Cybersecurity
CrowdStrike Falcon Data Security Adds On-Device AI Classification for Sensitive Data
CrowdStrike and Intel added an on-device AI data classification capability to Falcon Data Security. It uses language models on dedicated endpoint AI hardware to identify sensitive data in real time. Defenders should review coverage, data flows, and privacy controls before expanding deployment.
What happened
CrowdStrike introduced a Falcon Data Security capability built with Intel that classifies sensitive data on endpoints. The feature uses language models running on-device, with dedicated AI hardware, rather than relying solely on cloud processing.
Who is affected
Organizations using Falcon Data Security, especially those handling regulated, intellectual property, or customer data on endpoints, are the primary audience. Teams responsible for DLP, endpoint data loss prevention, and AI-assisted detection should evaluate the capability.
What defenders should do
- Confirm whether the feature is enabled in your Falcon tenant and which endpoint groups are covered.
- Review classification policies, sensitivity labels, and alert routing to ensure they match your data-handling rules.
- Validate privacy, retention, and data-residency requirements for on-device model inference.
- Test false-positive behavior on common file types, developer workflows, and regulated data.
- Document operational ownership for tuning, exceptions, and incident response.
Operational notes
On-device AI can reduce latency and keep raw data local, but it still requires governance, monitoring, and integration with existing DLP controls.
Because the announcement is product-focused, defenders should treat this as a capability change, not a vulnerability fix. Patching, threat hunting, and endpoint hardening remain separate priorities.
Related articles
CrowdStrike Introduces On‑Device AI for Real‑Time Data Classification
CrowdStrike, in partnership with Intel, added on‑device language‑model classification to Falcon Data Security, enabling instant detection of sensitive data without cloud transfer. The feature uses Intel AI hardware and is available in the latest Falcon releases.
Read briefing
CrowdStrike Launches On-Device AI for Real-Time Sensitive Data Classification
CrowdStrike has added an on-device AI capability to Falcon Data Security, enabling real-time classification of sensitive data using language models running on dedicated Intel hardware. The update allows security teams to detect and label confidential information at the endpoint without sending data to the cloud. Defenders should review the new feature in their Falcon console, enable the data classification policy, and monitor for classification alerts.
Read briefing
CrowdStrike Enhances Falcon Data Security with On-Device AI‑Driven Sensitive Data Classification
CrowdStrike has added a new on‑device AI capability to its Falcon Data Security product, enabling real‑time classification of sensitive information using on‑chip language models. The update improves data protection for endpoint and cloud workloads without relying on external inference services. Security teams should review the new classification settings and update their data‑loss‑prevention policies accordingly.
Read briefing
CrowdStrike Adds On-Device AI Data Classification to Falcon Data Security
CrowdStrike announced a Falcon Data Security capability, developed with Intel, that uses on-device language models and dedicated AI hardware to classify sensitive data in real time. The update is relevant to endpoint DLP and data governance teams. Defenders should evaluate rollout, validate classification policies, and monitor endpoint performance before broad deployment.
Read briefing