CrowdStrike Unveils Charlotte Agentic SOAR to Orchestrate the Agentic Security Workforce

The orchestration layer of the Agentic Security Platform unites intelligent agents to coordinate real-time agent-to-agent and analyst-to-agent collaboration

AUSTIN, Texas--(BUSINESS WIRE)--Fal.Con Europe, Barcelona – CrowdStrike (NASDAQ: CRWD) today announced Charlotte Agentic SOAR, the orchestration layer of the Falcon Agentic Security Platform. Charlotte Agentic SOAR orchestrates AI-powered agents across the security lifecycle, connecting context and data so they can reason and act dynamically together in real time under analyst command. By uniting native, custom-built, and trusted third-party agents in a single coordinated system, Charlotte Agentic SOAR delivers intelligent, agentic orchestration that transforms automation into collaboration, stopping breaches at machine speed.

“Security operations can’t match the speed of AI-accelerated adversaries with static automation and rule-based playbooks,” said Michael Sentonas, president of CrowdStrike. “Charlotte Agentic SOAR brings reasoning and coordination to the agentic SOC, where analysts orchestrate AI-powered agents in real time to stop breaches with speed, precision, and control.”

From Static Playbooks to Agentic Workflows

Traditional SOAR tools rely on static playbooks, fixed workflows, and constant upkeep that can’t keep pace with AI-driven attacks. Charlotte Agentic SOAR replaces the rigidity of legacy SOAR with intelligent orchestration, connecting agents, context, and data across prevention, detection, investigation, and response to deliver coordinated decisions and real-time execution.

Analysts use natural language and drag-and-drop controls to connect tools, define guardrails and missions, and operationalize both structured playbooks and adaptive, AI-driven workflows – all without code. By inheriting context, assessing outcomes, and determining the next best action in real time, intelligent agents replace manual stitching with continuous adaptability that outthinks and outpaces dynamic threats moving at the speed of AI.

From Analyst to Orchestrator of the Agentic SOC

CrowdStrike is driving the evolution of security operations, empowering defenders to evolve from analysts to orchestrators of the agentic SOC, built on these foundational innovations:

• The Agentic Security Platform delivers the industry’s richest AI-ready data layer, providing complete environmental context and making every signal instantly actionable for both agents and analysts.
• The Agentic Security Workforce provides the industry’s only mission-ready agents trained on years of real human expertise and response actions from Falcon® Complete and incident response engagements.
• Charlotte AI AgentWorks enables organizations to build and customize their own agents without writing a single line of code.
• Charlotte Agentic SOAR is the orchestration layer that allows CrowdStrike, custom-built, and third-party agents to work together as one coordinated defense system, transforming security operations from manual investigation and response to machine-speed collaboration guided by human expertise.

To learn more about Charlotte Agentic SOAR, read our blog and visit here.

About CrowdStrike

CrowdStrike (NASDAQ: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.

CrowdStrike: We stop breaches.

Learn more: https://www.crowdstrike.com/
Follow us: Blog | X | LinkedIn | Instagram
Start a free trial today: https://www.crowdstrike.com/trial

© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

Forward-Looking Statements

This press release includes descriptions of products, features, or functionality which may not currently be generally available. Any such references are provided for informational purposes only. The development, release, and timing of all features or functionality remain at our sole discretion and may change without notice. These statements are subject to risks, uncertainties, and assumptions that may cause actual results to differ materially from those expressed or implied. Customers should make purchasing decisions based only on services and features that are currently generally available. For more information on our existing offerings please talk to your CrowdStrike representative.