CrowdStrike Threat AI Leads Threat Intelligence into the Agentic Era

System of autonomous agents reason, hunt, and take decisive action across the kill chain, supercharging analyst investigations and threat response

AUSTIN, Texas & LAS VEGAS--(BUSINESS WIRE)--Fal.Con 2025 -- CrowdStrike (NASDAQ: CRWD) today announced Threat AI, the industry’s first agentic threat intelligence system built to automate the most complex, time-consuming intelligence workflows and accelerate outcomes. As part of CrowdStrike's newly announced Agentic Security Workforce, Threat AI delivers mission-ready agents that reason across threat data, hunt adversaries proactively, and take decisive action across the kill chain, empowering defenders to concentrate on high-impact investigations while remaining firmly in command.

“Adversaries are weaponizing AI to accelerate every stage of attacks – what once took months can now happen in seconds, collapsing the defender’s window of response. Intelligence must evolve beyond informing defenders to actively countering threats at the speed of AI,” said Adam Meyers, head of Counter Adversary Operations at CrowdStrike. “Threat AI is the intelligence arm of CrowdStrike’s vision to equip every security analyst with mission-ready agents that eliminate high-friction tasks better suited for machines, ushering in a new era of threat intelligence.”

Threat AI: Intelligence in Action

CrowdStrike has long set the industry standard for adversary intelligence, tracking more than 265 of the world’s most sophisticated nation-state, eCrime and hacktivist groups. Embedded inside CrowdStrike’s Threat Intelligence & Hunting modules and informed by years of real-world decisions from CrowdStrike Counter Adversary Operations’ (CAO) team of elite threat hunters and intelligence experts, Threat AI automates complex workflows and surfaces actionable recommendations when analysts need them most. Threat AI rapidly accelerates investigations and threat response, with initial agents including:

• Malware Analysis Agent: Automates one of the most time-consuming and complex analyst workflows: reversing, classifying, and comparing malware. In seconds, the agent analyzes files, identifies code similarities, provides instant attribution, and generates YARA rules, delivering actionable insights and scaling defenses across entire malware families.
• Hunt Agent: Automates proactive, expert-level threat hunting continuously across the environment. The agent executes queries, proactively scans for emerging threats, rapidly surfaces critical findings, and delivers clear, actionable insights and next-step recommendations.

Expanding the Threat Intelligence Agent Workforce

The Malware Analysis and Hunt Agent are the first in a series of Threat AI agents, with additional agents for triage, correlation, and exposure mapping to follow. Each agent will be orchestrated so the output of one strengthens the others.

Threat Intelligence Browser Extension

CrowdStrike is also introducing a powerful new Chrome extension that brings CrowdStrike adversary intelligence directly into analysts’ web browsers. Analysts can access CrowdStrike's intelligence while conducting external research, gaining immediate context for investigations and speeding response times with actionable insights, all in the same workflow.

To learn more about Threat AI and how it leads threat intelligence into the agentic era, read our blog and visit here.

About CrowdStrike

CrowdStrike (NASDAQ: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.

CrowdStrike: We stop breaches.

Learn more: https://www.crowdstrike.com/
Follow us: Blog | X | LinkedIn | Facebook | Instagram
Start a free trial today: https://www.crowdstrike.com/free-trial-guide/

© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

Forward-Looking Statements

This press release includes descriptions of products, features, or functionality which may not currently be generally available. Any such references are provided for informational purposes only. The development, release, and timing of all features or functionality remain at our sole discretion and may change without notice. These statements are subject to risks, uncertainties, and assumptions that may cause actual results to differ materially from those expressed or implied. Customers should make purchasing decisions based only on services and features that are currently generally available. For more information on our existing offerings please talk to your CrowdStrike representative.