Advisories
CrowdStrike Enhances Falcon Data Security with On-Device AI for Real-Time Sensitive Data Classification
CrowdStrike has added an on-device AI capability to Falcon Data Security that classifies sensitive data in real time using language models run on dedicated hardware. The update allows organizations to detect and protect confidential information without sending data to the cloud. Defenders should integrate the new classification engine into their data loss prevention workflows and monitor for misclassifications.
What Happened
CrowdStrike released an update to Falcon Data Security that embeds language‑model inference directly on the endpoint. The on‑device AI classifies sensitive data in real time, leveraging dedicated hardware accelerators to keep processing local.
Impact
Organizations using Falcon Data Security now gain immediate visibility into confidential files—PII, PCI, PHI—without transmitting data to the cloud. The change reduces latency for policy enforcement and limits exposure of sensitive content.
What to Do
- Enable the new on‑device classification feature in the Falcon console.
- Update data‑loss‑prevention rules to reference the new classification categories.
- Validate classification accuracy by sampling flagged files and adjusting thresholds.
- Monitor endpoint logs for any misclassifications or performance impact.
Technical Details
The update uses a lightweight transformer model optimized for Falcon’s on‑device inference engine. It runs on Intel’s dedicated AI accelerator, requiring no GPU and consuming <5 % CPU. The feature is available in Falcon Data Security 6.2 and later.