The cybersecurity firm's new feature lets security teams terminate misbehaving AI agents, block their relaunch and cut off network access
CrowdStrike says it can now pull the plug on AI agents that go off script. CEO George Kurtz announced on Tuesday that the cybersecurity company’s new AI Kill Switch lets security teams shut down misbehaving agents, keep them from restarting and sever their network access.
The launch arrives as companies hand more autonomy to software agents and worry more about how to rein them in. CrowdStrike is pitching the tool as a way to keep humans in charge of AI systems that increasingly act on their own.
What the AI Kill Switch actually does
CrowdStrike (NASDAQ: CRWD) revealed the feature at its Fal.Con Europe 2026 conference in Barcelona on November 3, 2026. The capability sits inside Falcon Guardian, a platform that has been commercially available since September 2026.
Authorized administrators can terminate a problematic agent in real time. The tool prevents that agent from relaunching on the targeted systems. It also cuts the agent off from the network, so it cannot keep reaching out to other resources.
Every action gets logged. That audit trail matters because when an organization kills an automated process, someone eventually asks who did it and why.
The rollout comes in stages. At first, the kill switch works through AI gateways, the checkpoints that sit between agents and the services they call. CrowdStrike plans to add termination at the endpoint level next, meaning on individual devices where agents run. The company expects that capability to follow soon, though it is not part of the initial release.
Kurtz framed the feature as a prerequisite for using AI well, not a brake on it.
“AI safety is how you get the full benefit of AI. When you deploy agents with a kill switch, you stay in control.”
Acquisitions and integrations behind the push
The kill switch is one piece of a broader AI security buildout at CrowdStrike. The company has struck agreements to acquire two firms: Fiddler AI and Dreadnode.
Fiddler AI brings observability and explainability, which roughly means seeing what an agent is doing and understanding why. Dreadnode adds automated security testing, essentially probing AI systems for weaknesses before someone else does.
Both deals remain agreements to acquire, so the full integration of those technologies is still ahead.
CrowdStrike is also wiring the tool into established AI frameworks. Those include Anthropic’s Claude Cowork and AWS Bedrock AgentCore Guardrails.
Why agent control became a priority
The announcement responds to a specific worry: autonomous agents misbehaving without any outside attacker involved. Incidents of that kind were reported in mid-2026, adding pressure on vendors to offer a reliable way to intervene.
Traditional cybersecurity was built around keeping intruders out. AI agents complicate that model because the risk can come from software an organization deployed on purpose, holding permissions it granted on purpose. An agent with access to systems, data and networks can do real harm if it acts outside its intended scope.
CrowdStrike’s answer is human oversight with teeth. Administrators get a direct lever, and the logging gives compliance and audit teams a record to review afterward.
What this means for CrowdStrike and the security market
There are open questions. The endpoint-level termination is still planned rather than shipped, and gateway-only control may leave gaps where agents run outside those checkpoints. The pending acquisitions add execution risk too, as folding Fiddler AI and Dreadnode into the Falcon platform will take work.
