Cloud-native endpoint protection platform whose Charlotte AI analyst automates threat triage, hunting, and response. By 2026, Charlotte AI is a flagship example
CrowdStrike Falcon with Charlotte AI is agentic cybersecurity at the endpoint: conversational investigation, AI triage that compresses alert queues, and bounded autonomous response, defense moving at machine speed against AI-accelerated attackers.
Pricing: Per-endpoint module-based enterprise pricing via sales; Charlotte AI bundled into higher tiers (published positioning, mid-2026).
Within bounded playbooks, contain host, kill process, with audit trails and human gates on consequential moves, yes; that's the deployed pattern. Full autonomy remains deliberately constrained.
Mostly it absorbs triage toil in chronically understaffed SOCs: humans shift to hunting and hard incidents. The capacity relief is the realized value, not layoffs.