- New integrations bring BeyondTrust’s identity and privilege intelligence into the Falcon platform, correlating identity relationships and privilege exposure with Falcon threat telemetry to reveal attack paths and accelerate investigation
- Joint customers gain a single, correlated view of privilege risk and threat activity
- Builds on BeyondTrust’s Pathfinder platform, which already discovers, prioritizes, and remediates privilege risk across human, non-human, and AI agent identities
ATLANTA, GA — September 23, 2026 — BeyondTrust, the global leader in privilege-centric identity security protecting Paths to Privilege™, today announced new integrations between solutions on the BeyondTrust Pathfinder Platform and CrowdStrike Falcon® Next-Gen SIEM. The integrations bring BeyondTrust’s identity and privilege intelligence directly into the CrowdStrike Falcon® platform. By correlating identity relationships and privilege exposure insights across human, non-human, and AI agent identities with Falcon threat telemetry, joint customers can bring additional identity and privilege context into Falcon to accelerate investigation and response.
Identity and Privilege Have Become Critical Security Signals
Security teams are increasingly confronting attackers who gain access using legitimate, compromised credentials rather than traditional malware, making identity and privilege two of the most consequential risk surfaces in the enterprise. Recent BeyondTrust Phantom Labs research has found that approximately 75% of modern attack paths exploit identity relationships rather than software vulnerabilities alone, underscoring the need to correlate identity intelligence with threat activity.
“Attackers increasingly exploit legitimate identities and privileges to move through enterprise environments, making identity context critical to understanding and responding to threats,” said David Manks, Vice President, Strategic Alliances at BeyondTrust. “By bringing BeyondTrust’s identity and privilege intelligence into CrowdStrike Falcon, joint customers can connect privilege risk with threat activity, bringing identity threat prevention and detection together to accelerate investigation and response.”
Closing the Gap Between Identity Prevention and Detection
The integrations connect several BeyondTrust Pathfinder Platform solutions with Falcon Next-Gen SIEM, including:
- BeyondTrust Endpoint Privilege Management (EPM), which surfaces policy changes, privilege elevation requests, and blocked execution events within Falcon alongside other threat indicators.
- BeyondTrust Password Safe®, which brings privileged access insights into the Falcon console to enrich threat detection with privileged credential context.
- BeyondTrust Privileged Remote Access (PRA), which shares configuration changes, console authentications, and session activity to extend visibility into cloud and network infrastructure.
The integrations build on BeyondTrust’s broader vision for privilege-centric identity security across human, non-human, workload, and AI identities. Learn more about the first wave of native Pathfinder capabilities, recently showcased at Black Hat USA 2026, or explore the AI Security Resource Hub for additional guidance on securing AI agents and non-human identities.
To learn more about these new integrations between BeyondTrust and CrowdStrike, visit the CrowdStrike Marketplace: https://marketplace.crowdstrike.com/partners/beyondtrust/.
