# VAST Data CrowdStrike Integration Goes Live: Native Falcon Sensor Now, Next-Gen SIEM and AIDR in Preview

> Source: <https://www.storagereview.com/news/vast-data-crowdstrike-integration-goes-live-native-falcon-sensor-now-next-gen-siem-and-aidr-in-preview>
> Published: 2026-09-01 15:37:31+00:00

VAST Data and CrowdStrike are turning the AI security partnership they [announced at VAST Forward in February](https://www.storagereview.com/news/vast-data-unveils-agentic-ai-os-and-advances-its-thinking-machine-vision) into a shipping product, detailing a multi-layered integration that embeds enterprise-grade cybersecurity directly into AI storage infrastructure, data pipelines, and production AI workloads. By combining the VAST AI Operating System with the CrowdStrike Falcon platform, the collaboration addresses the security challenges in modern AI environments, where proprietary data flows across complex pipelines, models, and autonomous agents.

## Securing AI Infrastructure and Ingestion Pipelines

The partnership begins at the hardware and operating system level, where VAST now natively supports the CrowdStrike Falcon sensor. This integration brings Falcon endpoint protection and workload visibility directly to the infrastructure nodes hosting mission-critical AI datasets.

Beyond core infrastructure protection, VAST audit telemetry will feed directly into CrowdStrike Falcon Next-Gen SIEM. This telemetry pipeline gives security operations teams deep visibility into how internal users, automated services, and compute nodes interact with storage assets. Correlating low-level storage access patterns with CrowdStrike threat intelligence enables rapid detection of anomalous data access, unauthorized exfiltration attempts, and compromised service accounts across the AI environment.

At the data pipeline layer, CrowdStrike Falcon AI Detection and Response (AIDR) integrates directly with the VAST InsightEngine, building on the NVIDIA AI Data Platform reference architecture. As InsightEngine processes, enriches, and vectorizes unstructured data for model training and retrieval-augmented generation (RAG) knowledge bases, Falcon AIDR inspects the data in flight. This allows organizations to classify sensitive information, including personally identifiable information (PII), before it enters downstream AI workflows.

## Runtime AI Protection and AI Factory Validation

The integrated platform also extends protection to real-time model interaction. As users and AI agents query models and knowledge bases, CrowdStrike Falcon AIDR detects and flags adversarial threats, such as prompt injection and model jailbreak attempts. This dual-layer approach secures both the foundational training data and the operational inferencing surface.

To validate the integration in high-throughput enterprise deployments, VAST and CrowdStrike will demonstrate the joint architecture within an NVIDIA-powered AI factory environment. The setup showcases CrowdStrike real-time protection running inline with high-performance VAST data pipelines accelerating GPU-intensive workloads.

According to leadership from both companies, securing AI requires moving beyond basic perimeter defense. Integrating security directly into data movement, ingest engines, and model access ensures that security controls are foundational rather than reactive additions to modern AI architecture.

## Availability

Native CrowdStrike Falcon sensor support for the VAST platform is certified and available immediately. Integrations that connect VAST telemetry to CrowdStrike Falcon Next-Gen SIEM and Falcon AIDR are currently available in private preview.
