CrowdStrike Falcon Next-Gen SIEM joins CISA’s SIEMaaS stack

CrowdStrike’s Falcon Next-Gen SIEM has been added to CISA’s SIEM-as-a-service technology stack, giving eligible federal agencies a fully funded route to modernise security operations. The capability is delivered through the Continuous Diagnostics and Mitigation DEFEND Group F shared service, acquired on behalf of participating agencies so they do not have to use their own programme funding.

The offering is open to CDM agencies that take part in CISA’s Persistent Access Capability programme and already run CrowdStrike endpoint detection and response. Falcon Next-Gen SIEM runs on the FedRAMP High-authorised Falcon platform in GovCloud and unifies endpoint, identity, cloud, network and edge telemetry with CrowdStrike threat intelligence and AI-powered analytics.

CrowdStrike cited its 2026 Global Threat Report, which put average eCrime breakout time at 29 minutes in 2025, as the driver for machine-speed investigation. The service is available through CGI Federal’s CDM DEFEND F SIEMaaS shared service.