Charlotte AI is a conversational AI assistant for users of the CrowdStrike Falcon® platform. It uses industry-leading generative AI technologies to enable users to ask plain-language questions (“show me critical detections”, “what tactics does Scattered Spider use?”, etc.) that quickly surface Falcon platform data.
Charlotte AI FAQ
Product overview and pricing
At this time, Charlotte AI provides users with information from the CrowdStrike Falcon® Insight XDR, CrowdStrike Falcon® Spotlight, CrowdStrike Falcon® Discover, CrowdStrike Falcon® Intelligence modules and the CrowdStrike Detect API.
No. Users can access Charlotte AI using their existing Falcon agent.
Charlotte AI supports english-language conversations at this time.
Charlotte AI is available for purchase to all Falcon platform users leveraging US-1 and US-2 platform regions.
Data and underlying models
Yes. Charlotte AI is able to obtain and surface data from supported CrowdStrike APIs and modules (such as Falcon Discover, which has connectors to 3rd party data sources).
Charlotte AI’s underlying models are trained and tuned on Falcon platform documentation, APIs of the Falcon platform, and CrowdStrike’s high-fidelity security telemetry. Charlotte AI is not trained on customer personal identifiable information (PII).
Under CrowdStrike’s Data Processing Agreement (DPA), third parties are forbidden from using customer questions and answers in the development of their LLM technology.
Charlotte AI’s underlying architecture leverages a diverse set of cutting-edge LLMs and other AI technologies — including third party models and first party AI technologies. Charlotte AI’s architecture gives CrowdStrike the flexibility and adaptability to adjust the models applied across workflows based on ongoing performance testing, to continuously optimize Charlotte AI’s performance.
Responsibility, privacy, and safety controls
As an extension of the Falcon platform, Charlotte AI operates within each user’s role-based access policies.
Yes. Every answer provided by Charlotte AI is inspectable and traceable. To see the underlying sources of data for each answer, click on the “see response details” toggle included in the upper right corner of each answer.
Furthermore, the “Charlotte AI Auditor” role allows administrators to designate users in their environment who can see all questions submitted to Charlotte AI, to ensure usage is consistent with their organization’s policy.