CrowdStrike Falcon boosts AWS security with faster AI incident response

CrowdStrike and Amazon Web Services (AWS) have announced the launch of Falcon for AWS Security Incident Response, a new programme allowing AWS customers to access the CrowdStrike Falcon cybersecurity platform at preferred rates via the AWS Marketplace.

The initiative is designed to assist organisations in responding to cloud security incidents more quickly while aiming to lower risk and strengthen their overall security stance through simplified access and integration, without requiring a separate procurement process.

Response speed

The backdrop of this announcement is an environment where cyberattacks have grown more frequent and complex, outpacing the capabilities of traditional response methods, particularly in dynamically shifting cloud environments. The Falcon platform, which is AI-driven, reportedly enables organisations to detect significantly more threats in less time. According to company data, organisations using the Falcon platform can detect 96% more threats twice as fast and investigate incidents 66% more quickly, aiding efforts to prevent breaches.

The Falcon platform is positioned as a complement to AWS Security Incident Response's automated triage and investigation capabilities. Together, the companies state, customers can address the entire lifecycle of a security incident, from detection through to resolution. The integration is built to take advantage of AWS infrastructure, offering what is described as a secure, reliable, and highly available environment for joint customers.

Customer access

"Speed is everything in cybersecurity. When cloud intrusions spread at ever-accelerating speeds, organisations can't afford to wait hours – or days – for help," said Daniel Bernard, Chief Business Officer at CrowdStrike. "Falcon for AWS Security Incident Response puts the proven protection of the Falcon platform into the hands of AWS customers the moment they need it – making AI-powered incident response faster, smarter, and more accessible than ever."

With this programme, AWS Security Incident Response customers receive access to the Falcon platform at optimised rates directly through the AWS Marketplace. This move is expected to facilitate cost savings and streamline the procurement process by allowing customers to manage everything within the AWS environment they already use. CrowdStrike states it is committed to helping AWS customers maximise the return on their cloud security investments through this streamlined approach.

CrowdStrike's offerings have received the designation of being "Deployed on AWS", verifying their availability and compatibility through the AWS Marketplace. This development further supports customers in deploying cybersecurity capabilities alongside the established security and operational practices of AWS.

Industry perspective

"In the evolving threat landscape, cloud security needs to be powerful, practical, and properly priced," said Hart Rossman, Director of Security Incident Response at AWS. "Falcon for AWS Security Incident Response checks all three boxes – integrating CrowdStrike's AI-native Falcon platform with our enterprise-grade security services at optimized pricing through AWS Marketplace, creating exceptional value for our joint customers."

The Falcon platform is based on the CrowdStrike Security Cloud and incorporates artificial intelligence to interpret real-time indications of attacks, inform threat intelligence, and track adversarial tactics. According to CrowdStrike, the platform is purpose-built for cloud deployment and uses a single, lightweight agent, which is aimed at simplifying and speeding up deployment across multiple environments while reducing overall security complexity.

The company highlights that this new approach to delivering Falcon to AWS customers is part of a broader commitment to support organisations in protecting data, workloads, and identities in increasingly distributed cloud computing landscapes.

Procurement and deployment

The bundled offer is managed through a customer's existing AWS procurement channel, removing the need for additional processes or systems to adopt extended cybersecurity protection. This not only supports operational efficiency but is also intended to make incident response and threat investigations more accessible at times of need.

The availability of the Falcon platform in the AWS Marketplace is highlighted by CrowdStrike as providing more straightforward access for customers, as well as the opportunity to leverage the AWS infrastructure's security protocols, reliability, and operational protocols.

This announcement underscores the growing trend towards integrating third-party security tools with cloud provider services as organisations continue to transition more critical workloads and sensitive data to cloud environments.