CrowdStrike Charlotte AI

CrowdStrike Charlotte AI brings conversational AI to enterprise cybersecurity operations, letting security analysts interact with the Falcon platform using natural language rather than complex query languages.

## What Charlotte AI Does

Charlotte AI acts as an AI analyst that can answer questions like: "What happened in this alert? What did the attacker do?" or "Are there other machines affected by this threat?" It understands the full context of your CrowdStrike environment — active threats, device inventory, vulnerability status — and returns answers in plain English with supporting evidence.

## Guided Triage and Investigation

Security analysts spend the majority of their time triaging alerts — most of which turn out to be false positives. Charlotte AI dramatically accelerates triage by auto-summarizing alert context, explaining why an indicator triggered, and recommending immediate response actions. Analysts can investigate complex incidents in minutes rather than hours.

## Threat Intelligence Integration

Charlotte AI connects to CrowdStrike's threat intelligence database (one of the most comprehensive in the industry, covering 230+ adversary groups). It can explain who is behind a specific attack pattern, what industries they typically target, and what their known TTPs (tactics, techniques, and procedures) are — giving analysts adversary-specific context during investigation.

## Vulnerability Prioritization

Charlotte AI helps security teams prioritize which CVEs to patch first based on active exploitation in the wild, asset criticality, and attack surface. Instead of patching 1,000 CVEs in order of CVSS score, teams can ask "What are the most urgent vulnerabilities for our environment right now?" and get a prioritized, justified answer.

## Workflow Automation

Charlotte AI can initiate response actions — quarantine an endpoint, block a hash, run a real-time query across the fleet — directly from the conversational interface. Investigation and response happen in one flow rather than switching between tools.

## Availability

Charlotte AI is available to CrowdStrike Falcon customers as an add-on module. Pricing is enterprise (custom quote based on seats and modules).