CrowdStrike adds a kill switch for agent model access CrowdStrike adds a kill switch for agent model access

Gateway enforcement

The control works through connected third-party gateways or CrowdStrike’s native gateway. The latter is generally available and included with Guardian at no additional charge, centralizing model credentials, security policies and spending controls.

Instructions and execution are separate signals

The accompanying Guardian update connects three kinds of evidence: instructions given to an agent, its network communications and its operating-system activity. CrowdStrike describes current runtime visibility into processes, commands and accessed resources. Available hooks inspect prompts inside Claude Code, Codex, GitHub Copilot, OpenCode and Cursor, while Agent Graph links instructions with subsequent execution. The company also made Falcon Complete for Guardian generally available, adding managed monitoring, investigation and response. Other expansion work remains pre-beta, including AI-specific coverage for Linux, Kubernetes and cloud workloads. Planned AgentCore support would expose managed-agent components and interactions without requiring access to the provider’s infrastructure. These are separate deployment tracks, with different prerequisites and release stages. The release also adds prompt-activity export through Falcon Data Replicator and token-consumption dashboards. Agent insider-threat detection is also pre-beta: it would compare agent and owner behavior with established baselines, including actions within granted permissions.

Monitoring inside Cowork’s virtual machine

A separate integration developed with Anthropic places the Falcon Linux sensor inside the virtual machine used for local Claude Cowork execution. CrowdStrike explains that the host normally sees that machine as one process, obscuring activity within it. Mounted host folders can still expose company data to the agent. The integration is intended to reveal spawned processes, installed packages and network connections inside the guest. Customers deploy the sensor through existing device-management tools. The dedicated announcement describes a macOS beta and expects Windows support later in November. Its focus is visibility and detection within that execution environment, alongside Cowork’s own permissions and administrative controls.

Observability remains a proposed acquisition

CrowdStrike also signed an agreement to acquire Fiddler, with closing expected during Q4 FY27, subject to customary conditions. The planned Falcon Observe offering would add evaluation before deployment and trace agent decisions and tool calls through production workflows. Intended capabilities include checking task completion and policy compliance, identifying behavioral drift, and recording evidence for audits. The announcement describes OpenTelemetry instrumentation and support for LangGraph, Amazon Bedrock, AWS Strands and Google ADK. It also proposes tracking token consumption and spend across agents. This would bring application-level evaluation together with Falcon’s security telemetry, giving investigators another record of how an agent reached an outcome.