What Happened
Cybersecurity giant CrowdStrike announced its intent to acquire two AI security companies, Fiddler AI and Dreadnode, according to reports by TechCrunch and The Wall Street Journal. According to reporting by The Wall Street Journal cited by TechCrunch, the acquisitions are valued at nearly $500 million in total, with CrowdStrike paying around $400 million for Fiddler AI and about $95 million for Dreadnode.
The acquisitions were announced at Fal.Con EU 2026 and Fal.Con 2026 in Las Vegas. The deals arrive as enterprises increasingly deploy AI agents and models across their operations, creating new security challenges as employees experiment with automated workflows and AI tools.
The Details and Integration
The acquired technologies will be integrated directly into CrowdStrike’s existing product lineup and its Falcon platform to expand visibility, testing, and behavioral monitoring for enterprise AI systems:
- Fiddler AI: Founded in 2018 and having raised approximately $99 million to date (according to PitchBook), Fiddler creates enterprise AI observability software. It will become part of the Falcon platform as CrowdStrike Falcon Observe, generally available in Q4 FY27. Fiddler enables pre-deployment evaluation, helps trace reasoning paths across agent hierarchies, and monitors post-deployment behavior to detect drift or policy violations. It supports OpenTelemetry, LangGraph, Amazon Bedrock, AWS Strands, and Google ADK.
- Dreadnode: Founded in 2023 with $14 million raised, Dreadnode automates security testing specifically to detect flaws in AI models, applications, and agents before deployment. Its software will be integrated into CrowdStrike's Falcon Guardian product to feed testing results directly as security policy recommendations.
Background and Context
CrowdStrike recently introduced Falcon Guardian, a new AI Detection and Response (AIDR) solution designed to deliver visibility and runtime enforcement from endpoints where AI agents execute. According to CrowdStrike CEO and founder George Kurtz, autonomous AI agents operate with system-level privileges and execute actions that can look identical to legitimate user activity, making endpoint enforcement and runtime security necessary.
While traditional security software and governance policies often struggle to keep up with autonomous tools making decisions with valid credentials, CrowdStrike's strategy aims to combine endpoint telemetry with pre-deployment evaluation and post-deployment explainability.