CrowdStrike to acquire AI security startups for $495M

Expanding the Falcon platform

CrowdStrike has reached an agreement to purchase two startups focused on artificial intelligence security. These acquisitions are designed to bolster the company's Falcon platform, which is its primary security suite. By integrating these new tools, CrowdStrike aims to cover more stages of the AI deployment lifecycle.

The company will spend about $400 million to acquire Fiddler AI and $95 million to acquire Dreadnode. Most of the purchase price will be paid in cash, though some of the payment will be in stock based on specific vesting conditions. The transactions are scheduled to be finalized by January 31, 2027.

This move follows a broader strategy by CrowdStrike to address emerging risks associated with AI. The company recently acquired SGNL to handle continuous identity technology and Seraphic to provide visibility into browser sessions. These combined efforts seek to link identity, browser activity, and AI security into a single ecosystem.

Monitoring AI agent behavior

Fiddler AI specializes in enterprise AI agent observability. This software allows organizations to evaluate agents before they are fully deployed and track their specific actions once they are in production. It provides a way for companies to investigate the logic behind an agent's decisions.

CrowdStrike intends to market this technology under the name Falcon Observe. The company expects to make the tool generally available as early as this month. This tool addresses a major concern for businesses that are currently deploying agents but lack visibility into their actual operations.

CrowdStrike CEO George Kurtz noted that saying 'the model did it' is not a sufficient answer for regulators or boards. The company wants to provide a clear audit trail for what an agent did and why. This is particularly important for highly regulated industries where transparency is a legal requirement.

Probing for security weaknesses

Dreadnode provides automated security testing designed to find vulnerabilities in AI models and applications before they go live. Its platform can probe systems against more than 100 different attack strategies. These include common threats like jailbreaks, prompt injections, and specific attacks targeting AI agents.

The software ranks its findings by severity and maps them to several established frameworks. These include the OWASP Top 10 for large language models and the National Institute of Standards and Technology AI Risk Management Framework. By using these standards, the tool helps companies align with recognized security best practices.

CrowdStrike plans to connect Dreadnode's testing results with its existing Falcon Guardian offering. This integration will allow security teams to use the identified weaknesses to inform their active protection policies. Additionally, the company plans to use the testing data to improve its own SafeMind models.

Addressing unique AI failures

The acquisition of Dreadnode highlights a shift toward specialized testing for non-traditional software. Because AI fails in ways that standard testing cannot catch, companies need tools that mimic the thinking of an attacker. Dreadnode was built specifically to expose these hidden weaknesses before an AI reaches production.

The integration of these tools allows for a more comprehensive security posture. Organizations can move from identifying a flaw to monitoring the behavior of the fix in real-time. This creates a continuous loop of testing, observation, and protection for AI-driven workflows.

As more companies adopt autonomous agents, the demand for these specific security layers is expected to grow. CrowdStrike is positioning itself as a primary provider for the infrastructure needed to make these systems reliable. The goal is to ensure that AI deployment does not introduce unmanaged risks into the corporate environment.

The path to general availability

The timeline for these new capabilities is relatively aggressive. CrowdStrike expects Falcon Observe to be available to customers as soon as this month. Meanwhile, the Dreadnode automated testing features are expected to become generally available between now and February.

These products will cater to organizations that need to move quickly but safely. By providing tools that map to the OWASP Agentic Security framework, CrowdStrike helps developers stay ahead of evolving threats. The focus is on providing actionable data rather than just general alerts.

The ultimate goal of these acquisitions is to provide a complete lifecycle for AI security. From the initial testing of a model's defenses to the ongoing monitoring of an agent's daily actions, CrowdStrike is building a full suite. This helps businesses manage the transition from experimental AI to production-ready tools.