CrowdStrike® Charlotte Agentic SOAR
Orchestrate the agentic security workforce
Coordinated, multi-agent orchestration across your entire security ecosystem, in one unified workspace.
New from Fal.Con 2026
Static playbooks and siloed agents can’t keep pace with AI-driven attacks
Work stalls when agents work in silos and each tool is separate, leaving the analyst to pick up the pieces.
Uncoordinated agents
Individual agents deliver incremental gains. Without coordination or shared context, the analyst is still the integration layer.
Ungoverned automation
When agents, workflows and apps live in separate tools, security teams can’t see what’s running, what it’s connected to and what it costs.
Closed ecosystems
When automation remains confined to a single platform, it creates yet another silo - fixed models, proprietary agents, and restricted tooling.
Coordinate every agent. Govern every action. Connect every tool.
Charlotte Agentic SOAR is a unified workspace to build, run, and govern security automation across your stack - AI agents, rule-based workflows, and custom apps, from build to response.
×
![]()
New
Build the automation you need in a single place
Match the tool to the task in a flexible, no-code workspace for agents, apps and workflows. CrowdStrike® Charlotte Agentic SOAR unites three automation technologies in one workspace: AgentWorks for custom agents, SOAR orchestration for deterministic workflows, and CrowdStrike Falcon® Foundry for custom applications.
Coordinate agents across every security workflow
Run CrowdStrike-native, custom, and third-party agents as one coordinated workflow. For each workflow, define the triggers, the data and the handoffs, so context carries from one agent to the next instead of stopping at a boundary. Orchestrate agents to work as a team to drive investigations, hunt threats, analyze exposure and more - so the analyst is no longer the integration point.
×
![]()
×
![]()
New
Connect any model, any agent, any tool
Connect agents into and out of the CrowdStrike Falcon® platform with bidirectional MCP, so every tool in your stack becomes part of your agentic SOC, automatically. Built-in connectors unify telemetry and drive action across identity, cloud, network, ITSM, and collaboration tools. Build with a growing selection of LLMs from Open AI, Anthropic and NVIDIA, or bring your own.
Govern all automation from build to response
Set the autonomy level for every workflow, from human-in-the-loop approval to fully autonomous execution. Every agent action and workflow execution is logged and auditable. One hub shows what's running, what's failing, and what it costs - so leaders get the speed of automation with the accountability to scale it.
×
![]()
Latest innovations from
