CrowdStrike / crowdstrike.com
AI cybersecurity assistant embedded in the CrowdStrike Falcon platform enabling natural language threat investigation and automated response recommendations for 29,000+ Falcon customers.
Free plan
No
API access
No
Open source
No
Platforms
1
Charlotte AI is embedded in Falcon, the leading EDR platform used by 29,000+ organisations, allowing analysts to ask plain English questions about their environment — translating queries into appropriate Falcon detection logic. Threat investigation assistance helps less experienced analysts work at the level of experts, guided by CrowdStrike's proprietary OverWatch threat intelligence. Charlotte is accessible within existing Falcon workflows without new tool adoption.
CrowdStrike Charlotte AI runs as llm assistant software built around text workflows. Users typically start with a prompt, upload, or connected data source, and the underlying model handles the heavy lifting before returning a result you can refine or export. It's available on web (falcon platform).
The capabilities that matter most for teams evaluating CrowdStrike Charlotte AI.
Translates plain English security questions into Falcon queries, accessible without deep query language expertise.
Guides analysts through incident investigation with explanations, next steps, and remediation recommendations.
Responses grounded in CrowdStrike's proprietary threat intelligence from OverWatch and global Falcon telemetry.
Enterprise pricing bundled with CrowdStrike Falcon platform. Included in Falcon Flex subscription.
Model
Enterprise
Starting price
Free
Free trial
No
Microsoft Security Copilot provides broader multi-product security AI. Darktrace provides autonomous AI detection across non-EDR environments.
A side-by-side look at the closest alternative in this category.
CrowdStrike Charlotte AI
CrowdStrike
Microsoft Security Copilot
Microsoft
Key facts about model providers, platforms, and team support.
Model Provider
CrowdStrike, OpenAI
Platforms
Web (Falcon Platform)
Deployment
SaaS
Integrations
CrowdStrike Falcon platform (all modules)
Team Collaboration
Yes
Launch Year
2023
Compliance signals and data-handling notes as reported by the vendor.
CrowdStrike enterprise security. SOC 2 Type II. ISO 27001. FedRAMP authorised. Customer security data processed within Falcon's secure environment.
Security telemetry processed within CrowdStrike's Falcon platform boundary.
Editorial Verdict
Charlotte AI is the right security AI tool for CrowdStrike Falcon customers wanting natural language investigation within their existing endpoint security workflow.
Last verified July 24, 2026.
Enterprise pricing bundled with CrowdStrike Falcon platform. Included in Falcon Flex subscription.
$4/Security Compute Unit (SCU) per hour. Scales with workload. Requires Microsoft Entra account and Microsoft security product subscriptions.
CrowdStrike Falcon platform (all modules)
CrowdStrike enterprise security. SOC 2 Type II. ISO 27001. FedRAMP authorised. Customer security data processed within Falcon's secure environment.
Microsoft enterprise security. SOC 2 Type II. ISO 27001. FedRAMP authorised. Customer security data processed within Microsoft's compliance boundary.
Security telemetry processed within CrowdStrike's Falcon platform boundary.
Security investigation data processed within Microsoft's enterprise security boundary. Customer data not used to train Microsoft AI models.
Verified reviews from signed-in users, stored in the backend and averaged into this tool's rating.
Sign in to rate CrowdStrike Charlotte AI and leave a review.
No other reviews yet — be the first to share how this tool performs in practice.
