What Makes a Good Security Agent? 5 Lessons from the AgentWorks Hackathon

Every security team is being told to adopt AI. Far fewer have been shown what "good" looks like in practice. Turnkey agents handle common, well-defined security tasks, but no two security teams operate the same way. Each has its own data, playbooks, escalation paths, and risk tolerances; unique context that no vendor can anticipate in a packaged solution. That’s why we built CrowdStrike® Charlotte AI™ AgentWorks: a no-code workspace that lets every security team build the exact agents they need, on the Falcon platform. The power of the crowd is one of the most enduring advantages we have as an industry against the adversary. What one analyst learns on the front lines, the whole community inherits. Now, adversaries are rapidly gaining AI fluency, and defenders need to transform the SOC the way we always have: together. When one team turns a hard problem into a working agent, it raises the bar for all of us. Every team can learn from that agent, adapt it, and build on it. So, we summoned the ingenuity of the crowd like never before. Working with NVIDIA, we launched the first AgentWorks Hackathon and invited security teams to nominate agents they’ve built. The brief was…