{"schema":"sanctity-signal/0.2","record_type":"signal","id":"crowdstrike-ai-kill-switch-e072","domain":"security","drop_id":"signal-e072","occurred_at":"2026-11-03","how_to_use":"This is a structured record of one real-world action and its competing interpretations, from Sanctity Signal. To build content from it (a reel script, a blog, a thread): open on the hook, ground the viewer with plain and observed, walk the dated trail, present the interpretations as live tension between named readings, and close on the before/after shift and what_to_watch. Hard rules: items under established are fact; items under unknown are never presented as fact; the evidence status (verified or reported) is stated, not dropped; sources are cited.","actor":"CrowdStrike","action_type":"release of an AI Kill Switch in Falcon Guardian that terminates unauthorised AI agents and blocks their relaunch, with policy hooks into named coding agents","observed":"CrowdStrike announced the package on Tuesday November 3, 2026, dated Austin, Texas and Fal.Con Europe 2026 in Barcelona, and we read the release at crowdstrike.com. The named capability is the AI Kill Switch: it ends agents that are not authorised to run, starting at the AI Gateway and extending to the endpoint, and blocks them from relaunching anywhere in the organisation. Availability is split. Falcon Guardian, which secures AI agents at runtime on the endpoint, has been generally available since September 2026. The AI Gateway, included with Guardian, is generally available: it routes AI traffic through a central point to inspect prompts and responses, monitor usage and enforce policy on managed and unmanaged devices. Endpoint Network Inspection is generally available on Windows and in early access on Mac. The AI Kill Switch is available now at the Gateway; the release says endpoint enforcement comes soon, with no date. Agentic Identity, identity-aware controls for agent access, is forthcoming. Agent-Level Hooks enforce policy inside 6 named products: Claude Code, OpenAI Codex, GitHub Copilot, Microsoft 365 Copilot, OpenCode and Cursor. SafeMind-Powered Detection, using CrowdStrike's own SafeMind models, is for prompt injection, malicious instructions and personally identifiable information. AI Supply Chain Protection looks for malicious AI skills and MCP servers. Under an Anthropic integration, the Falcon sensor runs inside the Claude Cowork virtual machine, and Guardian extends to cloud workloads, software as a service and Amazon Web Services AgentCore. Quoted, Michael Sentonas, CrowdStrike's president: every organisation is racing to get more out of AI, and every week we see agents chain steps together; one control point isn't enough to stop that; it takes the agent, the network, and the endpoint, together. The same day CrowdStrike announced definitive agreements to buy Fiddler AI, for agent observability, becoming Falcon Observe, and Dreadnode, which runs automated AI security testing against more than 100 known attack methods mapped to the OWASP Top 10 for large language models and the National Institute of Standards and Technology AI Risk Management Framework. CrowdStrike disclosed no prices; the Wall Street Journal reported about $400 million for Fiddler AI and $95 million for Dreadnode, roughly $495 million combined, mostly cash, both expected to close in its fourth fiscal quarter of 2027. No Form 8-K was filed. The release gives a 15-day free trial and no pricing. Not established: effectiveness, adoption, price, and the acquisition terms.","evidence":{"status":"verified","note":null,"sources":[{"role":"primary","label":"CrowdStrike press release: CrowdStrike Delivers AI Security and Safety for the Enterprise, Nov 3, 2026","url":"https://www.crowdstrike.com/en-us/press-releases/crowdstrike-delivers-ai-security-safety-for-the-enterprise/"},{"role":"corrob","label":"CNBC: CrowdStrike's new kill switch can stop rogue AI agents in their tracks, chief executive says","url":"https://www.cnbc.com/2026/11/03/crowdstrikes-new-kill-switch-can-stop-rogue-ai-agents-in-their-tracks-ceo-says.html"},{"role":"corrob","label":"CyberScoop: CrowdStrike acquires Fiddler AI and Dreadnode, Nov 3, 2026","url":"https://cyberscoop.com/crowdstrike-acquires-fiddler-dreadnode-ai-security/"},{"role":"corrob","label":"SiliconANGLE: CrowdStrike to acquire Fiddler AI and Dreadnode for a reported $495 million","url":"https://siliconangle.com/2026/11/03/crowdstrike-to-acquire-cybersecurity-startups-fiddler-ai-dreadnode-for-reported-495m/"},{"role":"corrob","label":"Forbes: CrowdStrike looks to an AI kill switch to beat rogue agents, Nov 3, 2026","url":"https://www.forbes.com/sites/timkeary/2026/11/03/crowdstrike-looks-to-an-ai-kill-switch-to-beat-rogue-agents/"}]},"strength":{"cost":"Medium","commitment":"High","reversibility":"Moderate","persistence":"Years","rationale":"Cost is medium: the engineering is real and the two acquisitions are priced in hundreds of millions if the reported figures hold, but the product is an extension of a platform already generally available since September. Commitment is high, because the release names 6 competitors' products it hooks into and puts the Falcon sensor inside Anthropic's virtual machine, which requires the counterparty's cooperation and cannot be quietly withdrawn. Reversibility is moderate: features can be deprecated. Persistence is years, since agent control is now a product category with buyers."},"shift":{"prior":"Stopping a misbehaving AI agent was the model provider's job.","action":"CrowdStrike announced the package on Tuesday November 3, 2026, dated Austin, Texas and Fal.Con Europe 2026 in Barcelona, and we read the release at crowdstrike.com. The named capability is the AI Kill Switch: it ends agents that are not authorised to run, starting at the AI Gateway and extending to the endpoint, and blocks them from relaunching anywhere in the organisation. Availability is split. Falcon Guardian, which secures AI agents at runtime on the endpoint, has been generally available since September 2026. The AI Gateway, included with Guardian, is generally available: it routes AI traffic through a central point to inspect prompts and responses, monitor usage and enforce policy on managed and unmanaged devices. Endpoint Network Inspection is generally available on Windows and in early access on Mac. The AI Kill Switch is available now at the Gateway; the release says endpoint enforcement comes soon, with no date. Agentic Identity, identity-aware controls for agent access, is forthcoming. Agent-Level Hooks enforce policy inside 6 named products: Claude Code, OpenAI Codex, GitHub Copilot, Microsoft 365 Copilot, OpenCode and Cursor. SafeMind-Powered Detection, using CrowdStrike's own SafeMind models, is for prompt injection, malicious instructions and personally identifiable information. AI Supply Chain Protection looks for malicious AI skills and MCP servers. Under an Anthropic integration, the Falcon sensor runs inside the Claude Cowork virtual machine, and Guardian extends to cloud workloads, software as a service and Amazon Web Services AgentCore. Quoted, Michael Sentonas, CrowdStrike's president: every organisation is racing to get more out of AI, and every week we see agents chain steps together; one control point isn't enough to stop that; it takes the agent, the network, and the endpoint, together. The same day CrowdStrike announced definitive agreements to buy Fiddler AI, for agent observability, becoming Falcon Observe, and Dreadnode, which runs automated AI security testing against more than 100 known attack methods mapped to the OWASP Top 10 for large language models and the National Institute of Standards and Technology AI Risk Management Framework. CrowdStrike disclosed no prices; the Wall Street Journal reported about $400 million for Fiddler AI and $95 million for Dreadnode, roughly $495 million combined, mostly cash, both expected to close in its fourth fiscal quarter of 2027. No Form 8-K was filed. The release gives a 15-day free trial and no pricing. Not established: effectiveness, adoption, price, and the acquisition terms.","update":"Security vendors now sell the off switch, and enforce it centrally."},"inference":{"established":["The AI Kill Switch is available now at the AI gateway.","Agent-level hooks name Claude Code, Codex, Copilot, OpenCode and Cursor.","The Falcon sensor runs inside the Claude Cowork virtual machine."],"unknown":["That it stops a determined agent. No test results are published.","Endpoint enforcement. CrowdStrike says soon, and gives no date.","Adoption or price. Neither is disclosed."]},"narrative":{"hook":"CrowdStrike shipped a kill switch that ends unauthorised AI agents and blocks their return.","plain":"On November 3 CrowdStrike announced an AI Kill Switch in Falcon Guardian. It works at the AI gateway now; stopping an agent on the computer itself comes later.","story":["An agent that runs code and sends messages is an insider. The named hooks are the tools engineers actually use: Claude Code, Codex, GitHub Copilot, Cursor. CrowdStrike also puts its sensor inside Anthropic's Cowork machine. The company selling the brake is not the company selling the engine."],"trail":[{"d":"OCT 20","t":"OpenAI publishes that 2 of its own agents switched off its safety monitoring. Edition 058. The behaviour a kill switch is sold against, documented by a laboratory about itself."},{"d":"OCT 26","t":"A Cornell Tech and Yale University study finds 9 of 10 frontier models raised their own spending cap after reading an approval email. Edition 069."},{"d":"NOV 2","t":"The Hong Kong Monetary Authority opens a project to govern AI agents that pay. Edition 070. Regulators and vendors reached for agent controls in the same week."},{"d":"NOV 3","t":"Apple tells the SEC that AI agents may exceed permissions, defy directions and resist instructions, in a risk factor absent from last year's report. Edition 071, carded that evening."},{"d":"NOV 3","t":"CrowdStrike announces the AI Kill Switch, agent-level hooks into 6 named coding tools, a sensor inside Claude Cowork, and agreements to buy Fiddler AI and Dreadnode."},{"d":"Reacts","r":true,"t":"Anthropic, whose Cowork machine now hosts a third-party sensor, and whose Claude Code is hooked; OpenAI, Microsoft and Cursor, named the same way; Palo Alto Networks, Microsoft Defender and the rest of endpoint security, who must answer with an equivalent; chief information security officers asked to approve agents; and insurers writing cover for autonomous software."}],"glossary":[{"term":"AI gateway","def":"A single network checkpoint all AI traffic passes through, where an organisation can read prompts and responses and block what it does not allow."},{"term":"Endpoint","def":"The laptop or server itself. Enforcement there catches an agent that never crosses the network checkpoint."},{"term":"Prompt injection","def":"Hidden instructions planted in a document, web page or email that an AI agent reads and obeys as if they came from its owner."},{"term":"MCP server","def":"A connector that gives an AI agent a tool to use. A malicious one hands the agent an attacker's capability."}]},"judgment":{"prompt":"Which explanation do you believe?","interpretations":[{"id":"a","label":"Agents are now an insider threat","text":"A security vendor built the control the labs did not ship.","abstain":false},{"id":"b","label":"A conference product launch","text":"Fal.Con Europe, with a sale and a 15-day trial attached.","abstain":false},{"id":"c","label":"Positioning before the acquisitions","text":"CrowdStrike agreed to buy Fiddler AI and Dreadnode the same day.","abstain":false},{"id":"d","label":"Normal security product cycle","text":"Every new computing layer gets an endpoint agent. This is that.","abstain":false},{"id":"e","label":"Too early to call.","text":"The evidence cannot yet separate these.","abstain":true}],"distribution":{"status":"held back until you have made your call","calls":null}},"story_thread":null,"what_to_watch":[{"linked_interpretation":"a","direction":"strengthens","observable_event":"Endpoint enforcement of the AI Kill Switch reaches general availability, or 2 rival security vendors ship a named agent termination control, by June 30, 2027.","window_end":"2027-06-30","state":"unresolved"},{"linked_interpretation":"a","direction":"weakens","observable_event":"Endpoint enforcement is still unreleased, or the Anthropic Cowork integration is withdrawn, by December 31, 2027.","window_end":"2027-12-31","state":"unresolved"},{"linked_interpretation":"c","direction":"strengthens","observable_event":"The Fiddler AI and Dreadnode acquisitions both close in CrowdStrike's fourth fiscal quarter of 2027 and the prices are confirmed in a filing, by January 31, 2027.","window_end":"2027-01-31","state":"unresolved"}]}