CrowdStrike launches Charlotte AI AgentWorks ecosystem
CrowdStrike has launched the Charlotte AI AgentWorks Ecosystem to help organisations build security agents. Launch partners include Accenture, AWS, Anthropic, Deloitte, Kroll, NVIDIA, OpenAI, Salesforce and Telefónica Tech.
The ecosystem allows customers to create, test and deploy custom security agents through a no-code development platform in Falcon. It also gives partners a way to build services around agent-based security operations.
Partner network
The launch brings together consulting firms, cloud providers, model developers and security services groups on CrowdStrike's platform. Accenture, Deloitte, Kroll, Salesforce and Telefónica Tech are among those using the system to design and deploy agents for customer needs.
AWS, Anthropic, NVIDIA and OpenAI are supporting access to AI models and related infrastructure. Integrations include Anthropic Claude, NVIDIA Nemotron and OpenAI GPT, alongside Amazon Bedrock and Amazon SageMaker.
CrowdStrike is positioning the ecosystem as a way for security teams to build agents without code and run them within Falcon's governance controls. The company says this is intended to support development, orchestration and scale from a single platform.
Agent strategy
CrowdStrike is also tying the ecosystem to its broader Charlotte AI and security operations strategy. Charlotte Agentic SOAR is designed to coordinate CrowdStrike-built agents, customer-built agents and third-party agents in one system.
According to CrowdStrike, that orchestration layer includes workflow controls, AI Detection and Response, and guardrails for agent-to-agent and analyst-to-agent collaboration. These controls are intended to maintain trust across automated and human-led processes in security operations centres.
The move reflects a broader shift in the cybersecurity market as vendors and service providers look for ways to embed generative AI and autonomous workflows into threat detection, investigation and response. Security teams are under pressure to process large volumes of alerts and respond more quickly, while also managing governance and reliability concerns around AI use.
By opening the system to outside partners, CrowdStrike is seeking to extend Falcon beyond its own tools and into a marketplace for customer-specific security agents and services. That could allow systems integrators and managed security providers to package their operational knowledge into reusable workflows and software agents.
Daniel Bernard, Chief Business Officer at CrowdStrike, said the company sees AI agents as supporting rather than replacing security staff. "AgentWorks enables every Falcon user to build their own agentic security workforce," Bernard said. "The future of security operations isn't humans replaced by agents. It's humans amplified by them. Our ecosystem makes the next generation of security's workforce available for organisations of all sizes today."
Industry view
Launch partners described the system as a way to tailor AI use in cyber operations rather than rely on generic tools. Several pointed to the challenge of deploying AI at scale in a way that can be trusted in security environments.
"Organisations face increasingly sophisticated threats that demand machine-speed security operations, yet many struggle to deploy trusted, purpose-built AI at scale," said Rex Thexton, Chief Technology Officer, Accenture Cybersecurity. "Accenture is working with CrowdStrike to address this challenge by bringing greater customisation to the agentic SOC, helping clients build tailored agents they can trust. We're proud to be an AgentWorks ecosystem launch partner and, together with CrowdStrike, define the future of agentic security."
Kroll said the platform could help managed detection and response teams incorporate AI into investigations and response workflows. It pointed to a need for faster, more precise action as threats become more complex.
"Security teams are under pressure to respond faster and with greater precision as threats grow more complex," said David Burg, Global Head of Cyber Risk, Kroll. "Charlotte AI AgentWorks helps us operationalise AI within managed detection and response, building tailored agents that accelerate investigations and response. Together with CrowdStrike, we're helping organisations move faster to stop breaches."
Telefónica Tech linked the launch to its own shift towards what it described as an AI-native security operations centre. The group said it aims to turn its security expertise into agents that can be deployed more widely across customer environments.
"At Telefónica Tech, we believe the future of cybersecurity operations is agentic by design, where AI agents and human experts operate as a unified system," said Alejandro Ramos Fraile, Global Cybersecurity Director, Telefónica Tech. "With CrowdStrike's Charlotte AI AgentWorks, we are accelerating our transition to an AI-Native SOC, industrialising our security expertise into scalable agents that enhance detection, response, and cyber resilience."