CrowdStrike (NASDAQ:CRWD) and IBM today announced an expansion of their strategic collaboration to advance agentic SOC transformation.

The expanded collaboration integrates CrowdStrike® Charlotte AI™ with IBM's Autonomous Threat Operations Machine (ATOM), IBM's autonomous SOC orchestration engine, for coordinated, machine-speed investigation and containment. It also extends the CrowdStrike Falcon® platform into IBM Consulting's managed Threat Detection and Response services and global X-Force Cyber Range experiences, where the two companies will offer immersive cyber crisis simulations to help organizations prepare for emerging threats.

AI is accelerating the velocity of adversary operations and shrinking the defender's window to respond. The average eCrime breakout time has dropped to 29 minutes, with the fastest observed in just 27 seconds, while attacks targeting public-facing applications are up 44% from the prior year, according to the CrowdStrike 2026 Global Threat Report and IBM's 2026 X-Force Threat Intelligence Index. As threats move faster and expand across cloud environments, security teams need coordinated detection and containment at machine speed.

Within the SOC, IBM ATOM and Charlotte AI can now work together to analyze detections across endpoint, identity, and cloud environments, applying enterprise context to coordinate and execute containment decisions. Together, they streamline investigation and response to reduce manual handoffs and help teams act before threats spread.

"Enterprises trust IBM to advance their security programs," said Daniel Bernard, chief business officer, CrowdStrike. "With Charlotte AI helping to deliver investigation, containment, and operational response, IBM's autonomous threat operations machine (ATOM) and cyber threat management services are battle-ready to defend against modern threats."