CrowdStrike Falcon® Data Security
Stop data loss at the endpoint
Discover sensitive data, see how it moves, and stop theft across the web, GenAI tools, removable media, printers, and local applications.
See more. Control more. Instantly.
See sensitive data movement and enforce policies at key egress paths — built into the CrowdStrike Falcon® platform with no added agents or complexity.
One sensor. Instant protection.
Activate instantly with the lightweight CrowdStrike Falcon® sensor — no reboots, no new sensors.
Context-aware policy enforcement
Enforce rules based on content, identity, and destination across web, GenAI tools, removable media, printers, and local applications.
Detect and control altered data
Track sensitive data even when renamed, reformatted, or pasted into egress channels.
See sensitive data in real time
Replace static rules and manual tagging with modern endpoint data security. See sensitive data continuously, then defend it as it moves across web, GenAI tools, USB, print, SaaS, and local applications — so protection keeps pace as data changes.
×
![]()
×
![]()
Know the unknown
Detect abnormal user activity and enforce policies based on behavior, content type, origin, identity, and destination. Out-of-the-box detections surface high-risk activity without endless tuning — stopping insider threats, GenAI misuse, and risky actions before sensitive data leaves the endpoint.
Trace data, even when altered
Track sensitive data even when it’s renamed, reformatted, or pasted — revealing hidden exfiltration attempts. Maintain persistent source attribution so you can trace back to the origin and enforce controls across formats and destinations.
×
![]()
×
![]()
Get x-ray vision inside encryption
Inspect encrypted archive contents in real time — giving security teams x-ray vision into what’s being packaged before it leaves the environment. Capture full context and content of attempted encrypted exfiltration for faster, evidence-backed investigations.
Discover sensitive data at rest
Proactively scan local file systems to uncover sensitive data before it moves. Falcon Data Security for Endpoint uses the existing Falcon sensor to identify PII, PHI, PCI, and custom patterns across documents, spreadsheets, archives, and more — helping you reduce risk and adhere to compliance requirements like PCI DSS.
×
![]()
