CrowdStrike announced a new integration with Claude’s Compliance API, bringing Claude Enterprise and Claude Platform activity into the CrowdStrike Falcon® platform to deliver centralised visibility, detection, response, and governance for enterprise AI usage.

As Claude becomes embedded in production workflows like code generation, customer communications, legal review, and internal research, organisations need the same visibility and control they already apply across endpoints, identities, and cloud workloads. Without equivalent visibility into Claude activity, AI usage can introduce gaps in the broader security environment.

“Every enterprise application requires monitoring and protection. AI shouldn’t be the exception,” said Daniel Bernard, chief business officer at CrowdStrike. “As Claude becomes part of how organisations operate, security teams need it in the same operational picture as everything else. This integration puts AI activity inside the Falcon platform, right next to endpoint, identity, and cloud signals, so customers can apply the cybersecurity they already trust.”

Daniel Bernard, Chief Business Officer at CrowdStrike

Bringing AI Activity Into Security Operations

The integration ingests activity data from Claude’s Compliance API into Falcon® Next-Gen SIEM and Charlotte Agentic SOAR, making Claude activity part of the broader security dataset. By unifying AI signals with Falcon platform data across endpoint, identity, and cloud, organisations can extend existing security operations to cover AI usage at scale.

Through this integration, organisations can:

• Extend visibility to AI activity: Ingest Claude Enterprise activity logs and conversation content, along with Claude Platform activity logs, into Falcon Next-Gen SIEM, correlating AI usage with endpoint, identity, and cloud telemetry for complete operational context.
• Detect and investigate with broader context: Analyse AI activity alongside security signals across the environment. For example, correlating unusual Claude usage patterns with identity anomalies or data movement to surface risks that neither signal would reveal alone.
• Automate response at machine speed: Use Charlotte Agentic SOAR to trigger workflows for alerting, investigation, and response, based on AI activity signals, reducing manual effort and accelerating containment.
• Enforce policy through Falcon workflows: Extend oversight and policy-driven response through Falcon® AI Detection and Response (AIDR) and Falcon® Shield, enabling security teams to define and enforce how the organisation responds to AI-related signals at scale.

For more information on CrowdStrike and Anthropic, visit here.