Today, at Fal.Con 2025, I am delighted to announce CrowdStrike’s intent to acquire AI security leader Pangea. With this acquisition, CrowdStrike will pioneer the category of AI detection and response (AIDR) as we secure enterprise AI development and use across the data, models, agents, identities, infrastructure, and interactions making up the AI lifecycle.

AI is rapidly becoming the cognitive layer of the enterprise, where it accelerates processes and drives innovation. Organizations around the world are embedding GenAI into their workflows and exploring new agents and applications. The benefits are transformative — but so are the risks. Employees input sensitive data into public models and experiment with AI tools outside IT’s control. Enterprise agents make decisions without oversight. And outside the organization, adversaries move at machine speed to gain illicit access, steal information, and disrupt critical operations with the aid of AI.

CrowdStrike together with Pangea will deliver what no one else can: full-stack security to protect AI use and development across the enterprise. CrowdStrike protects the foundation: endpoints, cloud workloads, data, identities, and AI models. Pangea secures the interactions: prompts, responses, and agent communications.

CrowdStrike pioneered endpoint detection and response (EDR), now the security industry’s standard for endpoint protection. Now, we’re pioneering how businesses will secure AI. This acquisition will extend the CrowdStrike Falcon® platform with AI prompt layer security to deliver the industry’s first complete AIDR solution, unifying visibility, compliance, and enforcement from enterprise AI development through workforce AI usage.

Only CrowdStrike and Pangea deliver the breadth and depth of capabilities required to secure AI where AI is built.

Defining AI Detection and Response

AIDR addresses two key areas of enterprise AI security.

AI Usage: As employees adopt GenAI tools, agents, and SaaS integrations, organizations face shadow AI, sensitive data leakage, and malicious or manipulated outputs. AIDR will provide complete visibility and governance across endpoints, browsers, cloud, and SaaS, enforcing policies and stopping unsafe interactions before they create risk.

AI Development: Enterprises are embedding AI into their own applications, agents, and infrastructure, expanding the attack surface from training data to runtime. AIDR will safeguard the full lifecycle of these systems with built-in controls for data protection, access management, and guardrails that prevent prompt injection, agent misuse, and unauthorized tool calls.

The Falcon platform already provides the foundation to secure AI. It protects the models and environments supporting AI processes, detects and stops sensitive data exfiltration from endpoints and cloud workloads, secures the identities behind AI agents, and enforces policies across endpoints and the SaaS stack. Businesses around the world trust the Falcon platform to fuel secure AI innovation.

With Pangea, CrowdStrike will extend this protection into the interaction layer of AI to secure how AI is used across the enterprise. Pangea inspects prompts, responses, and agent activity to catch sensitive data or malicious instructions before they create risk. Its governance policies allow organizations to block public models while enabling safe internal use. Development guardrails stop malicious prompts, prevent risky tool calls, and protect secrets and sensitive data. Businesses gain full visibility into who is using AI, what data is being shared, and the control to instantly stop unsafe interactions.

CrowdStrike, with Pangea, will deliver competitive advantages in securing AI across four core areas:

• Defense against prompt injection: Protect against direct and indirect prompt injection attacks, model jailbreak attempts, and malicious entities, with up to 99% efficacy at sub-30ms latency.

• Visibility into risky AI use: Enable control over the topics and conversations users have with chatbots and generative AI, and provide deep visibility into AI traffic, activity, and governance policies to stop risky AI use.

• Security for AI in Development and Production: Allow developers to create AI applications and agents with security built in, while security teams can monitor and govern enterprise-built and integrated AI. 

• Fast, secure innovation: Help organizations bring AI features to market faster without sacrificing control, with ready-to-use safeguards.

AI doesn’t live in the network, it lives where models are built in the cloud and datacenter, where adoption happens on endpoints, and where access occurs through human and nonhuman identities. Its operations span prompts, models, agents, and data pipelines. As AI continues to proliferate across businesses, AIDR is required to unify visibility, governance, and response across AI use and development.

Together, CrowdStrike and Pangea will define AIDR with a unified security model for AI that delivers governance, control, and security across the AI lifecycle.

Securing AI Where It Happens

Organizations around the world are racing to adopt AI — but the speed of adoption is outpacing their ability to secure it. As AI transforms the enterprise and the threat landscape, they need a new foundation to gain the visibility, detection, governance, and response required to protect AI development and usage.

CrowdStrike anticipated this shift, knowing businesses need new technologies to detect and respond to threats when the attack surface expands. We saw this in EDR for endpoints, CDR for cloud, and ITDR for identity. Now, we’re seeing the attack surface expand further with AI. Just as they adopted the earlier technologies, organizations need AIDR to detect and stop threats at the AI layer.

The Falcon platform already provides the foundation for secure AI. Together with Pangea we will extend our platform leadership to the critical interaction layer, where AI is built and used across the enterprise, to achieve complete protection across the AI lifecycle. After Pangea’s AI-native capabilities are integrated into the Falcon platform, we will deliver the industry’s first complete AIDR solution and fully unified approach to securing AI.

Forward-Looking Statements
This blog contains forward-looking statements, including statements regarding the closing and benefits of the proposed acquisition. These statements involve risks and uncertainties, and actual results may differ materially. There are a number of risks which could cause actual results to differ materially, including the satisfaction of the acquisition’s closing conditions, our ability to integrate Pangea, and other risks described in the filings we make with the Securities and Exchange Commission from time to time.

The post CrowdStrike to Acquire Pangea to Secure Enterprise AI Use and Development appeared first on MASSIVE News.

We’re living through the fourth industrial revolution. The first brought us steam power, the second electricity, and the third the digital age we all know and love. Now we’re in the fourth industrial revolution, the age of AI, and it’s transforming every aspect of our lives, including how we think about cybersecurity.

The AI Arms Race is Real

Here’s the reality: AI is a double-edged sword. While we all have our “ChatGPT moments” and marvel at what these technologies enable, adversaries have these same moments. Just weeks ago, our team discovered malware that, once on a system, would prompt various GPTs for reconnaissance information, building unique PowerShell scripts tailored to each specific environment. Think about that: each system was being exploited in a completely customized way, in real time.

This isn’t just making attackers more sophisticated; it’s multiplying them. There are more people who can execute high-level attacks today than there were just two years ago, thanks to AI democratizing destruction. The old model simply can’t keep up.

From Firefighting to Autonomous Defense

The legacy SOC is trying to fight a 21st-century war with 20th-century weapons. Security teams have become modern-day firefighters, constantly responding to the next alert, overwhelmed by data volume, and struggling to keep pace as attack timelines compress from weeks to days to hours to minutes – and now seconds.

That’s why we need to reimagine the SOC entirely. Not build a better dashboard, but deliver the agentic SOC powered by intelligent agents that don’t just assist – they reason, decide, act, and recursively learn across domains.

From Operator to Orchestrator

The fundamental shift we’re seeing is moving security professionals from operators to orchestrators. Today, we have one analyst working on one threat in a direct, one-to-one relationship. But where we’re heading is one analyst managing many agents, just like how autonomous vehicles changed the transportation model from one driver per car to one remote operator managing an entire fleet.

The agents are going to do the work. The humans are elevated into a role where they’re controlling a fleet of agents, letting the agents handle the heavy lifting while they focus on strategy, oversight, and decision-making. This changes everything about speed and flexibility in security operations.

Introducing the Agentic Security Workforce

At Fal.Con, we announced seven new AI agents within our Charlotte framework: exposure prioritization, malware analysis, hunting, search, correlation rules, data transformation, and workflow generation agents. These aren’t just tools; they’re digital workers that can dramatically accelerate triage, write reports, analyze malware, and understand incidents on your behalf.

But here’s what I’m most excited about: Charlotte AI AgentWorks. We’re giving our customers the ability to build their own agents. Because a platform isn’t just something you use – it’s something you build on.

The Data Moat That Changes Everything

What makes our approach different? Data. We’ve become the “Reddit of security” with trillions of platform telemetry events, over a decade of annotated threats from our Falcon Complete MDR operations, cutting-edge threat intelligence, and insights from being at the tip of the spear on the battleground of major breaches. All of this labeled, curated data feeds into training our AI agents. Our platform brings it all together in one place. Without this foundation, it’s nearly impossible to catch up.

Protecting the Protectors: Security for AI

While we’re talking about “AI for security” – how we’re using AI to revolutionize cybersecurity – we also need “security for AI”: security to protect and govern the world’s AI adoption.

AI agents look remarkably similar to humans. They have identities, workflows, access to resources and data. Some companies are even giving AI agents employee numbers. These agents operate like superhumans, processing vast amounts of data at incomprehensible speeds.

That’s why we agreed to acquire Pangea, a leader in protecting AI agents across the entire lifecycle, from development to production. Our goal is ambitious: we want to protect every AI agent in the world. Just as we pioneered EDR, MDR, and CDR, we’re now pioneering what comes next: introducing AIDR: AI Detection and Response.

The Road to Full Autonomy

The post The Dawn of Agentic SOC: Reimagining AI Era Cybersecurity appeared first on MASSIVE News.