CrowdStrike has released FalconID, a multi-factor authentication product built directly into the Falcon platform that uses real-time risk signals to decide when secondary verification is actually needed. The company positions the release as a response to the growing failure rate of conventional MFA under AI-assisted phishing, credential stuffing, and push-fatigue attacks.
Traditional MFA systems authenticate at a fixed point in time without reference to threat context. FalconID evaluates signals across identity, endpoint, device, and behavioral telemetry continuously, only triggering a verification step when risk conditions change. When the platform assesses the session as safe, users pass through without interaction. When a risk threshold is crossed, access adapts automatically.
Verification itself relies on FIDO2-based biometric authentication delivered through the Falcon for Mobile app. The system requires verified physical proximity between the mobile MFA device and the authentication device – a laptop or workstation – to approve access. This approach eliminates passwords, push notifications, and one-time codes, which the company says are the primary vectors exploited in MFA bypass campaigns.
“Traditional MFA is architecturally broken. Disconnected from real-time risk signals, it’s blind to emerging threats, susceptible to MFA bypass attacks, and creates unnecessary friction,” said Elia Zaitsev, chief technology officer at CrowdStrike. “FalconID accelerates CrowdStrike’s identity security transformation, moving organizations beyond isolated, static access controls to continuous, risk-aware protection that stops breaches without slowing the business.”
FalconID extends CrowdStrike’s Next-Gen Identity Security platform, which already covers the hybrid identity lifecycle across human, non-human, and AI agent identities. The release incorporates capabilities from two recent acquisitions: SGNL, which focuses on Continuous Access Evaluation Protocol (CAEP)-driven privilege enforcement, and Seraphic Security, which secures browser sessions. After CrowdStrike’s acquisition of SGNL this launch represents the latest development in the company’s broader identity security push.
The product is delivered through the Falcon for Mobile app, requiring no third-party integrations or redirects. As adversaries increasingly use AI to generate convincing phishing campaigns at scale, CrowdStrike argues that static authentication controls have become inadequate and that security must move to a continuous, sensor-informed model.
CrowdStrike has previously partnered with authentication vendors, as in its joint risk-based authentication work with HYPR. FalconID brings that risk-aware philosophy in-house, natively within the Falcon architecture.
Sources: CrowdStrike
–
By the ID Tech Editorial Team
