Build with the Falcon Platform
AI-ready tooling. Custom Falcon console apps and Next-Gen SIEM parsers. SDKs in multiple languages with extensive API coverage. Your developer hub for extending and working with the Falcon platform.
Accomplish
Section titled “Accomplish” Deploy the Sensor Install and manage the Falcon sensor across your infrastructure using Chef, Puppet, and other configuration management tools.
Manage Your Fleet Query hosts, track sensor health, manage device groups, and enforce policies across thousands of endpoints.
Investigate Threats Search detections, triage incidents, and correlate behaviors across your environment with the Alerts, Incidents, and Intel APIs.
Hunt Vulnerabilities Pull CVE data from Spotlight, prioritize remediation with ExPRT ratings, and track exposure risk across your estate.
Automate Response Execute commands on endpoints in real time, contain compromised hosts, and orchestrate response workflows at scale.
Stream & Analyze Data Ingest events with Next-Gen SIEM, build real-time pipelines with Event Streams and FDR, and query petabytes of security telemetry with LogScale.
Secure the Cloud Register cloud accounts, monitor containers, assess Kubernetes workloads, and track cloud security posture.
Artificial Intelligence Connect AI assistants to the Falcon platform via the Model Context Protocol. Investigate threats, triage detections, and query hosts from Claude, VS Code, and custom agents.
Falcon Foundry Build custom apps, UI extensions, and automated workflows directly on the Falcon platform. Low-code development with Fusion SOAR orchestration.
Falcon Next-Gen SIEM Write custom parsers, ingest third-party data, build correlation rules, and automate response with Fusion SOAR. Normalize any log source alongside native Falcon telemetry.
Python Rapid prototyping, scripting, and automation. Rich ecosystem with pandas, requests, and boto3. Ideal for SOC tooling, data pipelines, and security orchestration.
Go Fast compilation, single-binary deploys, built-in concurrency. Perfect for microservices, CLI tools, and high-throughput integrations.
PowerShell Native Windows automation and Active Directory integration. Designed for endpoint management, GPO scripting, and IT operations.
JavaScript Full TypeScript support for Node.js backends and browser-based dashboards. Integrates with Express, Next.js, and serverless platforms.
Rust Memory safety without garbage collection. Built for performance-critical agents, embedded systems, and low-latency processing.
Ruby Convention over configuration for Rails applications. Clean DSL for building web-based security tools and compliance workflows.
Terraform Manage Falcon platform resources, register cloud accounts, and deploy sensors using Configuration as Code.
Contribute
Section titled “Contribute” Community Portal Get help, share knowledge, and collaborate with security professionals worldwide.
GitHub Every Falcon SDK, Falcon MCP, sample code, and community tools. File issues, submit pull requests, and star your favorite repositories.
Reddit Ask questions, share integrations, and connect with CrowdStrike engineers and other developers on Reddit.
© 2026 CrowdStrike, Inc. All rights reserved.Privacy NoticeCookie NoticeTerms of Use
