CrowdStrike Holdings Inc. today expanded its Cloud Detection and Response service to Google Cloud Platform, adding runtime protection for Google workloads as attackers lean on artificial intelligence to break into cloud environments and pivot between systems at faster speeds.

Announced at Google Cloud Next 2026 in Las Vegas, the expansion puts Google Cloud alongside Amazon Web Services and Microsoft Azure as environments CrowdStrike CDR can monitor in real time. The company is pitching CDR as a replacement for the posture-only cloud security tools that flag misconfigurations after the fact but miss live attacks.

As part of Falcon Cloud Security’s unified cloud-native application protection platform, CrowdStrike CDR eliminates the log batch processing used by traditional cloud detection and response tools, which CrowdStrike says often take 15 minutes or more to surface a single detection. The service is powered by a real-time detection engine built on event streaming technology and analyzes cloud activity as it happens.

The detections use artificial intelligence and machine learning to correlate active cloud adversary activity with cloud asset and identity context, with the aim of exposing advanced attacks. Combined with automated response actions, the platform can stop cloud breaches in seconds.

Along with the CDR expansion, CrowdStrike announced that it has extended the Falcon platform to regional Google Cloud infrastructure.

The regional infrastructure push is aimed at customers in jurisdictions with strict data residency laws, who have struggled to adopt cloud security tools that pipe data out of region. Keeping processing local, CrowdStrike says, removes that barrier and lets multinationals standardize on Falcon across their operations.

The Google Cloud expansion builds on a deepening partnership between the two companies. In November, CrowdStrike was named one of three inaugural partners in the Google Unified Security Recommended program and the only endpoint security platform selected.

CrowdStrike also said today that it has been named the 2026 Google Cloud Security Partner of the Year for Infrastructure Protection, the second consecutive year it has won the category. The company was additionally named a Google Agent Cloud Ecosystem launch partner, a designation that positions CrowdStrike as a security provider for Google’s open, standards-based platform for agentic artificial intelligence applications.

By extending the Falcon platform into the Agent Cloud ecosystem, CrowdStrike will deliver guardrails, visibility and control as agentic AI systems move from experimentation into production.

Photo: CrowdStrike