CrowdStrike adds AI Kill Switch to Falcon Guardian

CrowdStrike announced in a press release an AI Kill Switch for stopping rogue or misbehaving AI agents through Falcon Guardian. The feature lets an authorized administrator terminate an agent, block it from launching again on selected hosts and remove its access to the enterprise network.

Falcon Guardian uses the Falcon sensor to track what an agent is instructed to do, what it communicates and what it executes. The kill function first stops agents at the AI Gateway, with endpoint termination planned for a future release.

The AI Kill Switch is available now, and each administrator action is recorded in an audit trail. Everpure CISO Rick Orloff said it gives his security team "the final say" if an agent goes off course.

CrowdStrike also made its AI Gateway generally available as part of Guardian and added agent-level hooks for tools including Claude Code, OpenAI Codex, GitHub Copilot and Cursor. Endpoint network inspection is now generally available on Windows. The company said its planned acquisition of Fiddler AI will add agent observability.