AI Defense Stack

Agent & MCP security

CrowdStrike Falcon Guardian: agent detection and response platform

Falcon Guardian is an agent detection and response platform from CrowdStrike. It is a commercial product offered as: SaaS. Pricing model: not published.

  • Last reviewed
Visit Falcon Guardian (opens in a new tab)
Commercial Layer 8: Monitoring and response

Best for

Security teams that already run the Falcon sensor and want AI agent discovery, access control and runtime detection on Windows and macOS endpoints

Consider instead if

  • You want an open-source toolkit that inventories agents on endpoints and exports their telemetry to your own pipeline. See Uber ADR.
  • You want an agent security platform that is not tied to an endpoint security vendor. See Zenity.

What Falcon Guardian does

CrowdStrike Falcon Guardian is a commercial agent detection and response product on the Falcon platform. CrowdStrike's release of September 1, 2026 says the Falcon sensor discovers known and shadow AI agents on Windows and macOS, connects agent behavior to endpoint telemetry, sets which agents may run on managed endpoints and detects attacks on agents. The product page, titled CrowdStrike Falcon AIDR, adds inspection for prompt injection, with blocking, and policies for AI tool use; the earlier Falcon AIDR page points to it. An AI gateway and Falcon Complete for Guardian are described in the future tense. The release says it is built in the cloud with one lightweight agent. No Guardian price is stated. It is closed source.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
CrowdStrike Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Website
crowdstrike.com Source, checked October 21, 2026: crowdstrike.com (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
Not documented in the sources we checked
Attestations or disclosure
Not documented in the sources we checked

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Where Falcon Guardian fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Falcon Guardian covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L8 Monitoring Monitoring and response Primary Log, detect and respond to AI incidents with the evidence every layer produces. Its description names detection and response as its main job
L2 Discovery Discovery and posture Also covers Documents discovery of known and shadow AI agents on Windows and macOS endpoints. Falcon sensor discovers known and shadow AI agents on Windows and macOS endpoints
L7 Agent access Agent and tool access Also covers Documents a policy that sets which AI agents may run on managed endpoints. Defines which AI agents may run on managed endpoints and turns AI governance policy into enforceable controls

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Falcon Guardian, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM01 Prompt Injection Inspects direct and indirect prompt injection and can block malicious interactions. Inspects direct and indirect prompt injection and can block malicious interactions
LLM06 Excessive Agency Finds agents, sets which may run on managed endpoints and detects malicious agent behavior at runtime. Falcon sensor discovers known and shadow AI agents on Windows and macOS endpoints; Connects AI agent behavior to Falcon endpoint telemetry, tracing how prompts lead to processes and system actions; Defines which AI agents may run on managed endpoints and turns AI governance policy into enforceable controls; Detects compromised agents, reconstructs incidents, maps blast radius and supports containment

Not mapped in our analysis: LLM02, LLM05, LLM07. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in Agent & MCP security, ranked within the category by Coverage Score.

Cisco DefenseClaw

Cisco

Open sourceApache-2.0
  • CLI
  • Self-hosted

Scans skills and MCP servers, inspects agent tool calls and keeps an audit trail around AI coding agents.

Best for: Security teams that want scanning, guardrails and an audit trail around the coding agents developers already run, starting in observe mode before anything is blocked

Coverage Score 76 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

Docker MCP Gateway

Docker

Open sourceMIT
  • CLI
  • Self-hosted

Proxies AI clients to MCP servers it runs as isolated Docker containers, with tool filters and call logs.

Best for: Developers and platform teams that already use Docker and want MCP servers to run in containers behind one gateway with per-server tool selection

Coverage Score 72 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

agentgateway

agentgateway (a Series of LF Projects, LLC)

Open sourceApache-2.0
  • CLI
  • Self-hosted
  • Cloud-native

Open-source proxy that applies auth, CEL policy and guardrails to LLM, MCP and agent-to-agent traffic.

Best for: Platform teams that want one open-source gateway in front of MCP servers and LLM providers, with token validation, CEL rules per MCP method and pluggable guardrails

Coverage Score 69 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

Falcon Guardian FAQ

Is CrowdStrike Falcon Guardian open source?

No. It is a commercial product on the Falcon platform, and we found no public source repository for it.

Which parts of Falcon Guardian are not available yet?

CrowdStrike's September 1, 2026 release describes the AI gateway and Falcon Complete for Guardian in the future tense, and the product page marks the AI gateway as coming soon.

Does the vendor publish a Guardian price?

Not on the pages we opened. The product page offers a 15 day trial and a generic pricing link, with no Guardian plan or rate.

Key facts you can cite

We have no commercial relationship with CrowdStrike.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.