BeyondTrust launches new integrations with CrowdStrike

BeyondTrust has announced new integrations between solutions on the BeyondTrust Pathfinder Platform and CrowdStrike Falcon Next-Gen SIEM. The integrations bring BeyondTrust’s identity and privilege intelligence directly into the CrowdStrike Falcon platform. By correlating identity relationships and privilege exposure insights across human, non-human, and AI agent identities with Falcon threat telemetry, joint customers can bring additional identity and privilege context into Falcon to accelerate investigation and response.

Identity and privilege have become critical security signals

Security teams are increasingly confronting attackers who gain access using legitimate, compromised credentials rather than traditional malware, making identity and privilege two of the most consequential risk surfaces in the enterprise. Recent BeyondTrust Phantom Labs research has found that approximately 75% of modern attack paths exploit identity relationships rather than software vulnerabilities alone, underscoring the need to correlate identity intelligence with threat activity.

“Attackers increasingly exploit legitimate identities and privileges to move through enterprise environments, making identity context critical to understanding and responding to threats,” said David Manks, Vice President, Strategic Alliances at BeyondTrust. “By bringing BeyondTrust’s identity and privilege intelligence into CrowdStrike Falcon, joint customers can connect privilege risk with threat activity, bringing identity threat prevention and detection together to accelerate investigation and response.”    

Closing the gap between identity prevention and detection

The integrations connect several BeyondTrust Pathfinder Platform solutions with Falcon Next-Gen SIEM, including:

• BeyondTrust Endpoint Privilege Management (EPM), which surfaces policy changes, privilege elevation requests, and blocked execution events within Falcon alongside other threat indicators.
• BeyondTrust Password Safe, which brings privileged access insights into the Falcon console to enrich threat detection with privileged credential context.
• BeyondTrust Privileged Remote Access (PRA), which shares configuration changes, console authentications, and session activity to extend visibility into cloud and network infrastructure.

The integrations build on BeyondTrust’s broader vision for privilege-centric identity security across human, non-human, workload, and AI identities.