-

CrowdStrike and IBM Expand Strategic Collaboration to Accelerate Agentic SOC Transformation

Expanded strategic collaboration brings together Charlotte AI with IBM ATOM for coordinated, machine-speed response and integrates the Falcon platform with IBM Consulting’s managed security services and X-Force Cyber Range

AUSTIN, Texas & ARMONK, N.Y. & SAN FRANCISCO--(BUSINESS WIRE)--RSA 2026--CrowdStrike (NASDAQ: CRWD) and IBM today announced an expansion of their strategic collaboration to advance agentic SOC transformation.

The expanded collaboration integrates CrowdStrike® Charlotte AI™ with IBM’s Autonomous Threat Operations Machine (ATOM), IBM’s autonomous SOC orchestration engine, for coordinated, machine-speed investigation and containment. It also extends the CrowdStrike Falcon® platform into IBM Consulting’s managed Threat Detection and Response services and global X-Force Cyber Range experiences, where the two companies will offer immersive cyber crisis simulations to help organizations prepare for emerging threats.

AI is accelerating the velocity of adversary operations and shrinking the defender’s window to respond. The average eCrime breakout time has dropped to 29 minutes, with the fastest observed in just 27 seconds, while attacks targeting public-facing applications are up 44% from the prior year, according to the CrowdStrike 2026 Global Threat Report and IBM’s 2026 X-Force Threat Intelligence Index. As threats move faster and expand across cloud environments, security teams need coordinated detection and containment at machine speed.

Within the SOC, IBM ATOM and Charlotte AI can now work together to analyze detections across endpoint, identity, and cloud environments, applying enterprise context to coordinate and execute containment decisions. Together, they streamline investigation and response to reduce manual handoffs and help teams act before threats spread.

“Enterprises trust IBM to advance their security programs,” said Daniel Bernard, chief business officer, CrowdStrike. “With Charlotte AI helping to deliver investigation, containment, and operational response, IBM’s autonomous threat operations machine (ATOM) and cyber threat management services are battle-ready to defend against modern threats.”

“Organizations are under pressure to accelerate response without increasing complexity,” said Dave McGinnis, Vice President, Global Managed Security Services, IBM. “By combining IBM ATOM with CrowdStrike’s Charlotte AI and delivering managed Threat Detection and Response services and Cyber Range validation with the Falcon platform, we’re helping enterprises operationalize coordinated, AI-driven response in real-world environments.”

Together, CrowdStrike and IBM are leading agentic SOC transformation with a unified execution model for modern enterprises.

About CrowdStrike

CrowdStrike (NASDAQ: CRWD), a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.

CrowdStrike: We stop breaches.

Learn more: https://www.crowdstrike.com/
Follow us: Blog | X | LinkedIn | Instagram
Start a free trial today: https://www.crowdstrike.com/trial

© 2026 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

About IBM

IBM is a leading global hybrid cloud and AI, and business services provider, helping clients in more than 175 countries capitalize on insights from their data, streamline business processes, reduce costs and gain the competitive edge in their industries. Thousands of governments and corporate entities in critical infrastructure areas such as financial services, telecommunications and healthcare rely on IBM's hybrid cloud platform and Red Hat OpenShift to affect their digital transformations quickly, efficiently and securely. IBM's breakthrough innovations in AI, quantum computing, industry-specific cloud solutions and business services deliver open and flexible options to our clients. All of this is backed by IBM's legendary commitment to trust, transparency, responsibility, inclusivity and service.

For more information, visit https://research.ibm.com.

Contacts

Media Contacts:
CrowdStrike: press@crowdstrike.com
IBM: Mbrancati@ibm.com

CrowdStrike

NASDAQ:CRWD

Release Versions

Contacts

Media Contacts:
CrowdStrike: press@crowdstrike.com
IBM: Mbrancati@ibm.com

More News From CrowdStrike

CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide SIEM

AUSTIN, Texas--(BUSINESS WIRE)--CrowdStrike (NASDAQ: CRWD) today announced it has been named a Leader in the IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment.1 We believe this recognition reflects how CrowdStrike Falcon® Next-Gen SIEM is transforming security operations at global scale, as organizations replace legacy SIEMs to build the agentic SOC on the CrowdStrike Falcon® platform. Legacy SIEMs were built for a threat environment that no longer exists. As AI-enabled adversaries attack...

CrowdStrike Advances AI and Cloud Security Operations on AWS

AUSTIN, Texas & NEW YORK--(BUSINESS WIRE)--AWS Summit New York -- CrowdStrike (NASDAQ: CRWD), in collaboration with Amazon Web Services (AWS), today announced new AI, cloud, and Next-Gen SIEM innovations that help organizations securely build, deploy, and operate AI applications and cloud workloads on AWS. CrowdStrike is expanding CrowdStrike Falcon® AI Detection and Response (AIDR) capabilities on AWS, helping organizations identify and mitigate AI runtime risks across AI applications built wi...

CrowdStrike Expands Project QuiltWorks with AWS, Hardening the Cloud Attack Surface Against Frontier AI Risk

AUSTIN, Texas & NEW YORK--(BUSINESS WIRE)--AWS Summit New York – CrowdStrike (NASDAQ: CRWD) today announced that it is expanding Project QuiltWorks with Amazon Web Services (AWS), extending the coalition from the technology, services, and financial protection to mitigate frontier AI risk, to the attack surface where vulnerabilities live and are exploited. As frontier AI collapses the window between vulnerability and exploitation – marking a significant inflection point in cybersecurity history...
Back to Newsroom