CrowdStrike Charlotte AI
Generative AI security analyst answering security questions in natural language within Falcon platform
Overview
Charlotte AI is CrowdStrike's generative AI assistant, embedded in the Falcon platform. It lets security analysts ask natural-language questions ('Which endpoints are vulnerable to this CVE?') and get answers backed by real-time telemetry from your environment. The AI orchestrates autonomous SOAR workflows (Agentic SOAR) to triage alerts and launch remediations without manual work.
Charlotte AI is trained on decisions from expert SOC analysts and improves continuously. It comes in three tiers (Starter, Professional, Enterprise) for security teams already using CrowdStrike Falcon who want to amplify productivity without headcount increases.
Our verdict
Charlotte AI excels if you're already a CrowdStrike Falcon customer: it transforms the platform into a formidable security copilot. Outside the Falcon ecosystem, it adds no value. For SMEs without a dedicated SOC, the overall investment in Falcon plus Charlotte remains out of reach; consider managed MDR solutions instead.