CrowdStrike launches Continuous Identity for AI Agents with real-time authorization
3 Sources
[1]
CrowdStrike Launches Continuous Identity Solution to Police AI Agents | PYMNTS.com
The new Continuous Identity for AI agents, which joins the CrowdStrike Falcon Platform, authorizes every agent action based on who owns it, who is calling it, and real-time risk, the company said in a Monday (June 15) press release. "Authorize once and trust indefinitely is not a security model; it's a liability," CrowdStrike Chief Technology Officer Elia Zaitsev said in the release. "That's the shift CrowdStrike is driving, from static, one-time access decisions to Continuous Identity." Continuous Identity for AI Agents provides verifiable agent identity in which every agent is assigned an automated, secure workload identity; context-aware authorization that evaluates access based on who owns the agent, who is calling it and the risk posture of their device; zero standing privilege that grants access when it's needed and revokes it when it's not; and defense in depth that ensures agents operate with only the privileges they need, according to the release. This new offering is powered by technology CrowdStrike gained with its acquisition of SGNL, according to the release. When announcing the acquisition in a January press release, CrowdStrike said the move would redefine privilege and access for all users. CrowdStrike said in a Monday blog post that while identity security has long been built around authenticating a user, granting access and trusting that decision until their next login, this model doesn't work for AI models. "The speed of these agents, combined with the varying privileges of the humans using them, means a trust decision that was valid at login may no longer be valid moments later," the post said. "A compromised credential or change in business context can instantly alter risk. It's not enough to grant access once and assume trust persists." The PYMNTS Intelligence report "How Enterprises Can Build a 'Know Your Agent' Defense: Digital Identity Verification in the Age of Bots" found that the rise of agentic commerce is exposing weaknesses in traditional identity models. Nearly 90% of enterprises said bot management is now a major challenge, and outdated digital identity controls are costing businesses nearly $100 billion annually in fraud, false declines and lost customers, according to the report.
[2]
CrowdStrike launches continuous identity security for AI agents By Investing.com
AUSTIN, Texas & LAS VEGAS - CrowdStrike (NASDAQ:CRWD) announced today a new identity security capability designed to authorize AI agent actions in real time rather than through static access policies. The company introduced Continuous Identity for AI Agents as part of its Falcon Next-Gen Identity Security platform. The system authorizes each agent action based on the agent owner, the caller, and the device risk posture, according to a press release statement.The cybersecurity leader, valued at $176.76 billion, has seen its shares surge 45.66% year-to-date as investors bet on its AI security innovations. Revenue reached $5.09 billion with 23.17% growth in the last twelve months as of Q1 2027. The technology uses the SPIFFE standard to assign cryptographically verifiable identities to AI agents, replacing static credentials such as API keys. Access is granted when needed and revoked immediately after, eliminating what the company describes as standing privileges. "Point-in-time authorization becomes a legacy approach the second agents are given autonomy," said Elia Zaitsev, chief technology officer at CrowdStrike. "Authorize once and trust indefinitely is not a security model; it's a liability." The system evaluates access based on who owns the agent, who calls it, and device risk posture. When an agent delegates to a sub-agent, the authorization context carries through the chain. The capability incorporates technology from CrowdStrike's acquisition of SGNL. The Falcon AI Detection and Response component inspects prompts and intent to detect permission misuse or attempts to manipulate language models beyond authorized scope. CrowdStrike said the system extends risk-aware authorization across human, non-human, and AI agent identities in on-premises, software-as-a-service, browser, and cloud environments. The announcement was made at Identiverse 2026. The press release included forward-looking statements noting that unreleased services or features are subject to change and customers should base purchase decisions on currently available features.Despite the stock's strong momentum, InvestingPro analysis suggests the shares are currently overvalued relative to Fair Value estimates -- placing it among the most overvalued stocks tracked by the platform. Still, 27 analysts have revised earnings upwards, with the company expected to swing to profitability this year. For deeper insights, investors can access CrowdStrike's comprehensive Pro Research Report, available for this and 1,400+ other US equities on InvestingPro. In other recent news, CrowdStrike has been at the center of several significant developments. The cybersecurity company reported first-quarter fiscal 2027 results that exceeded expectations across multiple metrics, including revenue, operating income, and free cash flow. Despite a net new annual recurring revenue of $256 million falling below investor expectations, UBS maintained a Buy rating and raised its price target to $790, citing pipeline strength. Benchmark also increased its price target to $780, highlighting the demand driven by artificial intelligence. However, Berenberg downgraded CrowdStrike from buy to hold, raising concerns about valuation even as they increased the price target to $720. Meanwhile, Piper Sandler reiterated an Overweight rating with a $750 price target, focusing on the demand outlook from projects like Mythos and Project Glasswing. Additionally, the Seattle Sounders FC selected CrowdStrike to enhance cybersecurity operations ahead of the FIFA World Cup 2026. The soccer club will implement CrowdStrike Falcon Complete for managed detection and response services. These recent developments underscore CrowdStrike's strategic positioning and ongoing demand in the cybersecurity sector. This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.
[3]
CrowdStrike Unveils Continuous Identity For AI Agents
CrowdStrike announced Continuous Identity for AI Agents, a new CrowdStrike Falcon Next-Gen Identity Security capability that reinforces the CrowdStrike Falcon platform as the identity security control plane for the agentic enterprise. CrowdStrike delivers a fundamentally different model: every agent action continuously authorized in real time based on who owns the agent, who is calling it, and the risk posture of their device ? evaluated against native and third-party risk signals on the Falcon platform. Continuous Identity for AI Agents ? powered by technology from CrowdStrike's recent acquisition of SGNL ? dynamically grants, denies, and revokes access based on real-time risk, eliminating standing privileges entirely. Verifiable Agent Identity: Every agent is assigned a cryptographically verifiable identity based on the SPIFFE standard, an open standard that replaces static credentials like API keys with automated, secure workload identities. Context-Aware Authorization: Access is evaluated based on who owns the agent, who is calling it, and the risk posture of their device. When an agent delegates to a sub-agent, that context is preserved throughout the chain. Zero Standing Privilege: Access is granted the moment it?s needed and revoked the moment it?s not. Defense in Depth: Continuous Identity ensures agents operate with only the privileges they need. Falcon AI Detection and Response (AIDR) continuously inspects prompts and intent to detect permission misuse or attempts to manipulate an LLM beyond its authorized scope, triggering Continuous Identity to revoke access before damage is done. Continuous Identity for AI Agents extends CrowdStrike?s risk-aware authorization across every identity ? human, non-human, and AI agent ? from initial access to privilege escalation and lateral movement spanning on-prem, SaaS, browser, and cloud environments.
Share
Copy Link
CrowdStrike unveiled Continuous Identity for AI Agents, a new security capability that authorizes every agent action in real time based on ownership, caller identity, and device risk. The system eliminates static access policies, using cryptographically verifiable identities and zero standing privilege to address the $100 billion annual cost of outdated identity controls.
CrowdStrike Introduces Real-Time Authorization for AI Agents
CrowdStrike announced Continuous Identity for AI Agents on Monday, June 15, introducing a fundamental shift in how enterprises secure autonomous systems
1
. The new capability, integrated into the CrowdStrike Falcon Platform, authorizes every agent action in real time rather than relying on static, one-time access decisions. Each action is evaluated based on who owns the agent, who is calling it, and the risk posture of their device2
.
Source: PYMNTS
"Authorize once and trust indefinitely is not a security model; it's a liability," said Elia Zaitsev, CrowdStrike Chief Technology Officer, in the announcement
1
. The statement underscores the company's position that traditional identity security models, built around authenticating a user once and trusting that decision until the next login, fail to address the speed and complexity of AI agents.Identity Security for AI Agents Addresses $100 Billion Problem
The urgency behind this launch stems from measurable business impact. Nearly 90% of enterprises now identify bot management as a major challenge, and outdated digital identity controls cost businesses nearly $100 billion annually in fraud, false declines, and lost customers, according to PYMNTS Intelligence research
1
. As agentic commerce expands, these weaknesses in traditional identity models become more exposed and costly.CrowdStrike's approach replaces static credentials like API keys with cryptographically verifiable identities based on the SPIFFE standard
3
. Every AI agent receives an automated, secure workload identity that enables continuous verification throughout its operational lifecycle. This addresses a critical gap: a trust decision valid at login may no longer be valid moments later when a compromised credential or business context change alters risk .Zero Standing Privilege and Context-Aware Authorization
The Continuous Identity system implements zero standing privilege, granting access only when needed and revoking it immediately afterward
3
. This approach eliminates the security liability of persistent access rights that traditional systems maintain. Context-aware authorization evaluates each request based on agent ownership, caller identity, and device risk posture. When an AI agent delegates tasks to a sub-agent, the authorization context carries through the entire chain, maintaining security across complex workflows2
.The system operates across human, non-human, and AI agent identities in on-premises, software-as-a-service, browser, and cloud environments
2
. This comprehensive coverage addresses the full spectrum of enterprise access management challenges.Related Stories
SGNL Acquisition Powers New AI Agent Security Capability
The technology behind Continuous Identity for AI Agents comes from CrowdStrike's SGNL acquisition, which the company announced in January with the goal of redefining privilege and access for all users
1
. The integration demonstrates how strategic acquisitions can accelerate capability development in response to emerging security challenges.Falcon AI Detection and Response works alongside Continuous Identity, continuously inspecting prompts and intent to detect permission misuse or attempts to manipulate language models beyond authorized scope
3
. When threats are detected, the system triggers access revocation before damage occurs, providing defense in depth that ensures agents operate with only necessary privileges.Market Response and Future Implications
CrowdStrike, valued at $176.76 billion, has seen shares surge 45.66% year-to-date as investors respond to its AI security innovations
2
. Revenue reached $5.09 billion with 23.17% growth in the last twelve months as of Q1 2027. The announcement was made at Identiverse 2026, positioning the company at the center of conversations about securing autonomous systems2
.The shift from point-in-time authorization to risk-aware authorization represents a significant evolution in how enterprises must think about AI agent security. As Zaitsev noted, "Point-in-time authorization becomes a legacy approach the second agents are given autonomy"
2
. Organizations deploying AI agents should watch for industry adoption of continuous verification models and evaluate whether their current security frameworks can handle the speed and complexity of autonomous systems. The technology sets a new baseline for what enterprises should expect from identity security solutions as AI agents become more prevalent across business operations.References
Summarized by
Navi
[3]
Related Stories
Recent Highlights
1
Anthropic shuts down Fable 5 and Mythos 5 AI models after US government directive
Policy and Regulation
2
G7 Summit Exposes Rift Over AI Governance as World Leaders Challenge US Control After Anthropic Ban
Policy and Regulation
3
SpaceX IPO makes Musk first trillionaire as AI potential drives $1.8 trillion valuation
Business and Economy
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
