CrowdStrike to Buy Two AI Security Startups for Nearly $500 Million
CrowdStrike said on November 3, 2026 that it will acquire Fiddler AI and Dreadnode, two startups whose products address the security and monitoring of AI models and AI agents. The Wall Street Journal reported that the two deals total $495 million combined, and TechCrunch put the figure at nearly $500 million. Both transactions are announced intentions. Neither has closed.
Per the TechCrunch report, CrowdStrike is paying around $400 million for Fiddler AI and about $95 million for Dreadnode. CrowdStrike trades on NASDAQ under the ticker CRWD.
Fiddler AI, founded in 2018, makes observability software for monitoring AI agents inside enterprises. Observability means collecting logs, metrics and traces so operators can see what a system is doing while it runs. The company has raised about $99 million to date. CrowdStrike said the acquisition will bring AI observability to its Falcon platform, and that Fiddler will become part of Falcon as Falcon Observe. The company titled its announcement "CrowdStrike to Acquire Fiddler to Deliver Falcon Observe for AI."
Dreadnode was founded in 2023 and has raised $14 million. Its product helps companies automate security testing to detect flaws in AI models, applications and agents before they go live. CrowdStrike described Dreadnode as a leader in Automated AI Security Testing and said it signed a definitive agreement to acquire the company. Dreadnode will be integrated into Falcon Guardian. CrowdStrike's announcement was titled "CrowdStrike to Acquire Dreadnode to Bring Automated AI Security Testing to the Falcon Platform."
The two products cover different points in an agent's life. Dreadnode's testing runs before deployment, probing models, applications and agents for flaws. Fiddler's observability runs after deployment, tracking what agents do inside an enterprise. CrowdStrike's announcements place both under the Falcon umbrella, with Falcon Guardian and Falcon Observe as the respective homes.
In my view, the more consequential question is whether those two halves become one workflow or remain two products in one catalog. A pre-deployment test result that never reaches the runtime monitor, or a production anomaly that never feeds back into test cases, would leave the lifecycle split in practice even if the branding is unified. Enterprises running agents across multiple model providers and orchestration frameworks will have to judge how well the integrations handle that heterogeneity.
The broader context here is that CrowdStrike has historically built its business around endpoint and cloud telemetry, and these acquisitions extend that telemetry model to model behavior and agent actions. Security teams that already run Falcon may gain a route to AI-specific controls without standing up a separate stack. Teams that have built their own evaluation harnesses and observability pipelines for agents will watch whether the Falcon integrations are open enough to fit into existing tooling.
For practitioners, the near-term takeaway is narrower. Two AI-focused security companies are moving toward CrowdStrike ownership, and the stated product goal is to put automated AI security testing and AI observability inside the Falcon platform. The deals are announced, not completed, and their practical effect will depend on how the integrations are delivered once they close.
