CrowdStrike to Acquire AI Security Startups Fiddler AI and Dreadnode for $495 Million
Key Takeaways
- •CrowdStrike is acquiring Fiddler AI and Dreadnode for a reported combined total of roughly $495 million, marking its latest move into security for AI systems rather than AI-powered threat detection.
- •Fiddler AI, valued at approximately $400 million or about four times its $100 million in total funding, offers observability and explainability tools that let enterprises monitor and audit AI model behavior in production, and its technology will become the Falcon Observe product.
- •Dreadnode, valued at about $95 million or roughly 6.8 times its $14 million Series A round, specializes in pre-deployment security testing of AI systems mapped to OWASP, MITRE ATLAS, and NIST frameworks.
- •Both acquisitions are expected to close in CrowdStrike's fourth quarter of fiscal 2027, the quarter running through January 2027, with payment made predominantly in cash plus stock components that vest over time.
- •Combined with the recently introduced AI Kill Switch feature, the deals give CrowdStrike a full lifecycle approach to AI agent security, spanning pre-launch testing, production monitoring, and the ability to shut down misbehaving agents.
CrowdStrike, one of the world's largest cybersecurity companies, has agreed to acquire two AI security startups, Fiddler AI and Dreadnode, in transactions reported at a combined value of approximately $495 million. The deals were reported on November 3, 2026, and mark CrowdStrike's latest push into an area of the industry that barely existed a few years ago: securing the AI systems themselves, rather than simply using AI to catch hackers.
What CrowdStrike Is Buying
Fiddler AI is based in Palo Alto and was founded in 2018. The company focuses on observability and explainability for AI systems, capabilities that let enterprises monitor model behavior in production and understand why a system produced a particular output. For companies wiring AI models into daily operations, that visibility is what turns an opaque system into one that can be audited, debugged, and trusted with real workloads.
CrowdStrike CEO George Kurtz described the company with an aviation metaphor, calling it a "flight recorder for every agent."
Fiddler's technology is set to become a CrowdStrike product called Falcon Observe, joining the company's flagship Falcon platform, and it is expected to be generally available in the company's fourth quarter of fiscal year 2027.
Dreadnode, founded in 2023, is the younger of the two companies. Its specialty is pre-deployment security testing. According to CrowdStrike, the startup will strengthen automated testing mapped to the frameworks published by the Open Worldwide Application Security Project (OWASP), MITRE ATLAS, and the U.S. National Institute of Standards and Technology (NIST). Those frameworks have become common reference points for measuring how AI systems hold up against adversarial behavior before they are ever deployed.
The Numbers Behind the Deal
CrowdStrike did not disclose a price when it announced the Fiddler acquisition, though it separately confirmed the Dreadnode transaction. The combined figure of approximately $495 million comes from reporting on the deals.
Fiddler is valued at roughly $400 million, which works out to about four times the $100 million in total funding the company had raised. Dreadnode is valued at about $95 million, roughly 6.8 times its $14 million Series A round.
Both acquisitions are expected to close in CrowdStrike's fourth quarter of fiscal year 2027, the quarter that runs through January 2027. Payment will be predominantly in cash, with some stock components that vest over time.
Why AI Agents Are a Security Problem
The acquisitions fit a broader pattern at CrowdStrike, which recently introduced an "AI Kill Switch" feature aimed at strengthening AI safety protocols. The moves address a growing challenge for enterprises deploying autonomous AI agents, whose behavior in production can be difficult to monitor and control. Because agents can act on their own rather than merely generate text, weak points in oversight carry operational consequences, not just inaccurate output.
Taken together, the pieces sketch a full lifecycle: Dreadnode tests an agent before launch, Fiddler monitors it in production, and the kill switch shuts it down if things go sideways. The targeted close and the planned Falcon Observe release give enterprises concrete milestones to watch as CrowdStrike folds the two startups' technology into its platform.
