What happened
CrowdStrike launched Falcon Guardian on Sept 1, 2026 at Fal.Con — a new AIDR product built from its Pangea acquisition, delivering shadow-agent discovery, agent runtime visibility (prompt-to-action causal chain), agent access controls, runtime detection/response, an AI Gateway for MCP traffic, and native Next-Gen SIEM integration, all enforced at the endpoint across Windows/macOS plus cloud/SaaS/browser.
Why it matters
This creates a new enforcement category (runtime AIDR at the endpoint) leveraging CrowdStrike's hundreds of millions of deployed sensors — a major escalation from governance/posture tooling to actual blocking of malicious agent behavior at execution time.
Applicability
Enterprises already on Falcon should evaluate Guardian for agent inventory/containment now; broad relevance to any org running autonomous coding/computer-use agents on managed endpoints.