CrowdStrike CRWD is positioning Charlotte AI as a key part of its competitive advantage in delivering automated and scalable cybersecurity. CrowdStrike describes Charlotte as an agentic security analyst that can complete tasks and make decisions to supercharge human security operations center (SOC) personnel.

CrowdStrike is continuously enhancing the capabilities of its Charlotte AI by introducing new features. In the first quarter of fiscal 2026, CRWD expanded Charlotte AI’s detection triage. This enables Charlotte AI to deliver autonomous expert-level triage, reasoning and response at machine speed. Charlotte AI’s extended capabilities help flatten the hiring curve, save time, and improve security outcomes.

One global healthcare customer signed an eight-figure Falcon Flex expansion during the first quarter, where Charlotte AI was central to their AI-native SOC transformation. The company also replaced a legacy Security Information and Event Management (SIEM) in the process.

Charlotte AI is also driving automation in vulnerability management. Combined with Falcon Exposure Management, Charlotte AI now delivers AI-powered network scanning for managed and unmanaged devices. A large financial services customer bought Exposure Management for 120,000 devices during the first quarter, replacing both its legacy vulnerability management vendor and existing attack surface management vendor as well.

CrowdStrike believes Charlotte’s role goes beyond automating today’s SOC. It also sees a major opportunity to become the security layer for AI agents themselves, protecting the identity, data, infrastructure, and the underlying AI models behind them. This long-term vision supports CrowdStrike’s broader strategy to lead in agentic, AI-first security.

With growing adoption and measurable customer wins, Charlotte AI is shaping up to be a strong differentiator for CrowdStrike in automated security.

How Competitors Fare Against CRWD

Competitors like Palo Alto Networks PANW and SentinelOne S are also gaining ground through platform expansion and AI innovation. 

In the third quarter of fiscal 2025, Palo Alto Networks saw robust growth in its AI-driven XSIAM platform. The growth was driven by increased customer adoption of PANW’s advanced cybersecurity offerings, including its AI-driven XSIAM platform, which saw annual recurring revenue (ARR) growth of more than 200% year over year.

Though comparatively a small competitor, SentinelOne posted year-over-year growth of 24% in its ARR. The growth was fueled by the rising adoption of SentinelOne’s AI-first Singularity platform and Purple AI.