CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS

Falcon Next-Gen SIEM is now part of CISA’s SIEMaaS technology stack, which gives eligible agencies a funded path to modernize security through the CDM DEFEND F shared service.

CISA has called SIEM-as-a-service (SIEMaaS) “the Rosetta Stone” for visibility for good reason. Federal defenders need to see what is happening across increasingly complex environments, understand what matters, and turn that context into action before an adversary achieves its objective. 

CrowdStrike Falcon® Next-Gen SIEM is now part of CISA’s SIEMaaS technology stack, which gives eligible agencies a fully funded path to modernize security operations through the Continuous Diagnostics and Mitigation (CDM) Dynamic and Evolving Federal Enterprise Network Defense (DEFEND) Group F shared service. Participating agencies can now deploy Falcon Next-Gen SIEM and extend existing CrowdStrike endpoint detection and response (EDR) investments into agency-wide security operations without using their own program funding.

This offering is available to CDM agencies that participate in CISA’s Persistent Access Capability program and already use CrowdStrike for EDR. Through the DEFEND F mechanism, Falcon Next-Gen SIEM SKUs are acquired on behalf of participating agencies.

For those agencies, Falcon Next-Gen SIEM can serve as the agency-wide SIEM to help teams unify security data, reduce operational complexity, and detect, investigate, prioritize, and respond to threats faster.

Visibility alone is not the outcome. Federal security teams need context to distinguish signals from noise, understand malicious activity across their environment, and stay ahead of adversaries.