CrowdStrike Fiddler Dreadnode Acquisition: AI Agent Security
The CrowdStrike Fiddler Dreadnode acquisition adds AI agent monitoring and testing to its Falcon platform. A report puts the price near $495M, which CrowdStrike did not confirm. See the deals, the new AI Kill Switch and what comes next.
TL;DR
CrowdStrike has agreed to buy two AI security startups: Fiddler AI, which monitors AI agents, and Dreadnode, which tests AI systems for weaknesses.
CrowdStrike did not disclose the price. A report put it at $400 million for Fiddler and $95 million for Dreadnode, about $495 million in total.
The deals are expected to be paid mostly in cash, with some stock that vests over time, and to close in CrowdStrike’s fiscal fourth quarter.
CrowdStrike also launched an AI Kill Switch that lets security teams stop an AI agent that goes off course.
Fiddler will become Falcon Observe, due in the same quarter.
CrowdStrike Fiddler Dreadnode Acquisition: CrowdStrike to Buy Two AI Security Startups and Launches an AI Kill Switch
The CrowdStrike Fiddler Dreadnode acquisition is about one problem: companies are starting to let AI agents act on their behalf, and those agents need watching. CrowdStrike announced agreements to buy Fiddler AI and Dreadnode at its Fal.Con Europe conference in Barcelona. CrowdStrike did not say what it paid.
What CrowdStrike is buying
Fiddler AI tracks what AI agents do and why.
It evaluates agents before they reach production, traces their decisions and reasoning, flags drifting behaviour and made-up answers, and creates records that can be used in audits.
It works with common agent tools including LangGraph, Amazon Bedrock and Google ADK.
It will become Falcon Observe inside CrowdStrike’s Falcon platform.
CrowdStrike’s CEO, George Kurtz, called it “the flight recorder for every agent.”
Dreadnode tests AI systems for weaknesses before they go live.
Its platform runs more than 100 known attack methods, including jailbreaks and prompt injection, against models and agent systems.
It ranks the problems it finds by severity and maps them to widely used standards, including the OWASP Top 10 for large language models and the NIST AI Risk Management Framework.
The AI Kill Switch
CrowdStrike also launched an AI Kill Switch in Falcon Guardian, its AI security product, available now. It is designed to halt a runaway agent, block restarts and cut its network access.
Kurtz said the switch sits outside the model at runtime, where an agent cannot argue with it or rewrite it. He argued that the more certain a company is that it can stop any agent, the more agents it can put to work.
CrowdStrike Fiddler Dreadnode acquisition: the deal terms
Price: CrowdStrike did not disclose it. A report listed $400 million for Fiddler and $95 million for Dreadnode. That would be about $495 million in total. cyberscoop
Payment: Both deals are expected to be paid mostly in cash, with part of the payment in company stock that is handed out over time as conditions are met.
Closing: Both are expected to close in CrowdStrike’s fiscal fourth quarter of 2027, pending standard approval steps.
Products: Both products are expected to be generally available in the same quarter.
CrowdStrike also bought AI security company Pangea earlier, so this is part of a pattern. sec
Why AI agents need their own security
AI agents can hold valid credentials and approved tools and still make bad decisions, ignore instructions or claim work they never completed. Traditional security testing was built for software that behaves predictably, so it does not reach the model layer or the agent’s reasoning.
That is the gap these deals target. The three pieces fit together.
Before launch: Dreadnode tests for weaknesses.
While running: Fiddler records and explains what agents do.
When something goes wrong: the Kill Switch stops the agent.
What the CrowdStrike Fiddler Dreadnode acquisition means
CrowdStrike is moving from keeping attackers out to keeping agents in check. Kurtz described it as a shift from security to safety, with a human in control.
It builds a full set of tools around one risk. Testing, monitoring and a stop button now sit in one platform.
The price is not confirmed. The $495 million figure comes from a report, and the deals have not closed.
The bull case:
The three pieces cover the life of an AI agent, from testing to shutdown.
The new tools plug into CrowdStrike’s existing Falcon platform and customer base.
The payment is mostly cash, with stock that vests over time, which keeps the acquired teams tied in.
The Kill Switch is available now, while the other products arrive within the quarter.
The bear case:
The deals have not closed, and the price is only reported.
Falcon Observe and the Dreadnode tools are not yet generally available.
Claims such as Fiddler cutting evaluation costs by up to 98% come from the company.
Integrating two acquired products into a large platform takes time.
Keeping humans in control of AI is also a theme at the top AI labs. Read our report on Anthropic’s recursive self-improvement warning.
The bottom line
CrowdStrike is betting that companies will need to test, watch and stop AI agents just as they protect their networks today. The acquisitions and the Kill Switch give it a full set of tools for that job. The deals have not closed, the price is only reported, and most of the products are still to come, so the proof will be in how many customers adopt them.
