Advisories
CrowdStrike Introduces On-Device AI for Real-Time Data Classification in Falcon Data Security
CrowdStrike has added a new on-device AI capability to Falcon Data Security that classifies sensitive data in real time using language models running on dedicated hardware. The feature reduces cloud dependency and speeds up detection for SecOps teams. Defenders should enable the module, update agents, and integrate with existing DLP workflows.
What Happened
CrowdStrike released an update to Falcon Data Security that embeds a language‑model engine on the endpoint. The model classifies sensitive files—PII, PHI, PCI, etc.—in real time, running entirely on dedicated AI hardware within the Falcon agent.
Impact
Defenders now have a faster, cloud‑independent method to flag confidential data during collection, inspection, and response. The change does not alter existing policy sets but expands the data‑classification granularity available to XDR and DLP integrations.
What to Do
- Verify that Falcon agents are on version 7.8 or later, which includes the on‑device AI module.
- Enable the “Data Classification” feature in the Falcon console under Data Security settings.
- Review and adjust classification rules to match your organization’s sensitivity taxonomy.
- Integrate classification output with your existing DLP or incident‑response playbooks.
- Monitor agent logs for “Classification” events to validate coverage.
Implementation Notes
Enabling the feature requires no additional licensing; the hardware acceleration is built into supported Intel CPUs. No changes to network or cloud architecture are needed, but ensure that the agent’s outbound telemetry remains enabled for policy enforcement.
Related articles
CrowdStrike Introduces On‑Device AI Data Classification in Falcon Data Security
CrowdStrike has added on‑device AI‑powered data classification to Falcon Data Security, leveraging Intel‑based dedicated AI hardware. The feature classifies sensitive data in real time without sending payloads to the cloud. Security teams should update to the latest Falcon agent, enable the new classification policy, and monitor classification logs for anomalies.
Read briefing
CrowdStrike Launches On-Device AI for Real-Time Data Classification in Falcon Data Security
CrowdStrike has added on-device AI language models to its Falcon Data Security platform, enabling real-time classification of sensitive data without sending payloads to the cloud. The update leverages dedicated AI hardware to keep processing local, reducing latency and preserving privacy. Defenders should enable the new classification engine, review policy rules, and monitor classification accuracy across endpoints.
Read briefing
CrowdStrike Introduces On‑Device AI for Real‑Time Sensitive Data Classification
CrowdStrike has added an on‑device AI capability to Falcon Data Security that classifies sensitive data in real time using language models running on dedicated hardware. The update helps defenders detect and protect confidential information without cloud latency. Security teams should enable the feature and review classification policies.
Read briefing
CrowdStrike Enhances Falcon Data Security with On-Device AI for Real-Time Sensitive Data Classification
CrowdStrike has added an on-device AI capability to Falcon Data Security that classifies sensitive data in real time using language models run on dedicated hardware. The update allows organizations to detect and protect confidential information without sending data to the cloud. Defenders should integrate the new classification engine into their data loss prevention workflows and monitor for misclassifications.
Read briefing