Falcon IQ and the QuiltWorks coalition
CrowdStrike Holdings Inc. launched Falcon IQ at the opening of its Fal.Con 2026 conference in Las Vegas, handing the assessment and remediation work behind its Project QuiltWorks coalition to a fleet of more than 50 artificial intelligence agents. The assessment work behind QuiltWorks had previously been manual, delivered as an expert-led services engagement sold on a 12-month subscription.
Falcon IQ runs on Falcon Foundry and Charlotte AI AgentWorks, the no-code agent-building tool CrowdStrike introduced at last year's Fal.Con, with Open Nemotron models from Nvidia Corp. sitting underneath to validate and rank code vulnerabilities before remediation in runtime. The prebuilt agents cover assessment, prioritization and remediation, and partners can build and tune their own agents on top for individual customers. "Falcon IQ changes the economics of securing frontier AI risk," said Daniel Bernard, chief business officer at CrowdStrike. "QuiltWorks proved the model, Falcon IQ advances it from manual to the speed of AI across the Falcon platform."
Falcon lands on Google Cloud and Snowflake Marketplace
CrowdStrike also used Fal.Con 2026 to announce that the Falcon platform is heading to Snowflake Marketplace, where Snowflake Inc. customers will be able to pay for it out of capacity they have already committed to. Separately, Falcon now runs on Google Cloud, extending the platform's deployment options beyond its existing footprint.
Project QuiltWorks, which launched in April, was built around software flaws that frontier AI models are surfacing faster than security teams can patch, with discovery work running on models from OpenAI Group PBC and Anthropic PBC. Accenture PLC, Ernst & Young Global Ltd., IBM Corp. and Kroll LLC signed up to handle remediation, Amazon Web Services Inc. joined in the July quarter to cover the cloud infrastructure layer, and cyber insurers cover the financial side.
QuiltWorks data sources and partner economics
QuiltWorks picked up a dozen new data sources at Fal.Con 2026, with telemetry from vendors including Zscaler Inc. and Rubrik Inc. now flowing into Falcon Next-Gen SIEM. CrowdStrike's pitch to delivery partners is volume: more engagements at lower cost as the assessment work moves inside the Falcon platform.
Falcon IQ correlates customer telemetry with CrowdStrike threat intelligence and findings from Falcon OverWatch, the company's managed threat hunting service, then maps what it surfaces against a services catalog the partner has loaded in. The output is an attack narrative, investment priorities and a remediation roadmap, with recommendations running in two directions: Falcon platform tuning and additional modules that could be switched on, and services from the partner's own catalog that match the exposure found. The customer-facing dashboard is co-branded, with the partner's name on the findings and remediation progress tracked there as it happens.
Other developments
Separately, an earnings preview for Snowflake Inc. (NYSE:SNOW) published the same day argued that Snowflake may be entering the second phase of the AI trade, where software starts monetizing the infrastructure boom, citing CoCo and CoWork as potential accelerators of migrations, workloads and platform consumption. The preview did not address the CrowdStrike Marketplace launch.
Share this article
