How to Add Independent Compliance Evidence to CrowdStrike Falcon Guardian

1. What Falcon Guardian Provides

CrowdStrike Falcon Guardian is an AI Detection and Response (AIDR) solution announced at Fal.Con 2026. It delivers runtime visibility and enforcement for AI agents across enterprise endpoints, SaaS platforms, and cloud environments.

Falcon Guardian operates as the detection and enforcement layer:

• AI Agent Discovery identifies known and shadow AI agents across Windows and macOS endpoints, providing a live inventory of every running and dormant agent
• Runtime Execution Graph traces the causal chain from user prompt, through identity and tool call, to every downstream system action
• Agent Access Controls define which AI agents can run on managed endpoints, blocking unauthorized agents and converting governance policy into enforceable runtime controls
• Runtime Detection and Response detects attacks on agents and malicious agent behavior, reconstructs the full execution chain, and determines blast radius in real time
• Continuous Identity for AI Agents (built on the SGNL acquisition) replaces static access policies with dynamic, real-time authorization using SPIFFE-based cryptographic identities
• Shadow AI Governance discovers unapproved AI tools, LLM runtimes, MCP servers, and IDE extensions across endpoints, SaaS, and cloud
• Falcon Next-Gen SIEM Integration ingests agent telemetry as first-party data for correlation across identity, cloud, and SaaS

Falcon Guardian integrates with Falcon IQ (50+ pre-built agentic AI agents on NVIDIA Nemotron models), Charlotte AI AgentWorks, and the CrowdStrike Falcon MCP Server for AI-native security operations.

2. The Independent Witness Gap

Falcon Guardian handles detection and enforcement: discovering agents, monitoring execution graphs, blocking unauthorized behavior, and revoking access in real time. This is essential. But regulated enterprises face a second requirement: independent attestation that governance controls were active, effective, and unmodified during operation.

SWT3 fills this gap by operating as an out-of-band witness layer:

• Cryptographic anchors with SHA-256 fingerprints, independently verifiable by anyone
• Merkle rollups providing tamper-evident daily roots with RFC 3161 timestamps
• Post-quantum signatures (ML-DSA-65) for forward-looking assurance
• Cross-vendor coverage across CrowdStrike, Microsoft, Google, AWS, and any other provider
• 36 regulatory frameworks (NIST 800-53, CMMC, FedRAMP, EU AI Act, NIST AI RMF, SR 11-7, NIS-2, and more)

The two layers are complementary: Falcon Guardian detects and enforces at runtime. SWT3 attests that detection and enforcement happened, independently.

3. Capability Crosswalk

7 of 7 capabilities have full independent attestation coverage across 29 SWT3 procedures in 8 namespaces.

4. AI Agent Discovery

5. Runtime Execution Graph

# Falcon Guardian traces the execution graph.
# SWT3 independently witnesses every tool call in that graph.

from swt3_ai import Witness

witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="axm_live_...",
    tenant_id="YOUR_TENANT",
    agent_id="falcon-monitored-agent",
    signing_key="your-signing-key",
)

# wrap_tool witnesses each invocation with AI-TOOL.1
@witness.wrap_tool
def search_database(query: str, scope: str = "read"):
    return db.search(query, scope=scope)

# Every call is now independently attested
results = search_database("quarterly earnings", scope="read-only")

6. Agent Access Controls

7. Runtime Detection and Response

8. Continuous Identity (SGNL)

# Dual identity: CrowdStrike SPIFFE platform identity + SWT3 auditor identity
witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="axm_live_...",
    tenant_id="YOUR_TENANT",
    agent_id="falcon-protected-agent",     # Independent auditor identity
    signing_key="your-hmac-key",           # HMAC-SHA256 payload signing
    signing_algorithm="hmac-sha256",       # Or "ml-dsa-65" for post-quantum
)

# Witness hardware environment for the agent runtime
witness.witness_hardware(
    gpu_count=4,
    accelerator_memory_gb=80,
    accelerator_type="nvidia",
)

9. Shadow AI Governance

10. MCP Server Discovery

11. Architecture

Falcon Guardian and SWT3 operate on separate planes. Guardian handles detection and enforcement on the security plane. SWT3 handles attestation on the compliance plane. Neither depends on the other, but together they provide both runtime protection and independent evidence.

12. Quick Start

Python

# pip install swt3-ai

from swt3_ai import Witness

# Initialize the independent witness layer alongside Falcon Guardian
witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="axm_live_...",
    tenant_id="YOUR_TENANT",
    agent_id="falcon-monitored-agent",
    signing_key="your-hmac-key",
)

# Wrap any tool -- witnesses every invocation with AI-TOOL.1
@witness.wrap_tool
def query_database(sql: str):
    return db.execute(sql)

# Witness agent access decisions alongside Falcon Guardian enforcement
witness.wrap_access(
    resource="customer-database",
    scope="read",
    granted=True,
)

# Run the demo to see witness anchors in your terminal
# python -m swt3_ai.demo

TypeScript

// npm install @tenova/swt3-ai

import { Witness } from "@tenova/swt3-ai";

const witness = new Witness({
  endpoint: "https://sovereign.tenova.io",
  apiKey: "axm_live_...",
  tenantId: "YOUR_TENANT",
  agentId: "falcon-monitored-agent",
  signingKey: "your-hmac-key",
});

// Wrap tools for independent witnessing
const monitoredTool = witness.wrapTool(originalTool);

// Witness NHI lifecycle events discovered by Falcon Guardian
witness.witnessNhiLifecycle("service-account-47", "activated", {
  scope: "read:customer-data",
  ttl: 3600,
});

MCP Server

// npm install @tenova/swt3-mcp
// Add to your MCP client configuration:
{
  "mcpServers": {
    "swt3-witness": {
      "command": "npx",
      "args": ["-y", "@tenova/swt3-mcp"],
      "env": {
        "SWT3_API_KEY": "axm_live_...",
        "SWT3_TENANT_ID": "YOUR_TENANT"
      }
    }
  }
}
// 59 tools available. Use witness_tool_call, witness_nhi_lifecycle,
// witness_hardware, verify_trust, and more.

13. Regulatory Cross-Reference

Every SWT3 procedure in this crosswalk maps to one or more regulatory frameworks. When Falcon Guardian detects and SWT3 attests, the resulting evidence satisfies requirements across:

14. Coverage Summary

When Falcon Guardian and SWT3 operate together:

• Falcon Guardian provides runtime detection, enforcement, SPIFFE-based identity, execution graph tracing, and shadow AI discovery
• SWT3 provides independent cryptographic attestation, Merkle-rooted audit trails, NHI lifecycle witnessing, and cross-vendor evidence
• 7 of 7 capabilities have full independent attestation coverage
• 29 procedures across 8 namespaces provide granular, per-capability attestation
• 6 regulatory frameworks are simultaneously satisfied by the combined evidence
• Evidence is verifiable by any auditor, Notified Body, or C3PAO using only a fingerprint string
• No CrowdStrike infrastructure access required for verification
• SDK available in 10 languages: Python, TypeScript, Rust, C#, Ruby, Swift, Go, Kotlin, plus MCP Server and K8s DaemonSet

Start Witnessing →    Verify an Anchor