All Security Stack Compositions
EDR / XDR · Composes with

//AIRGAPT + CrowdStrike Falcon

CrowdStrike Falcon detects, hunts, and responds to endpoint threats via a cloud-connected agent. //AIRGAPT composes with Falcon, adding a hardware-anchored, attributable evidence layer for each response action, independent of the Falcon agent.

CrowdStrike Falcon
AI-powered threat detection & behavioural analysis
Endpoint forensics & threat hunting
Identity threat detection & response
Network containment via software isolation
//AIRGAPT
FIDO2-signed, attributable evidence for each response action
Hardware-anchored proof of human consent per response
Signed receipts the EDR ingests via webhook
Composes with the EDR, additive evidence layer
Capability Matrix

Where each layer begins and ends

Capability
CrowdStrike Falcon
//AIRGAPT
Behavioural threat detection & ML analysis
Not our role
Endpoint forensics & threat hunting
Not our role
Software-layer response & isolation
Not our role
Sign each response action with the responder's FIDO2 key
Not our role
Hardware-anchored proof of human consent per response
Not our role
Return signed receipts the EDR ingests via webhook
Not our role
Compose with the EDR, additive evidence layer
Not our role

* The July 2024 incident illustrates that a single agent layer is itself a dependency. //AIRGAPT provides a separate, hardware-anchored evidence path that does not depend on the health of any one agent.

Better Together

"Falcon detects the compromise and responds. //AIRGAPT signs each response action with the responder's FIDO2 key and returns the receipt to Falcon, so containment is provably authorised, not just executed."

More EDR / XDR Compositions
+ SentinelOne
EDR / XDR
+ Microsoft Defender for Endpoint
EDR / XDR

Add //AIRGAPT to your CrowdStrike Falcon deployment

Zero new hardware. MSI deployment via your existing MDM. Works alongside CrowdStrike Falcon without replacing any existing workflow.

Apply for PilotAll Compositions
Vanguard Pilot · Now Accepting Applications
Pilot Company Waitlist Open, Setup Fees Waived for Founding Cohort
Request Access