CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode

Hi, what are you looking for?

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

By

Flipboard

Reddit

Whatsapp

Whatsapp

Email

CrowdStrike on Tuesday announced agreements to acquire AI agent observability firm Fiddler AI and AI security testing company Dreadnode, in deals reportedly worth a combined $495 million.CrowdStrike has not disclosed the financial terms of either acquisition. According toThe Wall Street Journal, which reported the deals ahead of the official announcements, the cybersecurity giant is paying roughly $400 million for Fiddler and about $95 million forDreadnode.CrowdStrike said both purchases will be paid mostly in cash, with a portion in stock subject to vesting conditions. The deals are expected to close in the fourth quarter of CrowdStrike’s fiscal year 2027, which ends on January 31, 2027.Fiddler was founded in 2018 and is based in Palo Alto, California. In January, it announced a $30 million Series C round that brought its total funding to $100 million.The company’s technology monitors AI agents and explains the decisions they make. CrowdStrike says Fiddler will add pre-deployment evaluation of agents, tracing of their reasoning and tool calls, and detection of behavioral drift and hallucinations in production.It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

CrowdStrike has not disclosed the financial terms of either acquisition. According toThe Wall Street Journal, which reported the deals ahead of the official announcements, the cybersecurity giant is paying roughly $400 million for Fiddler and about $95 million forDreadnode.CrowdStrike said both purchases will be paid mostly in cash, with a portion in stock subject to vesting conditions. The deals are expected to close in the fourth quarter of CrowdStrike’s fiscal year 2027, which ends on January 31, 2027.Fiddler was founded in 2018 and is based in Palo Alto, California. In January, it announced a $30 million Series C round that brought its total funding to $100 million.The company’s technology monitors AI agents and explains the decisions they make. CrowdStrike says Fiddler will add pre-deployment evaluation of agents, tracing of their reasoning and tool calls, and detection of behavioral drift and hallucinations in production.It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

CrowdStrike said both purchases will be paid mostly in cash, with a portion in stock subject to vesting conditions. The deals are expected to close in the fourth quarter of CrowdStrike’s fiscal year 2027, which ends on January 31, 2027.Fiddler was founded in 2018 and is based in Palo Alto, California. In January, it announced a $30 million Series C round that brought its total funding to $100 million.The company’s technology monitors AI agents and explains the decisions they make. CrowdStrike says Fiddler will add pre-deployment evaluation of agents, tracing of their reasoning and tool calls, and detection of behavioral drift and hallucinations in production.It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Fiddler was founded in 2018 and is based in Palo Alto, California. In January, it announced a $30 million Series C round that brought its total funding to $100 million.The company’s technology monitors AI agents and explains the decisions they make. CrowdStrike says Fiddler will add pre-deployment evaluation of agents, tracing of their reasoning and tool calls, and detection of behavioral drift and hallucinations in production.It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

The company’s technology monitors AI agents and explains the decisions they make. CrowdStrike says Fiddler will add pre-deployment evaluation of agents, tracing of their reasoning and tool calls, and detection of behavioral drift and hallucinations in production.It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

It will also log agent activity for compliance audits and track token usage and spending. CrowdStrike plans to sell the technology as Falcon Observe.Advertisement. Scroll to continue reading.Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Dreadnode, founded in 2023, develops offensive AI security tools. The startup raised $14 million in Series A funding in early 2025.According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

According to CrowdStrike, Dreadnode’s platform lets users describe in plain language what they want to test. It then runs more than 100 known AI attack strategies, including jailbreaks, prompt injection, and multi-turn and agent-specific attacks.The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

The tests target AI models, agent reasoning loops, applications and MCP servers. Findings are ranked by severity, mapped to frameworks such as the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST AI RMF, and fed to CrowdStrike’s Falcon Guardian AI detection and response product as policy recommendations.The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

The Dreadnode team, led by CEO Brad Palm, will join CrowdStrike’s Cyber Superintelligence Lab. Dreadnode-based testing capabilities are expected to become generally available in the fourth quarter of fiscal 2027.Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Alongside the acquisitions, CrowdStrike introduced an AI Kill Switch in Falcon Guardian that allows authorized administrators to halt a misbehaving AI agent, prevent it from restarting, and cut off its network access.CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

CrowdStrike has made several security acquisitions over the past year. In January, it announced plans to buy identity security firmSGNLfor $740 million and browser security companySeraphicfor a reported $420 million. In September 2025, it agreed to acquire AI security firmPangea.Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Related:Cybersecurity M&A Roundup: 37 Deals Announced in October 2026Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Related:Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

General Paul M. Nakasone has joined Armadin’s Board of Directors.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Flipboard

Reddit

Whatsapp

Whatsapp

Email

Got a confidential news tip? We want to hear from you.

Reach a large audience of enterprise cybersecurity professionals

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.