CrowdStrike Launches Falcon IQ with 50+ AI Agents, Expands to Google Cloud and Snowflake

CrowdStrike Automates Frontier AI Risk Management with Falcon IQ

CrowdStrike launched Falcon IQ at its Fal.Con 2026 conference in Las Vegas, transforming its Project QuiltWorks coalition from manual expert-led services into an automated platform powered by more than 50 AI agents1

1

. The launch addresses the accelerating timeline between vulnerability discovery, prioritization, and remediation as frontier AI models surface software flaws faster than security teams can patch them. Built on Falcon Foundry and Charlotte AI AgentWorks, CrowdStrike's no-code agent development platform, Falcon IQ uses NVIDIA Nemotron open models to validate and rank code vulnerabilities before remediating them at machine speed1

1

.

Project QuiltWorks launched in April with discovery work running on frontier models from OpenAI and Anthropic. Partners including Accenture, Ernst & Young, IBM, and Kroll handled remediation manually through 12-month subscription engagements1

1

. Falcon IQ now automates the slowest parts of these engagements—assessment, prioritization and remediation—allowing partners to run more engagements at lower cost while building and tuning custom agents for individual customer needs4

4

.

Assessment Process Moves Inside Falcon Platform

The entire QuiltWorks assessment process now operates within the Falcon platform. Falcon IQ correlates customer telemetry with CrowdStrike threat intelligence and findings from Falcon OverWatch, the company's managed threat hunting service1

1

. Partners load their services catalog directly into the platform, and agents generate actionable playbooks mapping findings to partner services—attack narratives, investment priorities, and remediation roadmaps4

4

.

Agents surface recommendations in two directions: Falcon platform tuning and additional modules that can be activated, plus services from the partner's catalog mapped to discovered exposures. Partners deliver findings through a co-branded, customer-facing dashboard where customers track remediation progress in real time1

1

. "Falcon IQ changes the economics of securing frontier AI risk," said Daniel Bernard, CrowdStrike's chief business officer. "QuiltWorks proved the model, Falcon IQ advances it from manual to the speed of AI across the Falcon platform"1

1

.

Falcon Platform Expands to Google Cloud Enterprise AI Ecosystem

CrowdStrike announced new capabilities for the Falcon platform across Google Cloud's enterprise AI ecosystem to support organizations building and operating enterprise AI applications2

2

. The company is expanding Falcon Guardian through Google Agent Gateway to provide runtime protection for enterprise AI applications built on Google Cloud, helping organizations identify and stop AI runtime risks including prompt injection, sensitive data leakage, and malicious AI activity3

3

.

CrowdStrike is extending the Falcon platform to Gemini Enterprise through Falcon MCP, Charlotte AI, and Falcon Shield. This brings CrowdStrike intelligence into workflows supported by Google Gemini's models and strengthens AI governance through Google Cloud's Agent Registry2

2

. Falcon MCP for Gemini Enterprise brings threat intelligence, detections, and security context directly into Gemini-enabled workflows, helping developers embed security into AI application development3

3

. Charlotte AI for Gemini Enterprise extends AI-native security operations, helping security teams investigate threats, automate workflows, and accelerate response using natural language3

3

.

Twelve Security Vendors Feed Falcon Next-Gen SIEM

CrowdStrike expanded Project QuiltWorks data sources, integrating real-time data from 12 security vendors into Falcon Next-Gen SIEM spanning email, network, cloud, identity, data protection and adversary simulation5

5

. Abnormal AI, Netskope, Zscaler, Rubrik, and HackerOne joined Artemis Security, AttackIQ, ExtraHop, Horizon3.ai, Picus Security, SafeBreach, and Terra Security in feeding telemetry to the platform1

1

.

Falcon Onum, the real-time pipeline layer inside Falcon Next-Gen SIEM, handles ingestion with intelligent filtering that reduces storage costs by up to 50% and analyzes data before it lands in the platform, surfacing attack paths and vulnerabilities faster1

1

. Native Charlotte AI agents handle data onboarding and exposure prioritization automatically at machine speed5

5

. Bernard tied the expansion to the shrinking window between disclosure and exploitation, saying frontier models' ability to "discover, chain, and exploit vulnerabilities at machine speed" has made visibility critical1

1

.

Snowflake Marketplace Integration Streamlines Procurement

The Falcon platform will be sold through Snowflake Marketplace, where customers can draw down pre-committed Snowflake capacity to pay for it under the Marketplace Capacity Drawdown program1

1

. The arrangement lets buyers deploy Falcon without opening a fresh purchasing cycle. Data moves bidirectionally once in place—analysts working investigations in Falcon can query Snowflake tables through federated search, leaving records where they are, while those tables can feed Falcon Next-Gen SIEM for correlation against CrowdStrike telemetry and outside feeds1

1

.