CrowdStrike Falcon Platform Expands With Snowflake

CrowdStrike Holdings (CRWD) expanded deployment and procurement options for its AI-native Falcon platform at Fal.Con 2026 on Aug. 31, introducing access through Snowflake Marketplace and availability on U.S. regional Google Cloud infrastructure. These moves follow the company’s report of record net new annual recurring revenue (ARR) and rising demand for AI-driven security modules.

Falcon Platform on Snowflake Marketplace and Google Cloud

CrowdStrike announced a collaboration with Snowflake to make the Falcon platform available through Snowflake Marketplace. Customers can apply pre-committed Snowflake capacity toward Falcon via the Marketplace Capacity Drawdown (MCD) program, enabling faster, more flexible procurement. The partnership aims to break down data silos and operationalize security data across platforms.

Key integrations include federated search, which surfaces Snowflake data within Falcon investigations without moving it; Falcon Next-Gen SIEM, which correlates Snowflake data with CrowdStrike and third-party telemetry; and Falcon Onum, which routes security telemetry to Snowflake and other destinations. These features are designed to simplify procurement, speed time to value, and enhance contextual detection and response.

Separately, CrowdStrike announced that the Falcon platform is now deployable on Google Cloud infrastructure, initially available on U.S. regional Google Cloud to support data locality and sovereignty preferences. The platform’s architecture centers on a single lightweight agent, console, and data layer across endpoints, identities, cloud, and data assets to protect AI agents and workloads. CrowdStrike plans to expand Falcon to additional Google Cloud regions to support in-region processing and compliance with localization requirements while reducing operational complexity.

Ecosystem Partnerships and AI-Driven Momentum

At Fal.Con 2026, CrowdStrike and CLEAR integrated CLEAR1 verified human identity into the Falcon platform, linking threat detection with high-assurance, person-based verification. This enables organizations to verify the human behind unusual activity by connecting device, human, and identity information. The integration is available to existing CrowdStrike and CLEAR1 customers.

CrowdStrike also launched Falcon IQ, tied to Project QuiltWorks, as an AI-driven tool that operationalizes QuiltWorks at machine speed. It leverages the CrowdStrike Security Cloud, indicators of attack, threat intelligence, and enriched telemetry to accelerate detection and response.

Cognizant and CrowdStrike expanded their collaboration with Cognizant Cybersecurity for Operational Technology, an OT security service powered by Falcon for XIoT. This service protects critical operations across converged OT-IT environments by integrating Falcon’s real-time indicators, threat intelligence, and telemetry to deliver automated protection and remediation.

RapidFort announced integration with Falcon Cloud Security to accelerate container vulnerability remediation in Kubernetes by ingesting Falcon vulnerability and software bill of materials (SBOM) data to automate image hardening. SailPoint expanded its partnership to bring SecOps Identity Intelligence into Falcon Next-Gen SIEM, correlating identity governance and access context with endpoint, cloud, and other telemetry. SailPoint’s SecOps offering is available on the CrowdStrike Marketplace.

In its Q2 2027 earnings call on Aug. 26, CrowdStrike reported record net new ARR of $333 million, up 51.0% year-over-year, and ending ARR of $5.84 billion, up 25.0% year-over-year, with acceleration for the fourth consecutive quarter. Ending ARR from Flex accounts topped $2.29 billion, up 101.0% year-over-year. Flex-driven products—cloud, Next-Gen SIEM, and Next-Gen Identity—produced $2.1 billion in ending ARR, up 39.0% year-over-year. Cloud ARR exceeded $905 million, Next-Gen Identity grew 33.0%, and Next-Gen SIEM rose roughly 60.0% to nearly $700 million. Management said the AI-driven detection and response (AIDR) module’s ending ARR nearly tripled quarter-over-quarter as customers deployed more AI modules. The company raised FY27 net new ARR guidance to 34.0% year-over-year, implying roughly $1.4 billion of net new ARR and an uplift of about $116 million from its initial outlook. It guided Q3 net new ARR to $343–$347 million, citing a record pipeline and strong adoption of Falcon Flex and AI-driven modules. Management characterized Fal.Con as sold out and its largest pipeline-generation event of the year.

"The AI-native CrowdStrike Falcon® platform will be available through Snowflake Marketplace, enabling customers to apply pre-committed Snowflake capacity toward Falcon through the Marketplace Capacity Drawdown (MCD) program, and creating a faster, more flexible path to AI-native security," the company said in a press release.