Falcon Cloud Security Adds Third‑Party App Insights and AI‑Driven Remediation

Falcon Cloud Security has released a new update that adds visibility into third‑party applications and introduces AI‑enhanced remediation suggestions. The update is available to all Falcon Cloud Security customers and is designed to help teams quickly identify risky third‑party integrations and automate response actions.

What happened

The 10/05/26 release adds two key capabilities: 1) Third‑Party App Insights, which surface usage data, permissions, and risk scores for SaaS apps connected to your environment; 2) AI‑Enhanced Remediation, which generates prioritized remediation steps and, where possible, auto‑executes actions such as revoking permissions or disabling compromised accounts.

Impact

• All organizations using Falcon Cloud Security to monitor Microsoft 365, Google Workspace, and other SaaS platforms.
• Teams that rely on manual review of third‑party app activity will see a reduction in investigation time.
• Potential for faster containment of misconfigured or malicious app integrations.

What to do

• Enable the new Third‑Party App Insights panel in the Falcon console.
• Review the risk scores and permissions for each connected app and flag any that exceed your organization’s policy thresholds.
• Accept AI‑generated remediation actions or customize the workflow to match your incident‑response playbooks.
• Monitor the remediation queue for completed actions and validate that the app’s access has been revoked or corrected.
• Update your internal documentation to reflect the new automated remediation capabilities.

Next steps

Falcon’s AI engine is continuously learning from remediation outcomes, so keep the “Remediation” tab active and provide feedback on any false positives or missed actions to improve future suggestions.