Cybersecurity
CrowdStrike Enhances Falcon Data Security with On‑Device AI‑Driven Data Classification
CrowdStrike has added a new on‑device AI capability to its Falcon Data Security product, enabling real‑time classification of sensitive data using language models that run on dedicated hardware. The update allows SecOps teams to identify and tag confidential information without sending data to the cloud, reducing exposure risk. Defenders should update Falcon agents to the latest version and review data classification policies.
On 16 September 2026, CrowdStrike announced a new on‑device AI feature for its Falcon Data Security suite. The enhancement uses language models that run locally on dedicated AI hardware, enabling real‑time classification of sensitive data without transmitting it to external services.
What happened
CrowdStrike integrated on‑device language‑model inference into Falcon Data Security, allowing agents to detect and tag confidential information such as PII, PCI, or HIPAA data directly on endpoints.
Impact
- Defenders gain immediate visibility into sensitive data stored on endpoints.
- Reduces risk of data exfiltration by preventing data from leaving the device for classification.
- Improves compliance posture by automating data classification in real time.
What to do
- Ensure Falcon agents are updated to the latest version that includes the on‑device AI capability.
- Configure data classification rules to match your organization’s sensitivity taxonomy.
- Review and adjust data handling policies to incorporate the new classification outputs.
- Monitor agent logs for classification events and verify that sensitive data is being flagged correctly.
Next steps
Contact CrowdStrike support for guidance on deploying the new feature in large‑scale environments and for best‑practice configuration of classification rules.
Related articles
CrowdStrike Enhances Falcon Data Security with On-Device AI‑Driven Sensitive Data Classification
CrowdStrike has added a new on‑device AI capability to its Falcon Data Security product, enabling real‑time classification of sensitive information using on‑chip language models. The update improves data protection for endpoint and cloud workloads without relying on external inference services. Security teams should review the new classification settings and update their data‑loss‑prevention policies accordingly.
Read briefing
CrowdStrike Enhances Falcon Data Security with On-Device AI for Real-Time Sensitive Data Classification
CrowdStrike has added an on-device AI capability to Falcon Data Security that classifies sensitive data in real time, reducing latency and exposure. The update is available to all Falcon customers and can be enabled via the Falcon console. SecOps teams should enable the feature, review classification logs, and adjust DLP policies accordingly.
Read briefing
CrowdStrike Introduces On‑Device AI for Real‑Time Data Classification
CrowdStrike, in partnership with Intel, added on‑device language‑model classification to Falcon Data Security, enabling instant detection of sensitive data without cloud transfer. The feature uses Intel AI hardware and is available in the latest Falcon releases.
Read briefing
CrowdStrike Unveils Agentic SOC: AI‑Driven Threat Detection and Response
CrowdStrike has launched the next generation of its Agentic SOC, embedding AI reasoning and on‑device classification into Falcon. The update equips SecOps teams with automated triage, real‑time data labeling, and Claude‑powered audit insights. Defenders should upgrade to Falcon 10.5, enable the Agentic SOC bundle, and review new AI‑driven playbooks.
Read briefing