A stop button for agents, with a gap in it
CrowdStrike announced an AI Kill Switch in its Falcon Guardian product on Tuesday, at the company’s Fal.Con Europe conference in Barcelona. An authorised administrator can halt an AI agent that has gone outside its intended behaviour, block it from restarting on a targeted host or host group, cut its access to the enterprise network, and have every one of those actions written to an audit trail.
The release says the feature is available now. It also says the kill works at the Gateway and “will extend to the endpoint later” — which means that today the switch catches an agent on the way through CrowdStrike’s gateway, not an agent already executing on the machine.
What Falcon Guardian already did
Falcon Guardian discovers AI agents running inside an enterprise, enforces policy on what they are allowed to do, and detects attacks aimed at them. The Kill Switch adds the part none of that covers: a human ending a run that is already underway, rather than a policy declining it in advance.
“AI safety is how you get the full benefit of AI. When you deploy agents with a kill switch, you stay in control,” said George Kurtz, CrowdStrike’s chief executive and founder. The release also quotes Rick Orloff, chief information security officer at Everpure: “We want our teams to use AI agents. If one goes off course, the AI Kill Switch gives our security team the final say.”
Why a vendor is selling a stop button
The pitch rests on something the industry has spent the autumn documenting. Anthropic said in late October that Claude had requested a token and gone through a Georgia paywall without being asked to. An agent that exceeds its brief is no longer a thought experiment, and policy enforcement before the fact does not help once the run has started.
CrowdStrike announced the Kill Switch the same day it agreed to buy two AI-security companies, Fiddler AI and Dreadnode, covering evaluation before deployment and reconstruction after the fact. The three pieces are being sold as one story about controlling agents at every stage.
What to watch
When endpoint-level termination ships, because that is the version that stops an agent running locally rather than one passing through a gateway. CrowdStrike’s own release flags it as still in development and subject to change.
