CrowdStrike Holdings, Inc. Class A Common Stock Fal.Con Day 2

Morning, Stockholm. Welcome to day 2. I hope everyone had a great first day yesterday. I hope you all got a chance to head over to the expo hall or got a chance to walk around. I kind of realized that this AI thing is a bit of a big deal, huh? There is a lot of AI everywhere, and it is obviously something that I am going to be talking a lot about. Here is the thing, there is a reason why AI is dominating every conversation, and there is a reason why you are seeing it all over social media. We are watching the biggest technology transformation of our generation unfold right in front of our eyes. Every major shift in technology forces a security transformation. Cloud did it. Mobile did it. The internet did it. AI will dwarf them all.

That creates an extraordinary opportunity for businesses, an opportunity for defenders, for all of us. Unfortunately, it creates incredible opportunity for the adversary. You heard this yesterday. I believe we crossed the line. In the last few weeks, we have seen something fundamentally change. Agents have escaped evaluation environments. They have discovered vulnerabilities. They have moved across systems. They have compromised infrastructure they were never supposed to touch. We crossed a line. It is a big thing to say, but I think it is the right thing to say. We have seen AI agents pursue an objective, encounter an obstacle, change their approach, and keep going straight through. Adam is going to talk to you a lot today about how we are seeing AI used to orchestrate attacks against real-world targets. Think about what has changed. The software we use has become an actor. For decades, software did what we programmed it to do.

Now, software can decide how to accomplish a goal. It has moved from execution to agency. Think about that concept. That changes cybersecurity. The question is no longer can AI conduct a sophisticated cyber attack? We know it can. We have seen that. We have talked about it. The question now really becomes what happens when millions of AI agents can act, and sometimes together, at machine speed on both sides? Software has agency. Think about that concept. Are we, as defenders, ready for that? Because this is bigger than cybersecurity. Every company, every employee, every developer, every attacker is using AI. There is not a person in this room that is online that is not using AI. But AI is different from every computing revolution that came before it. The PC changed where we compute. The internet changed how we connect, how we communicate. Mobile changed where we work.

Cloud changed where applications run. AI changes who or what can act, and that changes something more fundamental. AI changes how we trust. A couple of big topics for the morning here. It also changes just everything about how we think about what we have spent years protecting. Applications, devices, identities, infrastructure, data, those things all still matter. Of course, they do. They always will. AI is changing every one of them. There is not a single thing on that slide that is not being changed. Many of you are already writing code with AI. Your coworkers are using enterprise and public models. You are deploying agents with access to your systems and your data. They are touching your identity. Cloud workloads are more dynamic than ever, and human and non-human identities are multiplying faster than anyone can govern them. Here is the thing, AI is part of the enterprise.

The business is driving it. The business is wanting it. Everybody is adopting it. The enterprise is not simply using AI anymore. AI is part of the enterprise. Once AI becomes part of the enterprise, it becomes part of what we have to defend. We all understand that, but it is also now changing how we defend. The speed of innovation, the speed of exploitation, we are going to talk a lot more about that in Adam Meyers' session. Those two numbers coming closer together. While we are thinking about regulation, we are thinking about privacy, you have AI lawyers. The adversary does not care. They are not waiting. They are using it for reconnaissance, for vulnerability research, exploit development, social engineering. The agent breakout that we discussed yesterday, think about that. This is not what AI might do in the future. This is not pondering about what is going to happen at Black Hat in five years.

This is what it did on its own. That debate is now over. The question is not whether AI changes cybersecurity. It is about who uses it better, and it is a very simple question. Do you use it better, or does the adversary use it better? Very simple. When we start to think about how this all works, you are the adversary, and we start to think about where this is all going to play out, it gets answered on the endpoint, on your agents. This is where we start to talk about AI Detection and Response. Let us talk a little bit about AI governance. Organizations heavily investing in it, discovery, posture, policy, compliance, those things all matter. Of course they are. I am not going to tell you they do not. They all answer one question, what could happen?

The question that I want answered, the question that I want to answer with you all is what is happening right now, because AI does not necessarily run on simple policy, it executes at runtime. Tool calls happen at runtime. Threats unfold at runtime. We have seen this before. We know this story. The internet created network security. The endpoint created EDR. The cloud created cloud security. Just like EDR secured the endpoint at runtime, AI needs its own runtime category. We call that AI Detection and Response. Here is the fundamental change. AI agents do not just generate answers, they take action. We have talked about this. The architecture goes well beyond just agents. You have models, you have identities, you have data, you have applications, there is infrastructure. All of this has to be protected.

You need to secure how AI is built, how it is accessed, how it behaves, what it is allowed to do at runtime. This requires a totally different category. AIDR brings this all together, discovery, posture, identity, data protection, runtime guardrails and response across SaaS, endpoint, cloud. This is not just another security product. I talked about this. EDR defined how we secured the endpoint, AIDR defines how we secure the AI estate. Guardian is how CrowdStrike delivers it. George introduced this yesterday, incredibly proud to see this announcement. The product went live at the very minute George put that slide up, which is absolutely fantastic. I want to show you why it matters. Because once AI becomes part of the enterprise, visibility is no longer enough. You need to know what is running, what it can access, what it is doing, where to draw the line.

That is Guardian. It gives you runtime visibility across the entire AI estate, what your agents are doing, what they are accessing, what actions they are taking, whether you know about it or not, and where you need to step in, importantly, before something goes wrong. We know everybody is talking about securing AI. The industry is talking about it. When we talk about Guardian, what is really, really exciting about this is we have been running this inside CrowdStrike for some time. We have people in this room that have been running this for some time. We want our people at CrowdStrike building with AI. We do not want to slow that down. We want to use the power, the benefit, the advantages that comes, but we need to know what everybody is doing. We need to know what every agent is doing, where it is deployed, and who is using it.

We want to set the rules for what people can use and what it can do. That is what we use it for. Let me show you how it works. Incredibly proud to show you a big demo. Roll the demo of Guardian.