CrowdStrike has introduced Continuous Identity for AI Agents, a new capability within the CrowdStrike Falcon Next-Gen Identity Security platform designed to secure the agentic enterprise. Announced at Identiverse 2026, the solution addresses the security risks posed by AI agents operating with superhuman speed and system-level access. It replaces legacy static policies and standing privileges with continuous, risk-aware enforcement, authorizing every agent action based on ownership, caller identity, and real-time risk.

The new model dynamically grants, denies, and revokes access based on real-time risk signals, eliminating standing privileges entirely. This capability is powered by technology from CrowdStrike's recent acquisition of SGNL. It extends the company's risk-aware authorization across every identity—human, non-human, and AI agent—spanning on-premises, SaaS, browser, and cloud environments.

Securing AI Agent Identities

Continuous Identity for AI Agents provides several key features to control machine-speed operations:

• Verifiable Agent Identity: Every agent is assigned a cryptographically verifiable identity based on the SPIFFE standard, replacing static credentials like API keys with automated, secure workload identities.
• Context-Aware Authorization: Access is evaluated based on who owns the agent, who is calling it, and the risk posture of their device. Context is preserved when an agent delegates to a sub-agent.
• Zero Standing Privilege: Access is granted the moment it is needed and revoked the moment it is not.
• Defense in Depth: Falcon AI Detection and Response (AIDR) continuously inspects prompts and intent to detect permission misuse or manipulation attempts, triggering Continuous Identity to revoke access before damage occurs.

Technical Capabilities

The platform leverages native and third-party risk signals on the Falcon platform to evaluate authorization. This shift moves security away from point-in-time authorization, which CrowdStrike Chief Technology Officer Elia Zaitsev described as a liability in an autonomous environment. The company stated that "authorize once and trust indefinitely" is not a viable security model for AI agents.

CrowdStrike noted that any unreleased services or features referenced are still in development and subject to change.

CrowdStrike Holdings Inc. shares traded flat during Friday's premarket session at $691.00 as investors digested fresh third-party recognition for the company's cloud runtime security capabilities. Frost & Sullivan named the company the Growth and Innovation Leader in its 2026 Frost Radar: Cloud and Application Runtime Security report, marking the second consecutive year it secured the top spot and scored highest among all vendors evaluated. The recognition underscores a broader market shift from posture-centric cloud security toward runtime detection and response, a sector where CrowdStrike has expanded rapidly.

Key Report Findings

Frost & Sullivan highlighted CrowdStrike's "clear advantage" in cloud runtime security, which enables faster threat detection, investigation, prioritization, and remediation within existing SOC workflows. The report noted that the market is moving away from static posture tools toward real-time detection and response, directly benefiting CrowdStrike's Falcon platform. As the pioneer of Cloud Detection and Response (CDR), CrowdStrike's most differentiated capability is its real-time detection architecture, which reduces latency from minutes to seconds and enables automated cloud response actions.

Unified Architecture and AI Workloads

CrowdStrike unites posture management and detection and response in a single Cloud-Native Application Protection Platform (CNAPP). Its core value proposition is the ability to correlate telemetry across cloud infrastructure, workloads, identities, applications, data, and AI services. The report recognized that CrowdStrike's recent AI innovations reinforce its differentiation as a vendor connecting cloud risk, workload behavior, and AI workload exposure.

"Posture management surfaces risks. Runtime security stops breaches," said Elia Zaitsev, chief technology officer, CrowdStrike. "As adversaries weaponize frontier AI models to collapse the window between vulnerability and exploit, CrowdStrike delivers real-time protection at the point of execution, stopping breaches before impact."

Stock Performance and Technical Levels

The broader trend remains firmly bullish, with CrowdStrike trading 3.3% above its 20-day simple moving average at $671.11 and 28.8% above its 50-day simple moving average at $537.91. The stock shows significant separation from longer-term averages, sitting 44.4% above the 100-day simple moving average at $476.65 and 43.1% above the 200-day simple moving average at $482.89. While this distance signals strong trend control, it also raises the bar for follow-through as pullbacks can be sharper when price is extended.

Momentum indicators suggest cooling upside pressure. The Moving Average Convergence Divergence (MACD) is below its signal line with a negative histogram, pointing to reduced buying vigor compared to the prior upswing. The Relative Strength Index (RSI) indicates the stock is neither overbought nor oversold. A golden cross in May, when the 50-day simple moving average moved above the 200-day simple moving average, confirmed the longer-term uptrend following a February death cross. The stock remains below its 52-week peak of $785.66 but well above its 52-week low of $342.72.