What is Charlotte AI?
Charlotte AI is CrowdStrike's AI security assistant built into the Falcon platform. The vendor says it uses a multi-agent design with generative AI to answer questions, triage detections, prioritize exposure, analyze malware and draft reports from Falcon data, and it is used through the Falcon console.
Who it's for
Security operations teams that already run CrowdStrike Falcon and want help with triage, investigations and workflow automation. The vendor also says non-expert users can operate the platform without learning documentation or script languages.
Pros & cons
Strengths
- CrowdStrike lists prebuilt agents (for example Detection Triage, Response and Workflow Generation) plus conversational questions, promptbooks and conversion of questions into Real Time Response scripts.
- CrowdStrike says AgentWorks lets users build custom agents without code, choose the model, set which actions run automatically versus need approval, and use role-based permissions, execution traces, audit logs, credit caps and version rollback.
- CrowdStrike says Agentic SOAR combines agent reasoning with deterministic workflows, connects to other tools and agents through bidirectional MCP, and supports custom apps built with Falcon Foundry.
- CrowdStrike says answers trace back to the underlying data, users see only what their existing permissions allow, and prebuilt agents by default only produce information, summaries and recommendations; actions that change the environment need explicit configuration and approval.
- CrowdStrike states Charlotte AI is certified under ISO/IEC 42001:2023 (AI governance).
- The vendor says the AI is trained on CrowdStrike analysts' decisions, and the datasheet says its LLMs are not trained on personally identifiable information (PII).
Limitations
- No Charlotte AI price is published. The FAQ and the Falcon pricing page do not say which Falcon plan includes it or list a per-credit rate; for additional credits the offer page says to contact CrowdStrike.
- The free-credit offer is for eligible customers only: the offer page lists those licensing Falcon Insight XDR, Falcon Adversary Intelligence Premium, Falcon Counter Adversary Operations Elite, or paid Falcon Next-Gen SIEM ingestion, and only a Falcon Administrator can opt in. It gives 50 credits a month; the page states no end date and does not say whether unused credits carry over.
- Some features depend on other subscriptions: the datasheet says Charlotte AI for IT needs a Falcon for IT subscription and Incident Workbench needs Falcon Insight XDR.
- The pages read do not state data retention, data residency or whether customer data is used to train models, and they do not name the underlying models or hosting.
- The vendor's pages differ on cost: the datasheet promises pricing that 'won't surge with bursts in usage', while the FAQ and product page describe credit caps that control agent consumption. Confirm which applies to your contract.
Plans and pricing
- Included credits (eligible customers): 50 AI credits a month. Opt-in from the Falcon console by a Falcon Administrator, for customers with a qualifying license. Covers prebuilt agents and AgentWorks; the vendor says it can cover hundreds of prompts or agent interactions. Not a standalone free plan.
- Additional credits / paid use: Contact sales. No public price or credit rate found. Sold with the Falcon platform, including Agentic SOAR.
Read from the official FAQ, product page, free-credits offer page, datasheet and Falcon pricing page. The Falcon pricing page lists Go, Pro and Enterprise per device (for example Falcon Enterprise at $184.99 per device billed annually, or $19.99 per device monthly) but does not mention Charlotte AI or AI credits, so those prices are not a Charlotte AI price. Confirm on the live pricing page or with CrowdStrike sales.
Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗
Sources
This profile was compiled from these public pages. We have not run hands-on tests.
Charlotte AI — at a glance
Charlotte AI is CrowdStrike's AI security assistant built into the Falcon platform. The vendor says it uses a multi-agent design with generative AI to answer questions, triage detections, prioritize exposure, analyze malware and draft reports from Falcon data, and it is used through the Falcon console.
Try Charlotte AI →