CrowdStrike’s AI SOC vision evolves as agentic uncertainty adds new twist

Publisher excerpt From CSO Online

“The software we use has become an actor,” declared CrowdStrike President Michael Sentonas in his address on the dangers and opportunity of agentic AI at the company’s Fal.Con conference in September. It’s an idea that until recently would have been dismissed as absurd, yet across cybersecurity it’s now taken as a given. For decades, the adversary has been nuisance hackers, professional cybercriminals, or well-resourced teams working for nation states. The arrival of rogue agents — underlined by real-world incidents such as OpenAI’s infamous assault on Hugging Face — has demolished this. Agents still work on behalf of humans, but they don’t always reason or act like them. They are entities with capabilities and an unpredictability unlike any threat businesses have ever faced. “I believe we just crossed a line. Agents have escaped evaluation environments and compromised infrastructure they were never supposed to touch,” Sentonas told the crowd in Las Vegas in early September. “For decades, software did what we programmed it to. It has moved from execution to agency.” Sentonas’ point wasn’t simply that malicious agents are a threat. The arrival of agentic AI also raises larger questions for security operations centers (SOCs), which will deploy agents on a scale that matches or even exceeds attackers. That makes agents a threat from both the outside and inside the enterprise perimeter. “What happens when millions of AI agents act at machine speed on both sides?” Behind the confident marketing pitches from CrowdStrike and a growing cast of rivals, the honest answer right now is that nobody can be sure. Coming from a cyber vendor, Sentonas’ reference to “millions” of agents might sound like a number meant to hype the threat. But it is likely no exaggeration, with Gartner forecasting that the number of agents used inside a single Fortune 500 company will expand from 15 in 2025 to 150,000 by 2028. “As CIOs and IT leaders see an explosion of AI agents across their organizations, many are contending with an ungoverned sprawl of agents that expose their organizations to a range of risks, including misinformation, oversharing, and data loss,” says Matt Goss, a senior director analyst at Gartner. Taking up the agent challenge For years, Fal.Con was about persuading enterprise SOCs to consolidate capabilities under CrowdStrike’s do-it-all Falcon platform, comprising nearly three dozen modules. In 2023, with its “Raptor” release, Falcon and the company’s flagship event took a hard turn toward AI. In this changed world, AI wasn’t simply a Falcon capability; increasingly it was Falcon, influencing everything it did. The AI theme dominated Falcon’s 2026 Fall release, bringing the company’s growing portfolio of AI SOC capabilities under the Falcon umbrella with the launch of the Agentic Security Platform. Most individual components — Charlotte AI AgentWorks, Model Context Protocol (MCP) Integration, the AI-enabled Enterprise Graph — were announced in 2025…

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.