for enterprise AI traffic across supported models and services, including traffic over the Model Context Protocol. Falcon Complete for Guardian will add round-the-clock managed detection and response for AI agents, and Falcon Adversary OverWatch for Guardian extends CrowdStrike's managed threat hunting to agent activity. Agent data also flows into CrowdStrike's own SIEM product as first-party data. The release gives no dates for the gateway or the managed services.

Why CrowdStrike says the endpoint matters

CrowdStrike CEO George Kurtz said that AI has not changed the attack, only its speed, and that governance alone cannot stop an agent already in motion. The company says its sensor runs on hundreds of millions of devices, a figure that is CrowdStrike's own. Its pitch is that posture tools show what could go wrong and governance narrows it, while only runtime controls stop an agent that is misbehaving now.

The announcement fits a wider shift in the security market toward treating AI agents as a new kind of insider with system privileges. Agents that browse, call tools and touch sensitive data produce activity that can look like a legitimate user. Tying each action back to a prompt and an identity is the core of CrowdStrike's design. More coverage of defensive AI products is collected under Cybersecurity.

What to watch next

The press release does not state pricing, licensing, supported agent frameworks or a general availability date, and it does not cite independent tests of detection quality. Linux coverage is not mentioned; discovery is listed for Windows and macOS only. The next signals are shipping dates for the AI gateway and managed services, and whether customers report how many shadow agents the inventory finds in practice.

Questions people ask

What does Falcon Guardian do?

It finds AI agents running on Windows and macOS endpoints, links their actions to prompts and identities, blocks agents that are not allowed, and detects attacks on agents or malicious agent behaviour, according to CrowdStrike.

How much does Falcon Guardian cost?

Pricing is not stated in the announcement. CrowdStrike also gives no general availability date for the AI gateway or the managed services.

Does Falcon Guardian need a separate agent on each device?

No. CrowdStrike says Guardian uses the existing single Falcon sensor, which is the basis of its claim that the endpoint is the control point for AI agent security.

Sources

1. CrowdStrike Unveils Falcon Guardian to Secure AI Agents Where They Execute: On the Endpoint at Runtime (CrowdStrike, 1 Sep 2026)