Advisories
CrowdStrike Introduces On‑Device AI for Real‑Time Sensitive Data Classification
CrowdStrike has added an on‑device AI capability to Falcon Data Security that classifies sensitive data in real time using language models running on dedicated hardware. The update helps defenders detect and protect confidential information without cloud latency. Security teams should enable the feature and review classification policies.
CrowdStrike has released a new on‑device AI feature for Falcon Data Security that classifies sensitive data in real time. The capability uses language models that run locally on dedicated AI hardware, eliminating the need to send data to the cloud for analysis.
What Happened
The update expands Falcon Data Security to automatically tag files, emails, and other data sources as PII, PHI, or other regulatory categories. The classification engine is integrated into the Falcon agent and operates on the endpoint.
How It Works
The on‑device language model processes content in situ, generating a confidence score for each data type. Results are stored in the local policy engine and can trigger alerts, quarantines, or policy‑based actions.
Impact
- Reduced latency: classification occurs instantly on the endpoint.
- Lower bandwidth: no outbound traffic required for data analysis.
- Improved privacy: sensitive content never leaves the device.
What to Do
Enable the new classification feature in the Falcon console, review the default policy templates, and adjust thresholds to match your compliance requirements. Monitor the new “Data Classification” event type in XDR and set up alerts for high‑confidence matches.