The vendor that watches your agents has announced it will issue their identities

You cannot continuously authorize an identity you were never able to establish, and traditional identity providers break the moment an agent acts on its own.

The release that introduced the identity provider states no general availability date, and it carries a caveat worth holding beside every capability the platform claims: "Any unreleased services or features referenced here are still in development and subject to change. Customers should make their purchase decisions based upon features that are currently available." It introduced the runtime control and the identity provider on consecutive days in September 2026, then signed definitive agreements on 3 November 2026 to buy the company whose product attacks AI models before deployment and the company whose product traces what an agent decided. Both acquisitions are expected to close during CrowdStrike's fourth quarter of fiscal 2027, which ends on 31 January 2027, and both resulting products are slated to be generally available in that quarter. That leaves 87 days for any organisation whose endpoint renewal falls inside the window to decide whether an agent's identity stays with the directory its identity team already runs or becomes one more module on the security contract. It reaches you if your agents act through credentials the security platform already sees, or if your audit committee has started asking who can prove what an agent did.

01The sensor that watches the agent is the authority that enrols it

Falcon Guardian, introduced on 1 September 2026, is sold on the claim that the endpoint is where enforcement can actually happen: the release describes "complete visibility and runtime enforcement from the endpoint, where AI agents execute", and states that "Deployed across hundreds of millions of devices, CrowdStrike has more endpoint real estate than anyone. That structural advantage now defines AI agent security." Its first listed capability is an inventory: "The Falcon sensor discovers known and shadow AI agents across Windows and macOS, providing a live inventory of every running and dormant agent across the enterprise, who deployed it, and its security status."

The identity provider followed one day later, and it begins where the sensor stops. "Automatic Registration: Falcon Guardian discovers every AI agent across the enterprise, and Agentic IdP registers each one the moment it comes online under a single authoritative directory." Each agent is then issued "a cryptographically verifiable identity that cannot be spoofed or shared", and runs on "short-lived, tightly-scoped" tokens because "Agents are never given standing credentials of their own." An agent the sensor does not see is an agent the directory does not enrol: the releases describe discovery on the endpoint and registration on discovery, and neither describes enrolling an agent found by anything else.

Identity is the part CrowdStrike bought rather than partnered for. On 8 January 2026 it "signed a definitive agreement to acquire SGNL, a leader in Continuous Identity", to grant and revoke access "for human, non-human (NHI), and AI identities". The continuous authorization it announced on 15 June 2026 was, in its own words, "powered by technology from CrowdStrike's recent acquisition of SGNL", and assigns each agent an identity "based on the SPIFFE standard". In that architecture the credential is issued by the security platform, not by the directory the enterprise already operates, and the identity provider describes itself as "establishing Falcon Next-Gen Identity Security as the identity control plane for the agentic enterprise".

The model vendors are already inside it. The two companies announced on 2 September 2026 that the "New collaboration secures Codex agents with Falcon Guardian", with the security vendor controlling "Codex agent activity at runtime". OpenAI supplies the coding agent; the security platform decides whether it may act.

02The price is per device, so agents cost nothing and appear nowhere

On the only price list CrowdStrike publishes, three bundles carry per-device monthly rates: Falcon Go at $7.99, Falcon Pro at $14.99 and Falcon Enterprise at $19.99. Identity is not one of them. "Even more add-on modules available, such as Next-Gen Identity Security and Next-Gen SIEM", the page says, and it publishes no rate for any add-on. So the arithmetic a buyer can do runs in one direction only: agent identity scales with the number of endpoints under contract, not with the number of agents running on them, and it arrives without a published rate that a competing bid could be held to.

Module count is the number that explains the shopping list. On 31 July 2026, 51 per cent of CrowdStrike's subscription customers ran six or more modules, 35 per cent ran seven or more and 26 per cent ran eight or more, and $2.29bn of ending ARR sat in accounts on Falcon Flex, the consumption model that lets a customer swap modules annually. Runtime control, identity issuance, pre-deployment testing and the behavioural record arrive as attachments to a contract those customers have already signed, which is why the identity provider can be given away inside a platform that is priced per device.

03The test and the record both land in the quarter the renewal is signed

Dreadnode is the half that runs before anything is deployed. The release of 3 November 2026 says its testing "runs more than 100 known AI attack strategies" against "the models, agent reasoning loops, applications, and MCP servers that power enterprise AI", maps findings to OWASP, MITRE ATLAS and NIST AI RMF, and closes the loop: "Dreadnode findings will feed Falcon Guardian as policy recommendations, so a weakness found in testing strengthens runtime protection." A flaw found in a test becomes a rule enforced at runtime, on the same platform, without leaving it.

Fiddler is the half that answers the question afterwards, and CrowdStrike has written down who is asking. "When a regulator or your board asks what an agent did, saying 'the model did it' is not an answer," said George Kurtz, chief executive. "Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why." The feature list under it is blunter still: "Auditable Governance: Track agent decisions and actions across first-party, third-party, and coding agents, providing evidence for compliance and audits."

Read those two paragraphs together and the exposure appears. The supplier that stopped the agent at runtime, and whose identity provider decided whether the agent could run at all, is the supplier of the evidence about what the agent did. The release does not describe the record leaving the platform; it files it under "Unified Falcon Telemetry: Correlate agent behavior with Falcon identity, cloud, and runtime intelligence", which is a description of where the correlation happens rather than of what the customer can take away. For a buyer, the difference between a record and a vendor feature is an export clause, a retention period and a named custodian, and the Fiddler release describes none of the three.

04The standalone alternative controls the data and not the credential

The counterweight is real and it is smaller than the platform. Sentra announced on 4 November 2026 that "Capital One Ventures has led a strategic capital investment of $150 million in the company", after what its release calls more than 300 per cent year-over-year growth. Its own statement of the problem is the clearest one anybody has published: "Each agent is a new identity, accessing data continuously and at machine speed, with no central control plane." What the release does not claim is the endpoint. Sentra puts its control on data at rest and on what reaches it, while enrolment in CrowdStrike's directory begins with an agent the sensor has already found, and that is the whole distance between a funded challenger and an installed base.

05What each seat signs, and by when

• CISO: put agent identity on the renewal as a named module with its own price and its own export clause, rather than accepting it as an add-on inside a bundle. CrowdStrike publishes per-device rates for three bundles and no rate for Next-Gen Identity Security, so there is no list price to check a quote against and the quote is the only place the number will ever appear. Before the endpoint contract is signed, and in any case ahead of 31 January 2027.
• CIO, with the identity architect: write down which directory issues an agent's credential, and which of the two the credential dies with if the security contract ends. The identity provider registers every agent the Falcon sensor discovers, so the enrolment authority follows the sensor rather than the directory, and that is a different exit from the one the identity team has been managing for a decade. By 31 January 2027, ahead of the first renewal that can carry the module.
• General Counsel, with the audit committee: require that the behavioural record be producible by the company to an auditor without the supplier's cooperation, and get the retention period and the custodian in writing. The vendor's stated use is "providing evidence for compliance and audits", and the record is described as correlated inside Falcon telemetry, so the clause is the only thing that turns a vendor feature into evidence the company holds. Before the first Falcon Observe deployment, which the vendor dates to its fourth quarter of fiscal 2027.
• CFO: re-forecast the security line as modules per device rather than as an AI programme with its own budget. 51 per cent of subscription customers already ran six or more modules at 31 July 2026, and identity, testing and observability arrive as further attachments at a per-device rate, so the spend will present as a higher rate on the estate rather than as a new line. At the fiscal 2027 renewal, before the fiscal 2028 plan is fixed.

06The questions a board should put to management before 31 January 2027

• Which directory issues our agents' credentials now, and can we list every agent it has enrolled without asking the security vendor to run the query?
• If the runtime control and the record come from one supplier, what will our auditor accept as evidence, and can we produce it after we stop paying for the platform?
• What is the export right on the behavioural record, how long is it retained, and is the record ours, licensed to us, or available to us only while the subscription runs?
• Does the per-device rate change how many endpoints we licence, and who signs off that the cheapest way to buy agent identity is now a device-priced module rather than a per-agent contract?
• If we leave agent identity with our existing provider, what stops working on the day an agent acts outside the policy the security platform enforces?

07What to watch, and when

• 31 January 2027: whether Falcon Observe is generally available, and whether CrowdStrike publishes an export of the agent record to customer-controlled storage alongside a separately priced identity module. Both would retire this reading: the record would be evidence the buyer holds and the identity would be a line a rival could be measured against.
• 31 January 2027: whether both definitive agreements have closed. A slip is the cheapest signal that the four capabilities cannot be bought as one attachment in the first renewal window, and it moves the timetable by a quarter or more.
• 31 January 2027: whether the identity provider will register an agent the Falcon sensor did not discover. If it will, the enrolment authority is the platform rather than the endpoint, the mechanism this piece rests on is wrong, and the advantage is a contract rather than a sensor.

08The ten documents this piece rests on

• CrowdStrike, "Identity Security for the AI Era", the 8 January 2026 announcement of the definitive agreement to acquire SGNL.
• CrowdStrike, "CrowdStrike Unveils Continuous Identity for AI Agents", 15 June 2026.
• CrowdStrike, Form 8-K filed 26 August 2026, accession 0001535527-26-000029, Exhibit 99.1, second quarter fiscal 2027 results.
• CrowdStrike, "CrowdStrike Unveils Falcon Guardian to Secure AI Agents Where They Execute: On the Endpoint at Runtime", 1 September 2026.
• CrowdStrike, "Introducing the CrowdStrike Agentic Identity Provider, the Foundation for AI Agent Identity Security", 2 September 2026.
• CrowdStrike and OpenAI, "CrowdStrike and OpenAI Expand Partnership to Secure the Agentic Era", 2 September 2026.
• CrowdStrike, "CrowdStrike to Acquire Fiddler to Deliver Agent Observability for AI Trust", 3 November 2026.
• CrowdStrike, "CrowdStrike to Acquire Dreadnode to Advance AI Trust and Deliver Automated AI Security Testing for the Agentic Enterprise", 3 November 2026.
• Sentra, "Sentra Raises $150 Million for Agentic Data Security as Enterprise AI Adoption Accelerates", 4 November 2026.
• CrowdStrike, published price list for Falcon Go, Falcon Pro and Falcon Enterprise, current at 5 November 2026.