As cyber threats grow more sophisticated and faster to execute, organizations are increasingly under pressure to modernize their security operations. In response, CrowdStrike and IBM have announced an expanded strategic collaboration to accelerate agentic Security Operations Center (SOC) transformation.
With this expansion, both companies are integrating CrowdStrike® Charlotte AI™ with IBM’s Autonomous Threat Operations Machine (ATOM), creating a unified approach to security operations. As a result, organizations can now benefit from coordinated, machine-speed investigation and containment, enabling faster and more efficient responses to evolving cyber threats.
Addressing the Need for Machine-Speed Security
As AI continues to accelerate the speed and scale of cyberattacks, traditional security operations are struggling to keep up. For instance, the average eCrime breakout time has dropped to just 29 minutes, with some attacks occurring in as little as 27 seconds. At the same time, attacks targeting public-facing applications have increased by 44% year-over-year. Therefore, security teams must adopt faster, more automated approaches to detection and response.
To address this challenge, the integration of IBM ATOM with Charlotte AI enables real-time analysis across endpoint, identity, and cloud environments. Moreover, the combined solution applies enterprise context to automatically coordinate and execute containment decisions. Consequently, organizations can reduce manual intervention and respond to threats before they escalate.
Enhancing SOC Efficiency and Automation
In addition to improving response speed, this collaboration significantly enhances operational efficiency within the SOC. By streamlining investigation workflows and minimizing manual handoffs, the joint solution allows security teams to focus on higher-value tasks. Furthermore, it ensures that threat detection and response processes remain consistent and scalable across complex environments.
“Enterprises trust IBM to advance their security programs,” said Daniel Bernard, chief business officer, CrowdStrike. “With Charlotte AI helping to deliver investigation, containment, and operational response, IBM’s autonomous threat operations machine (ATOM) and cyber threat management services are battle-ready to defend against modern threats.”
Expanding Capabilities Across Services and Training
Beyond technology integration, the partnership also extends the CrowdStrike Falcon platform into IBM Consulting’s managed Threat Detection and Response services. This expansion enables organizations to leverage advanced AI-driven capabilities within fully managed security operations.
Additionally, both companies are enhancing their collaboration through immersive training experiences. By integrating their solutions into IBM’s global X-Force Cyber Range, they will offer realistic cyber crisis simulations. These simulations help organizations prepare for emerging threats by testing their response strategies in controlled, high-pressure environments.
“Organizations are under pressure to accelerate response without increasing complexity,” said Dave McGinnis, Vice President, Global Managed Security Services, IBM. “By combining IBM ATOM with CrowdStrike’s Charlotte AI and delivering managed Threat Detection and Response services and Cyber Range validation with the Falcon platform, we’re helping enterprises operationalize coordinated, AI-driven response in real-world environments.”
Driving the Future of Agentic SOC
Ultimately, this expanded partnership reflects a broader industry shift toward agentic, AI-driven security operations. By combining their strengths, CrowdStrike and IBM are enabling organizations to adopt a unified execution model that supports faster detection, automated response, and improved resilience.
As cyber threats continue to evolve, this collaboration positions both companies at the forefront of SOC innovation helping enterprises stay ahead of attackers while reducing complexity and enhancing overall security performance.
Recommended Cyber Technology News:
- Mazda Data Breach Exposes Employee and Partner Data
- Sumo Logic Expands SOC AI Agent with Remediation Recommendations
- Tycoon2FA Phishing Service Resumes After Takedown
To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com
