CrowdStrike announced Flex for Services, Charlotte AI AgentWorks and expanded partnerships with Intel and IBM at RSA 2026 to support AI-driven security needs.
CrowdStrike announced several new offerings and partnerships at the RSA Conference 2026 in San Francisco. The updates include a flexible consumption model for its security services, a no-code platform for building custom security agents, and deepened technical integrations with Intel and IBM.
The company introduced Flex for Services, which extends its Falcon Flex licensing model to the full portfolio of security services. Organizations can access services such as threat hunting, red teaming, readiness assessments, AI advisory services and incident response through a pool of service hours that can be applied as requirements change. The model operates independently of Falcon platform subscriptions.
To lower the entry barrier for new customers, CrowdStrike is offering the Zero Dollar Flex Fund for a limited time. Qualifying new services customers receive 200 hours of CrowdStrike Services (160 hours of incident response and 40 hours of proactive services) with no upfront initiation cost.
CrowdStrike also launched the Charlotte AI AgentWorks Ecosystem together with partners including Accenture, AWS, Anthropic, Deloitte, Kroll, NVIDIA, OpenAI, Salesforce and Telefónica Tech. The platform allows security teams to build, test and deploy custom agents inside the Falcon platform without writing code. It integrates with multiple AI models and infrastructure services and includes Charlotte Agentic SOAR for orchestration and governance.
In a separate announcement, CrowdStrike expanded its collaboration with Intel. The partnership optimizes the Falcon platform for Intel-powered AI PCs, combining endpoint protection with Intel’s on-device AI acceleration, silicon-level telemetry and hardware-assisted recovery features.
CrowdStrike and IBM also expanded their strategic collaboration. Charlotte AI is now integrated with IBM’s Autonomous Threat Operations Machine (ATOM) for coordinated investigation and containment across endpoint, identity and cloud environments. The Falcon platform will be incorporated into IBM Consulting’s managed Threat Detection and Response services and the X-Force Cyber Range for simulation exercises.
The announcements were made on March 24 and 25, 2026, in Austin and San Francisco.
Dr. Jakob Jung is Editor-in-Chief of Security Storage and Channel Germany. He has been working in IT journalism for more than 20 years. His career includes Computer Reseller News, Heise Resale, Informationweek, Techtarget (storage and data center) and ChannelBiz. He also freelances for numerous IT publications, including Computerwoche, Channelpartner, IT-Business, Storage-Insider and ZDnet. His main topics are channel, storage, security, data center, ERP and CRM.
Contact via Mail: jakob.jung@security-storage-und-channel-germany.de