CrowdStrike’s 2026 Las Vegas Fal.Con event unveiled new integrations linking its security workflows with data protection vendors Commvault and Rubrik, alongside AI storage provider VAST Data.
Commvault and Rubrik now feature API‑level connectors tied to CrowdStrike’s AI security orchestration engine, Charlotte Agentic SOAR. Traditionally, their data protection workflows triggered on detecting cybersecurity threats; the new integration enables Charlotte Agentic SOAR to initiate these defensive and recovery actions automatically. In contrast, VAST Data’s collaboration operates at a lower foundational Falcon platform layer, independent of Charlotte’s agentic orchestration.
Commvault Integration
Charlotte Agentic SOAR can trigger Commvault’s cyber recovery workflows upon threat detection, locking backup systems to prevent deletion or overwriting of critical recovery points. It also restores compromised assets into Commvault’s isolated Cleanroom environment for safe forensic analysis without disrupting production workloads.
As CrowdStrike’s next‑gen security orchestration layer for agentic SOC operations, Charlotte Agentic SOAR merges conventional SOAR automation with Charlotte AI‑driven intelligent agents. Unlike rigid static playbooks, its context‑aware agents adapt dynamically while retaining structured workflow governance for consistent, auditable security operations.
Commvault Field CTO Vidya Shankaran stated the joint integration embeds Commvault’s cyber recovery capabilities natively within CrowdStrike security workflows, cutting manual handoffs and accelerating threat investigation and response. The purpose‑built connector restricts unauthorized backup modifications during active incidents, suspends data aging policies to preserve clean recovery points, and streamlines cross‑team collaboration between security and recovery teams.
This partnership builds on prior collaborations, including Commvault’s AI anomaly alert integration with CrowdStrike SIEM and earlier XDR threat detection integrations. Commvault is a Platinum sponsor of Fal.Con 2026.
Rubrik Integration
CrowdStrike and Rubrik launched closed‑loop agentic identity resilience workflows to address identity‑based threats at machine speed. Orchestrated via Charlotte Agentic SOAR, the unified workflow combines Falcon’s real‑time identity threat detection with Rubrik’s automated identity and data protection, shrinking incident recovery from days to hours.
CrowdStrike Chief Business Officer Daniel Bernard noted agentic workflow integration enables faster containment and remediation of identity breaches. Rubrik Chief Product Officer Anneka Gupta emphasized automated intelligent defenses are essential to counter fast‑evolving AI threats, replacing ineffective manual response processes.
The integrated workflow detects and contains malicious activity, correlates threat signals with identity logs, scans HR and IGA datasets for backup risks, and enables precise remediation including Active Directory rollbacks and malicious file removal with minimal manual intervention. This expands Rubrik’s existing integrations with CrowdStrike’s SIEM, identity security and threat intelligence tools. Rubrik is a Premier Fal.Con 2026 sponsor.
VAST Data Integration
VAST Data’s AI Operating System natively supports CrowdStrike Falcon sensors, embedding end‑to‑end security across AI infrastructure, datasets and pipeline workflows. VAST’s audit telemetry integrates with Falcon Next‑Gen SIEM, unifying data access visibility and CrowdStrike threat intelligence to identify anomalous behavior and full‑scope threat activity.
The integration paves the way for upcoming Falcon Guardian AI Detection and Response (AIDR) capabilities, which will pair with VAST’s InsightEngine to secure AI data preparation pipelines. It detects prompt injection, jailbreak attempts and other malicious activity, mitigating risks in AI training data and operational workflows.
VAST Data CEO Renen Hallak stressed AI security must span infrastructure, data movement and application interactions. The joint architecture builds security into the foundational AI stack rather than layering it on post‑deployment. VAST Data is a Gold Fal.Con 2026 sponsor.
Industry Observation
Notably, Silver‑level Fal.Con sponsor Cohesity lacks a Charlotte Agentic SOAR integration, despite existing one‑way security signal integrations with CrowdStrike. Veeam also trails peers with only unilateral event forwarding to CrowdStrike platforms. Further agentic‑level integrations for both vendors are widely expected in the near term.
Availability Status
The Commvault‑Charlotte Agentic SOAR integration is generally available for joint customers. The Rubrik agentic identity resilience workflow has no confirmed release date. VAST’s native Falcon sensor support is currently certified and available, while its SIEM and Falcon Guardian integrations remain in private preview.
Beijing Qianxing Jietong Technology Co., Ltd.
Sandy Yang/Global Strategy Director
WhatsApp / WeChat: +86 13426366826
Email: yangyd@qianxingdata.com
Website: www.qianxingdata.com/www.storagesserver.com
Business Focus:
ICT Product Distribution/System Integration & Services/Infrastructure Solutions
With 20+ years of IT distribution experience, we partner with leading global brands to deliver reliable products and professional services.
“Using Technology to Build an Intelligent World”Your Trusted ICT Product Service Provider!
Vietnamese
