Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI is moving beyond browser tabs and SaaS apps into agents, local models, MCP servers, IDE extensions, and AI development frameworks running directly on the endpoint. These tools can access files, source code, credentials, and enterprise data with user-level privileges, creating new blind spots for security and IT teams. In this demo, see how CrowdStrike Falcon helps close the endpoint AI visibility gap by discovering, governing, and defending AI usage across the enterprise.

AI adoption is expanding into agents, developer workflows, and browser-based experiences, creating new blind spots where security teams need visibility, context, and control. See how CrowdStrike Falcon extends AI security coverage across Microsoft Copilot Studio, Claude Code, and the Falcon Browser Extension. Learn how Falcon helps security teams evaluate agent tool use, enforce allow or block policy decisions, inspect prompts and responses for risks like prompt injection, sensitive data, and malicious content, and enrich investigations with endpoint identity context from the Falcon sensor.

AI is changing how work gets done. It is also creating a new attack surface. Join CrowdStrike President Michael Sentonas for a first look at CrowdStrike’s vision for securing the agentic enterprise and defining AIDR, the emerging category for detecting, investigating, and responding to threats targeting and originating from AI systems, agents, and autonomous workflows. In this virtual event, you’ll learn.

Securing the browser is no longer optional, but not every approach delivers the same level of protection, flexibility, or user experience. Remote browser isolation, VDI, dedicated secure browsers, and browser extensions can each address part of the problem. But they may also introduce latency, force users into unfamiliar workflows, create patching gaps, or lack visibility into the browser runtime where sessions, tokens, data, and attacks converge.

Work no longer happens inside a clearly defined perimeter. It happens in the browser, where users access SaaS applications, private resources, sensitive data, and AI tools from managed devices, personal devices, and contractor environments.

Frontier AI has armed adversaries with unprecedented speed, finding and exploiting vulnerabilities faster than humans can respond. To keep pace, defenders need agentic AI operating on defense. In this demo, see how a Frontier AI Exploitation Defense Agent in Charlotte AI AgentWorks identifies and prioritizes critical risk, then hands off to Falcon for IT Risk-Based Patch Management for controlled remediation, all within the CrowdStrike Falcon platform.

Adversaries are abusing the cloud-native you trust to blend in and remain undetected. See how Falcon Cloud Security detects adversary behavior in real time with Cloud Detection and Response (CDR).

Passwords and traditional MFA remain common targets for phishing and credential theft. FalconID extends phishing-resistant, FIDO2-based passkeys to third-party applications, enabling secure, passwordless authentication across platforms like Entra ID, Okta, GitHub, and Salesforce. Passkeys are device-bound, centrally managed through the Falcon console, and continuously protected by Falcon security signals—allowing organizations to revoke access instantly when risk changes.

Falcon Cloud Security helps security teams stop active attacks and eliminate the critical exposures that enable them - all from a single AI-native platform backed by industry-leading adversary intelligence.

Kelly McCracken, SVP of the Cyber Security Operations Center at Salesforce, leads one of the most complex and high-scale cyber operation environments on the planet. Today, she joins Adam and Cristian to discuss how adversaries are targeting SaaS vendors, the most underappreciated SaaS misconfigurations, and what the future of the shared responsibility model looks like.