Stay free if you only need full access to the falcon platform for 15 days and includes aidr capabilities during trial period. Upgrade if you need aidr sold as an add-on module to the falcon platform and typically licensed through falcon flex subscription. Most solo builders can start free.
Why it matters: Pricing is enterprise-only with no public per-seat or per-endpoint cost disclosed on the page
Available from: Enterprise (Custom Quote)
Why it matters: Most value is realized by organizations already standardized on the Falcon platform
Available from: Enterprise (Custom Quote)
Why it matters: 99% efficacy and sub-30ms latency figures come from internal benchmark testing, not third-party validation
Available from: Enterprise (Custom Quote)
Why it matters: Limited public documentation about specific LLM, SaaS AI app, and agent framework coverage
Available from: Enterprise (Custom Quote)
Why it matters: Likely overkill for SMBs that only need basic ChatGPT data-loss prevention
Available from: Enterprise (Custom Quote)
Why it matters: Advanced feature not available in free plan.
Available from: Enterprise (Custom Quote)
Falcon AIDR is an AI Detection and Response product that monitors and secures how employees and AI agents interact with large language models, SaaS AI apps, and MCP servers. It inspects every prompt and response in real time, blocks prompt injection and jailbreak attempts with up to 99% efficacy at sub-30ms latency (per CrowdStrike's internal benchmarks), and prevents sensitive data such as credentials or regulated information from being exfiltrated to external models. It also maps relationships between users, prompts, models, agents, and tools and stores full runtime logs for compliance and investigation. The product is delivered as part of the broader CrowdStrike Falcon platform.
CrowdStrike does not publish a list price for Falcon AIDR on the product page; it is sold as an enterprise add-on within the Falcon platform and is typically priced via custom quote, often through Falcon Flex licensing. Buyers can start with a 15-day free trial of Falcon and engage CrowdStrike sales or the CrowdStrike Marketplace for AIDR-specific pricing. Expect pricing to scale with the number of users, agents, and AI workloads protected. Channel partners and distributors can also provide quotes for organizations that prefer to procure through existing reseller relationships.
Traditional DLP focuses on files, email, and endpoints and generally has no understanding of prompt semantics, agent behavior, or MCP server activity. Standalone LLM firewalls inspect prompts but typically operate as a separate proxy outside the security operations stack. AIDR combines both: it inspects every prompt and response, recognizes 180+ prompt injection techniques from CrowdStrike's published taxonomy, and feeds telemetry back into the same Falcon console used for EDR, MDR, and CDR. This lets analysts pivot from an AI alert to endpoint, identity, or cloud context without switching tools.
Yes. CrowdStrike specifically positions AIDR around the rise of agentic AI, citing that 62% of organizations are testing or scaling AI agents and that engineers are increasingly building their own. AIDR maps relationships between users, prompts, models, agents, and MCP servers and applies policy-based controls and runtime logging to all of them. This means it can detect when an agent is manipulated through indirect prompt injection, when an MCP server returns a tainted response, or when an agent attempts to exfiltrate sensitive data. Coverage of any specific framework should be confirmed with CrowdStrike sales.
AIDR is best suited for mid-market and large enterprises that are actively rolling out generative AI to employees or building AI agents internally and need governance, runtime protection, and audit-quality logs. Customer references on the page include Grand Canyon Education, Deskpro, and The Francis Crick Institute, spanning education, SaaS, and research. Organizations that already use the Falcon platform will get the most value because AIDR runs on the same agent and console. Smaller teams whose only need is blocking ChatGPT pastes will likely find AIDR more capable than required.
Start with the free plan — upgrade when you need more.
Get Started Free →Still not sure? Read our full verdict →
Last verified March 2026