CrowdStrike and IBM Expand Partnership to Accelerate Agentic SOC Transformation

Expanded strategic collaboration brings together Charlotte AI with IBM ATOM for coordinated, machine-speed response and integrates the Falcon platform with IBM Consulting’s managed security services and X-Force Cyber Range

CrowdStrike and IBM announced an expansion of their strategic collaboration to advance agentic SOC transformation.

Read More: ITTech Pulse Exclusive Interview with Dr. Petar Tsankov, Co-Founder and CEO of LatticeFlow AI

The expanded collaboration integrates CrowdStrike® Charlotte AI™ with IBM’s Autonomous Threat Operations Machine (ATOM), IBM’s autonomous SOC orchestration engine, for coordinated, machine-speed investigation and containment. It also extends the CrowdStrike Falcon® platform into IBM Consulting’s managed Threat Detection and Response services and global X-Force Cyber Range experiences, where the two companies will offer immersive cyber crisis simulations to help organizations prepare for emerging threats.

AI is accelerating the velocity of adversary operations and shrinking the defender’s window to respond. The average eCrime breakout time has dropped to 29 minutes, with the fastest observed in just 27 seconds, while attacks targeting public-facing applications are up 44% from the prior year, according to the CrowdStrike 2026 Global Threat Report and IBM’s 2026 X-Force Threat Intelligence Index. As threats move faster and expand across cloud environments, security teams need coordinated detection and containment at machine speed.

Within the SOC, IBM ATOM and Charlotte AI can now work together to analyze detections across endpoint, identity, and cloud environments, applying enterprise context to coordinate and execute containment decisions. Together, they streamline investigation and response to reduce manual handoffs and help teams act before threats spread.

“Enterprises trust IBM to advance their security programs,” said Daniel Bernard, chief business officer, CrowdStrike. “With Charlotte AI helping to deliver investigation, containment, and operational response, IBM’s autonomous threat operations machine (ATOM) and cyber threat management services are battle-ready to defend against modern threats.”

Read More: Build vs Buy: Should Enterprises Develop or License Domain-Specific Language Models?

“Organizations are under pressure to accelerate response without increasing complexity,” said Dave McGinnis, Vice President, Global Managed Security Services, IBM. “By combining IBM ATOM with CrowdStrike’s Charlotte AI and delivering managed Threat Detection and Response services and Cyber Range validation with the Falcon platform, we’re helping enterprises operationalize coordinated, AI-driven response in real-world environments.”

Together, CrowdStrike and IBM are leading agentic SOC transformation with a unified execution model for modern enterprises.

Write to us [⁠wasim.a@demandmediaagency.com] to learn more about our exclusive editorial packages and programmes.