CrowdStrike has signed definitive agreements to acquire Fiddler AI and Dreadnode, two AI security startups, the cybersecurity company announced on Tuesday, in a double deal that The Wall Street Journal reports is worth a combined $495 million, as reported by SecurityWeek and Business Wire. The announcements were made at Fal.Con Europe 2026 in Barcelona.

CrowdStrike did not disclose the financial terms itself. According to the Journal, the company is paying roughly $400 million for Fiddler AI and about $95 million for Dreadnode, with the consideration predominantly cash plus a portion in stock subject to vesting conditions. Both deals are expected to close in CrowdStrike’s fiscal fourth quarter of 2027, the quarter ending January 31, 2027, subject to customary closing conditions.

What CrowdStrike Is Buying

Fiddler AI, founded in 2018 and based in Palo Alto, develops software for AI agent observability and explainability: pre-deployment evaluation, continuous monitoring of agent behavior in production, and the ability to trace decisions, reasoning paths and tool calls. Its technology will be sold as part of the Falcon platform under the name Falcon Observe, with general availability planned for Q4 of fiscal 2027, per CrowdStrike’s official press release.

Fiddler AI control plane diagram
Fiddler AI’s control plane spans evals, monitoring, enforcement and governance across the agent lifecycle. Image: Fiddler AI.

“Every company is deploying agents and asking the same thing: what are agents actually doing?” said George Kurtz, CEO and founder of CrowdStrike. “Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why.”

Dreadnode, founded in 2023, focuses on automated security testing of AI models, applications and agents before deployment, running attacks such as jailbreaks and prompt injections to expose weaknesses. Its team is expected to join CrowdStrike’s Cyber Superintelligence Lab, and the automated testing capabilities are also slated for general availability in Q4 of fiscal 2027.

Kill Switch for Rogue Agents

Alongside the acquisitions, CrowdStrike unveiled an AI Kill Switch in Falcon Guardian that terminates unauthorized agents in real time, first at the gateway and soon on the endpoint, and blocks them from running again across the organization. The company said agents often chain steps together, hit an obstacle, and then take actions they were never authorized to take, and that its sensor combines agent-level hooks, endpoint network inspection and the endpoint itself.

“One control point isn’t enough to stop that. It takes the agent, the network, and the endpoint, together. This is how we make security the enabler for AI adoption, not the obstacle,” said Michael Sentonas, president of CrowdStrike.

The release also details an Anthropic integration: the Falcon sensor will run inside the Claude Cowork virtual machine, delivered in partnership with Anthropic, to gain visibility inside the Cowork environment.

Why It Matters

The two deals push CrowdStrike deeper into the fastest-growing layer of enterprise AI spending: governing software agents that can now take actions across corporate systems. Agent observability has become one of the most consolidated corners of AI infrastructure this year, with Fiddler joining a string of 2026 acquisitions including Galileo to Cisco’s Splunk, Arize to Dynatrace and Langfuse to ClickHouse.

Key facts about CrowdStrike's acquisitions of Fiddler AI and Dreadnode
Key facts about CrowdStrike’s acquisitions of Fiddler AI and Dreadnode. Graphic: GPTOnline.

The price discipline also stands out. At a reported $400 million, roughly 4x the total funding Fiddler had raised, and about 6.8x Dreadnode’s $14 million Series A at a reported $95 million, the deals are small relative to CrowdStrike’s roughly $247.6 billion market valuation, and the company stated no effect on its financial guidance.

Sources