Company news
CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
Published 2 October 2026
WHAT HAPPENED
CrowdStrike Falcon Next-Gen SIEM was added to CISA's SIEMaaS technology stack and made available through the CDM DEFEND Group F shared service. Eligible federal agencies can now deploy the SIEM product with full CISA funding without using their own program budgets.
WHO IS INVOLVED
CrowdStrike, CISA, federal civilian agencies participating in the CDM Persistent Access Capability program, and CGI Federal which operates the CDM DEFEND F shared service are involved.
WHY IT MATTERS
Federal security teams can now unify endpoint and third-party security data for faster threat detection and response without additional costs. The average time for attackers to break out across a network is 29 minutes, making the speed and consolidated visibility this SIEM provides critical for federal defenders.
AVAILABILITY
The service is available to CDM agencies using CrowdStrike EDR modules and participating in CISA's Persistent Access Capability program, acquired on their behalf through the DEFEND F mechanism.
- Type
- Partnership
- Category
- Endpoint Security
- Source
- crowdstrike.com ↗
See CrowdStrike’s full company record.
Look up its funding history, investors, hiring and competitors in Mandos. Choose a platform plan, or request access to one company for free.
- Funding history and investors
- Hiring trends and departments
- Competitor comparisons
- Scores and supporting data