Endpoint Security & XDR
CrowdStrike Introduces On‑Device AI for Real‑Time Data Classification in Falcon Data Security
CrowdStrike has added on‑device AI to Falcon Data Security, enabling instant classification of sensitive data locally on dedicated hardware. The feature reduces exfiltration risk and keeps inference private. Defenders should update agents, enable the toggle, and monitor logs.
What Happened
CrowdStrike has added a new on‑device AI capability to its Falcon Data Security product line, enabling real‑time classification of sensitive data through language models that run locally on dedicated AI hardware.
Impact
Classification occurs instantly at the data source, reducing the window for data exfiltration and eliminating the need to transmit raw data to the cloud for analysis. The feature also preserves privacy by keeping inference on the endpoint.
On‑device inference keeps sensitive data local and speeds up detection.
Technical Details
The update leverages Intel‑based AI accelerators integrated into Falcon agents, supporting common data types such as PII, PCI‑DSS, and HIPAA fields. Compatibility is limited to agents on Windows 10/11, macOS 12+, and Linux kernels 5.10+ with the latest agent version 6.4.0.
What to Do
- Verify that your Falcon agents are running the latest version and that the target endpoints have compatible AI hardware.
- Enable the “On‑Device Data Classification” toggle in the Falcon console and configure classification policies for the data categories you need to protect.
- Monitor classification logs for false positives and adjust thresholds as necessary.
- Integrate the classification output with your SIEM or SOAR platform to trigger alerts on anomalous data movement.
Related articles
CrowdStrike Introduces On-Device AI for Real‑Time Data Classification
CrowdStrike has added a new on‑device AI capability to Falcon Data Security, enabling real‑time classification of sensitive data using language models on Intel‑powered hardware. The feature helps defenders reduce data exposure and streamline DLP policies.
Read briefing
CrowdStrike Integrates On-Device AI for Real-Time Data Classification
CrowdStrike has rolled out a new capability within Falcon Data Security utilizing on-device language models powered by dedicated hardware. Developed in collaboration with Intel, the feature aims to accelerate the real-time identification of sensitive enterprise data directly at the endpoint.
Read briefing
CrowdStrike Introduces On‑Device AI Data Classification in Falcon Data Security
CrowdStrike has added on‑device AI‑powered data classification to Falcon Data Security, leveraging Intel‑based dedicated AI hardware. The feature classifies sensitive data in real time without sending payloads to the cloud. Security teams should update to the latest Falcon agent, enable the new classification policy, and monitor classification logs for anomalies.
Read briefing
CrowdStrike Falcon Data Security Adds On-Device AI Classification for Sensitive Data
CrowdStrike and Intel added an on-device AI data classification capability to Falcon Data Security. It uses language models on dedicated endpoint AI hardware to identify sensitive data in real time. Defenders should review coverage, data flows, and privacy controls before expanding deployment.
Read briefing